Re: OT - vrf through asa

Gilles

Thought so cheers will check it out...

If we do have contexts still the ASA has only max 2 ospf processes, not
scalable in that regard...?

Ryan - need to have it routed bro

On 21 February 2013 13:40, Gilles Fabre <fabre.gilles_at_voila.fr> wrote:

>
> If I remember well, dynamic rouiting support in multi-context was one
> major enhancement of 9.0 version
> ASA.8.x supported only static routing when configured with contexts
>
> RD/RT won't be transmitted except you use MP-BGP
> Contexts only allow segmentation of security domlains in relation with VRF
> routing domains (more to be used with VRF-lite setups in my mind)
>
>
>
>
> > Message du 21/02/13 ` 14h31
> > De : "Tony Singh"
> > A : "Carlos G Mendioroz"
> > Copie ` : "Cisco certification"
> > Objet : Re: OT - vrf through asa
> >
> > Hi Carlos
> >
> > The thought did cross my mind, im sure I did see something about dynamic
> > routing being supported in multi-context mode, I may have been dreaming
> > however as can't find nothing on this...
> >
> > It might not be required depending on the way you set the context's up,
> > will check Brian's video again..
> >
> > Question in vrf-lite how does the RD/RT get exported? is it within the
> ospf
> > multicast dbd? I know with MPBGP it is transported in the extended
> > communities value packet, confused on this bit..and would the ASA ignore
> > the RD/RT but look at the source/dest ipv4 addr
> >
> > Thanks bro!
> >
> > Tony
> >
> >
> > On 21 February 2013 12:34, Carlos G Mendioroz wrote:
> >
> > > You may try 2 contexts, and have different routing domains
> > > (inbound/outbound) in each ?
> > > -Carlos
> > >
> > > Tony Singh @ 21/02/2013 09:29 -0300 dixit:
> > >
> > >> can get this working from PE > CE > Switch > trunk > trunk > Switch >
> CE >
> > >> PE
> > >>
> > >> any solution available going through ASA say if I wanted to do IPS
> DPI and
> > >> other
> > >>
> > >>
> > >>
> > >>
> > >> On 21 February 2013 12:02, Tony Singh wrote:
> > >>
> > >>
> > >>> Hi
> > >>>
> > >>> I know ASA's are not vrf aware unless latest code supports this...
> > >>>
> > >>> I have customer routing tables separated by vrf's CE to PE is MPBGP,
> and
> > >>> IGP is OSPF vrf-lite on CE's
> > >>>
> > >>> Is there anyway to get the customer traffic through the ASA's
> > >>> dynamically,
> > >>> max OSPF processes the ASA's support is 2
> > >>>
> > >>> Is their any benefit in passing this traffic through the ASA's
> > >>>
> > >>> what would you guys do?
> > >>>
> > >>> Topology
> > >>>
> > >>> Site 1 PE > CE > ASA > Switch > trunk > trunk > Switch > ASA > CE >
> PE
> > >>> Site 2
> > >>>
> > >>> Thanks in advance
> > >>>
> > >>> Tony
> > >>>
> > >>
> > >>
> > >> Blogs and organic groups at http://www.ccie.net
> > >>
> > >> ______________________________**______________________________**
> > >> ___________
> > >> Subscription information may be found at:
> > >> http://www.groupstudy.com/**list/CCIELab.html
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > > --
> > > Carlos G Mendioroz LW7 EQI Argentina
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> >
> >
> >
> >
> >
> >
>
> ___________________________________________________________
> Qu'y a-t-il ce soir ` la tili ? D'un coup d'il, visualisez le programme
> sur Voila.fr http://tv.voila.fr/programmes/chaines-tnt/ce-soir.html

Blogs and organic groups at http://www.ccie.net
Received on Thu Feb 21 2013 - 13:59:01 ART