Multi-Site on https://wassimaouadi.com/tags/multi-site/ Recent content in Multi-Site on Hugo en Thu, 28 Nov 2024 21:31:13 +0200 ACI L4-7 Service Insertion - Active-Standby Firewalls with Standard Service Graphs (SSG) in ACI Multi-Site Designs https://wassimaouadi.com/technotes/acil47serviceinsertion_activestandbyfwstandardsg/ Thu, 28 Nov 2024 21:31:13 +0200 https://wassimaouadi.com/technotes/acil47serviceinsertion_activestandbyfwstandardsg/ <h1 id="stretched-ha-firewall">Stretched HA Firewall</h1> <p>Cisco supports a stretched Active-Standby firewall system if:</p> <ul> <li>ACI operates in layer 2,</li> <li>the firewall operates as the IP default gateway for the endpoints or the firewall operates in Transparent mode or the active and standby nodes are connected with an L3Out.</li> </ul> <h1 id="independent-ha-firewalls">Independent HA Firewalls</h1> <p>If I have to deploy Active-Standby Firewalls, Cisco recommends to deploy them as independent HA firewalls in the ACI sites (i.e. not across the intersite link)</p>