OSPF not populating routes on ASA

deepali.shinde · ‎04-14-2009

We have the branch and Head Office connected through MPLS.

On thr branch router we have the LAN connected to inside of ASA and outside interface terminates

the MPLS link. We have the same security levels on both outside and inside interface.

We have configured OSPF to advertise the routes of our branch office LAN to Head Office LAN.

The problem we are facing is that , from the ASA we can ping the head office LAN.But none of the PCs

are able to ping the Head office LAN. Also I am not able to see OSPF table getting populated.

This is the topology:

Branchoffice(LAN)-------(inside)ASA(outside)-------MPLS-cloud--------HeadOffice(Router)---LAN

Thanks in advance.

roshan.maskey · ‎04-15-2009

Hi Deepali,

By default, interfaces on same security level cannot communicate with each other.

Use the following command to allow traffic between same security-level

asa(cofnig)# same-security-traffic permit inter-interface

Regards,

Roshan