08-16-2018 05:06 AM - edited 03-05-2019 10:51 AM
I have two nearly identical 881 routers (15.4(1r)T1) running EIGRP that I am trying to mesh with an ASA5500X v9.8. Router 1 works, router 2 does not.
R1 (working) | R2 (non-working) | ASA5500 |
router eigrp 1 network 1.1.1.0 0.0.0.255 network 10.63.5.0 0.0.0.7 neighbor 10.63.5.1 Tunnel1 neighbor 1.1.1.100 FastEthernet4 neighbor 1.1.1.122 FastEthernet4 eigrp router-id 1.1.1.119 no eigrp log-neighbor-changes |
router eigrp 1 |
router eigrp 1 distribute-list eigrp in no eigrp log-neighbor-changes neighbor 1.1.1.100 interface outside neighbor 1.1.1.118 interface outside neighbor 1.1.1.119 interface outside network 1.1.1.0 255.255.255.0 network 5.5.5.0 255.255.255.224 network 6.6.6.0 255.255.255.0 |
R2 will show as neighbors 1.1.1.100 (ASA#1) and 1.1.1.122 (ASA#2), but the RTO is 5000. I have tried removing EIGRP from R1, tried different AS #, no matter what I get is RTO 5000.
Debug eigrp transmit shows;
Aug 16 11:44:02: Building unicast STARTUP packet for 10.1.1.122, serno 0-0 for tid 0
Aug 16 11:44:02: No items in range
So far I have been unable to find anything regarding "No items in range"
Both R1 and R2 connect to the same switch the ASA is connected to, and counters R2's interface do not show any errors. I cant see where this could be a "connection" issue, especially since R1 has no issue. I believe this has to be a configuration issue. But I am unaware of where to look next. Output of eigrp neighbors:
R1
EIGRP-IPv4 Neighbors for AS(1) H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 1 1.1.1.122 Fa4 13 16:32:15 2 100 0 54 2 10.63.5.1 Tu1 12 22:15:50 180 1470 0 193 0 1.1.1.100 Fa4 12 22:15:56 243 1458 0 975
R2
EIGRP-IPv4 Neighbors for AS(1) H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 1.1.1.122 Fa4 11 00:00:32 1 5000 1 0 1 10.62.5.1 Tu1 14 00:03:15 43 1470 0 194
ASA
EIGRP-IPv4 Neighbors for AS(1) H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 1 1.1.1.119 outside 14 16:32:26 1 200 0 23 0 1.1.1.100 outside 14 16:32:26 1 200 0 978
Solved! Go to Solution.
08-16-2018 05:20 AM
Also remove all neighbor commands from all devices, and just announce the iinterfaces...
08-16-2018 05:15 AM
08-16-2018 05:18 AM
Hello,
do you have one or two ASAs ? Post a schematic drawing showing what is connected to what. Keep in mind that EIGRP uses split horizon by default...
08-16-2018 05:20 AM
Also remove all neighbor commands from all devices, and just announce the iinterfaces...
08-16-2018 12:15 PM
Removing the neighbors was the answer, R2 is now showing up as a peer on the ASA. I do have a separate issue with it still having RTO of 5000 and is not re-distributing the route I need forwarded to the ASA. However the GRE tunnel will soon be going to a different router dedicated for this purpose, so I am not going to worry about this for now (it is good for learning purposes for now).
Thank you for providing a quick and easy solution
08-16-2018 12:43 PM
Hello,
glad that you got the issue resolved...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide