A network engineer configured an active-active firewall cluster that is stretched across separate pods in...

 Anycast services in a Cisco ACI fabric allow services like firewalls to be stretched across multiple pods, providing high availability and resiliency. The correct setups for implementing anycast services include configuring the firewalls behind an EPG subnet ©and deploying a Layer 4 to Layer 7 service graph with Policy-Based Routing (PBR) (E). Modifying the ACI contract scope (A) or the MAC address on the second firewall (B) are not related to anycast service implementation. Deselecting No Default SVI Gateway under EPG Subnet (D) is not a setup for anycast services1. References := (Cisco APIC Online Help - About Anycast Services2)