We have a working design with Cisco ASA and Fortiswitch connecting to Cisco ASR1001 router up to AWS. The ASR uses BGP to talk to AWS and we redistribute OSPF/BGP (Which way is right?). At the moment It works and we have traffic flowing. We have introduced another backup secondary path also to AWS. We are now trying to resolve routing between ASA, Fortiswitch L3 (Licensed for BGP) with eliminating an additional ASR in the design because Cisco is not offering any support contract!!! I am trying get the second circuit talking with 2nd Fortiswitch and ASA.
We can get from AWS all the way down to Fortiswitch vlan interfaces but traffic does not seem to arrive on subnet the ASA is attached to. See drawing. The ASA cannot ping the Fortiswitch and Vice versa.
