Cisco Nexus 9000 Series Configuration Manual page 65

Configuring ITD
vrf member OUTSIDE
ip address 192.168.200.10/24
hsrp 200
ip address 192.168.200.1
interface port-channel 11
description VPC_TO_ASA1
switchport mode trunk
switchport trunk allowed vlan 100,200
vpc 11
no shutdown
interface ethernet 4/25
description Link_To_ITD-ASA-1
switchport
switchport mode trunk
switchport trunk allowed vlan 100,200
channel-group 11 mode active
no shutdown
interface port-channel 41
description Downstream_vPC_to_network
switchport mode trunk
switchport trunk allowed vlan 10,20
vpc 41
no shutdown
interface ethernet 5/1-4
description Downstream_vPC_member
switchport
switchport mode trunk
switchport trunk allowed vlan 10,20
channel-group 41
no shutdown
itd device-group FW_INSIDE
#Config Firewall Inside interfaces as nodes
node ip 192.168.100.111
node ip 192.168.100.112
node ip 192.168.100.113
node ip 192.168.100.114
probe icmp frequency 5 timeout 5 retry-count 1
itd device-group FW_OUTSIDE
#Config Firewall Outside interfaces as nodes
node ip 192.168.200.111
node ip 192.168.200.112
node ip 192.168.200.113
node ip 192.168.200.114
probe icmp frequency 5 timeout 5 retry-count 1
itd INSIDE
vrf INSIDE
#applies ITD service to VRF 'INSIDE'
device-group FW_INSIDE
#FW inside interfaces attached to service.
ingress interface vlan 10
#applies ITD route map to vlan 1101 interface
failaction node reassign
#To use the next available Active FW if an FW goes offline
load-balance method src ip buckets 16
#distributes traffic into 16 buckets
#load balances traffic based on Source IP.
Cisco Nexus 9000 Series NX-OS Intelligent Traffic Director Configuration Guide, Release 9.x
Configuration Example
57