Focus

VM-Series Deployment Guide

Establish the Connection Between the Firewall and ACI Fabric

Table of Contents

Establish the Connection Between the Firewall and ACI Fabric

Attach your firewall to the leaf switch through a VPC connection using the Ethernet interface (or aggregate Ethernet group) you configured on your firewall earlier in this procedure. Connect the interface or interfaces to the same ports on the leaf switches.

Select FabricAccess PoliciesQuick Start.
Click Configure an interface, PC, and VPC.
Click the green and white plus (+).
Select the leaf switch or switches to which you firewall is connected from the Switches drop-down.
Click the green and white plus (+).
Select VPC as the Interface Type.
In the Interfaces field, enter the number of the interface your firewall uses to connect to the leaf switch.
Enter a descriptive name into the Interface Selector Name field.
Select LLDP-Enabled from the LLDP Policy drop-down.
Select LACP Active from the Port Channel Policy drop-down.
Select Bare Metal for a physical firewall or ESX Hosts for the VM-Series from the Attached Device Type drop-down.
Select Choose One for Domain.
Select the physical domain or VMM domain you created previously in this procedure from the Domain drop-down.
Click Save.
Click Save and then Submit.
Repeat this procedure for the second firewall in your HA pair.

Configure an Interface Policy for LLDP and LACP for East-West Traffic

Create a VRF and Bridge Domain