V4ACIRemote-leaf-ACI4 0-Enhancements1

RemoteLeafACI4.0Enhancements,SonuKhandelwal,LocalTrafficforwardingwithinRLvPCpairwithouthair-pinningtoSpineinfollowingcasesInter-VRF(sharedservices)ERSPANPBRReducedimpactofSpinefailurebyimplementingnewEPlearningwhenSpineisdownFeatureparitywithLocalLeaf.FollowingfeaturesarebeingsupportedonRLPBRTrackingNetflowQinQEPTrackerMacsecEPTrackerTroubleshootingwizard,KeyEnhancements,Improvementsforinter-VRF(Sharedservice)trafficforwardingatRL,Inter-VRFtrafficbeforeACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF1,EP2VRF2,EP3,EP1andEP2areindifferentVRFTrafficforwardingbetweenEP1andEP2needstogotoSpine,Inter-VRFtrafficafterACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF1,EP2VRF2,EP3,EP1andEP2areindifferentVRFTrafficforwardingbetweenEP1andEP2isforwardedthroughupstreamrouterBehaviorissameforbothvPCororphanport.,EP3VRF2,EPscaleconsiderationduetointer-vrfdirectforwarding,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF10,EP2VRF20,EP3,AssumeEP1issendingpackettoEP2.RLwilllookforEP2intoVRF1,thisrequiresEP2informationtobeleakedintoVRF1.SimilarlyEP1informationneedstobeleakedintoVRF2.,AllEPsofVRF1andVRF2willbeleakedintobothVRFs.Beforethischange,EP1andEP2informationwasnotleakedacrossVRFsincecrossVRFdatapacketswerealwayssenttospineproxy.,EPleakingacrossVRFsforInter-VRFdirectforwarding,BothEP1andEP2informationisleakedinbothVRF,Reasonforinter-vrftraffictobeforwardedtoupstreamrouter-Continued,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF10,EP2VRF20,EP3,AssumeEP1issendingpackettoEP2.SinceincomingpacketatRLfromEP1isinVRF1,itwilllookforpolicy/contractforEP2intoVRF1,howeverfinalpolicyinformationofEP2willbeindestinationVRF(VRF2).Duetohardwarelimitation,RLcantapplyVRF2policywhenpacketisreceivedinVRF1.,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF10,EP2VRF20,EP3,Reasonforinter-vrftraffictobeforwardedtoupstreamrouter,AnewtunneliscreatedbetweenRLvPCpairforforwardingtraffictodestinationVRFtoapplycontractindestinationVRF.NewtunnelwillhavesourceasDP-TEPofRLanddestinationasP-TEPofRL.Inter-VRFtrafficisforwardedoverthistunnel,whichisforwardthroughtheupstreamrouter.,Newtunneltoforwardinter-vrftrafficfromsourceVRFtodestinationVRF,Inter-VRF(Sharedservice)tunneldetail,DestinationIP,SourceIP,Inter-VRF(Sharedservice)tunneldetail,CommandtofindoutPTEPandDP-TEPonRL,ImprovementsforERSPANtrafficforwardingatRL,ERSPANtrafficbeforeACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF1,EP2VRF2,EP3,EventhoughERSPANsourceanddestinationwaslocalatRemoteLeaf,trafficwasalwaysgoingtoSpineatACImainDC.,ERSPANDestination,ERSPANtrafficafterACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF1,EP2VRF2,EP3,ERSPANDestination,ERSPANdestinationinformationislearntatRL,henceitsabletoforwardtrafficdirectlywithouthair-pinningtraffictoSpine.,ERSPANtrafficafterACI4.0withorphanport,IPNetwork,RemoteLocation,ACIMainDC,EP1VRF1,EP2VRF2,EP3,ERSPANDestination,IfERSPANdestinationisconnectedasorphanport,trafficissentoverupstreamrouter,ImprovementsforPBRtrafficforwardingatRL,PBRtrafficforwardingbeforeACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1,EP2,EP3,L4-L7ServiceNode,EP1EPG1,EP2EPG2,ContractPBRtoServiceNodeatRL,PBRtrafficwasalwayssenttoSpineevenwhensourceEP,destinationEPandservicenodewerelocalatRL.ServiceEPinformationwasnotlearntatRL,PBRtrafficforwardingafterACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1,EP2,EP3,L4-L7ServiceNode,EP1EPG1,EP2EPG2,ContractPBRtoServiceNodeatRL,ServiceEPinformationislearntatRL,andtrafficforwardingisgoingtobelocalatRLlocation.,PBRtrafficforwardingafterACI4.0withOrphanport,IPNetwork,RemoteLocation,ACIMainDC,EP1,EP2,EP3,L4-L7ServiceNode,EP1EPG1,EP2EPG2,ContractPBRtoServiceNodeatRL,Iftheendpointsandservicenodeisconnectedusingorphanport,traffictopeerRLissentoverupstreamrouter.,ReducedimpactofspinefailurebyimplementingnewEPlearningatRLwhenspineisdown,NewEPlearningduringSpinefailurebeforeACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1EPG1BD1,EP2EPG2BD2,EP3,Assumption-AlltheSpinesinACIMainDCisfailed,EP2isasilenthost.EP1andEP2areindifferentsubnet.ifEP1needstotalktoEP2,itwillsenddatapackettodefaultGW(RL).WhenSpineisup,RLsendsdatapacketstoSpinewhichinitiategleanmessagefordiscoveryofEP2.butsinceSpineisdown,RLwilldropthepackettoEP2.,X,X,ARPforEP2,RLwilldropthepacket,NewEPlearningduringSpinefailureafterACI4.0,IPNetwork,RemoteLocation,ACIMainDC,EP1EPG1BD1,EP2EPG2BD2,EP3,X,X,ARPforEP2,t_gleanprocessatRLwillinitiategleanfordiscoveryforEP2,Assumption-AlltheSpinesinACIMainDCisfailed,EP2isasilenthost.EP1andEP2areindifferentsubnet.ifEP1needstotalktoEP2,itwillsenddatapackettodefaultGW(RL).RLdoesnothaveinformationaboutEP2.WhenSpineisup,RLsendsdatapacketstoSpinewhichinitiategleanmessagefordiscoveryofEP2.ToreducedependencyonthespinefornewEPlearning.Anewprocess,t_gleanisintroducedonRLwhichcaninitiategleanmessagewhenSpineisdown.UsingthisnewprocessEP2canbediscoveredwhenspinesaredown.ThisnewlearningprocesswillalsohelpwhenEP1andEP2areinsamesubnet,RLwillbeabletogenerategleanmessagetowakeupEP2whenspineisdown.,PBRTracking,HowPBRtrackingworks,IPNetwork,RemoteLocation,ACIMainDC,LocalTrackingofFWbasedonTCP/ICMPprobes,Trackinformation(announcepackets)issenttoallToRsusingmulticastGIPoaddress,ACIleaflocallytrackstheservicenodesandprovidesthereachabilityinformation(announcepackets)toallleafusingGIPomulticastaddress.Basedonreachabilityoftheservicenode,serviceleaforsourceleafcantakeactionandbypasstheservicenodeordroptraffic.ThisfunctionalitywasdeliveredinACI3.1,PBRTrackingforRL,RemoteLocation,ACIMainDC,LocalTrackingofFWbasedonTCP/ICMPprobes,Trackinformation(announcepackets)issenttoallToRsusingmulticastGIPoaddress,PBRtrackingatRLissupportedfromACI4.0.FollowingsupportisbeingenabledatRLinACI4.0ServicedevicecanbeconnectedatRL.RLcantracklocallyandprovidereachabilityinformationwithinRLandACImainDCthroughmulticastannouncepackets.HREPtunnelsbetweenRLandSpinesinmainDCisusedtoforwardmulticastannouncepackets.ConsumerandproviderEPGthatisusingPBRtrackinformationcanbeonRL.RLcanusemultic