Cisco SDA Border to Fusion Connectivity

[loger9901]

Do all VNs from a SDA border node need to the same fusion device?  We would like to take our Corporate traffic and fuse that to our GRT with a Nexus switch.  We'd like to take our IOT and Guest VNs and run them through a firewall for policy and inspection.  Is there any restrictions to sending traffic from separate VNs to different Fusion devices?  

[andy!doesnt!like!uucp]

i guess this will address your Q  Guide to choosing SD-Access (SDA) Border roles in Cisco DNAC 1.3 - Cisco Community 

[jedolphi · Accepted solution]

Hi, all L3VNs do not need to route through same fusion devices, that is not a requirement. You can handoff different Layer 3 Virtual Networks to different external routing domains. For example, you can create IP-Transit-1 for Nexus and IP-Transit-2 for firewall. Then connect both IPT1 and IPT2 to a Border Node and enable only your desired Layer 3 Virtual Networks in each IP Transit. Best regards, Jerome