nerdexam
Cisco

300-620 · Question #185

An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the…

The correct answer is C. Enable Pod ID Aware Redirection. In a Cisco ACI Multi-Pod deployment with active-active data centers and active-standby firewalls, enabling a specific feature is necessary to maintain traffic symmetry through the firewalls.

Multi-Pod and Multi-Site

Question

An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the firewalls?

Options

  • ADisable Resilient Hashing.
  • BDisable service node Health Tracking.
  • CEnable Pod ID Aware Redirection.
  • DEnable Endpoint Dataplane Learning.

How the community answered

(41 responses)
  • A
    12% (5)
  • B
    5% (2)
  • C
    78% (32)
  • D
    5% (2)

Why each option

In a Cisco ACI Multi-Pod deployment with active-active data centers and active-standby firewalls, enabling a specific feature is necessary to maintain traffic symmetry through the firewalls.

ADisable Resilient Hashing.

Disabling Resilient Hashing would impact the load distribution and potentially traffic symmetry across service devices but is not the primary mechanism to ensure session symmetry for active-standby firewalls in a Multi-Pod setup.

BDisable service node Health Tracking.

Disabling service node Health Tracking would prevent proper monitoring and failover for services, which is counterproductive for reliability and not directly related to maintaining traffic symmetry across pods.

CEnable Pod ID Aware Redirection.Correct

Enabling Pod ID Aware Redirection is crucial in Cisco ACI Multi-Pod deployments to maintain traffic symmetry through active-standby firewalls, especially when using active-active data centers. This feature ensures that return traffic is steered back to the original pod where the initial traffic ingress occurred, preserving the firewall session state and preventing asymmetric routing.

DEnable Endpoint Dataplane Learning.

Enabling Endpoint Dataplane Learning is a fundamental ACI process for learning endpoint locations but does not specifically address the need for traffic symmetry through firewalls in a Multi-Pod stretched deployment.

Concept tested: ACI Multi-Pod traffic symmetry with firewalls

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/multi-pod/cisco-aci-multi-pod-white-paper.html

Topics

#Multi-Pod#traffic symmetry#active-active DC#firewall integration#Pod ID Aware Redirection

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice