cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


2268
Views
5
Helpful
4
Replies
Highlighted

is there NSF awareness in the ASA OSPF implementation

The title says it all, is there NSF awareness in the ASA OSPF implementation ?  The documentation that I read
does not give any clue about it.

In standard (IETF) terminology, this is also called Graceful Restart “Helper Mode” (RFC 3623).

Anybody who has the answer?  Is the answer documented?

The context of the question:

Customer XXXX has an ASA firewall and runs OSPF on its inside interface

with an older Cat6k.  This Cat6k is now replaced by a VSS.

It would be nice to use NSF on the VSS, but it depends on

NSF awareness in the ASA OSPF implementation.  So is this implemented
on ASA?

Patrick De Muynck

Everyone's tags (4)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: is there NSF awareness in the ASA OSPF implementation

Unfortunately ASA is not NSF aware at this stage.

There is a feature request on stateful failover support on ASA, bugID: CSCsu90386:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsu90386

However, at this stage, there is no date on when this will be released. You can save the bug to your CCO account and you will be notified when there is any update on this feature request.

4 REPLIES 4
Cisco Employee

Re: is there NSF awareness in the ASA OSPF implementation

Unfortunately ASA is not NSF aware at this stage.

There is a feature request on stateful failover support on ASA, bugID: CSCsu90386:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsu90386

However, at this stage, there is no date on when this will be released. You can save the bug to your CCO account and you will be notified when there is any update on this feature request.

Colleagues!Will this issue

Colleagues!

Will this issue fix anytime? There's really no way to use Nexus with ISSU and ASA when they interconnect by OSPF. ASA sees the neighbor (N7K) but don't understand that it in switchover mode (N7K has 2 supervisor moduls) and there are no routes updates from neighbor, so all traffic throught ASA drops :((((

Contributor

Version 9.3 supports NSF. 

Version 9.3 supports NSF.  Note you must choose between Cisco or IETF.

 

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/release/notes/asarn93.html#28393

Re: is there NSF awareness in the ASA OSPF implementation

Thanks ...