Create an External Routed Network

On the
Tenants
tab, double-click on the name of your tenant.
Select
Networking
External Routed Networks
.
Right-click
External Routed Networks
and select
Create Routed Outside
.
Enter a descriptive
Name
for your
External Routed Network
.
Select your VRF with external connectivity from the
VRF
drop-down.
Select the external routed domain you created previously form the
External Routed Domain
drop-down.
Select
OSPF
.
Enter an
OSPF Area ID
. The Area ID can be expressed in decimal number or dotted decimal form. For example, Area 1 is the same as Area 0.0.0.1 or Area 271 is the same as Area 0.0.1.15. The Area ID range is 0 (0.0.0.0) to 4294967295 (255.255.255.255).
Select
Regular Area
for the
OSPF Area Type
.
Click the plus (+) button to the right of
Nodes and Interface Profiles
to create a Node Profile with a node that for the border-leaf switches that connect to the firewall.
Enter a descriptive
Name
for your
Node Profile
.
Attach nodes to your Node Profile.
Click the plus (+) button to the right of
Nodes
. This opens the
Select Node
window.
Select the node that your firewall is connected to from the
Node ID
drop-down.
Enter the IP address of the router attached to the leaf switch in
Router ID
.
Click
OK
.
Click the plus (+) button to the right of
Nodes and Interface Profiles
.
Enter a descriptive
Name
for your
Node Profile
.
Click the plus (+) button to the right of
Nodes
. This opens the
Select Node
window.
Select the node that your secondary HA firewall is connected to from the
Node ID
drop-down.
Enter the IP address of the router attached to the second leaf switch in
Router ID
.
Click
OK
.
Attach an OSPF Interface Profile for your Node Profile.
Enter a descriptive
Name
for your OSPF Interface Profile.
Click
Next
.
Select
Create OSPF Interface Policy
from the OSPF Policy drop-down.
Enter a descriptive
Name
for your OSPF Interface Policy.
Select
MTU Ignore
.
Click
Submit
.
Click
Next
.
Click
SVI
.
Click the plus (+) button to the right of
SVI Interfaces
. This opens the
Select SVI
window.
Click
Virtual Port Channel
.
Select the Path to the port and port channel interface where the firewall connects to the leaf switch.
In
Encap
, enter the VLAN encapsulation used for your layer 3 outside profile.
Select
Trunk
for Mode.
In the
Side A IPv4 Primary Address
field, enter the primary IP address of the path attached to the layer 3 outside profile.
In the
Side B IPv4 Primary Address
field, enter the secondary IP address of the path attached to the layer 3 outside profile.
Click
OK
.
Click
OK
to close the Create Interface Profile window.
Click
OK
to close the Create Node Profile window.
Click
Next
.
Click the plus (+) button to the right of
External EPG Networks
. This opens the
Create Routed Outside
window.
Enter a descriptive
Name
for you External Network.
Add a subnet to you External Network.
Click the plus (+) button to the right of
Subnets
.
Enter the IP address and mask of the subnet’s default gateway.
Select
Export Route Control Subnet
.
Select
External Subnets for External EPG
.
Click
OK
.
Click
Finish
.