Solved

OSPF - Router/ASA - VPNs

Posted on 2009-05-08
2
657 Views
Last Modified: 2012-05-06
Hello All,

I have a challenge here for me with OSPF.

1 Router (MPLS), 2 ASAs (Client & Site To Site VPNs), 1 Layer 3 catalyst switch. Attached a drawing&

The MPLS router is controlled by the provider  we exchange routes via OSPF from the router to the catalyst.

One of the ASA is connected to a VLAN on the catalyst and the other ASA is offsite. The 2 ASAs have a site to site tunnel and all traffic from the remote site comes thru it, no split tunneling.

So here is the deal I am have a problem sorting out. The catalyst learns about other remotes offices from the MPLS router via OSPF, planning on having the ASA learn about router to other offices via OSPF from the catalyst. Currntly the catalyst has a statict router that points all traffic for the 10.1.2.x network to the ASA (10.1.1.253).

If the ASA picks up the route via OSPF from the catalyst, it wants to send the traffic back to the catalyst. This makes sense as the catalyst says via OSFP I know how to get to 10.1.2.x network.

What is the best way to stop the ASA from picking up some routes or should I have the ASA advertise the far end tunnel route?

Regards,
0
Comment
Question by:dehmerl
2 Comments
 
LVL 16

Accepted Solution

by:
BBRazz earned 500 total points
ID: 24341001
The best way to configure that will surely be for the ASA to announce the 10.1.2.x Network as it is the Next Hop gateway for that destination.

That way the static route can be dropped at the catalyse.

-BBRazz
0
 

Author Comment

by:dehmerl
ID: 24341421
Also was thinking if I should have OSPF going over the VPN to publish the route, would that be better then a static on the ASA?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How VPC help preventing STP Loops 4 95
Cisco UCS: C-Series, bios failed power-on self test 2 37
CISCO ATA 190 using PRI DID number 6 40
Choice of router 8 21
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question