06-11-2005 07:39 PM - edited 02-21-2020 01:49 PM
How can setup OSPF Dynamic Routing over VPN ?pix vpn tunnel has not ip address.pix is only run ospf on physical interface,how to setup ospf?
06-13-2005 08:44 PM
You're thinking of a GRE/IPsec setup in IOS. With a PIX you just set up the interface to be a point-to-point OSPF interface, then manually define the remote OSPF neighbour (the IPSec peer). You then just add a line to your crypto access-list that includes traffic between the two OSPF neighbours, that way you ensure the OSPF unicast traffic goes over the tunnel.
See http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/cref_txt/mr.htm#wp1423803 for details.
06-13-2005 10:32 PM
So I can not setup full-mesh vpn or spoke-and-hub vpn
if only use pix devices.
Another question,point-to-point OSPF neighbour's ip address is remote pix inside interface?
06-14-2005 06:01 PM
i mean not dvpn to setup full-mesh vpn
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide