Question for those who are doing / have done Spine/Leaf DC configurations.....

My question pertains to the WAN, Firewall, and routing.

• I assume you are terminating WAN Links into an HA pair for firewalls that then feed into the leafs?

• Are you doing all of your routing (outside of VPNs) on the switches or on the firewalls?

The question is 2 fold I know. I am more curious about your WAN deployments in spine/leaf DC configs and why you chose to do it the way you did.