EMAIL SUPPORT

dclessons@dclessons.com
LOCATION
 
AF
(/) (mailto:dclessons@dclessons.com)

MULTI-SITE WITH REMOTE LEAF

Multi-Site With Remote Leaf TABLE OF

Posted on May 24, 2021  (0) CONTENTS

Remote Leaf Integration with Multi-Site  Introduction to

ACI & Its Fabric
From ACI 4.2(1), ACI multisite support the Remote leaf feature. Packets
between different Remote leafs or local leafs are traversed via Spines of  ACI Fabric
Traffic
logically connected Pods. In this RL does not build the VXLAN tunnel
Forwarding
between RL or Spines of other site, due to which any packet from remote
Leaf  to all other sites are forwarded through Spines of logically connected  Designing the
Pods. Tenant Network

Let’s understand this with Example,  Designing

external L2
Unicast Traffic between RL pairs across Sites Network

RL1 and RL2 forms the VXLAN tunnel to Spines anycast IP address (Site-  Designing
1-DCI-Ucast-TEP) of Multi-site Site1. Whereas RL3 and RL4 forms the External Layer 3
VXLAN tunnel to Spines anycast IP address (Site-2-DCI-Ucast-TEP) of Connectivity

Multi-site Site2 as per below figure  ACI PREMIUM

LABS

 ACI Scripting

 ACI Advance
Concepts

 ACI Network
 Mgmt &
Monitoring

 ACI Multi-Site
Concepts

 Remote Leaf in
ACI

RECENT POSTS

 Cisco SASE
Architecture
(https://www.dclessons.com
• EP1, EP2, EP3, EP4, EP5, EP6 are part of same VRF and Spines has /viptela/cisco-sase-
their reachability information in its COOP Database. All RL of remote architecture)
Site have already downloaded all EP’s information to their local SW DB  SASE vs SD-WAN
because of same VRF/BD has been deployed on all RL and Local Leafs, (https://www.dclessons.com
• Now EP2 starts sending Traffic to EP3, Remote Leaf upon receiving /internet-of-things-
the EP2 traffic, lookup the Destination IP of EP3 in its HW-EPM, and iot/sase-vs-sd-wan)
find the next hop IP as Site1-DCI-Ucast-TEP. Remote Leaf will
 What is SASE
encapsulated the packet to VXLAN along with Source IP as RL12-vPC-
(https://www.dclessons.com
TEP and Destination IP as Site1-DCI-Ucast-TEP and forwards the
/internet-of-things-
packet.
iot/what-is-sase)
• Once Spine of Logically Connected Remote Site, receives the packet,
and lookup for EP3, and finds that EP3 IP is reachable via Site2-DCI-  Accessing Amazon S3
Ucast-TEP. Spine will change the Source IP as Site1-DCI-Ucast-TEP using AWS private Link
and destination IP as Site2-DCI-Ucast-TEP and forwards the packet to in Secure hybrid
Site2 Spine. method.
• Once Site2 Spines receives this packet, perform the layer 3 lookup of (https://www.dclessons.com
EP3 IP, and finds it is reachable via RL3-DP-TEP. It will change the /aws/accessing-
Destination IP to RL3-DP-TEP and forwards the packet to RL3. amazon-s3-using-
• Once RL3 receives the packet, it decapsulates this and send it to EP3. aws-private-link-in-
Meanwhile RL will also updates the EP2 information in its HW EPM secure-hybrid-
DB. method)

Below figure is explains Traffic forwarding between Remote Leaf pairs  Cisco Smart Licensing
across sites. Policy
(https://www.dclessons.com
/nexus/cisco-smart-
licensing-policy)

 Cisco Certification – A
 Closer Deep-Dive Look
(https://www.dclessons.com
/lisp/cisco-
certification-a-closer-
deep-dive-look)

 Cisco DNA-Spaces :
Monitoring IOT
Network
(https://www.dclessons.com
/internet-of-things-
iot/cisco-dna-spaces-
monitoring-iot-
network)

 Compute in AWS Cloud

BUM traffic with RL direct when BD is in Flood (https://www.dclessons.com
Mode. /aws/compute-in-
aws-cloud)
Let’s assume that EP2 and EP3 are silent host, now let’s see When EP2
wants to talk to EP3 what steps are followed in this.  Understanding Key
Datacenter
Technologies and
Solutions
(https://www.dclessons.com
/sdn/understanding-
key-datacenter-
technologies-and-
solutions)

 SDN Protocols
(https://www.dclessons.com
/sdn/sdn-protocols)
(https://www.dclessons.com/register)

Share Tweet Pin

MEMBERSHIP
Email Share

PLAN

Comment
$100/Monthly
You are will be the first.

LEAVE A COMMENT
Please login here (https://www.dclessons.com/login) to comment.
 $200/6 Months

$350/Year

ABOUT TRENDING MORE LINKS CONTACT US

DCLESSONS COURSES
• Home (/)  AF
DClessons is premier • NEXUS (/category • Courses (/courses)  dclessons@dclessons.com
online portal which /courses/nexus) • Register (mailto:dclessons@dclessons.c
provides Cloud & • VXLAN (/category (https://www.dclessons.com
Networking Engineers to /courses/vxlan) /register) (https://www.facebook.co
learn topics related like • ACI (/category • Terms & Conditions /dclessonss)
Datacenter, Cloud, SDN, /courses/aci) (/terms-condition)
(https://twitter.com
Loadbalancer-F5, • SD-WAN (/category
VMware, Scripting, /courses/viptela) /dclessons21/)
SDWAN, Security, SD- • AWS (/category (https://www.linkedin.com
Access, Docker, Internet /courses/aws)
/company/dc-lessons/
of Things, Intent Based
Networking.  (https://www.youtube.com
/channel
/UCnmiViVILvS22GcyRWkxnww

© Copyright - 2017 DCLessons.Com