Hi guys
I hope you might be able to help me with an issue with ASA OSPF.
Setup (also see attached drawing):
I have a Cisco ASA 5550 running ver. 9.1(4). The ASA is running multiple context (routed firewall mode). I am trying to form an OSPF area between two of the context (cascading conext) so I can route between them. However when I try to configure the OSPF area 0 no neighbors are formed, no routing etc. It also says "Area BACKBONE(0) (Inactive)".
Notes about setup and show output:
- Unique MAC addresses have been configured for each context (mac-address auto prefix 666)
- If I try the same setup with EIGRP it is working.
- It is also working if I configure OSPF in another area than 0.
- I am able to ping the firewalls on the shared interface (10.1.0.1 <-> 10.1.0.2)
context test
interface outside
nameif outside
security-level 0
ip address 10.0.0.1 255.255.255.0
!
interface inside
nameif inside
security-level 100
ip address 10.1.0.1 255.255.255.0
!
router ospf 1
network 10.0.0.0 255.255.255.0 area 0
network 10.1.0.0 255.255.255.0 area 0
log-adj-changes
redistribute connected subnets
sh ospf
Routing Process "ospf 1" with ID 10.1.0.1 and Domain ID 0.0.0.1
Supports only single TOS(TOS0) routes
Does not support opaque LSA
It is an autonomous system boundary router
Redistributing External Routes from,
connected, includes subnets in redistribution
SPF schedule delay 5 secs, Hold time between two SPFs 10 secs
Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs
Number of external LSA 0. Checksum Sum 0x0
Number of opaque AS LSA 0. Checksum Sum 0x0
Number of DCbitless external and opaque AS LSA 0
Number of DoNotAge external and opaque AS LSA 0
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
External flood list length 0
Area BACKBONE(0) (Inactive)
Number of interfaces in this area is 2
Area has no authentication
SPF algorithm executed 7 times
Area ranges are
Number of LSA 1. Checksum Sum 0xcad
Number of opaque link LSA 0. Checksum Sum 0x0
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
!
sh ospf inter
outside is up, line protocol is up
Internet Address 10.0.0.1 mask 255.255.255.0, Area 0
Process ID 1, Router ID 10.1.0.1, Network Type BROADCAST, Cost: 10
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 10.1.0.1, Interface address 10.0.0.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 0:00:04
Index 2/2, flood queue length 0
Next 0x00000000(0)/0x00000000(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
inside is up, line protocol is up
Internet Address 10.1.0.1 mask 255.255.255.0, Area 0
Process ID 1, Router ID 10.1.0.1, Network Type BROADCAST, Cost: 10
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 10.1.0.1, Interface address 10.1.0.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 0:00:02
Index 1/1, flood queue length 0
Next 0x00000000(0)/0x00000000(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
!
sh ospf neighbor
<no neighbors>
!
sh arp
inside 10.1.0.2 a29a.0200.0004 1886
******
context test2
interface outside
nameif outside
security-level 0
ip address 10.1.0.2 255.255.255.0
!
interface inside
nameif inside
security-level 100
ip address 172.16.0.1 255.255.255.0
!
router ospf 1
network 10.1.0.0 255.255.255.0 area 0
log-adj-changes
redistribute connected subnets
sh ospf
Routing Process "ospf 1" with ID 172.16.0.1 and Domain ID 0.0.0.1 (note I have tried to change router ID to 10.1.0.1 but it didn't help)
Supports only single TOS(TOS0) routes
Does not support opaque LSA
It is an autonomous system boundary router
Redistributing External Routes from,
connected, includes subnets in redistribution
SPF schedule delay 5 secs, Hold time between two SPFs 10 secs
Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs
Number of external LSA 1. Checksum Sum 0xc75d
Number of opaque AS LSA 0. Checksum Sum 0x0
Number of DCbitless external and opaque AS LSA 0
Number of DoNotAge external and opaque AS LSA 0
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
External flood list length 0
Area BACKBONE(0) (Inactive)
Number of interfaces in this area is 1
Area has no authentication
SPF algorithm executed 7 times
Area ranges are
Number of LSA 1. Checksum Sum 0xc5d8
Number of opaque link LSA 0. Checksum Sum 0x0
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
!
sh ospf inter
outside is up, line protocol is up
Internet Address 10.1.0.2 mask 255.255.255.0, Area 0
Process ID 1, Router ID 172.16.0.1, Network Type BROADCAST, Cost: 10
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 172.16.0.1, Interface address 10.1.0.2
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 0:00:02
Index 1/1, flood queue length 0
Next 0x00000000(0)/0x00000000(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
!
sh ospf neighbor
<no neighbors>
!
sh arp
outside 10.1.0.1 a29a.0200.0006 0
Any help would be greatly appreciated.
Thank you.
