300-620 · Question #185
An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the…
The correct answer is C. Enable Pod ID Aware Redirection. In a Cisco ACI Multi-Pod deployment with active-active data centers and active-standby firewalls, enabling a specific feature is necessary to maintain traffic symmetry through the firewalls.
Question
An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the firewalls?
Options
- ADisable Resilient Hashing.
- BDisable service node Health Tracking.
- CEnable Pod ID Aware Redirection.
- DEnable Endpoint Dataplane Learning.
How the community answered
(41 responses)- A12% (5)
- B5% (2)
- C78% (32)
- D5% (2)
Why each option
In a Cisco ACI Multi-Pod deployment with active-active data centers and active-standby firewalls, enabling a specific feature is necessary to maintain traffic symmetry through the firewalls.
Disabling Resilient Hashing would impact the load distribution and potentially traffic symmetry across service devices but is not the primary mechanism to ensure session symmetry for active-standby firewalls in a Multi-Pod setup.
Disabling service node Health Tracking would prevent proper monitoring and failover for services, which is counterproductive for reliability and not directly related to maintaining traffic symmetry across pods.
Enabling Pod ID Aware Redirection is crucial in Cisco ACI Multi-Pod deployments to maintain traffic symmetry through active-standby firewalls, especially when using active-active data centers. This feature ensures that return traffic is steered back to the original pod where the initial traffic ingress occurred, preserving the firewall session state and preventing asymmetric routing.
Enabling Endpoint Dataplane Learning is a fundamental ACI process for learning endpoint locations but does not specifically address the need for traffic symmetry through firewalls in a Multi-Pod stretched deployment.
Concept tested: ACI Multi-Pod traffic symmetry with firewalls
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/multi-pod/cisco-aci-multi-pod-white-paper.html
Topics
Community Discussion
No community discussion yet for this question.