What is the best way to deploy Cisco ACI with ASA on multiple sub-interface.
For example in our traditional network
We have Core switch that works as L2 & L3 for the network. It has Layer 2 trunk (with all allowed vlan for sub-interface) connecting to the border ASA and ASA is configured with multiple SUB interface for different network behind the firewall including one internal network for Default route ( outgoing internet )
Core switch has layer 2 coz we have some VM that are part of the one or more sub-interface on ASA it does layer 2 through switch with in same subnet & gateway being the ASA sub-interface.
What will be the best way to replicate this setup on ACI ?
My first thought was to move internal network to different interface on ASA & configure it as l3out with default route for the network & create one new EPG – L2 (without ip subnet) with all Vlan in vlan pool for the existing sub – interface & add static bind to the trunk going to ASA.
Is there any other better way to do this ..
