Cisco question: VPN + OSPF

[BobSutan]

How do you get vpn networks on an ASA to populate routes into OSPF? I read something a while back about a prefix-list & route-maps, but I can't find it.

What I want to do is have /32 routes populate OSPF as clients come in over the VPN connection. I have several VPN endpoints giving out the same /24 network, so I can't statically define routes on the internal network, hence the need for my ASAs to somehow inject the /32 routes for each client into OSPF. The clients can use any of several VPN gateways into the network, so it has to be dynamic.

 

[Rix]

What kind of VPN? There are several different ways this can be done. I'm guessing what you're looking for is some form of reverse route injection though.

Try this link for ideas;
ASA/PIX: Configure and Troubleshoot the Reverse Route Injection (RRI)

 

[Vito_Corleone]

As above, RRI is what you're looking for.

 

[BobSutan]

Thanks, looking it up now.

 

[BobSutan]

Okay, RRI gets the routes I need into the routing table, but not OSPF. It looks like I'll need a prefix-list and route-map.

 

[Vito_Corleone]

You need to redistribute into OSPF.

 

[BobSutan]

It all worked out in the end. For those who are interested:

RRI, Prefix-list with the relevant /24 subnet + le /32, a route-map calling the prefix-list, and OSPF subnet redistribution calling the route-map.