is there NSF awareness in the ASA OSPF implementation

[patrick.demuynck]

The title says it all, is there NSF awareness in the ASA OSPF implementation ?  The documentation that I read
does not give any clue about it.

In standard (IETF) terminology, this is also called Graceful Restart “Helper Mode” (RFC 3623).

Anybody who has the answer?  Is the answer documented?

The context of the question:

Customer XXXX has an ASA firewall and runs OSPF on its inside interface

with an older Cat6k.  This Cat6k is now replaced by a VSS.

It would be nice to use NSF on the VSS, but it depends on

NSF awareness in the ASA OSPF implementation.  So is this implemented
on ASA?

Patrick De Muynck

[Jennifer Halim · Accepted solution]

Unfortunately ASA is not NSF aware at this stage.

There is a feature request on stateful failover support on ASA, bugID: CSCsu90386:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsu90386

However, at this stage, there is no date on when this will be released. You can save the bug to your CCO account and you will be notified when there is any update on this feature request.

[Roman Polyachkov]

Colleagues!

Will this issue fix anytime? There's really no way to use Nexus with ISSU and ASA when they interconnect by OSPF. ASA sees the neighbor (N7K) but don't understand that it in switchover mode (N7K has 2 supervisor moduls) and there are no routes updates from neighbor, so all traffic throught ASA drops :((((

[johnnylingo]

Version 9.3 supports NSF.  Note you must choose between Cisco or IETF.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/release/notes/asarn93.html#28393

[patrick.demuynck]

Thanks ...