04-19-2021 08:33 AM
We have ACI that peer on fortigate firewall via OSPF on a vPC, and the ACI is configured as our gateway.
On our traceroute we have seen multiple hops with the same IP address like on the scenario below:
'From server to server within the same tenant.
traceroute 10.10.4.45
1 10.10.2.1 ----- server gateway
2 10.10.2.1
3 10.10.2.1
4 10.10.4.45
From server to server but the different tenants.
traceroute 10.10.4.45
1 10.10.20.1 ----- server gateway
2 1.1.1.1 ----- loopback
3 172.16.1.123 ---- primary SVI
4 172.16.1.123
5 10.10.4.45
Please see the diagram in the attachment.
Solved! Go to Solution.
05-28-2021 02:13 AM
Hi @sandyblaza
It's expected. Most likely you are pinging between servers connected to different leafs. Since you have a distributed anycast gateway, it's expected to see the same next hop multiple times.
Stay safe,
Sergiu
05-25-2021 06:55 AM
You need to use service graph, APIC administrator can then associate policies with the traffic path which administrator can define in Cisco ACI.
05-28-2021 02:13 AM
Hi @sandyblaza
It's expected. Most likely you are pinging between servers connected to different leafs. Since you have a distributed anycast gateway, it's expected to see the same next hop multiple times.
Stay safe,
Sergiu
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide