My topology is ---rtr1-.1---

My goal is rtr2 can reach rtr1 via OSPF routing and vice versa my problem is on ASA, I am already configuring ip address correctly, it can ping each other, and then inserting command on every router

router ospf 1
network [connected_network] area 0

I am also already inserting ACL on every ASA

access-list OUTSIDE extended permit icmp any any 
access-list OUTSIDE extended permit ospf any any 
access-group OUTSIDE in interface outside

the result show ip route in ASA2 still like below:

C is directly connected, inside
L is directly connected, inside
C is directly connected, outside
L is directly connected, outside

any command I should insert in ASA, is there a missing command?

Thanks in advance

  • Can you post both ASA complete configuration and software version?
    – JFL
    Aug 29, 2017 at 10:38
  • Have you configured OSPF so that any interfaces are included in the OSPF process? You should give us your complete configuration for your ASAs.
    – Ron Maupin
    Aug 29, 2017 at 14:17

1 Answer 1


You cannot establish OSPF neighborship between non directly connected neighbors (unless you're using a L2 tunnel). OSPF uses for it's communication. Multicast addresses in the range of 224.0.0.x have TTL=1. So once this packet reaches ASA it is simply dropped.

  • As I understand the question, OP try to configure OSPF between the two ASA which are directly connected.
    – JFL
    Aug 29, 2017 at 10:38
  • Yes I think you are right, so the issue is simply establishing OSPF neighborship between rtr and ASA.
    – manish ma
    Aug 29, 2017 at 10:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.