topic Hi, in Network Security

ASA 9.5.2 not supporting routing via supernet route ,

egsuptac911 — Tue, 12 Mar 2019 07:24:03 GMT

the traffic is not forwarded unless i make it more specific

Can you give a specific

Philip D'Ath — Fri, 26 Feb 2016 08:09:25 GMT

Can you give a specific example?

Most ASA's have a default route yet somehow people still manage to get to more specific routes on the Internet ...

Hi Philipe,

egsuptac911 — Fri, 26 Feb 2016 20:24:53 GMT

Hi Philipe,

what i am having is that i have a route pointing to interface DMZ with 192.168.0.0/16 for all my branches , but when i try to communicate not working after a while i tried to be more specific , it worked with a route pointing to the subnet it self for example route dmz 192.168.1.0/24

Hi,

Aditya Ganjoo — Sat, 27 Feb 2016 03:37:17 GMT

Hi,

When you used the supernet route did you use a packet-tracer command to verify if it was taking the correct route ?

Regards,

Aditya

There is nothing wrong with

Philip D'Ath — Sun, 28 Feb 2016 18:46:05 GMT

There is nothing wrong with using a supernet route.

Have you got any dynamic routing protocols (or even reverse router VPN injection) running that could be injecting more specific routes?

No i do not have any other

egsuptac911 — Mon, 29 Feb 2016 10:01:28 GMT

No i do not have any other routing only static

Hi,

egsuptac911 — Mon, 29 Feb 2016 10:03:54 GMT

Hi,

no i did not use the packets tracer , only sh route to verify the routing table and it gave me the below

sh route 192.168.17

Routing entry for 192.168.0.0 255.255.0.0, supernet
Known via "static", distance 1, metric 0
Routing Descriptor Blocks:
* 10.168.11.1, via x
Route metric is 0, traffic share count is 1

Hi,

Aditya Ganjoo — Mon, 29 Feb 2016 15:44:07 GMT

Hi,

Please share the output for show asp table routing.

Regards,

Aditya

Have you configured policy

Philip D'Ath — Mon, 29 Feb 2016 18:43:15 GMT

Have you configured policy based routing?

Hi,

Lukas Urbanec — Tue, 01 Mar 2016 13:29:18 GMT

Hi,

What is your ASA version? Do you have NAT configured?