Monday, December 17, 2018

Metro E - OSPF between ASAs

I am working on a fresh Comcast Metro-E setup and would like to do this without statics and go right into OSPF.

Site A (Headquarters) has 3 subnets that need to be talked to over this connection while Site B will just pass a /24 office subnet back.

Both offices are setup with a ASA gateway - router - LAN

Site A

192.168.1.0/24

192.168.2.0/24

192.168.3.0/24

Site B

192.168.4.0/24

-------

Would the below config work for what I am looking to do? Sorry if more info is needed was just trying to make it quick/clean as possible. Thanks in advance.

Site A - ASA5545 OSPF config

router ospf 1
router id 172.20.1.1
network 192.168.1.0 255.255.255.0 area 0

network 192.168.2.0 255.255.255.0 area 0

network 192.168.3.0 255.255.255.0 area 0
!
interface GigabitEthernet0/4
nameif MAN
security-level 100
ip address 172.20.1.1 255.255.255.128
ospf authentication message-digest
ospf message-digest-key 1 md5 cisco
!

access-list acl_MAN extended permit ip any4 any4
access-group acl_MAN in interface MAN

------

Site B ASA5506

router ospf 1
router id 172.20.1.2
network 192.168.4.0 255.255.255.0 area 1
!
interface GigabitEthernet0/4
nameif MAN
security-level 100
ip address 172.20.1.2 255.255.255.128
ospf authentication message-digest
ospf message-digest-key 1 md5 cisco
no shutdown
!
access-list acl_MAN extended permit ip any4 any4
access-group acl_MAN in interface MAN



No comments:

Post a Comment