cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
352
Views
0
Helpful
1
Replies
BVC
Beginner
Beginner

Running OSPF over ASA Ipsec VTI

I'm currently practising the configuration of an ipsec tunnel between two ASAs. I'm using a routed based VPN with VTIs on both ASAs. Instead of using static routes I would like to use OSPF to advertise routes over the tunnel. Playing around with the OSPF and VTI config on the ASAs I can't see anything that suggests it can be done, not even with static OSPF neighbours. This old documentation says BGP is the only supported dynamic routing protocol, is this still this true? As I can setup OSPF to run over VTI using just Ipsec (no gre) on the likes of IOS routers. Any help will be greatly appreciated. 

1 ACCEPTED SOLUTION

Accepted Solutions
Rob Ingram
VIP Mentor

@BVC BGP is still the only dynamic routing protocol supported on ASA when using a VTI, as of the version 9.16.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa916/configuration/vpn/asa-916-vpn-config/vpn-vti.html

 

 

 

View solution in original post

1 REPLY 1
Rob Ingram
VIP Mentor

@BVC BGP is still the only dynamic routing protocol supported on ASA when using a VTI, as of the version 9.16.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa916/configuration/vpn/asa-916-vpn-config/vpn-vti.html

 

 

 

Create
Recognize Your Peers
Content for Community-Ad