In our environment we have a number of sites with local fusion routers, with a border connected to it. We're currently using IP Transit with the local fusion routers providing a default route to our borders for all current VNs. We are looking at adding a guest VN to our deployment and would like to make that available from one central location to a number of other sites and are looking at using SDA Transit to accomplish this. Ideally, the following traffic would be present through the SDA Transit:
- All guest VN traffic, including Internet bound
- Site-to-Site traffic, without Internet for all other VNs
It seems that in DNA-C 1.3.3.8 if you setup SDA Transit on a border, you have the option of selecting "This site provides internet access to other sites through SDA Transit.", but it doesn't limit setting that per VN. I've found some materials that say that as long as other borders already have a default route for their VNs that traffic should egress locally, but others that say that the LISP route will override the local route table if the Internet access option isn't selected. I really don't want to have to enable the Internet access option at every site, as that would appear to cause Internet traffic to round-robin through all sites configured with SDA Transit.
So is there a way to limit what the default route availability per VN? Or am I better served by waiting for Multi-site remote border feature in 2.1.2.X?
