Don't allow VN to be extended to spine device .

[venu kolli]

Build : 307

Right now we were allowing VN to be extended to qfx spine device .

Which in turn is creating irb on spine .

Traffic coming on to irb is able to go out on inet.0

Any pvt network extended to spine is able to go out to public without creating LR on spine .

[venu kolli (vkolli)]

Also UI should not allow vn to extend it to qfx spine devices or show up qfx spine device in its list.

[venu kolli (vkolli)]

Due to this issue , pvt networks traffic can go out of qfx when they ping public ip . But traffic will not return as pvt network route will not be resolved to qfx . But if there is route resolving to qfx for the pvt network used it will be able to ping without any LR .

[Jeba Paulaiyan (jebap)]

Notes:

When extending the VN to Spine, the right way is to create a LR in Spine and attach the VN to the LR. Instead, if the user extends the VN to the Spine, the packets from the private network will be sent to the public network.