Cisco ASA OSPF Administrative Distance 255

[fara.rhea]

Hi ..

My ASA run OSPF dynamic routing, I want to "clean up" route table by set AD for OSPF by 255. But in route table there is still route for it although it have AD 255.

Anyone have try this ?

BR

[cadet alain]

Hi,

maybe shutting/no shutting the interface receiving these OSPF LSAs should  make it work.

Regards.

Alain

Don't forget to rate helpful posts.

[Julio Carvajal]

Hello Fara,

Actually turning off the interface will not change anything as this is the expected behavior with the ASA.

Different from a dedicated routing device that will not install nor use a route with a AD of 255.

So you will need to use a different method to filter this routes to get installed or used by the ASA

Remember to rate all of the helpful posts

Julio

[cadet alain]

Hi Julio,

what's the use of this command then?

Would a distribute-list have the same effect as on a router?

Regards.

Alain

Don't forget to rate helpful posts.

[Julio Carvajal]

Hello Cadet,

It's going to alter the metric being shown an all of the updates to the other devices but from the ASA itself (locally) the route will still be implemented. So you can send LSU containing different LSAs but each of them will have the distant set to 255 and this as explained before on a router will be handled different,

The distribute-list does have the same behavior,

Regards,

Julio

[fara.rhea]

Hello guys ..

There are no "distribute-list" for OSPF in ASA 8.4 it just have "filter-list" to filter between area which can use to filter when ASA become ABR or ASBR. Because of that i try to use distance 255 .

BR

[Julio Carvajal]

Hello,

Yeahp... Remember that the ASA has been built in as a security box not as a routing dedicated box...

That being said the OSPF route filtering will need to be done on another box

Regards,

Julio