topic Re: Cisco ASA OSPF load sharing algorithm in Network Security

Cisco ASA OSPF load sharing algorithm

sprosons — Wed, 02 Nov 2022 14:13:30 GMT

I have a Cisco ASA connected via a single VPC to 2 Nexus switches. Each nexus switch is advertising the same route with equal cost via OSPF. Does anyone know the command to show the load balancing algorithm. It seems to be working on a per packet basis but I would like to change it to keep the source ip address sticky on one next hop. All odd to one next-hop and all even to the other next hop or any other hash that will guarantee a symmetrical path.

Thanks Steve

Re: Cisco ASA OSPF load sharing algorithm

balaji.bandi — Wed, 02 Nov 2022 14:21:32 GMT

in geneally equally load-balance, you looking for specific IP to go to one of the nexus switch ?

Re: Cisco ASA OSPF load sharing algorithm

MHM Cisco World — Wed, 02 Nov 2022 14:30:28 GMT

you meaning that the ASA have only one connect link to each of NSK ??
if Yes, then
check if ASA see both NSK as OSPF neighbor

also keep notice that ASA dont support load-balance like Router, so if you do show route in ASA you will see only one path not two equal path

Re: Cisco ASA OSPF load sharing algorithm

sprosons — Wed, 02 Nov 2022 15:53:32 GMT

I'm looking for the default ECMP algorithm and any options to change it.

Thanks Steve

Re: Cisco ASA OSPF load sharing algorithm

MHM Cisco World — Wed, 02 Nov 2022 16:19:21 GMT

I will make double check here, update you later today

Re: Cisco ASA OSPF load sharing algorithm

sprosons — Wed, 02 Nov 2022 16:38:05 GMT

Thanks, just to expand a little

I have two clients wanting access to the internet via two routes. I want client 1 to always have the same public ip to help with cookies etc. please see attached text file

Thanks Steve

Re: Cisco ASA OSPF load sharing algorithm

sprosons — Fri, 04 Nov 2022 09:55:08 GMT

If someone could suggest a deep dive on Cisco ASA OSPF routing that would be much appreciated.

Thanks Steve