cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
248
Views
0
Helpful
1
Replies

ASA 5520 OSPF Routing

tradepmrtech
Level 1
Level 1

Hello 

I'm trying to figure out if I need any access-list or NAT rules in order to communicate with networks advertised over the OSPF configuration. I have a third party connection coming into my Cisco ASA 5520. Please refer to my configuration below. It appears that the traffic is leaving from my side but not return back from the third party connection. They are doing the NAT on my network as the traffic arrives in their network. The route table on the firewall shows all the network from the OSPF route. Since I have same-security-traffic permitted, I don't think I need any extra configuration for my traffic from VLAN 10 to hit any networks from OSPF. Need some insight on this issue. Thanks. 

interface GigabitEthernet0/1
description LAN 
nameif Inside
security-level 100
no ip address
!
interface GigabitEthernet0/1.10
description LAN Servers
vlan 10
nameif LAN
security-level 100
ip address 192.168.4.1 255.255.255.0
!

interface GigabitEthernet0/2
description Third Party Connection
nameif Third Party Conn
security-level 100
ip address 10.16.1.5 255.255.255.252
!

router ospf 1
router-id 10.16.1.5
network 10.16.1.6 255.255.255.252 area 0
area 0
log-adj-changes
redistribute connected subnets
redistribute static
!

same-security-traffic permit inter-interface
same-security-traffic permit intra-interface

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

If you have no ACL applied to the 3rd party interface and no NAT then you should be ok.

If your packet capture shows no return traffic then the problem is almost certainly with the 3rd party equipment. 

Review Cisco Networking for a $25 gift card