A network administrator is implementing OSPF, where there are two exit points. Each exit point has a stateful, application inspection firewall to implement company policies.
What would the best practice be to ensure that one firewall will see both directions of the traffic, preventing asynchronous connections in the network?
External Type 2 routes are generally preferred over External Type 1 routes in OSPF for scenarios where there is a need to control the routing of traffic through firewalls or similar devices. Using External Type 2 routes with a different initial cost value for each ASBR ensures that one path is preferred over the other, forcing all traffic through one exit point and thereby ensuring that the firewall will see both directions of the traffic. This approach prevents asynchronous connections, which can occur if different paths are taken for the incoming and outgoing traffic.
Answer is D: Ensure traffic via a FW is seen in both directions - E2 with appropriate seed metric to prefer one primary path.
Page 391 Study Guide: Ensure traffic via a FW is seen in both directions - E2 with appropriate seed metric to prefer one primary path.
Correct Answer
Correct answer is: D