permit rip/eigrp on inside interface of ASA?

Hi,

Is this a known issue with ASA? Eigrp and rip packets are not allowed to
enter inside interface of Transparent Firewall until explicitly permitted.

%ASA-3-106010: Deny inbound protocol 88 src inside:150.100.3.254 dst
outside:224
.0.0.10

%ASA-2-106006: Deny inbound UDP from 150.100.1.254/520 to 224.0.0.9/520 on
inter
face inside

After I enable "access-list INSIDE per ip an an" everything worked.

Although I have not got a chance to test this with Routed firewall but I see
this problem always with Transparent firewall.

Thanks

Blogs and organic groups at http://www.ccie.net
Received on Tue Jun 23 2009 - 11:20:22 ART