topic ASA OSPF routing scale in Network Security

ASA OSPF routing scale

rocant — Wed, 26 Aug 2020 06:48:15 GMT

Hi all

I am trying to confirm the maximum OSPF routing table size for the below firewalls. Any ideas where I can find the info ?

All in multiple context mode

FPR9K-SM-36 – asa ver 9.8(1)

5585x – SSP40 - asa ver 9.8(4)25

FPR4K-SM-12 - asa ver 9.8(1)

Regards

Rob

Re: ASA OSPF routing scale

Mohammed al Baqari — Wed, 26 Aug 2020 07:42:58 GMT

I don't think you will get this from FPR datasheets as they don't use
routes as metric for firepowers. They are more oriented towards connections
instead of routes.

Having that said, you can query your internal team to see if they can
provide that number. Its subject to memory size and if you are looking for
large scale routing my recommendation is to provision separate ASR routers
to take care of that. Let ASA focus on security part and use summary routes
or stub routes to avoid routing overhead.

**** please remember to rate useful posts.

Re: ASA OSPF routing scale

rocant — Thu, 27 Aug 2020 07:58:50 GMT

Checked with internal :):

FPR9K-SM-36 – asa ver 9.8(1) – at Least 100K Prefixes with 500 peers

5585x – SSP40 - asa ver 9.8(4)25 – 50 K Prefixes with 200 Peers

FPR4K-SM-12 - asa ver 9.8(1) – at Least 100K Prefixes with 500 peers

Re: ASA OSPF routing scale

Mohammed al Baqari — Thu, 27 Aug 2020 09:24:02 GMT

Many thanks for sharing it.