300-630 · Question #19
What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?
The correct answer is B. The local pod anycast node is preferred by the local spines. Implementing an active-active firewall cluster stretched across separate pods with anycast services configured offers several advantages, one of which is that it allows for optimized routing within the Cisco ACI fabric. When anycast services are used, each pod can have its own…
Question
What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?
Options
- AA different MAC/IP combination can be configured for the firewall in each pod.
- BThe local pod anycast node is preferred by the local spines.
- CA cluster can be deployed in transparent mode across pods.
- DLocal traffic in a pod is load-balanced between the clustered firewalls.
How the community answered
(27 responses)- A4% (1)
- B81% (22)
- C11% (3)
- D4% (1)
Explanation
Implementing an active-active firewall cluster stretched across separate pods with anycast services configured offers several advantages, one of which is that it allows for optimized routing within the Cisco ACI fabric. When anycast services are used, each pod can have its own anycast node (firewall instance), and due to routing preferences set within ACI's spine switches, they will prefer their local pod's anycast node for routing decisions. This preference enhances efficiency by reducing cross-pod traffic and improving response times since local spines direct traffic to their respective local pod's anycast nodes.
Topics
Community Discussion
No community discussion yet for this question.