OSPF through a PIX

r-lucarelli · ‎05-21-2002

I need to separate a OSPF area 0 with a firewall, becouse now some WAN connection are provided by a carrier in MPLS. I would like connect this WAN router outside the firewall, however I need also to extend the routing protocol OSPF to WAN. How I can do it? An other possibility is to use BGP, in this case is easy becouse BGP use TCP session.

Thanks

Roberto

bzink · ‎05-22-2002

If you choose to use OSPF, you'll need to form an OSPF adjacency between the routers, so you'll want to use a GRE tunnel through the Pix. Beware of recursive routing as described in:

http://www.cisco.com/warp/public/105/gre_flap.html

You can use BGP and redistribute into OSPF, but convergence will not be as fast.

r-lucarelli · ‎05-22-2002

Thanks. the link will be useful

Roberto