cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
302
Views
0
Helpful
3
Replies
Majed Zouhairy
Beginner

how to filter static route from eigrp updates on asa

i have static and redistributed routes enabled for advertising in eigrp, on routers you have to actually tag a static route and enable redistribution for the static route to be advertised, but no such thing in asa...so what can be done to filter one specific static route from propagating?

3 REPLIES 3
Giuseppe Larosa
Hall of Fame Master

Hello @Majed Zouhairy ,

you should be able to use a route-map to decide what static routes should be redistributed

 

ip prefix-list ALLOWED deny 10.10.10.0/24

ip preiix-list ALLOWED permit 10.10.0.0/16 le 32

 

route-map SELECTED permit 10

match address prefix ALLOWED

 

router eigrp 65000

redsitribute static route-map SELECTED

 

in this example the prefix 10.10.10.0/24 is not redistributed into EIGRP

 

Hope to help

Giuseppe

 

 

 

Majed Zouhairy
Beginner

hmm, currently i have:

access-list ALLOWED deny 10.10.10.0/24

access-list ALLOWED permit 10.10.0.0/16

 

route-map SELECTED, permit, sequence 10
Match clauses:
ip address (access-lists): ALLOWED
Set clauses:

 

i configured the prefix list, now if i apply it instead of the access-list, would there be any traffic disruption? or is it safe ?

Hello @Majed Zouhairy ,

the access-list works with a different logic so that it matches also component routes on 10.10.0.0/16 and not only an exact match .

You can use the ACL or the prefix-list just be careful that the prefix-list requires the le 32 final parameter ,  if you want to include all component routes otherwise it looks for an exact match.

 

Hope to help

Giuseppe