[c-nsp] ASA / EIGRP / Redundant Interfaces

[Peter Rathlev]

On Thu, 2009-04-30 at 11:39 -0500, Jason Link wrote:
> Additionally, I'm not sure HSRP would help me in a situation like this,
> since the way I understand it the ASA will still learn both routers
> "real" IP address and will form a neighbor to each one.  I would like to
> avoid calling out the neighbor specifically, if I can help it.

Yes of course, if the ASA has to do EIGRP my suggestion is irrelevant. I
overlooked that somewhat since I'm not used to thinking about having
firewalls do dynamic routing. :-)

The HSRP thing would of course be with the ASA not participating in the
EIGRP. On the ASA side you would use static routes pointing at the HSRP
IP. On the router side you would use static routes pointing at the ASA
primary IP.

Regards,
Peter