asa 5510 routes

ive got an asa5510 in place of a pix.  the previous pix was configured with static routes of my entire network.  cant the asa pickup routes from one of my routers?  right now, anytime i add a new network, i have to make sure that i enter the static route on the asa.

here are the routes:
route outside 0.0.0.0 0.0.0.0 208.6.12.65 1
route inside 172.17.1.0 255.255.255.0 172.17.100.1 1
route inside 172.17.2.0 255.255.255.0 172.17.100.1 1
route inside 172.17.3.0 255.255.255.0 172.17.100.1 1
route inside 172.17.4.0 255.255.255.0 172.17.100.1 1
route inside 172.17.5.0 255.255.255.0 172.17.100.1 1
route inside 172.17.6.0 255.255.255.0 172.17.100.1 1
route inside 172.17.7.0 255.255.255.0 172.17.100.1 1
route inside 172.17.8.0 255.255.255.0 172.17.100.1 1
route inside 172.17.9.0 255.255.255.0 172.17.100.1 1
route inside 172.17.10.0 255.255.255.0 172.17.100.1 1
route inside 172.17.11.0 255.255.255.0 172.17.100.1 1
route inside 172.17.30.0 255.255.255.0 172.17.100.1 1
route inside 172.17.40.0 255.255.255.0 172.17.100.248 1
route inside 172.17.101.0 255.255.255.0 172.17.100.250 1
route inside 172.17.102.0 255.255.255.0 172.17.100.248 1
route inside 200.130.130.0 255.255.255.0 172.17.100.248 1


aside from the route to the outside, every other route should be able to be picked up from my router at 172.17.100.1.  can the asa do that or am i stuck with static routes?
LVL 22
WMIFAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
nodiscoConnect With a Mentor Commented:
Hey there

Does the router run any routing protocol?  Ospf and RIP are supported by PIX/ASA (eigrp is not) so you could configure a routing protocol so the statics would not be necessary.

Have a look at the ospf and rip sections of this link for configuration on the ASA 5500 series:
http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a008045247f.html

hope this helps


0
 
WMIFAuthor Commented:
i forgot to mention that im running eigrp on that router.
0
 
WMIFAuthor Commented:
sounds like i probably want to stick with static routes then if im using eigrp on the rest of my routers.  would you agree?

otherwise i would have to setup rip or ospf on the 100.1 router to replicate the eigrp routes over to the pix.  i dont think that is worth the hassle that it will save with static routes on the asa.
0
Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

 
nodiscoCommented:
hi WMIF

You could setup a small ospf area on the router, redistribute eigrp learned routes into ospf and then setup ospf on the pix.  But considering the amount of statics you have in use - yes, I would continue just using statics if i were you.

hth
0
 
lrmooreCommented:
Personally with 3 other routers in the mix, I'd go with OSPF on all 4 devices. Do you have any alternate gateways if your Internet is down outside the ASA? The ASA can advertise the default with OSPF and the other routers can redistribute their eigrp routes. No statics anywhere..
 
0
 
WMIFAuthor Commented:
172.17.100.250 was actually an old route that is incorrect.  i noticed that after i posted and corrected it on the asa.  it now points to the 172.17.100.248 which is a layer 3 3550 12g switch.

the 172.17.100.1 is attached to a frame-relay with 11 other routers on the other side.  that is the eigrp group.  the routes on the 12g are static entries on the 100.1 router.

the internet connection is not THAT critical to us, so we only have a single t1 line.  i just have to put up with the users phone calls and whining when they cant get to their precious websites.
0
All Courses

From novice to tech pro — start learning today.