Ok after some food and some - Page 2

Steven Williams · ‎08-10-2015

Created a ip prefix list to allow the default route, then set it in a route-map and applied to ospf process 1200, but it filters everything. This was working about 3 days ago. The only thing that changed is it connects to a new upstream ASA, but the ospf process on the new ASA is exact same as old, has the default-information originate always command on the process. It looks like i am learning the default route from the ASA but its not being put into the RIB?

BNA-4500X-01#conf t
Enter configuration commands, one per line. End with CNTL/Z.
BNA-4500X-01(config)#
BNA-4500X-01(config)#ip prefix-list DEFAULT_ONLY1 seq 10 permit 0.0.0.0/0
BNA-4500X-01(config)#route-map DEFAULT_ROUTE_ONLY_RMAP1 permit 5
BNA-4500X-01(config-route-map)#match ip address prefix-list DEFAULT_ONLY1
BNA-4500X-01(config-route-map)#route-map DEFAULT_ROUTE_ONLY_RMAP1 deny 15
BNA-4500X-01(config-route-map)#exit
BNA-4500X-01(config)#
!
router ospf 1200 vrf YELLOW_PROD
router-id 10.51.100.41
area 0 authentication message-digest
network 10.20.0.1 0.0.0.0 area 0
network 10.20.30.1 0.0.0.0 area 0
network 10.51.100.41 0.0.0.0 area 0
network 192.168.1.1 0.0.0.0 area 0
network 192.168.5.1 0.0.0.0 area 0
network 192.168.12.1 0.0.0.0 area 0
!
BNA-4500X-01(config)#router ospf 1200 vrf YELLOW_PROD
BNA-4500X-01(config-router)#$list route-map DEFAULT_ROUTE_ONLY_RMAP1 in
BNA-4500X-01(config-router)#exit
BNA-4500X-01(config)#exit
BNA-4500X-01#show ip ospf
*Aug 10 06:45:05.496: %SYS-5-CONFIG_I: Configured from console by admin on console
BNA-4500X-01#show ip route vrf YELLOW_PROD

Routing Table: YELLOW_PROD
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
C 10.20.0.0/24 is directly connected, Vlan700
L 10.20.0.1/32 is directly connected, Vlan700
C 10.51.100.40/29 is directly connected, Vlan1200
L 10.51.100.41/32 is directly connected, Vlan1200
BNA-4500X-01#show ip route vrf YELLOW_PROD

Routing Table: YELLOW_PROD
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
C 10.20.0.0/24 is directly connected, Vlan700
L 10.20.0.1/32 is directly connected, Vlan700
C 10.51.100.40/29 is directly connected, Vlan1200
L 10.51.100.41/32 is directly connected, Vlan1200
BNA-4500X-01#show ip route vrf YELLOW_PROD

Routing Table: YELLOW_PROD
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
C 10.20.0.0/24 is directly connected, Vlan700
L 10.20.0.1/32 is directly connected, Vlan700
C 10.51.100.40/29 is directly connected, Vlan1200
L 10.51.100.41/32 is directly connected, Vlan1200
BNA-4500X-01#show ip route vrf YELLOW_PROD

Routing Table: YELLOW_PROD
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
C 10.20.0.0/24 is directly connected, Vlan700
L 10.20.0.1/32 is directly connected, Vlan700
C 10.51.100.40/29 is directly connected, Vlan1200
L 10.51.100.41/32 is directly connected, Vlan1200

BNA-4500X-01#debug ip ospf 1200 rib
OSPF RIB (Routing Information Base) debugging is on for process 1200
OSPF Local RIB (Routing Information Base) debugging is on for process 1200
OSPF Global RIB (Routing Information Base) debugging is on for process 1200
OSPF Redistribution debugging is on for process 1200
!
BNA-4500X-01#clear ip ospf 1200 process
Reset OSPF process 1200? [no]: yes
BNA-4500X-01#
*Aug 10 06:46:28.732: %OSPF-5-ADJCHG: Process 1200, Nbr 10.51.100.58 on Vlan1200 from FULL to DOWN, Neighbor Down: Interface down or detached
*Aug 10 06:46:28.732: OSPF-1200 LRIB : Local RIB clear
BNA-4500X-01#
*Aug 10 06:46:28.745: %OSPF-5-ADJCHG: Process 1200, Nbr 10.51.100.58 on Vlan1200 from LOADING to FULL, Loading Done
BNA-4500X-01#
*Aug 10 06:46:38.741: OSPF-1200 LRIB : Creating route 10.51.100.40/29
*Aug 10 06:46:38.741: OSPF-1200 LRIB : Add path area 0, type Intra, dist 1, forward 0, tag 0x0, via 10.51.100.41 Vlan1200, route flags (Connected), path flags (Connected), source 10.51.100.58, spf 34, list-type change_list
*Aug 10 06:46:38.741: OSPF-1200 LRIB : Creating new first-hop via 10.51.100.42 on Vlan1200
*Aug 10 06:46:38.741: OSPF-1200 LRIB : Creating route 10.51.100.56/29
*Aug 10 06:46:38.741: OSPF-1200 LRIB : Add pa
BNA-4500X-01#th area 0, type Intra, dist 11, forward 0, tag 0x0, via 10.51.100.42 Vlan1200, route flags (None), path flags (none), source 10.51.100.58, spf 34, list-type change_list
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Creating new first-hop via 10.20.0.1 on Vlan700
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Creating route 10.20.0.0/24
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Add path area 0, type Intra, dist 1, forward 0, tag 0x0, via 10.20.0.1 Vlan700, route flags (Connected), path flags (Connected), source 10.51
BNA-4500X-01#.100.41, spf 34, list-type change_list
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Creating route 10.20.42.0/24
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Add path area 0, type Intra, dist 12, forward 0, tag 0x0, via 10.51.100.42 Vlan1200, route flags (None), path flags (none), source 10.51.100.57, spf 34, list-type change_list
*Aug 10 06:46:38.742: OSPF-1200 GRIB : IP route replace of 1 next hops failed for 10.20.42.0/24 (flags 0x0, type Intra, tag 0x0), retcode 3
*Aug 10 06:46:38.742: OSPF-1200 GRIB :
BNA-4500X-01# Next hop via 10.51.100.42 on Vlan1200 (distance 12, source 10.51.100.57, label 1048578) NOT installed
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Sync'ed 10.20.42.0/24 type Intra - change (Change, HigherCost): added 0 paths, deleted 0 paths, spf 34, route instance 34
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Sync'ed 10.20.0.0/24 type Intra - change (Change, HigherCost): added 0 paths, deleted 0 paths, spf 34, route instance 34
*Aug 10 06:46:38.742: OSPF-1200 GRIB : IP route replace of 1 next hops failed
BNA-4500X-01# for 10.51.100.56/29 (flags 0x0, type Intra, tag 0x0), retcode 3
*Aug 10 06:46:38.742: OSPF-1200 GRIB : Next hop via 10.51.100.42 on Vlan1200 (distance 11, source 10.51.100.58, label 1048578) NOT installed
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Sync'ed 10.51.100.56/29 type Intra - change (Change, HigherCost): added 0 paths, deleted 0 paths, spf 34, route instance 34
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Sync'ed 10.51.100.40/29 type Intra - change (Change, HigherCost): added 0 paths, deleted 0 path
BNA-4500X-01#s, spf 34, route instance 34
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Creating route 10.53.0.0/29
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Add path area 0, type Inter, dist 11, forward 0, tag 0x0, via 10.51.100.42 Vlan1200, route flags (None), path flags (none), source 10.51.100.58, spf 34, list-type change_list
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Creating route 192.168.7.0/24
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Add path area 0, type Inter, dist 21, forward 0, tag 0x0, via 10.51.100.42 Vlan12
BNA-4500X-01#00, route flags (None), path flags (none), source 10.51.100.58, spf 34, list-type change_list
*Aug 10 06:46:38.742: OSPF-1200 GRIB : IP route replace of 1 next hops failed for 192.168.7.0/24 (flags 0x0, type Inter, tag 0x0), retcode 3
*Aug 10 06:46:38.742: OSPF-1200 GRIB : Next hop via 10.51.100.42 on Vlan1200 (distance 21, source 10.51.100.58, label 1048578) NOT installed
*Aug 10 06:46:38.742: OSPF-1200 LRIB : Sync'ed 192.168.7.0/24 type Inter - change (Change, HigherCost): added 0 paths, delete
BNA-4500X-01#d 0 paths, spf 34, route instance 34
*Aug 10 06:46:38.742: OSPF-1200 GRIB : IP route replace of 1 next hops failed for 10.53.0.0/29 (flags 0x0, type Inter, tag 0x0), retcode 3
*Aug 10 06:46:38.743: OSPF-1200 GRIB : Next hop via 10.51.100.42 on Vlan1200 (distance 11, source 10.51.100.58, label 1048578) NOT installed
*Aug 10 06:46:38.743: OSPF-1200 LRIB : Sync'ed 10.53.0.0/29 type Inter - change (Change, HigherCost): added 0 paths, deleted 0 paths, spf 34, route instance 34

BNA-4500X-01#show ip ospf database

OSPF Router with ID (10.52.100.33) (Process ID 1113)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.52.100.33 10.52.100.33 845 0x8000001E 0x00B164 1

OSPF Router with ID (10.52.100.25) (Process ID 1325)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.52.100.25 10.52.100.25 1056 0x8000001E 0x00FF83 1

OSPF Router with ID (10.52.100.17) (Process ID 1323)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.52.100.17 10.52.100.17 860 0x8000001E 0x00029F 1

OSPF Router with ID (10.52.100.9) (Process ID 1322)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.52.100.9 10.52.100.9 708 0x8000001E 0x00D3D4 1

OSPF Router with ID (10.52.100.1) (Process ID 1324)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.52.100.1 10.52.100.1 1084 0x8000001E 0x0081DC 1

OSPF Router with ID (10.51.100.49) (Process ID 1150)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.51.100.49 10.51.100.49 798 0x8000001E 0x00DF05 2

OSPF Router with ID (10.51.100.41) (Process ID 1200)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.51.100.41 10.51.100.41 62 0x80000025 0x004171 2
10.51.100.57 10.51.100.57 1053 0x80000020 0x00410C 2
10.51.100.58 10.51.100.58 2004 0x8000002C 0x006279 2

Net Link States (Area 0)

Link ID ADV Router Age Seq# Checksum
10.51.100.42 10.51.100.58 2004 0x80000015 0x003AA4
10.51.100.58 10.51.100.58 984 0x80000017 0x007646

Summary Net Link States (Area 0)

Link ID ADV Router Age Seq# Checksum
10.53.0.0 10.51.100.58 984 0x80000017 0x008682
192.168.7.0 10.51.100.58 984 0x80000017 0x0017AF

Type-5 AS External Link States

Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 10.51.100.58 229 0x80000019 0x00016A 10

OSPF Router with ID (10.51.100.33) (Process ID 1500)

OSPF Router with ID (10.51.100.25) (Process ID 1122)

OSPF Router with ID (10.51.100.17) (Process ID 1121)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.51.100.17 10.51.100.17 948 0x8000001E 0x000F21 1

OSPF Router with ID (10.51.100.9) (Process ID 1100)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.51.100.9 10.51.100.9 809 0x8000001E 0x00B09F 1

OSPF Router with ID (10.51.100.57) (Process ID 1017)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.51.100.41 10.51.100.41 63 0x80000025 0x004171 2
10.51.100.57 10.51.100.57 1051 0x80000020 0x00410C 2
10.51.100.58 10.51.100.58 2005 0x8000002C 0x006279 2

Net Link States (Area 0)

Link ID ADV Router Age Seq# Checksum
10.51.100.42 10.51.100.58 2005 0x80000015 0x003AA4
10.51.100.58 10.51.100.58 984 0x80000017 0x007646

Summary Net Link States (Area 0)

Link ID ADV Router Age Seq# Checksum
10.53.0.0 10.51.100.58 984 0x80000017 0x008682
192.168.7.0 10.51.100.58 984 0x80000017 0x0017AF

Type-5 AS External Link States

Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 10.51.100.58 229 0x80000019 0x00016A 10

OSPF Router with ID (10.51.100.1) (Process ID 1400)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.51.100.1 10.51.100.1 976 0x8000001E 0x003D85 2
BNA-4500X-01#show ip route vrf YELLOW_PROD

Routing Table: YELLOW_PROD
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
C 10.20.0.0/24 is directly connected, Vlan700
L 10.20.0.1/32 is directly connected, Vlan700
C 10.51.100.40/29 is directly connected, Vlan1200
L 10.51.100.41/32 is directly connected, Vlan1200
BNA-4500X-01#

Steven Williams · ‎08-10-2015

BNA-4500X-01#show ip ospf 1200 database internal

OSPF Router with ID (10.51.100.41) (Process ID 1200)

Stub Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Mask
10.20.0.255 10.51.100.41 6076 0x0 0x0013EB /24
10.20.42.255 10.51.100.57 6331 0x0 0x00E2E1 /24
10.20.63.255 10.51.100.33 5091 0x0 0x008B3C /24
10.51.100.39 10.51.100.58 5141 0x0 0x003515 /29

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count
10.51.100.33 10.51.100.33 1259 0x80000005 0x005360 2
10.51.100.41 10.51.100.41 1991 0x8000002D 0x003179 2
10.51.100.57 10.51.100.57 247 0x80000029 0x002F15 2
10.51.100.58 10.51.100.58 1241 0x80000037 0x009B94 3

Net Link States (Area 0)

Link ID ADV Router Age Seq# Checksum
10.51.100.34 10.51.100.58 1241 0x80000003 0x003EC2
10.51.100.42 10.51.100.58 1241 0x8000001E 0x0028AD
10.51.100.58 10.51.100.58 231 0x80000020 0x00644F

Summary Net Link States (Area 0)

Link ID ADV Router Age Seq# Checksum
10.53.0.0 10.51.100.58 231 0x80000020 0x00748B
192.168.7.0 10.51.100.58 231 0x80000020 0x0005B8

Type-5 AS External Link States

Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 10.51.100.58 1483 0x80000021 0x00F072 10
BNA-4500X-01#

Steven Williams · ‎08-10-2015

Ok after some food and some staring it finally clicked what you were saying.

The ASA 5585 has a static route that sends traffic to the upstream ASA 5525. So the the default information originate commands purpose is redistribute a default route that it learned from another neighbor, or if you created on statically, which we did. So now I understand why this was broke. Plus the whole prefix list for a /24 and not a /29.

Route-map not working? WHY?