Subnet between ASA's and ASR's

[jennyjohn]

I need to connect ASA firewalls with my ASR's via a Layer 2 switch (as shown in the attached diagram). I am confused about the 192.168.45.16/29 subnet which I was planning to use between the ASA & ASR's, will it work? On the ASA what IP will I give as the next hop IP for inside routes? Will there be any issues if both the ASR's are in the same subnet?

We are running OSPF routing protocol between the ASR and the Core Switch. The ASA's are not part of our network, so we cannot run OSPF between the ASA and ASR.

Thanks in advance.

[Jerry Ye]

Yes, it will work.

On the ASA, you need to configure 2 equal cost route for the internal network to point to 192.168.45.19 and 192.168.45.20.

On both ASRs, you need to advertise use static route to advertise the outside network with the next hop of 192.168.45.17 into the OSPF.

HTH,

jerry