Routing issue on Multi VSys PA Firewall integrated with Cisco ACI

dprakash_zatca — Mon, 10 Oct 2022 09:55:30 GMT

Hello,

We have multi Vsys firewall to handle North-South and East-West traffic, which is integrated with Cisco ACI. The virtual router is configured with static route 0.0.0.0/0, next hope as Cisco ACI.

We are seeing some North-South traffic on East-West firewall, the ACI team insist it is a case of Route Leak from PA/Vsys.

Any suggestion, Anything specific to check from Firewall side?

#aci #ciscoaci #multivsys #vsys #routing

Re: Routing issue on Multi VSys PA Firewall integrated with Cisco ACI

M.Anderson — Wed, 12 Oct 2022 19:21:48 GMT

What does your topology look like? Are you running N/S traffic through one vsys and E/W traffic via another vsys using a service chain from ACI? This is the design we were looking into but never moved forward w/the E/W vsys. Our N/S firewall connects to ACI via OSPF NSSA.

topic Routing issue on Multi VSys PA Firewall integrated with Cisco ACI in Next-Generation Firewall Discussions

Routing issue on Multi VSys PA Firewall integrated with Cisco ACI

Re: Routing issue on Multi VSys PA Firewall integrated with Cisco ACI