EIGRP and DMZ distribution - Cisco ASA

ALIAOF_ — Tue, 12 Mar 2019 00:36:58 GMT

I have been able to get EIGRP working successfully in the lab like I want.

Attached is the network overview:

We have a Data Center and Corporate office connected via Point to Point Fiber link, eventually we will have two of these
Two 4948E switches in the Data center acting as cores setup with GLBP
Corporate Office has a 3750X acting as a core
Currently two 4948E's are connected to each other via Port Channel and a L2 trunk
Two set of ASA 5520's one acting as a firewall and for Cisco Any Connect and second for site to site VPN

What is the best way/pratice that I can distribute this DMZ via EIGRP? Should I just leave it static on the core like this?

DMZ Net = 192.168.150.0/24

Inside Interface = 192.168.200.255

On the core I create a static route "ip route 192.168.150.0 255.255.255.0 192.168.200.255". Or a statement like this would be better for future DMZ additions "ip route 0.0.0.0 0.0.0.0 192.168.200.255"?

EIGRP and DMZ distribution - Cisco ASA

Peter Koltl — Thu, 13 Dec 2012 21:06:13 GMT

You can run EIGRP on the ASA too.

EIGRP and DMZ distribution - Cisco ASA

Julio Carvajal — Fri, 14 Dec 2012 00:02:29 GMT

Hello Mohammad,

I would recommend you to advertise them via EIGRP, better funcionality, escalability,etc,etc,etc.

Regards

EIGRP and DMZ distribution - Cisco ASA

ALIAOF_ — Wed, 19 Dec 2012 20:17:51 GMT

I do not want to run EIGRP on the ASA though.

topic EIGRP and DMZ distribution - Cisco ASA in Network Security

EIGRP and DMZ distribution - Cisco ASA

EIGRP and DMZ distribution - Cisco ASA

EIGRP and DMZ distribution - Cisco ASA

EIGRP and DMZ distribution - Cisco ASA