Re: Ping through the ASA VPN tunnel doesn't work anymore after adding EIGRP to R1?

Marc Abaya · ‎10-09-2017

We're currently using static routing and we are planning to use EIGRP , which I'm fairly new.

I create and modeled what we have on GNS3 just to test it first. All of the routers on the left of ASAv-1 is configured on EIGRP and working great. My problem is I can no longer ping the other side of the tunnel with EIGRP enabled.

Here's the ping from R1:

R1#ping 10.5.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.5.0.1, timeout is 2 seconds:.....
Success rate is 0 percent (0/5)

If I disabled EIGRP on R1, ping will work to 10.5.0.1.

Here's how my EIGRP setting looks like for R1:

router eigrp 20
network 10.199.0.0 0.0.0.255
network 172.16.32.0 0.0.0.255
network 172.17.18.0 0.0.0.255
no auto-summary!

Here's the show ip route for R1:

Gateway of last resort is 172.16.32.1 to network 0.0.0.0

     172.17.0.0/16 is variably subnetted, 2 subnets, 2 masks
C       172.17.18.0/24 is directly connected, FastEthernet1/0
D       172.17.0.0/16 [90/358400] via 10.199.0.50, 01:01:38, FastEthernet0/1
     172.16.0.0/24 is subnetted, 1 subnets
C       172.16.32.0 is directly connected, FastEthernet0/0
D    172.29.0.0/16 [90/307200] via 10.199.0.50, 02:09:37, FastEthernet0/1
     10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
D       10.0.0.0/8 [90/284160] via 172.17.18.20, 01:01:41, FastEthernet1/0
S       10.5.0.0/24 [1/0] via 172.16.32.1
C       10.199.0.0/24 is directly connected, FastEthernet0/1
     12.0.0.0/30 is subnetted, 1 subnets
D       12.12.12.0 [90/281856] via 172.16.32.1, 02:09:40, FastEthernet0/0
S*   0.0.0.0/0 [1/0] via 172.16.32.1

Flavio Miranda · ‎10-09-2017

Hi,

Could not see your topology,but I'll give it a try:

Looks like "no auto summary" is not working. Is it because the ! In front of command?

D 10.0.0.0/8 [90/284160] via O172.17.18.20, 01:01:41, FastEthernet1/0

You have an static route to the destination. This have precedence over EIGRP, isn't?

S 10.5.0.0/24 [1/0] via 172.16.32.1 C 10.199.0.0/24 is directly connected, FastEthernet0/1

12.0.0.0/30 is subnetted, 1 subnets D 12.12.12.0 [90/281856] via 172.16.32.1, 02:09:40, FastEthernet0/0

And you have a default route point to 172.16.32.1. I wish I could see the draw.

S* 0.0.0.0/0 [1/0] via 172.16.32.1

Is it 10.5.x.x on 172.16.32.1 interface?

-If I helped you somehow, please, rate it as useful.-

willwetherman · ‎10-09-2017

Hi,

Your routing on R1 looks good. The static route for 10.5.0.0/24 with a next-hop IP address of ASAv-1 has the longest prefix match so will be preferred over all other routes.

Can you provide the 'show route' output from ASAv-1?

Thanks,