BDI Template 8200
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-13-2025 02:02 AM
Is it possible to configure redundancy between a clustered firewall and a Cisco 8200 router operating in Template mode using Cisco vManage? Specifically, can this configuration — including the creation and management of BDI interfaces — be implemented exclusively through the Templates provided by vManage?
- Labels:
-
SD-WAN vManage
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-13-2025 02:16 AM - edited 05-13-2025 02:19 AM
Hello @vin.marco,
BDI is unfortunately not supported for cEdges. See the following documentation for bridging in Cisco SD-WAN: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/bridging/ios-xe-17/bridging-book-xe/m-bridging-xe-sd-wan.html
You can however make it work if you use routed links instead. If you can share a bit more about the setup we might be able to help you figure out how this can be done in the best way possible.
Get in touch: https://torbjorn.dev
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-13-2025 08:06 AM
What I’m trying to achieve is a redundant setup between two Cisco 8200 routers, each connected to a different MPLS network. The firewalls behind them are configured in a cluster, so I would like to provide LAN-side redundancy as well, according to the diagram.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-13-2025 07:56 PM - edited 05-13-2025 08:15 PM
Maybe you can try to do it through cli feature? I tried to configure on the C-NIM-8T (it has two L3 interfaces)
interface GigabitEthernet0/1/6
description -I- ### LAN
no ip address
load-interval 30
no shutdown
negotiation auto
service instance 10 ethernet
encapsulation untagged
bridge-domain 10
interface GigabitEthernet0/1/7
description -I- ### LAN
no ip address
load-interval 30
no shutdown
negotiation auto
service instance 10 ethernet
encapsulation untagged
bridge-domain 10
interface BDI10
description -L3- ### BDI LAN
ip address 192.168.100.1 255.255.255.0
but I would recommend that you use LACP towards each FW and CNIM-8 T to the ISP (it has two L3 interfaces) to connect to the ISP. Just because it is supported
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-13-2025 11:08 PM
It’s definitely possible via CLI — I’ve also reviewed the documentation. However, my goal was to configure everything through Templates. At this point, I’ll try proceeding with LACP. Thank you.
