topic Re: is there NSF awareness in the ASA OSPF implementation in Network Security

is there NSF awareness in the ASA OSPF implementation

patrick.demuynck — Mon, 11 Mar 2019 20:06:54 GMT

The title says it all, is there NSF awareness in the ASA OSPF implementation ? The documentation that I read
does not give any clue about it.

In standard (IETF) terminology, this is also called Graceful Restart “Helper Mode” (RFC 3623).

Anybody who has the answer? Is the answer documented?

The context of the question:

Customer XXXX has an ASA firewall and runs OSPF on its inside interface

with an older Cat6k. This Cat6k is now replaced by a VSS.

It would be nice to use NSF on the VSS, but it depends on

NSF awareness in the ASA OSPF implementation. So is this implemented
on ASA?

Patrick De Muynck

Re: is there NSF awareness in the ASA OSPF implementation

Jennifer Halim — Tue, 15 Mar 2011 11:12:20 GMT

Unfortunately ASA is not NSF aware at this stage.

There is a feature request on stateful failover support on ASA, bugID: CSCsu90386:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsu90386

However, at this stage, there is no date on when this will be released. You can save the bug to your CCO account and you will be notified when there is any update on this feature request.

Re: is there NSF awareness in the ASA OSPF implementation

patrick.demuynck — Tue, 15 Mar 2011 11:24:12 GMT

Thanks ...

Colleagues!Will this issue

Roman Polyachkov — Mon, 21 Jul 2014 15:04:58 GMT

Colleagues!

Will this issue fix anytime? There's really no way to use Nexus with ISSU and ASA when they interconnect by OSPF. ASA sees the neighbor (N7K) but don't understand that it in switchover mode (N7K has 2 supervisor moduls) and there are no routes updates from neighbor, so all traffic throught ASA drops :((((

Version 9.3 supports NSF.

johnnylingo — Wed, 20 Aug 2014 00:56:22 GMT

Version 9.3 supports NSF. Note you must choose between Cisco or IETF.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/release/notes/asarn93.html#28393