06-11-2018 05:52 AM - edited 02-21-2020 07:51 AM
Hi ,
Noticed strange issue on ASA 5585-X SSP20.
Connections on ASA stays active after static route is removed from ASA, and then traffic is droped .
Only when i cleared connections traffic started to flow how it should , until then traffic was dropped.
Version on ASA is 9.7(1)8 .
Someone noticed similar problem ?
KR
VZ
06-11-2018 08:01 AM - edited 06-11-2018 08:01 AM
Hi,
Do you have any track on the route? If the route is down because your interface is down, I don't see any reason for the connections to remain in the conn table.
If the route is not removed because of an interface down reason, I'd look at this:
-----------------------------------
Routing convergence & connection timers
(config)#timeout floating-conn 0:00:00
(config)#timeout conn-holddown 0:00:15
timeout floating-conn hh:mm:ss—When multiple routes exist to a network with different metrics, the ASA uses the one with the best metric at the time of connection creation. If a better route becomes available, then this timeout lets connections be closed so a connection can be reestablished to use the better route. The default is 0 (the connection never times out). To make it possible to use better routes, set the timeout to a value between 0:0:30 and 1193:0:0.
timeout conn-holddown hh:mm:ss—How long the system should maintain a connection when the route used by the connection no longer exists or is inactive. If the route does not become active within this holddown period, the connection is freed. The purpose of the connection holddown timer is to reduce the effect of route flapping, where routes might come up and go down quickly. You can reduce the holddown timer to make route convergence happen more quickly. The default is 15 seconds, the range is 00:00:00 to 00:00:15.
-----------------------------------
Thanks,
Octavian
06-12-2018 01:25 AM
Hi ,
No , no , no interface down , i did not say that .
When removing static route.
06-19-2018 01:28 AM
Noone ?
06-19-2018 01:41 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide