For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JimW_156953's avatar
JimW_156953
Icon for Nimbostratus rankNimbostratus
Oct 19, 2018

Integration question: Cisco ACI with f5 in unmanaged mode

(knowledge level : rudimentary :: first aci <-> f5 integeration project of my life:: reaching out to the community since everyone seems to be baffled)   Need help in getting a stalled project thr...
aci
BIG-IP
cisco aci
cisco integration
f5 unmanaged mode
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Oct 20, 2018

From the perspective of the BIG-IP no specific configuration is needed. But you probably want to disable 'Auto Last Hop'. Check the document below at: Guidelines and Limitations for Common Pervasive Gateway

 

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010.html

 

I'm not a Cisco ACI expert, but configuration of these items seem to be relevant:

 

ACI Access Policy for configuration of the physical ports (VPC, LACP, Speed, VLAN, Domain).

 

Logical Network Constructs for the network configuration (Bridge Domain, Subnets, Access Policy, EPG, Contracts.

 

Also see this post:

 

https://devcentral.f5.com/articles/unmanaged-mode-what-it-means-for-aci-and-big-ip-integration