ACL in Programmable VXLAN Fabric

[Hele Du]

Hi Experts,

As I know, Progammable VXLAN Fabirc have anycast gateway which reside on every TOR(VTEP). The layer3 traffic will forward  by local VTEP.

What about if I want to deny some traffic between two subnets or VNIs?

I must configure ACL on every TOR or is there  a flexible way can accomplish this ?

Thank you so much!

[albad]

Did you find a solution to your question?

[hamed1900]

The only solution is to configure the ACL at all leaf switches ( anycast GWs)