cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2621
Views
0
Helpful
1
Replies

ASA OSPF redistribute static AND default-info orig

MATTHEW BECK
Level 1
Level 1

Hello all,

I have an ASA 7.2(2) that is currently generating a default route into my NSSA area for which it is the Internet edge. I want it to redistribute some statics too, but I'm worried about redistributing the 0.0.0.0 along with the "default" route. Am I over thinking this? The current config looks like:

int outside a.b.c.d

int inside 172.16.1.1

int dmz 192.168.1.1

router ospf 1

network 172.16.1.1 255.255.255.255 area 1

network 192.168.1.1 255.255.255.255 area 1

area 1 nssa default-info-orig

default-info orig always.

route DMZ 10.1.1.0 255.255.255.0 192.168.1.200

route outside 0.0.0.0 0.0.0.0 a.b.c.e

(Side question, why do I need both def-inf commands?)

I'd like to redistribute the static 10.1.1.0/24 available via the DMZ interface so I was thinking of adding

redis stat metric-ty 1 subnets

Will the ASA generate a "default route" as well as a static 0.0.0.0 into the area? Should I use a route-map to filter out the 0.0.0.0 on the redist static command or is this not helpful?

Any guidance you can offer is greatly appreciated.

Thanks,

Matt

1 Reply 1

Ivan Martinon
Level 7
Level 7

I don't think it will start redistributing the default route that is defined as a static route, but you can always prevent this (in the case it does) by using route maps on the redistribution command:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/qr.html#wp1767537

Review Cisco Networking for a $25 gift card