Configuring L3Out static routing on Border Leaf via NDFC

[Mario Rosi]

Hi,

i need to reproduce in VXLAN fabric using NDFC a scenario like the one in the picture because of migration from a common legacy scenario where i've a couple of N7K as core switches that are collecting in vPC many port-channels from N5Ks at access.

I have this scenario where HSRP is configured between N7Ks and a couple of FWs is implementing static routing with them using as next hop the VIP of HSRP; viceversa, the two N7Ks are using as netx hop one FW ip address or the one of the second FW depending on the destination prefix the stati route is pointing (see legacy.png).

In VXLAN i was thinking to reproduce the same scenario (see scenario.png) defining the same bridge domain with an IP anycast GW configured and shared between the couple of border leaf that are connected to the two FWs.

The problem now is that i don't know how to implement static routing with NDFC; with eBGP it would be quite easy, but with stati routing i don't find the knobs where to manouvre to implement static routing.

May you help me showing where to go on NDFC GUI to do that?

Thanks

Mario 

[zulzig]

Dear Mario,

In the Policies section for your fabric, you need to assign it to a device using a policy template.
best regards

[Mario Rosi]

Thanks for your suggestion, but:

1) the static route should be configured in a vrf

2) the static routes hould be then redistributed via BGP EVPN as type 5

Which are the right policies to do that?

...and however, is there a document that describe all the policies available?

Thanks again

Mario 

[zulzig]

Dear Mario,

I’ll take a look, but I’m confident you’ll find the templates for it. Alternatively, you can use the switch_freeform template.