Redistributing static VPN route into EIGRP (FD is Inaccessible)

[Tshi M]

Hi all,

I am redistributing the site to site VPN static route into EIGRP but what I noticed on the 6509 when i do sh ip eigrp 200 topol, the static route from the ASA has "FD is inaccessible"

6509 output:

EIGRP-IPv4 Topology Table for AS(200)/ID(10.33.95.34)

Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,

       r - reply Status, s - sia Status

P 199.x.x.240/28, 1 successors, FD is 53760, tag is 36539

        via Redistributed (53760/0)

P 10.64.129.0/24, 1 successors, FD is 28416

        via 10.210.98.200 (28416/28160), Vlan98

P 10.1.2.0/24, 0 successors, FD is Inaccessible

        via 10.210.98.200 (28416/28160), Vlan98

P 10.210.98.0/24, 1 successors, FD is 2816

        via Connected, Vlan98

ASA5510 output:

EIGRP-IPv4 Topology Table for AS(200)/ID(10.64.129.253)

Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,

       r - reply Status, s - sia Status

P 10.1.2.0 255.255.255.0, 1 successors, FD is 28160

        via Rstatic (28160/0)

P 10.64.129.0 255.255.255.0, 1 successors, FD is 28160

        via Connected, Ethernet0/0

P 199.x.x.240 255.255.255.240, 1 successors, FD is 79360, tag is 36539

        via 10.210.98.254 (79360/53760), Ethernet0/1

P 10.210.98.0 255.255.255.0, 1 successors, FD is 28160

        via Connected, Ethernet0/1

ASA Config:

access-list 200SW_EIGRP standard permit 10.1.2.0 255.255.255.0

route-map static-into-eigrp permit 10

match ip address 200SW_EIGR

router eigrp 200

redistribute static route-map static-into-eigrp

route outside 10.1.2.0 255.255.255.0 x.x.x.

Thanks,

[Javier Portuguez]

Hi,

Did you add the "reverse-route" command to the specific crypto map?

crypto-map outside_map 10 set reverse-route

Let me know.

Thanks.

Portu.

[Tshi M]

Hi Javier,

Yes, the line was added to no effect...

[Javier Portuguez · Accepted solution]

Tshi,

When the FD is inaccessible in the EIGRP topology table, the router is not using that EIGRP route in its routing table.

Probably, the route is overridden by another routing protocol that has lower administrative distance.

Could you please share the routing table?

Thanks.

[Tshi M]

You might actually be right. I did check earlier and noticed that i am learning the same route from another eigrp process. I am going to inject a route that isn't in the routing table to see if this thing work. I will keep you posted

[Javier Portuguez]

Tshi,

Cool

Keep me posted.