I need to extend an existing VLAN from a branch LAN to DC. As a matter of fact I noticed that Cisco ASA 5500X have VXLAN capabilities. I am relatively new to VXLAN and I need some help to find the best solution.VXLAN configuration in ASDM My questions are: how can I use VXLAN to create an overlay across my ISP's IP MPLS network? should I use two identical ASAs? and is it possible to use our Cisco ACI Fabric with an ASA to perform the required task?

  • 2
    Are you absolutely sure you need to extend the VLAN? Are there other options?
    – Ron Trunk
    Commented Feb 4, 2019 at 14:33
  • No there are no other options, my client has no other alternatives, but it will serve for a PoC only, since in production we think about using an L2 fiber connection. Commented Feb 4, 2019 at 15:32
  • 1
    Extending layer-2 across a wide area is a really bad idea. We live in a layer-3 world, and everything can be routed.
    – Ron Maupin
    Commented Feb 4, 2019 at 16:55
  • I agree @RonMaupin, yet this doesn't solve my problem. We're working with some old devices that require this setup. Commented Feb 5, 2019 at 9:31
  • I looked into some other solutions such as : - OTV, but it requires Nexus switches which do not exist in my branch setup - L2TPv3, but it requires buying routers with Data + Security licenses So actually, using VXLAN with ASA is the most economic solution for my PoC. Commented Feb 5, 2019 at 9:31


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.