topic Re: ASA to Core switch routing best practice in Network Security

ASA to Core switch routing best practice

NetworkMonkey101 — Wed, 19 Apr 2023 06:56:07 GMT

Hi,

Is it best practice to use static routes or a routing protocol between an ASA and core switch to be able to reach inside vlans?

For example static route on the ASA would be

Route inside 192.168.10.0 255.255.255.0 10.1.1.1 (L3 SVI on core switch)

or is it recommended to use EIGRP/OSPF?

Re: ASA to Core switch routing best practice

Rob Ingram — Wed, 19 Apr 2023 07:01:24 GMT

@NetworkMonkey101 I don't think there is a right or wrong answer, it depend on your environment.

I'd personally use a routing protocol (OSPF) so the ASA automatically learns new networks from the core switch. Or if you have a small environment with a configuration that doesn't change much then static routes should be fine.