EPG communication

[Daps]

Team,

I would like to test the topology which is in diagram attached here with.'

I have two segments X and Y. Segment X IP is assigned to NAS Box and its gateway is on firewall through Leaf. Segment Y IP assigned to the server and its gateway is in ACI.

Segment X BD is created in common tenant and EPG X is created in Tenant X.

Segment Y BD is created in common tenant and EPG Y is created in  Tenant Y

I would like to connect Segment Y server to Segment X server without reaching to firewall. Normal traffic from Segment X needs to be communicated through firewall.

Kindly suggest.

[Oleksandr Mamenko · Accepted solution]

Hi

You could reach a goal in case if two EPGs belong to same Tenant. Then move subnetX gw to ACI, so two EPGs would communicate through ACI. For traffic from NAS you could use Policy Based Redirect and redirect it to FW.

ACI PBR https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/L4-L7_Services_Deployment/guide/b_L4L7_Deploy_ver201/b_L4L7_Deploy_ver201_chapter_010100.html