Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

PIX & OSPF recommendation

I have the following topology

R1 --Lan--PIX--Lan---R2,R3,R4

I need to configure OSPF .should i pass the ospf through the PIX or configuring the ospf on the pix too? whot does cisco recommend?

5 REPLIES
Hall of Fame Super Blue

Re: PIX & OSPF recommendation

Hi

Kind of depends on what mode the firewall is in. If the firewall is running in transparent mode then pass the OSPF traffic through. If it is running in routed mode it needs to participate in OSPF routing.

HTH

Jon

Community Member

Re: PIX & OSPF recommendation

The FW is routed mode but is there any problem if i passed the traffic through it may be i need to use PBR on the inside routers

Hall of Fame Super Blue

Re: PIX & OSPF recommendation

Hi

That is the problem. OSPF expects to form ajacencies with neighbours on the same network but you have another hop between your 2 ospf routers because the firewall is in routed mode. That is why you can run OSPF on the FWSM itself in routed mode to get around this problem.

The only way the 2 ospf routers on either side of your FWSM will see each as neighbours is if the FWSM is in transparent mode ie. the same subnet on either side of the FWSM.

Jon

Hall of Fame Super Blue

Re: PIX & OSPF recommendation

Apologies, i keep referring to the FWSM (Firewall Services Module) but the same applies to the standalone pix.

Jon

Community Member

Re: PIX & OSPF recommendation

Wouldn't it be possible to configure a GRE tunnel between the 2 routers through the FWSM/PIX/ASA (allowing the correct ports to go through of course) for OSPF traffic? Seems like that would enable the routers to see each other as neighbors.

152
Views
0
Helpful
5
Replies
CreatePlease to create content