EVPN with Transparent Firewall Insertion
VXLAN flood and learn only supports a centralized gateway. This means that only one VPC pair VTEP
Note
can have an SVI per VXLAN. No other VTEP can have an SVI on a VXLAN VLAN.
VXLAN only supports an anycast gateway, not a centralized gateway.
EVPN with Transparent Firewall Insertion Example
• Host in VLAN X: 10.0.94.101
Note
• TOR Leaf: N9372-1
• Service Leaf in vPC: N9332-1 and N9332-2
• Border Leaf: N9332-5
EVPN with Transparent Firewall Insertion Example
Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 7.x
157