11-29
Cisco ASDM User Guide
OL-16647-01
Chapter 11 Configuring Dynamic And Static Routing
Dynamic Routing
Configuring EIGRP
To configure EIGRP routing on the Security Appliance, perform the following steps:
Step 1 Go to the Configuration > Device Setup > Routing > EIGRP area of the ASDM interface.
Step 2 Enable the EIGRP routing process on the Setup > Process Instances tab. See Process Instances,
page 11-30 for more information.
Step 3 (Optional) Configure the EIGRP routing process parameters. Click Advanced on the Setup > Process
Instances tab.
You can configure the EIGRP routing process as a stub routing process, disable automatic route
summarization, define the default metrics for redistributed routes, change the administrative distances
for internal and external EIGRP routes, configure a static router ID, and enable or disable the logging of
adjacency changes. See Edit EIGRP Process Advanced Properties, page 11-31 for more information.
Step 4 Define the networks and interfaces that will participate in EIGRP routing on the Setup > Networks tab.
See Networks, page 11-32 for more information.
Directly-connected and static networks that fall within the defined networks are advertised by the
security appliance. Additionally, only interfaces with an IP address that fall within the defined networks
participate in the EIGRP routing process.
If you have an interface that you do not want to participate in EIGRP routing, but that is attached to a
network that you want advertised, configure a network entry on the Setup > Networks tab that covers the
network the interface is attached to, and then configure that interface as a passive interface to prevent
the interface from sending or receiving EIGRP updates. Interfaces configured as passive do not send or
receive EIGRP updates. See Passive Interfaces, page 11-33 for more information.
Step 5 (Optional) Define route filters on the Filter Rules pane. Route filtering provides more control over the
routes that are allowed to be sent or received in EIGRP updates. See Filter Rules, page 11-34 for more
information.
Step 6 (Optional) Define route redistribution on the Redistribution pane.
You can redistribute routes discovered by RIP and OSPF into the EIGRP routing process. You can also
redistribute static and connected routes into the EIGRP routing process. You do not need to redistribute
static or connected routes if they fall within the range of a network configured on the Setup > Networks
tab. See Redistribution, page 11-36 for more information.
Step 7 (Optional) Define static EIGRP neighbors on the Static Neighbor pane.
EIGRP hello packets are sent as multicast packets. If an EIGRP neighbor is located across a
nonbroadcast network, such as a tunnel, you must manually define that neighbor. When you manually
define an EIGRP neighbor, hello packets are sent to that neighbor as unicast messages. See Static
Neighbor, page 11-37 for more information.
Step 8 (Optional) Define summary addresses on the Summary Address pane.
You need to manually define summary addresses if you want to create summary addresses that do not
occur at a network number boundary or if you want to use summary addresses on a security appliance
with automatic route summarization disabled. See Summary Address, page 11-38 for more information
about defining summary addresses. See Edit EIGRP Process Advanced Properties, page 11-31 for
information about enabling and disabling automatic route summarization.
Step 9 (Optional) Define interface-specific EIGRP parameters on the Interfaces pane. These parameters
include EIGRP message authentication, hold time, hello interval, delay metric, and the use of
split-horizon. See Interface, page 11-35 for more information.