C8Kv and bridge interface

[mikhailov.ivan]

Hello colleagues! Got an issue with C8Kv and some firewalls in "cluster".
There is a typical topology when you have 2 NGFW in a cluster mode (they share all settings between nodes) and 2 C8Kv like "behind", it's all in a cloud's provider infra. I can draw a schema, but it's quite simple. "Internal" interfaces from 2 NGFW nodes are connected to the same C8Kv (VPN0) and share the same subnet (because when the first FW node gets down, all IPs gets up by gArp). So the question is how can I share the same IP on 2 interfaces on C8Kv? I've found some similar topics like this one https://community.cisco.com/t5/routing/is-it-possible-to-use-the-same-ip-for-two-different-interfaces/td-p/4767368
but couldn't find any information regarding exactly C8kV limitations and proves that BDI\BVI\VFI will work. It might be over the CLI-addon only, not sure. I checked 3 GUI templates "Cisco VPN Interface Ethernet", "VPN Interface SVI" and "Switch Port", but all of them in terms of aggregation it rises more questions than answers, for instance in the "Switch Port" template we have to point out only 4,8 or 22 ports, what ? There are no vlan tags or something, just need to aggregate 2 interfaces and setup IP addr somehow. Does anyone have this experience?

Thanks!

[mikhailov.ivan]

I've found that on vEgde (viptella) there is a template "bridge" , the C8000v IOS-XE platform supports BDI\BVI with limitations

https://www.cisco.com/c/en/us/td/docs/routers/C8000V/Configuration/c8000v-installation-configuration-guide/bdi_c8kv.html

but there are no evidences that you can use Bridging on the C8kv in SD-Wan mode.

I suppose this kind of config would be ok for the case , but didn't find any proves. Looks like a simple task, but it becomes complicated for some reason.

bridge irb
bridge 1 protocol ieee
bridge 1 route ip

interface GigabitEthernet1
bridge-group 1
!
interface GigabitEthernet2
bridge-group 1
!
interface BVI 1
ip address 10.1.1.1
255.255.255.0