EIGRP - FD is inaccessible when re-distribution

[mguzman4158]

Hello all,

FW-----OSPF--->L3switch----redistribute--OSPF into EIGRP ----->WAN router---->dist BGP

The firewall is advertising 10.10.10.1/32 to my l3 switch via ospf, then I want to redistribute that route to my wan router via eigrp 1.  WAN router is not seeing the route, if I do a "show ip eigrp top | i 10.  in my l3 switch I get the following"

P 10.10.10.2/32, 0 successors, FD is Inaccessible

show ip roure ospf

O E1    10.10.10.2 [110/2] via firewall, 05:32:36, Vlanxx

router eigrp 1
redistribute static
redistribute eigrp 2 metric 128 23000 255 1 1500 route-map WDSin
redistribute ospf 1 metric 100 1 255 1 1500 route-map DMZin

I don't understand why my l3 switch is showing FD inaccessible and not redistributing the route to my wan router.

Thank you very much in advance for any imput.....

Cheers!

[Reza Sharifi · Accepted solution]

Hi,

The 10.10.10.2 is known by OSPF which has an admin of 110 once it is redistributed in to EIGRP it becomes on external EIGRP route which has an admin distance of 170.  So the route is still known by OSPF since it has a lower AD.  Try manipulating EIGRP external admin distance to some thing lower the 110 and test again.

HTH

Reza

[m.lammerse · Accepted solution]

It could be that the DMZin route-map is filtering this route. Could you post its configuration and check please?

HTH

Marcel

[Giuseppe Larosa]

Hello Mguzman4158,

the firewall injects an OSPF O E1 external route in OSPF domain not an internal route.

In order to redistribute it from OSPF into EIGRP you need to specify route-type external1 in the redistribution command

By default only internal OSPF routes ( O or  O IA ) are redistributed into another protocol

Hope to help

Giuseppe

[m.lammerse]

It looks like there are two things going on here:

1. 10.10.10.2/32 shows up with an FD inaccessible on your L3 switch

2. 10.10.10.2/32 is not received on your wan router

These could have different root causes.

I have recreated the topology you presented and tested the following:

R1-s1/0-[OSPF]-s1/0-R2-s1/1-[EIGRP]-s1/0-R3

R2 is receiving an ospf e1 route of 10.10.10.10/32 from R1 and redistributing it into EIGRP towards R3:

R2#sh ip ro ospf

     10.0.0.0/32 is subnetted, 1 subnets

O E1    10.10.10.10 [110/2] via 172.16.12.1, 00:00:08, Serial1/0

R2#

R2#sh ip ro 10.10.10.10

Routing entry for 10.10.10.10/32

  Known via "ospf 1", distance 110, metric 2, type extern 1

  Redistributing via eigrp 1

  Advertised by eigrp 1 metric 100 1 255 1 1500 route-map DMZin

  Last update from 172.16.12.1 on Serial1/0, 00:04:01 ago

  Routing Descriptor Blocks:

  * 172.16.12.1, from 1.1.1.1, 00:04:01 ago, via Serial1/0

      Route metric is 2, traffic share count is 1

R2#sh ip eigrp topology 10.10.10.10 255.255.255.255

IP-EIGRP (AS 1): Topology entry for 10.10.10.10/32

  State is Passive, Query origin flag is 1, 1 Successor(s), FD is 25600256

  Routing Descriptor Blocks:

  172.16.12.1, from Redistributed, Send flag is 0x0

      Composite metric is (25600256/0), Route is External

      Vector metric:

        Minimum bandwidth is 100 Kbit

        Total delay is 10 microseconds

        Reliability is 255/255

        Load is 1/255

        Minimum MTU is 1500

        Hop count is 0

      External data:

        Originating router is 2.2.2.2 (this system)

        AS number of route is 1

        External protocol is OSPF, external metric is 2

        Administrator tag is 0 (0x00000000)

R2#

R3 receives the route as expected:

R3>sh ip ro 10.10.10.10

Routing entry for 10.10.10.10/32

  Known via "eigrp 1", distance 170, metric 26112256, type external

  Redistributing via eigrp 1

  Last update from 172.16.23.2 on Serial1/0, 00:03:49 ago

  Routing Descriptor Blocks:

  * 172.16.23.2, from 172.16.23.2, 00:03:49 ago, via Serial1/0

      Route metric is 26112256, traffic share count is 1

      Total delay is 20010 microseconds, minimum bandwidth is 100 Kbit

      Reliability 255/255, minimum MTU 1500 bytes

      Loading 1/255, Hops 1

R3>

So in short, I don't see a problem here. Could you post some more details of your topology and configs?

I've attached my configs for this scenario (sorry for any non-relevant config that I left in there).

HTH

Marcel

Message was edited by: Marcel Lammerse