topic Re: ospf on pix in Network Security

ospf on pix

cfajardo1_2 — Fri, 21 Feb 2020 08:20:57 GMT

EXISTING SETUP:

My customer is on a flat network on a certain OSPF Area. ABR connects the area to the OSPF AS.

THE PROBLEM/QUESTION:

Iam now inserting the PIX 515E UR between my customers network and the ABR.

Do I need to implement OSPF on my PIX even if my customer remains a flat network?

Thanks.

Re: ospf on pix

rais.ahmad — Tue, 23 Aug 2005 17:59:47 GMT

If you need OSPF contunuity across the network you have to enable OSPF on PIX, Alternatively, you can rely on static routes.

HTH

Re: ospf on pix

cfajardo1_2 — Sat, 27 Aug 2005 04:39:27 GMT

but how will the pix speak to the abr which is talking ospf?

Re: ospf on pix

rais.ahmad — Sun, 28 Aug 2005 03:39:57 GMT

The PIX has to be configured with OSPF.

Thanks.

Re: ospf on pix

cfajardo1_2 — Sun, 28 Aug 2005 04:45:29 GMT

you have mentioned that i could do static as an alternative. is this possible without doing any redistribution on the router?

thanks

Re: ospf on pix

rais.ahmad — Sun, 28 Aug 2005 15:00:54 GMT

You can configure static routes w/o redistribution. Redistribution only injects your static/connected/learned networks into a routing protocol. No routing protocol, no redistribution.

If you have a single homed network, you don't necessarily need dynamic routing.

HTH.

Re: ospf on pix

cfajardo1_2 — Mon, 29 Aug 2005 05:17:43 GMT

iam just one of the site (area) among the 20 ospf areas in the whole AS.

is this being considered as single homed?

thx

Re: ospf on pix

rais.ahmad — Mon, 29 Aug 2005 13:52:29 GMT

If your link to the backbone area is a single connection then you are single-homed.

If you go static, you would still need to insert routes for your area via ABR into your backbone. ABR will become an ASBR.

Thanks.