Create an L4-L7 Device

On the
Tenants
tab, double-click on the name of your tenant.
Select
Services
L4-L7
Devices
.
Right-click
Devices
and select
Create L4-L7 Device
.
Clear the
Managed
check box.
Enter a descriptive
Name
for your L4-L7 Device.
Select
Firewall
from the
Service Type
drop-down.
Select
Physical
for a physical firewall or
Virtual
for a VM-Series firewall from the
Device Type
drop-down.
Select the physical or VMM domain you created previously from the
Domain
drop-down.
Select HA Node for
View
.

Under
Device 1
, click the plus (+) icon to the right of
Device Interfaces
.
Enter a descriptive
Name
for this interface.
Under
Path
, select the path to the primary firewall in your HA pair.
Click
Update
.
Under
Device 2
, click the plus (+) icon to the right of
Device Interfaces
.
Enter a descriptive
Name
for this interface.
Under
Path
, select the path to the secondary firewall in your HA pair.
Click
Update
.
Under
Cluster
, click the plus (+) icon to the right of
Cluster Interfaces
.
Enter a descriptive
Name
for the cluster.
Select the two interfaces you configured above from the list under
Concrete Interfaces
. The APIC requires that you configure two interfaces. However, because there is only one connection between the firewall and the ACI fabric, only one of the interfaces is used.
Under
Encap
, enter a VLAN from the from the static VLAN pool you created earlier. Traffic will be redirected to the firewall on the VLAN assigned here.
Click
Update
.
Click
Finish
.