本帖最后由 fushuang 于 2018-10-20 11:27 编辑 ASA 和 N9K VPC 之间，如果需要 layer 3 OSPF 和 layer 2 bridge, 可以使用 Layer3 link 做 OSPF，使用 layer 2 vpc link 做 bridge。
不过 ASA 似乎没提供那么多接口，可以参考
N9K_VPC_Layer3_RoutingFigure 8. Using Separate Layer 3 Links to Connect L3 Device to a vPC Domain
Follow these guidelines when connecting a Layer 3 device to the vPC domain:
Use separate Layer 3 links to connect Layer 3 devices to the vPC domain.
Do not use a Layer 2 vPC to attach a Layer 3 device to a vPC domain unless the Layer 3 device can statically route to the HSRP address configured on the vPC peer devices.
When both routed and bridged traffic are required, use individual Layer 3 links for routed traffic and a separate Layer 2 port-channel for bridged traffic when both routed and bridged traffic are required.
Enable Layer 3 connectivity between vPC peer device by configuring a VLAN network interface for the same VLAN from both devices or by using a dedicated Layer 3 link between the two peer devices (for Layer 3 backup routing path purposes).
当然了，如果想看一下 N9K OSPF 状态，可以查看 show ip ospf internal event-history adjacency
