Focus

VM-Series Deployment Guide

Create a VLAN Pool and External Routed Domain

Table of Contents

Create a VLAN Pool and External Routed Domain

Create a VLAN pool to allocate VLANs to the firewall as you attach interfaces to the infrastructure to support the EPGs in your ACI fabric. You should use a static VLAN range for the firewall.

Additionally, you must create a physical domain to map the VLANs to the EPGs. The following procedure creates a physical domain dedicated to the firewall.

Create a VLAN pool.
1. Log in to your APIC.
2. Select FabricAccess PoliciesPoolsVLAN.
3. Right-click VLAN and select Create VLAN Pool.
4. Enter a descriptive Name for your VLAN pool.
5. Select Dynamic Allocation for Allocation Mode.
6. Click the plus (+) button to the right of Encap Blocks.
7. Enter your VLAN range in the VLAN Range field.
8. Select Static Allocation form the Allocation Mode drop-down.
9. Click OK.
10. Click Submit.
Create an external routed domain.
1. Select FabricAccess PoliciesPhysical and External DomainsExternal Domains.
2. Right-click External Routed Domain and select Create Layer 3 Domain.
3. Enter a descriptive Name for your physical domain.
4. Select the VLAN pool you created in the previous procedure from the VLAN Pool list.
5. Click Submit.

Deploy the Firewall to Secure North-South Traffic in Network Policy Mode

Configure an Interface Policy for LLDP and LACP for North-South Traffic