I need to extend an existing VLAN from a branch LAN to DC. As a matter of fact I noticed that Cisco ASA 5500X have VXLAN capabilities. I am relatively new to VXLAN and I need some help to find the best solution.VXLAN configuration in ASDM My questions are: how can I use VXLAN to create an overlay across my ISP's IP MPLS network? should I use two identical ASAs? and is it possible to use our Cisco ACI Fabric with an ASA to perform the required task?

  • 2
    Are you absolutely sure you need to extend the VLAN? Are there other options? – Ron Trunk Feb 4 at 14:33
  • No there are no other options, my client has no other alternatives, but it will serve for a PoC only, since in production we think about using an L2 fiber connection. – Hamdi Kadri Feb 4 at 15:32
  • Extending layer-2 across a wide area is a really bad idea. We live in a layer-3 world, and everything can be routed. – Ron Maupin Feb 4 at 16:55
  • I agree @RonMaupin, yet this doesn't solve my problem. We're working with some old devices that require this setup. – Hamdi Kadri Feb 5 at 9:31
  • I looked into some other solutions such as : - OTV, but it requires Nexus switches which do not exist in my branch setup - L2TPv3, but it requires buying routers with Data + Security licenses So actually, using VXLAN with ASA is the most economic solution for my PoC. – Hamdi Kadri Feb 5 at 9:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.