ospf in the pix

bma — Fri, 21 Feb 2020 07:32:49 GMT

We have pix 506 (location A) with ver 6.3(1) vpn lan to lan to the concentrator 3015 (location B). If I have other vpn route ( in the location C) make lan to lan to the PIX 506 (location A), could I enable OSPF in the PIX 506, routing location C traffic to the location B?

Thanks

ben

Re: ospf in the pix

dtangent — Thu, 05 Aug 2004 08:06:02 GMT

I don't think that can be done.

When defining crypto ACL on the the 506, what traffic are you going to define as interesting? You can't define a crypto ACL for PIX's outside interface sourcing OSPF traffic. Also, OSPF uses multicast traffic to establish neighbor adjacency, and since the neighbor command is not available on the PIX, you't can't statically configure a neighbor to pass unicast update. IPSec will not pass multicast traffic, only GRE could.

The biggest hurdle is that PIX simply won't send traffic out the same interface it receives from, VPN or not. Thus, you can't pass traffic to the PIX and ask it to redirect that traffic out to the Concentrator.

topic ospf in the pix in Network Security

ospf in the pix

Re: ospf in the pix