asa 5520 8.4.1 ospf static route redistribution.

[warriorforGod]

I am having trouble getting an asa to redistribute a route via ospf.  Here is the ospf config for the asa which should be redistributing the 10.253.46.0 network to the c2800.

ASA
router ospf 1
 network 10.253.46.0 255.255.255.0 area 0
 network 207.188.55.0 255.255.255.0 area 0
 area 0 range 10.253.46.0 255.255.255.0
 log-adj-changes
 redistribute static metric 10 subnets
C2800
router ospf 2
 log-adjacency-changes
 network 192.168.100.0 0.0.0.255 area 0
 network 207.188.55.0 0.0.0.255 area 0

Any suggestions on getting this working?

[Thotsaphon Lueangwattanaphong]

Hi,

  Your configuration looks good to me. C2800 will see static routes redistributed on ASA as O*E2 with metric 10.  One thing to be concerned, I don't see any reason to use "area range" command on ASA. You have 1 OSPF domain and 1 area. So,"are range" won't do anything for you. It has to be used on ABR.

HTH,

Toshi

[warriorforGod]

I took out the area range for good measure, but still not seeing the route get distributed to the c2800.  Any other advice?

[Thotsaphon Lueangwattanaphong]

Hi,

  Please post the output of "show ip ospf neighbor" and "show ip route" on C2800.  Please post the configuration of ASA.

Toshi

[warriorforGod]

I believe this should be the pertinent information you need for the config.  Let me know if you need something else.

show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface

216.58.249.126    1   FULL/BDR        00:00:38    207.188.55.126  GigabitEthernet0/0

207.188.37.6      1   FULL/BDR        00:00:37    192.168.100.1   GigabitEthernet0/1

asa config

interface GigabitEthernet0/0
 nameif outside
 security-level 0
 ip address 216.58.249.126 255.255.255.128

interface GigabitEthernet0/1
 nameif inside
 security-level 100
 ip address 207.188.55.126 255.255.255.0 
 ospf authentication null

router ospf 1
 network 10.253.46.0 255.255.255.0 area 0
 network 207.188.55.0 255.255.255.0 area 0
 area 0
 log-adj-changes
 redistribute static metric 10 subnets

[Thotsaphon Lueangwattanaphong]

Hi,

   Please let me see "show ip route" on C2800 and ASA. Please post part of static routes configuration on ASA as well.

Toshi 

[warriorforGod]

ASA

[Thotsaphon Lueangwattanaphong]

Hi,

  Seems C2800 has learnt some routes via 192.168.100.1. What's that device? Is 207.188.55.1 an IP assigned to Gig0/1 on C2800? Please explain a bit more about your question. What specific routes do you expect to see on C2800?  Please post a network diagram.

Toshi

[warriorforGod]

The 192.168.100.1 is a router beyond the c2800.   I want the c2800 to learn the 10.253.46.0 route from the asa.