Cisco ASA to Palo Alto Site to Site IPSEC VPN Failover

  Today I’m going to show you exactly how to configure IPSEC failover between a Cisco ASA and A Palo Alto. Network: 1 ASA, 2 wan circuits 1 Palo, 1 wan circuit     Let’s assume at the ASA side 20.0.3.2 is our primary WAN circuit and 20.0.4.2 is the backup circuit we have just …

Cisco ASA 5506-X Complete Wan Failover Guide

The situation: Company XYZ has decided to invest in a new internet connection, this connection should be used as a backup. The new WAN connection has been plugged into interface g0/8 of our 5506-X and we are ready to begin the configuration. The solution from the CLI:   Go into the interface Conf t Int …

Filtering OSPF Routes Part 2

Previously in part 1 we discussed route-filtering using the “filter-list” command in OSPF. That was limited to our ABR and ASBRs. With distribute-lists we are able to filter OSPF routes from making to the routing information base/routing table (RIB). If you recall our topology from part 1, well I’ve just added R4 to that. If …

Filtering OSPF Routes Part 1

Filtering routes is a little more complicated when we are talking about OSPF. In EIGRP it was simple. Since EIGRP is an advanced distance vector routing protocol, each router doesn’t have a perfect picture of the routing domain, it just has an idea of what’s behind our neighbor. OSPF is of course different. Each OSPF area …

Basic EIGRP Manual Summarization and Null0

EIGRP Summarization is used to simplify our routing table and advertise a summary instead of a bunch of prefixes that look the same.     My current network topology is simple, I’ve basically configured EIGRP, then used the “network 0.0.0.0” command to advertise everything and form neighbors. Here is what my routing table looks like …

Basic EIGRP Auto-Summary

In the above topology I have auto-summary enabled on R1 and R2. R3 does not have auto-summary. The result of this config is R1 and R2 will actually advertise the 10.0.0.0/8 network, since both of those 10. networks reside in that classful boundary.  Since their only neighbor is R3, R3 will have a duplicate route …