Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi Folks,
I wonder if somebody can point me in the right direction.
I was investigating a problem with the BGP route propagation from the FW (Palo) to ACI. Current setup is: 2 WAN Routers, each connected to its own internet service, advertise default...
Hi All,
I need your assistance to check if the following configuration going to work and are there any drawbacks/caveats?So far I identified OSPF convergence time and impact on a relatively large area 0 *(legacy design).
Solution details:I have ACI M...
Hello all,
I really need your advise.
I have a legacy network with multiple routers connected. Most of them in the Area 0.
I have ACI multipod with 2 pods to migrate to.
What makes it tricky is:
2 sites (single core switch for each) (A,B) need to be ...
Hi Guys,
Could you please advise if my thinking is correct.
I'm preparing for migration and the core will be replaced by firewall. I need to estimate the throughput requirements.
I've run show hardware capacity fabric-utilization and got the result ...
G'day everyone,
I'm building the ACI Multi Site. There are 2 DCs connected via Dark Fiber (DF).
I have 2 switches allocated to build an ISN. There are going to be a few other services *(L2 only) to use DF as well, such as FW HA, LB HA etc.
I decided ...
Hi M02@rt37
Internal LAN doesn't need to know about AS-path. And I couldn't find the command for ACI to show me the AS-Path for routes properly :). The idea with "allowas-in" actually good workaround. Haven't thought about this one.
@julian.bendix Correct. For some reason Firewall stripped ASNs prepended by Router 2 but left the Router 2 ASN (which is also private). I'm going to change RR ASN on the ACI as it is most likely causing advertisement drop due to BGP loop prevention m...
Hi Robert,
Thank you for your reply. The reasoning for L3 is for ISN/ACI MultiSit purposes only. As for L2 I need to connect a few systems between DCs bypassing ACI:
Firewall HA links *(data and control)Load Balancer HA linksSince the firewall is ac...
