common concepts#

• L4-7 service insertion common concepts
• service function(s)
• Service Type: firewall, ADC.

service device#

• L4-7 Logical Device aka L4-7 Cluster Device, is composed of Concrete Devices, has a relationship with the Service Type, has L4-7 Service Device Interfaces aka cluster Interfaces; consumer-side interfaces and provider-side interfaces.
• Service Bridge Domains

service graph#

• Service Graph management modes
• Service Graph template: used in Standard Service Graphs and in Service Graph Redirects (PBR)

multi-node service insertion with service graphs#

• failover traffic management
• active-active firewall cluster:
  • L1, L2 or go-through mode: not supported
  • go-to mode:
    • active-active firewall cluster in multi-site design
    • active-active firewall cluster in single-pod and multi-pod designs
• active-standby firewall cluster:
  • in ACI single-pod designs
    • go-to mode
  • in ACI multi-pod designs
    • with VRF sandwich and L3Outs
    • go-to mode
  • in ACI multi-site designs
    • with Standard Service Graphs
    • with Service Graph Redirect