Posts

Showing posts with the label BDI

Convert Cisco IOS-XE router as switch (BDI - Bridge Domain Interface)

Image
I was trying to connect a firewall cluster (Active-Passive) with a Cisco IOS-XE based router. Then faced a problem - I cannot connect two different firewalls in a cluster to the router; because the router's interfaces operates in layer-3 mode. The interfaces in the router does not support layer-2 switching. Before going further - let's have a look on your topology -  01 - Network Topology If we look at the topology above - we can see the problem - if it was not a router; just a layer-3 switch; we can configure like below in the layer-3 switch - interface gi1   channel-group 1 mode active ! interface gi2   channel-group 1 mode active ! int port-channel 1   switchport   switchport mode trunk ! But the problem is - there is no "switchport" command to enable layer-2 vlan processing in a Cisco router. Also we have a firewall cluster - it is not possible to support the cluster when a failover happens from the router's perspective. Cisco IOS-XE routers solves this prob...