Re: OT - vrf through asa

From: Carlos G Mendioroz <tron_at_huapi.ba.ar>
Date: Thu, 21 Feb 2013 11:02:33 -0300

Multicontext and failover are different beasts, that can be used alone,
or in tandem for active/active.

The ASA will now nothing of BGP and MP-BGP. Just two routing domains.
Why do you care it's only 2 of them ?

-Carlos

Ryan West @ 21/02/2013 10:37 -0300 dixit:
> Have you considered transparent? Multicontext assumes two ASA's that support active active. Not sure it's possible with 1 ASA.
>
> Sent from handheld.
>
> On Feb 21, 2013, at 8:30 AM, "Tony Singh" <mothafungla_at_gmail.com> wrote:
>
>> Hi Carlos
>>
>> The thought did cross my mind, im sure I did see something about dynamic
>> routing being supported in multi-context mode, I may have been dreaming
>> however as can't find nothing on this...
>>
>> It might not be required depending on the way you set the context's up,
>> will check Brian's video again..
>>
>> Question in vrf-lite how does the RD/RT get exported? is it within the ospf
>> multicast dbd? I know with MPBGP it is transported in the extended
>> communities value packet, confused on this bit..and would the ASA ignore
>> the RD/RT but look at the source/dest ipv4 addr
>>
>> Thanks bro!
>>
>> Tony
>>
>>
>> On 21 February 2013 12:34, Carlos G Mendioroz <tron_at_huapi.ba.ar> wrote:
>>
>>> You may try 2 contexts, and have different routing domains
>>> (inbound/outbound) in each ?
>>> -Carlos
>>>
>>> Tony Singh @ 21/02/2013 09:29 -0300 dixit:
>>>
>>>> can get this working from PE > CE > Switch > trunk > trunk > Switch > CE >
>>>> PE
>>>>
>>>> any solution available going through ASA say if I wanted to do IPS DPI and
>>>> other
>>>>
>>>>
>>>>
>>>>
>>>> On 21 February 2013 12:02, Tony Singh <mothafungla_at_gmail.com> wrote:
>>>>
>>>>
>>>>> Hi
>>>>>
>>>>> I know ASA's are not vrf aware unless latest code supports this...
>>>>>
>>>>> I have customer routing tables separated by vrf's CE to PE is MPBGP, and
>>>>> IGP is OSPF vrf-lite on CE's
>>>>>
>>>>> Is there anyway to get the customer traffic through the ASA's
>>>>> dynamically,
>>>>> max OSPF processes the ASA's support is 2
>>>>>
>>>>> Is their any benefit in passing this traffic through the ASA's
>>>>>
>>>>> what would you guys do?
>>>>>
>>>>> Topology
>>>>>
>>>>> Site 1 PE > CE > ASA > Switch > trunk > trunk > Switch > ASA > CE > PE
>>>>> Site 2
>>>>>
>>>>> Thanks in advance
>>>>>
>>>>> Tony
>>>>
>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> ______________________________**______________________________**
>>>> ___________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/**list/CCIELab.html<http://www.groupstudy.com/list/CCIELab.html>
>>> --
>>> Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>

-- 
Carlos G Mendioroz  <tron_at_huapi.ba.ar>  LW7 EQI  Argentina
Blogs and organic groups at http://www.ccie.net
Received on Thu Feb 21 2013 - 11:02:33 ART

This archive was generated by hypermail 2.2.0 : Fri Mar 01 2013 - 07:57:58 ART