topic Re: EIGRP Unicast Routing on ASA in Network Security

EIGRP Unicast Routing on ASA

jason.edelman — Tue, 26 Mar 2019 00:42:29 GMT

Has anyone used the EIGRP neighbor command on the ASA to enable unicast hellos and dynamic routing between two ASAs over a site to site VPN tunnel?

I'd like to see if it is possible to eliminate an external router needed to build a GRE tunnel and instead accomplish the same thing just by using ASAs.

Thanks!

Jay

Re: EIGRP Unicast Routing on ASA

andrew.prince — Tue, 07 Apr 2009 09:54:00 GMT

Jay,

Never used it - but in theory it's possible only when you specific the neighbor of the remote ASA EIGRP.

You would also have to configure a router-id in the EGIRP to make sure all EIGRP transmission is unicast - otherwise the IPSEC will drop the multicast.

HTH>

Re: EIGRP Unicast Routing on ASA

jasonfmic — Tue, 21 Jul 2009 18:08:20 GMT

Jay,

Did you end up configuring this? I'm looking at it and unlike the static 'neighbor' command for ospf, eigrp requires that the neighbor be on the same subnet and the outbound interface... that would seem to make this command not very useful at all as you cannot use it to unicast hellos over the internet.

I wonder why that requirement exists for eigrp.. I'm tempted to set up an outside NAT on a router in between to see if I can get it working..

Jason