cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
819
Views
0
Helpful
0
Replies

OSPF neighbors cannot be established between Inside and DMZ in ASAv

Charlie1010
Level 1
Level 1

I tried to create OSPF neighbors between Inside and dmz.

As below topology, ASAv g0/1 connected to inside_2, g0/2 connected to dmz
ASAv g0/1 7.7.2.254/24
ASAv g0/2 192.168.244.254/24

Inside_2       e0/0 7.7.2.1/24, lo0 2.2.2.2/24
dmz             e0/0 192.168.244.20  lo0 4.4.4.4/24

ospf.JPG

#Both Inside_2 and dmz created ospf, area 0

#ASAv show route ospf
O        2.2.2.2 255.255.255.255 [110/11] via 7.7.2.1, 00:54:39, inside2
O        4.4.4.4 255.255.255.255 [110/11] via 192.168.244.20, 00:54:19, dmz

# ASAv show access-list
access-list osfp_global line 1 extended permit ospf any any

# Then access-group osfp_global global

access-group osfp_global global

 

# From below neighbors, both 2.2.2.2 and 4.4.4.4 are DR, seems like there is no DBD or LSA interacting between each other. (Should only 1 DR per my understanding)

Neighbor ID     Pri   State           Dead Time   Address         Interface
4.4.4.4           1   FULL/DR         0:00:32    192.168.244.20  dmz
2.2.2.2           1   FULL/DR         0:00:33    7.7.2.1         inside2

 

Question:

1. How to create the neighbors between inside2 and dmz?

2. Also after input "access-group osfp_global global", inside_2 cannot ping outside, but it worked well if not input "access-group osfp_global global", why?

 

Attached all configuration files for the reference. Nothing configured in Switch_2.

0 Replies 0
Review Cisco Networking for a $25 gift card