QuestionQ18

ACI Packet Forwarding

Refer to the exhibit.

Question Image

Question Image

Two L3Outs have been configured under the same VRF, along with a route map named Any_Route_RtCtrl. The fabric is deployed as follows:

  • The two L3Outs have received a default route.
  • Both External EPGs imported the route map.
  • R1 and the firewall advertise summarized private RFC subnets to ACI.

A design change is required to let traffic bypass the firewall and use R1 before it reaches subnet 10.16.29.0/28.

Which action set meets this requirement?

Explanation

BGP selects the path with the highest local preference. Assigning local preference 200 to the default route received through GiDNS_CPN_L3Out makes the R1 path preferred over the firewall path. Adding 10.0.0.0/8 to the route-control map on FWE_GiDNS_L3out permits advertising the summarized private address space toward the firewall, enabling it to forward that traffic to R1. Cisco ACI route-control profiles apply route-map policy to routes advertised into and out of an L3Out, and their action rules support setting BGP preference.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!