OSPF Between Firewall Cluster and HSRP Pair

[Agent2014]

Hi All

I am reading in to a network at the moment and trying get my head around how OSPF is working between a firewall cluster and 2 6500 switches with HSRP.

When I look at the routing table on both firewalls they are learning all the internal routes from the core however the next hop for those networks is the physical IP address of the HSRP standby device.

Is this a problem?  Should it not be the HSRP address?  Whats the best way to debug this?

thanks all

[Kelvin Willacey]

That is correct the next hop would not be the HSRP VIP. However I am guessing it should probably be using the active HSRP IP as its next hop but without knowing your network I can't say for certain that this setup is a problem.

If you were doing static routing on the firewall then the next hop would be the HSRP VIP in order to provide for redundancy. In your case redundancy is achieved with OSPF.