Hi    Thanks for that, im kinda new to ACI and havnt used XML to configure the fabric yet.   I assume this is all within the GUI??   The below is what we are trying to achieve. Vlan 155 will have SVI l3out to FW and it is also stretched to DR site.   We peer with the FW VIP Cluster XL IP ... View more

Hi Mate,   We have the same topology with two Checkpoint Firewall in an Active Standby Cluster. When you say the below can you explain how you did this?   Thanks in adva   "the trick is just to add the DCI VPC (between both DCs) as a second path in the FW L3OUT, the 1st path being the VPC to the FW itself" ... View more

Hi    Thanks for the info,   Correct me if im wrong though. Our inside interface is in vlan 155 and are all members of the cluster. These interfaces need to have L2 stretched into the DC in order to exchange CCL protocol with each other to maintain the cluster. This is the same L3 interface we will OSPF Peer with ACI.   Or is there an option with ClusterXL to create a new bond and have this as the clustering interface instead of the bond155??   Apologies not a FW guy,    Is the below achievable?   cheer ... View more

Hi ,   So we have the same setup with two CPs in our HO and another CP in our DR all in a cluster and their cluster interface (inside interface) in a stretched vlan 155.   We run a Dual Fabric with a stretched L2 across sites.   My question is? 1.Does the Active CP FW with the vip form a OSPF neighbor relationship over the stretched L2 to the second Fabric?   Iv attached the  physical layout to give you an idea of how things are setup in terms of the L2.   We will be creating the same setup as you with L3outs and SVI over a VPC to each firewall but the OSPF hello packets will essentially be transferred over that vlan 155 to the second fabric.. Or am i wrong?   Cheers ... View more

Hi Alexander,   Hoping you may be able to help me, apologies for hijacking this thread but maybe this will be beneficial.   We are trying to set up the exact same thing as you except we have a third FW in the cluster attached to a Separate ACI Fabric at our DR site.   All our FW cluster interfaces are in vlan 155 and vlan 155 is stretched across OTV. Will the ACI Fabrics try and form an OSPF relationship as they will all be in this layer 2 Bcast segment?   Any help you can give appreciated.   cheers     ... View more