ASA 8.4.2 - CLEAR ROUTE NOT WORKING

mile.ljepojevic · ‎07-09-2011

After command clear route, all timers just continue, there is not actually clearing the routing table... This is happening on two different boxes: pair of ASA 5520 and one 5505 ASA... I presume it is happening on all others too, but I don't have this release installed anywhere else...

It seems as a major bug. I hope someone here will shed some light on this:

ciscoasa# sho route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is 192.168.254.100 to network 0.0.0.0

D 192.168.102.1 255.255.255.255

[90/156160] via 192.168.254.100, 0:35:05, outside

C 192.168.254.0 255.255.255.128 is directly connected, outside

C 192.168.1.0 255.255.255.0 is directly connected, inside

D 192.168.100.1 255.255.255.255

[90/156160] via 192.168.254.100, 0:35:05, outside

D*EX 0.0.0.0 0.0.0.0 [170/28160] via 192.168.254.100, 0:35:05, outside

ciscoasa# clear route

ciscoasa# clear route outside

ciscoasa# sho route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is 192.168.254.100 to network 0.0.0.0

D 192.168.102.1 255.255.255.255

[90/156160] via 192.168.254.100, 0:35:16, outside

C 192.168.254.0 255.255.255.128 is directly connected, outside

C 192.168.1.0 255.255.255.0 is directly connected, inside

D 192.168.100.1 255.255.255.255

[90/156160] via 192.168.254.100, 0:35:16, outside

D*EX 0.0.0.0 0.0.0.0 [170/28160] via 192.168.254.100, 0:35:16, outside

ciscoasa#

Parminder Sian · ‎07-12-2011

Hi,

I tried the command "clear route outside" on ASA version 8.4(1) for a static route, same issue, the route stay put.

Using "no" in front of route command removes the route though, however in your case it's eigrp, not static routes so using "no" for every single route wont be good idea. It sure seems like a BUG.

Will keep you posted on my findings.

Parminder Sian

christianschuster · ‎09-26-2016

Same Problem on ASA 5515 with Cisco Adaptive Security Appliance Software Version 9.4(3)8