Route Redistribution for BGP and OSPF

[Steven Williams]

I have a configuration of:

(PE Router) ------ (CE Router) ------ (Nexus 5k) ------ (ASA5525-X)

The PE, CE, and Nexus are all participating in BGP, when my VPN traffic hits the ASA I have to have static routes configured to all my WAN sites for them to be able to access these sites. Can I run OSPF on the inside of the 5K and redistribute BGP routes into OSPF. Then make my ASA an OSPF neighbor and get all the route information so that I do not have to configure static routes on the ASA?                 

[Bilal Nawaz]

Yes, from the nexus5k you can redistribute BGP into OSPF so the ASA will know the routes to get to your other sites - once you have an adjacency between the 5k and the ASA. You shouldn't need to add static routes in this case.

You may not want all your bgp routes to be learned by the ASA, hence you can filter with route-map.

Hope this helps.

Please rate useful posts and remember to mark any solved questions as answered. Thank you.

[Steven Williams]

Well I guess I wont be able to run OSPF because my uplinks to the ASA are not Layer 3 and with the Nexus Peer-Link you are not suppose to route over the peer link which this process would cause.

[Bilal Nawaz]

Hello, your uplinks do not have to be layer 3, they can be layer 2 but create separate SVI's that are dedicated for interchanging routes. Since its only layer 2 being presented on the trunk/port-channel, I don't see how the layer 3 will be traversing the peer-links? Its only downstream from your nexus to the ASA, via point-to-point adjacency.

How is it being routed now - must be using some sort of layer 3 transport?

Please rate useful posts and remember to mark any solved questions as answered. Thank you.

[Steven Williams]

Nexus 5ks are using a vPC to a 2960 stack running on vlan 105, ASA connects to 2960 stack using LACP, also vlan 105.