If you use asr1k, you can use VASI to do that. VASI is a logical link within the router, it has 2 logical interface, left and right. You can assign each interface in different vrf, and form routing Protocol between the vrfs. That way you can pass routes between vrfs via the VASI link.
I came to the conclusion that some traffic is bst left out of Firewalls and actually routed securely withing data center only.
since I am using VRFs in DC, import and export seems to be the right choice. At some point, and depending on traffci type and how much needs to be interconnected, I will simply collapse VRFs into a single one.
Topology & Design:
Two ACI fabrics
Stretching VLANs using OTV
Both fabrics are advertising BD subnets into same routing domain
Some BDs(or say VLANs) are stretched, but some are not.
Endpoints can move betwee...
VMware Trunk Port Group is supported from ACI version 2.1
VMM integration must be configured properly
ASA device package must be uploaded to APIC
ASAv version must be compatible with ACI and device package version
Topology &Design:Traffic flow within same fabric:Endpoint moves to Fabric-2Bounce Entry Times OutTraffic Black-holedSummarySolutionAppendix:
In the Previous articles of ACI Automation, we are using Postman/Newman a...