Re: OT - vrf through asa

Hi Tony

Each context can have 2 OSPF process max (basically one for inside & one for outside)

Best regards
Gilles.

> Message du 21/02/13 C 14h59
> De : "Tony Singh"
> A : "Gilles Fabre"
> Copie C : "Carlos G Mendioroz" , "Cisco certification"
> Objet : Re: OT - vrf through asa
>
> Gilles
>
> Thought so cheers will check it out...
>
> If we do have contexts still the ASA has only max 2 ospf processes, not
> scalable in that regard...?
>
> Ryan - need to have it routed bro
>
>
> On 21 February 2013 13:40, Gilles Fabre wrote:
>
> >
> > If I remember well, dynamic rouiting support in multi-context was one
> > major enhancement of 9.0 version
> > ASA.8.x supported only static routing when configured with contexts
> >
> > RD/RT won't be transmitted except you use MP-BGP
> > Contexts only allow segmentation of security domlains in relation with VRF
> > routing domains (more to be used with VRF-lite setups in my mind)
> >
> >
> >
> >
> > > Message du 21/02/13 C 14h31
> > > De : "Tony Singh"
> > > A : "Carlos G Mendioroz"
> > > Copie C : "Cisco certification"
> > > Objet : Re: OT - vrf through asa
> > >
> > > Hi Carlos
> > >
> > > The thought did cross my mind, im sure I did see something about dynamic
> > > routing being supported in multi-context mode, I may have been dreaming
> > > however as can't find nothing on this...
> > >
> > > It might not be required depending on the way you set the context's up,
> > > will check Brian's video again..
> > >
> > > Question in vrf-lite how does the RD/RT get exported? is it within the
> > ospf
> > > multicast dbd? I know with MPBGP it is transported in the extended
> > > communities value packet, confused on this bit..and would the ASA ignore
> > > the RD/RT but look at the source/dest ipv4 addr
> > >
> > > Thanks bro!
> > >
> > > Tony
> > >
> > >
> > > On 21 February 2013 12:34, Carlos G Mendioroz wrote:
> > >
> > > > You may try 2 contexts, and have different routing domains
> > > > (inbound/outbound) in each ?
> > > > -Carlos
> > > >
> > > > Tony Singh @ 21/02/2013 09:29 -0300 dixit:
> > > >
> > > >> can get this working from PE > CE > Switch > trunk > trunk > Switch >
> > CE >
> > > >> PE
> > > >>
> > > >> any solution available going through ASA say if I wanted to do IPS
> > DPI and
> > > >> other
> > > >>
> > > >>
> > > >>
> > > >>
> > > >> On 21 February 2013 12:02, Tony Singh wrote:
> > > >>
> > > >>
> > > >>> Hi
> > > >>>
> > > >>> I know ASA's are not vrf aware unless latest code supports this...
> > > >>>
> > > >>> I have customer routing tables separated by vrf's CE to PE is MPBGP,
> > and
> > > >>> IGP is OSPF vrf-lite on CE's
> > > >>>
> > > >>> Is there anyway to get the customer traffic through the ASA's
> > > >>> dynamically,
> > > >>> max OSPF processes the ASA's support is 2
> > > >>>
> > > >>> Is their any benefit in passing this traffic through the ASA's
> > > >>>
> > > >>> what would you guys do?
> > > >>>
> > > >>> Topology
> > > >>>
> > > >>> Site 1 PE > CE > ASA > Switch > trunk > trunk > Switch > ASA > CE >
> > PE
> > > >>> Site 2
> > > >>>
> > > >>> Thanks in advance
> > > >>>
> > > >>> Tony
> > > >>>
> > > >>
> > > >>
> > > >> Blogs and organic groups at http://www.ccie.net
> > > >>
> > > >> ______________________________**______________________________**
> > > >> ___________
> > > >> Subscription information may be found at:
> > > >> http://www.groupstudy.com/**list/CCIELab.html
> > > >>
> > > >>
> > > >>
> > > >>
> > > >>
> > > >>
> > > >>
> > > >>
> > > > --
> > > > Carlos G Mendioroz LW7 EQI Argentina
> > >
> > >
> > > Blogs and organic groups at http://www.ccie.net
> > >
> > > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> >
> > ___________________________________________________________
> > Qu'y a-t-il ce soir C la tC)lC) ? D'un coup d'Eil, visualisez le programme
> > sur Voila.fr http://tv.voila.fr/programmes/chaines-tnt/ce-soir.html
> >
>
Received on Thu Feb 21 2013 - 15:10:01 ART