L3out ACI multipod with firewall in active-standby mode (firewall per pod)

[Alexander Deca]

Hello,

Looking for how to setup L3out (internet access) with checkpoint firewalls in a multipod environment. Each pod has a checkpoint firewall (active-standby mode, the heartbeat will traverse the ACI Fabric).

The checkpoint firewalls can be dual connected on different leaves and we are open to choose the protocol by choice for routing between the ACI fabric and the firewalls. 

thanks

Alexander

[Andymong]

We used an SVI setup with a total of 4 SideA/SideB  IPs with OSPF and an individual L3-Out across Pods. Works okay as far as I can tell.