cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3485
Views
25
Helpful
15
Replies

ASA VTI VPN redistibuting Static route over EIGRP

ricardo.docchio
Level 1
Level 1

Hi everyone

 

I'm having an issue when i try to redistribute a static route that is known from a VTI interface to the EIGRP process. The route appears in the table and is working for the devices that have the ASA as gateway but when i add it to the prefix list that matches the redistribution route-map it just doesnt work as the other static routes configured for a physical or sub interface.

 

Working route: route OUTSIDE 7.7.7.7 255.255.255.255 X.X.X.X 1

Non working route: route VPN_VTI 172.23.40.0 255.255.255.0 169.254.150.3 1

FW-CORE-MULTIFI-ASA5545-SITE1/pri/act# sh run router eigrp
router eigrp 100
...
redistribute static route-map RM_REDISTRIBUCION_POR_EIGRP

 

prefix-list PL_REDISTRIBUCION_POR_EIGRP seq 40 permit 7.7.7.7/32
prefix-list PL_REDISTRIBUCION_POR_EIGRP seq 45 permit 172.23.40.0/24

 

route-map RM_REDISTRIBUCION_POR_EIGRP permit 10
match ip address prefix-list PL_REDISTRIBUCION_POR_EIGRP

 

FW-CORE-MULTIFI-ASA5545-SITE1/pri/act# sh route 172.23.40.0

Routing entry for 172.23.40.0 255.255.255.0
Known via "static", distance 1, metric 0
Redistributing via eigrp 100
Advertised by eigrp 100 route-map RM_REDISTRIBUCION_POR_EIGRP
Routing Descriptor Blocks:
* 169.254.150.3, via VPN_VTI
Route metric is 0, traffic share count is 1

 

In the "show eigrp topology" output the 172.23.40.0/24 route doesnt appear like the other one:

 

FW-CORE-MULTIFI-ASA5545-SITE1/pri/act# show eigrp topology | include 7.7.7.7
P 7.7.7.7 255.255.255.255, 1 successors, FD is 2816
FW-CORE-MULTIFI-ASA5545-SITE1/pri/act# show eigrp topology | include 172.23.40

 

On the neighbors it doesnt appear either in the eigrp topology table or routing table:

 

RT-AOFI-MULTIFI-4321-SITE1#sh ip eigrp topology | include 7.7.7.7
P 7.7.7.7/32, 1 successors, FD is 3072
RT-AOFI-MULTIFI-4321-SITE1#sh ip eigrp topology | include 172.23.40

RT-AOFI-MULTIFI-4321-SITE1#sh ip route | include 7.7.7.7
D EX 7.7.7.7
RT-AOFI-MULTIFI-4321-SITE1#sh ip route | include 172.23.40
RT-AOFI-MULTIFI-4321-SITE1#

 

ASA IOS version is 9.8(4)

Does anybody have seen this same issue? 

15 Replies 15

This is an interesting insight. +5 for sharing this with the community.

HTH

Rick
Review Cisco Networking for a $25 gift card