pbr

This video demonstrates L3 Policy-Based Redirect (PBR) in Cisco ACI 6.0. The lab walks through six scenarios: FW insertion between ESGs in different subnets, between ESGs on the same subnet, intra-ESG traffic inspection, vzAny policy to enforce FW across all inter-ESG flows, Service EPG selector to control access to the FW subnet, and PBR to an L3OUT. The goal is to demonstrate the flexibility of PBR option compared to the traditional service insertion we covered in previous labs.

This video demonstrates L3 Policy-Based Redirect (PBR) in Cisco ACI 6.0. The lab walks through six scenarios: FW insertion between ESGs in different subnets, between ESGs on the same subnet, intra-ESG traffic inspection, vzAny policy to enforce FW across all inter-ESG flows, Service EPG selector to control access to the FW subnet, and PBR to an L3OUT. The goal is to demonstrate the flexibility of PBR option compared to the traditional service insertion we covered in previous labs.

This video demonstrates L3 Policy-Based Redirect (PBR) in Cisco ACI 6.0. The lab walks through six scenarios: FW insertion between ESGs in different subnets, between ESGs on the same subnet, intra-ESG traffic inspection, vzAny policy to enforce FW across all inter-ESG flows, Service EPG selector to control access to the FW subnet, and PBR to an L3OUT. The goal is to demonstrate the flexibility of PBR option compared to the traditional service insertion we covered in previous labs.

This video covers Policy-Based Redirect (PBR) for L1 and L2 inline service devices in Cisco ACI 6.0. L1 PBR is demonstrated with a physical FTD in inline IPS mode between ESGs in different BDs, while L2 PBR uses a virtual FTD in transparent mode between ESGs on the same subnet. The key advantages over traditional Service Graph modes are that endpoints do not need to be split into new BDs, the FW does not need to be the default gateway, and a single service graph can be shared by multiple ESG pairs.

This video covers Policy-Based Redirect (PBR) for L1 and L2 inline service devices in Cisco ACI 6.0. L1 PBR is demonstrated with a physical FTD in inline IPS mode between ESGs in different BDs, while L2 PBR uses a virtual FTD in transparent mode between ESGs on the same subnet. The key advantages over traditional Service Graph modes are that endpoints do not need to be split into new BDs, the FW does not need to be the default gateway, and a single service graph can be shared by multiple ESG pairs.

This video covers Policy-Based Redirect (PBR) for L1 and L2 inline service devices in Cisco ACI 6.0. L1 PBR is demonstrated with a physical FTD in inline IPS mode between ESGs in different BDs, while L2 PBR uses a virtual FTD in transparent mode between ESGs on the same subnet. The key advantages over traditional Service Graph modes are that endpoints do not need to be split into new BDs, the FW does not need to be the default gateway, and a single service graph can be shared by multiple ESG pairs.

The video goes through configuration of setting up an IPSec tunnel on a Cisco Firepower Secure Firewall to Cisco Umbrella. We will route traffic to Umbrella using Policy-Based Routing (PBR). In latter part of the lab, we will bring up a second IPSec tunnel for redundancy in an active/standby setup and test tunnel failover.

The video goes through configuration of setting up an IPSec tunnel on a Cisco Firepower Secure Firewall to Cisco Umbrella. We will route traffic to Umbrella using Policy-Based Routing (PBR). In latter part of the lab, we will bring up a second IPSec tunnel for redundancy in an active/standby setup and test tunnel failover.

The video goes through configuration of setting up an IPSec tunnel on a Cisco IOS XE device to Cisco Umbrella. We will look at two ways of routing traffic to Umbrella using static and Policy-Based Routing (PBR). In latter part of the lab, we will bring up a second IPSec tunnel for redundancy in an active/standby setup.
 

The video goes through configuration of setting up an IPSec tunnel on a Cisco IOS XE device to Cisco Umbrella. We will look at two ways of routing traffic to Umbrella using static and Policy-Based Routing (PBR). In latter part of the lab, we will bring up a second IPSec tunnel for redundancy in an active/standby setup.