Static Route redistribute in L3-OUT

[kumar.rb@cognizant.com]

Hello All - Trying to understand how the Static Route and BGP L3-OUT configuration works in ACI. I have a production environment where is seeing this behavior

LEAF-102 has L3-OUT. BGP is configured between LEAF-102 and the external Firewall. There is a static route entry as below configured in ACI under this L3-OUT VRF

      vrf context tenant CORP vrf ALT l3out L3-OUT-TO-FIREWALL

             ip route 10.104.15.0/20 10.104.5.228

I am seeing this route 10.104.15.0 is getting advertised into my fabric in VRF ALT with the next-hop as LEAF-102 VTEP IP. 

Question 1) Is this static route is getting redistributed into BGP inside ACI automatically?

Question 2) How to control this redistribution?

For example, LEAF-103 routing table shows 

   10.104.15.0/20, ubest/mbest: 2/0

   * via 10.104.113.162%overlay-1, [1/0], 5w4d, bgp-65994, internal, tag 65994 (mpls-vpn)

LEAF-102 routing table shows 

   10.104.15.0/20, ubest/mbest: 1/0

   * via 10.104.5.228, vlan 226, [1/0] 5w4d, static

[Remi Astruc · Accepted solution]

Hi Kumar,

1) Yes, the route is redistributed between the Leaves via MP-BGP, as long as a Spine acts as Route Reflector and the VRF is active on the Leaves.

2) You don't really want. You explicitly configured that static route on the VRF, so you expect the VRF has the information along the Fabric.

Remi Astruc

[kumar.rb@cognizant.com]

Thankyou Remi