I'm currently practising the configuration of an ipsec tunnel between two ASAs. I'm using a routed based VPN with VTIs on both ASAs. Instead of using static routes I would like to use OSPF to advertise routes over the tunnel. Playing around with the OSPF and VTI config on the ASAs I can't see anything that suggests it can be done, not even with static OSPF neighbours. This old documentation says BGP is the only supported dynamic routing protocol, is this still this true? As I can setup OSPF to run over VTI using just Ipsec (no gre) on the likes of IOS routers. Any help will be greatly appreciated.
