ASA transparent mode, access list hit count 0

[zhilimailbox]

Hi, there

I have a Cisco 5585-X. one of the context is configured with transparent mode. OSPF is used for routing between the two layer 3 devices on the inside and outside the interface respectively. However the hit count for OSPF shows 0. Could someone shed any light on why the hit count is 0. 

extended permit ospf any4 any4 (hitcnt=0)

Kind regards,

[balaji.bandi]

Configure Security Policies on ASA transparent mode :

controlling IP traffic is configured in the same way as with a normal routed firewall using access-list and access-group commands with the advantage that non-IP trafffic (such as routing protocols, e.g. OSPF) can also be permitted/denied.

It is also possible to configure rules for which the ASA does not have inbuilt definitions by creating an EtherType rule.

In ASDM this done through:

Configuration ‣ Firewall ‣ Ethertype Rules

And the CLI:

access-list <name> ethertype [permit | deny] <ethertype>
access-group <name> [in | out] interface <ifname>