Fortinet HA link over Fabric in MultiPod setup.

[Gomez]

Hi,

I have the following questions can we run a HA link of firewall(Fortinet, Palo) over ACI multipod.  Do we need to take any special considerations into account recording the ACI endpoint learning beheaviour?

Frederik

[Robert Burns]

Yes you will likely need to make VRF/BD-level forwarding configurations based on how the vendor handles A/A or A/S deployments (Same Floating VIP, Virtual MACs etc).   Commonly you may need to disable IP DP learning on the VRF, but in newer ACI versions (5.2) you can disable EP learning against /32 addresses specifically without having to global disable it on the VRF.
Start with finding out how each respective vendor handles HA, then we can advise accordingly.  

Robert