ACI share L3Out with "L2Out/EPG"

[Roman Rodichev]

Hello,

Can an L3Out share one physical interface with a regular L2 EPG. For example, say I have a firewall with two subinterfaces on the same physical interface, and one subinterface is a DMZ where server's default gateway is on the firewall (L2 only EPG, no SVI in ACI) and second subinterface is Firewall Inside which I want to use as L3Out maybe with dynamic BGP peering. Is this supported, or must I have two separate physical ports?

Thanks!

[Sergiu.Daniluk · Accepted solution]

Hi @Roman Rodichev 

As long as you are using SVIs for your L3Out, I do not see a problem having both L3out and a L2 EPG on same physical interface.

Stay safe,

Sergiu