How to show detailed routing info on ASA

[NickNac79]

Hi All,

I want to look at the details of a specific route on an ASA... e.g. on an IOS device I can do a:

DBH2234#sh ip route 10.10.10.0

Routing entry for 10.10.10.0/25

  Known via "ospf 1", distance 110, metric 1100

  Tag 299, type extern 1

  Last update from 10.10.4.87 on GigabitEthernet1/0/41, 00:13:05 ago

  Routing Descriptor Blocks:

  * 10.10.4.87, from 10.10.4.7, 00:13:05 ago, via GigabitEthernet1/0/41

      Route metric is 1100, traffic share count is 1

      Route tag 299

I can see route metric, OSPF tag, distance of the RP etc.  However when I do this on an ASA, all I get is a summary:

FW3_INNER# sh route INSIDE 10.10.10.0

<snip>

Gateway of last resort is not set

O E1 10.10.10.0 255.255.255.128 [110/200] via 10.10.4.129, 0:00:44, INSIDE

Is there any way to get a more detailed view, like IOS?

If not, how can I see the OSPF tag on a given route?

Many Thanks,

Nick

[varrao]

Hi Nick,

Not that detailed but there are a couple of commands that you can check on the ASA:

show route

show asp table routing

Here are teh codes that would help you:

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

       * - candidate default, U - per-user static route, o - ODR

       P - periodic downloaded static route

Eg:

So you will see an "O" in front of the route if it is learnt through OSPF,

O E1 10.10.10.0 255.255.255.128 [110/200] via 10.10.4.129, 0:00:44, INSIDE

Hope that helps.

Thanks,

Varun

[NickNac79]

Hi Varun,

Thanks for replying, unfortunately these don't tell me the OSPF tag on a route.... 

I think the only way I'm going to get this info is to dig in the OSPF database, which isn't ideal as something being in the DB doesn't necessarily mean it is in the routing table :-(

Unless anyone knows of a way to veiw the OSPF tag on a route in the RIB?

Cheers,

Nick

[manish arora]

Hi Nick,

there are bunch of OSPF commands on ASA that will show you the TAG associated with the Route , please check out the following Link :-

http://www.cisco.com/en/US/docs/security/asa/asa70/command/reference/s.html#wp1518345

Manish

[NickNac79]

Hi Manish,

Thanks but that's just pulling info out of the OSPF DB, which may or may not be the information that was used to populate the RIB.

e.g. If OSPF recieves two LSAs for the same prefix, selects one and puts it in the RIB, I've no way of knowing from the OSPF DB which one it is, what the advertising router was, or in the event of multiple OSPF processes running, which process it came from...

Not without going through 5 or 6 different OSPF Database screens and doing the calculations myself, which is very labour intensive.

Plus intra-area and inter-area routes don't appear in the OSPF databse at all! :-)

I was looking for some equivalent to the IOS show ip route command, but I'm beginning to think that it may not exist on ASA :-/

Nick