Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

EIGRP on Outside ASA interface

Is it possible to create a neighbor relationship between an ASA and a router on the external interface? I would like to have the ASA receive the default route from our external DS3 router so that I can reroute to our secondary provider should an outage occur.

I worked on this last night for a couple of hours with no luck and can't find any documentation showing the solution. I went as far as statically configuring neighbor relationships, allowing eigrp on the ACL attached to the Outside interface etc and had no luck. The ASA does not appear to send any EIGRP traffic out the external interface. Any suggestions? Anyone done this?

4 REPLIES
Silver

Re: EIGRP on Outside ASA interface

EIGRP hello packets are sent as multicast packets. If an EIGRP neighbor is located across a nonbroadcast network, such as a tunnel, you must manually define that neighbor. When you manually define an EIGRP neighbor, hello packets are sent to that neighbor as unicast messages.

Refer the following url for Configuring EIGRP on the Cisco Adaptive Security Appliance (ASA):

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008086ebd2.shtml

Refer the following url for more information on EIGRP neighbor configuration:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ip.html#wp1102147

New Member

Re: EIGRP on Outside ASA interface

Thanks for your reply. Unfortunately, like I stated in the original post I have already tried manually configuring the neighbor relationship and it is not working. Do you know for certain it will work? Do the minor revs of v8 make a difference? I am currently on 8.02.

Thanks,

Scott

Gold

Re: EIGRP on Outside ASA interface

that shouldn't make a difference.

can you post the config you were trying to use on each device involved?

New Member

Re: EIGRP on Outside ASA interface

What pieces would you like to see? It is a fairly sizable production environment. Assume that I am very competent and experienced and simple mistakes won't be made. The main thing I am trying find out is whether or not anyone has actually seen it work and if so, were there any special things that needed to get done to make it work properly. Internally, EIGRP is working well. The network statements are correct as are the neighbor statements.

308
Views
0
Helpful
4
Replies
CreatePlease to create content