I need to extend an existing VLAN from a branch LAN to DC. As a matter of fact I noticed that Cisco ASA 5500X have VXLAN capabilities. I am relatively new to VXLAN and I need some help to find the best solution.
My questions are: how can I use VXLAN to create an overlay across my ISP's IP MPLS network? should I use two identical ASAs? and is it possible to use our Cisco ACI Fabric with an ASA to perform the required task?
-
2Are you absolutely sure you need to extend the VLAN? Are there other options?– Ron TrunkFeb 4, 2019 at 14:33
-
No there are no other options, my client has no other alternatives, but it will serve for a PoC only, since in production we think about using an L2 fiber connection.– Hamdi KadriFeb 4, 2019 at 15:32
-
1Extending layer-2 across a wide area is a really bad idea. We live in a layer-3 world, and everything can be routed.– Ron Maupin ♦Feb 4, 2019 at 16:55
-
I agree @RonMaupin, yet this doesn't solve my problem. We're working with some old devices that require this setup.– Hamdi KadriFeb 5, 2019 at 9:31
-
I looked into some other solutions such as : - OTV, but it requires Nexus switches which do not exist in my branch setup - L2TPv3, but it requires buying routers with Data + Security licenses So actually, using VXLAN with ASA is the most economic solution for my PoC.– Hamdi KadriFeb 5, 2019 at 9:31
|
Show 2 more comments