Solved

asa 5510 routes

Posted on 2006-06-08
6
384 Views
Last Modified: 2010-04-12
ive got an asa5510 in place of a pix.  the previous pix was configured with static routes of my entire network.  cant the asa pickup routes from one of my routers?  right now, anytime i add a new network, i have to make sure that i enter the static route on the asa.

here are the routes:
route outside 0.0.0.0 0.0.0.0 208.6.12.65 1
route inside 172.17.1.0 255.255.255.0 172.17.100.1 1
route inside 172.17.2.0 255.255.255.0 172.17.100.1 1
route inside 172.17.3.0 255.255.255.0 172.17.100.1 1
route inside 172.17.4.0 255.255.255.0 172.17.100.1 1
route inside 172.17.5.0 255.255.255.0 172.17.100.1 1
route inside 172.17.6.0 255.255.255.0 172.17.100.1 1
route inside 172.17.7.0 255.255.255.0 172.17.100.1 1
route inside 172.17.8.0 255.255.255.0 172.17.100.1 1
route inside 172.17.9.0 255.255.255.0 172.17.100.1 1
route inside 172.17.10.0 255.255.255.0 172.17.100.1 1
route inside 172.17.11.0 255.255.255.0 172.17.100.1 1
route inside 172.17.30.0 255.255.255.0 172.17.100.1 1
route inside 172.17.40.0 255.255.255.0 172.17.100.248 1
route inside 172.17.101.0 255.255.255.0 172.17.100.250 1
route inside 172.17.102.0 255.255.255.0 172.17.100.248 1
route inside 200.130.130.0 255.255.255.0 172.17.100.248 1


aside from the route to the outside, every other route should be able to be picked up from my router at 172.17.100.1.  can the asa do that or am i stuck with static routes?
0
Comment
Question by:WMIF
  • 3
  • 2
6 Comments
 
LVL 19

Accepted Solution

by:
nodisco earned 125 total points
ID: 16865776
Hey there

Does the router run any routing protocol?  Ospf and RIP are supported by PIX/ASA (eigrp is not) so you could configure a routing protocol so the statics would not be necessary.

Have a look at the ospf and rip sections of this link for configuration on the ASA 5500 series:
http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a008045247f.html

hope this helps


0
 
LVL 22

Author Comment

by:WMIF
ID: 16865784
i forgot to mention that im running eigrp on that router.
0
 
LVL 22

Author Comment

by:WMIF
ID: 16865825
sounds like i probably want to stick with static routes then if im using eigrp on the rest of my routers.  would you agree?

otherwise i would have to setup rip or ospf on the 100.1 router to replicate the eigrp routes over to the pix.  i dont think that is worth the hassle that it will save with static routes on the asa.
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 
LVL 19

Expert Comment

by:nodisco
ID: 16867629
hi WMIF

You could setup a small ospf area on the router, redistribute eigrp learned routes into ospf and then setup ospf on the pix.  But considering the amount of statics you have in use - yes, I would continue just using statics if i were you.

hth
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 16869649
Personally with 3 other routers in the mix, I'd go with OSPF on all 4 devices. Do you have any alternate gateways if your Internet is down outside the ASA? The ASA can advertise the default with OSPF and the other routers can redistribute their eigrp routes. No statics anywhere..
 
0
 
LVL 22

Author Comment

by:WMIF
ID: 16871713
172.17.100.250 was actually an old route that is incorrect.  i noticed that after i posted and corrected it on the asa.  it now points to the 172.17.100.248 which is a layer 3 3550 12g switch.

the 172.17.100.1 is attached to a frame-relay with 11 other routers on the other side.  that is the eigrp group.  the routes on the 12g are static entries on the 100.1 router.

the internet connection is not THAT critical to us, so we only have a single t1 line.  i just have to put up with the users phone calls and whining when they cant get to their precious websites.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sonicwall VPN / Net Extender - Bandwidth problem 5 70
iptables question 3 72
TMG Firewall website policy 2 142
Filezilla server wont allow me to connect to it 2 51
If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now