*Ah. Right on the spot! When reading the task bullet "The DMZ interface sholud only receive a default route" i put a summary-address on the DMZ-interface in ASA. That´s not in the DSG. Whats the meaning of that sentence?* * * *And, if my intention was to make sure that R9 gets only a default summary address from ASA/EIGRP, isn´t that the way to do it?* * * *interface Ethernet0/1.17* *summary-address eigrp 89 0.0.0.0 0.0.0.0 * * * *What happens when I add this command is this on ASA:* * * *ASA1(config-subif)# int e0/1.17* *ASA1(config-subif)# * * * *ASA1(config-subif)# sh route | incl 0.0.0.0* *Gateway of last resort is 6.6.146.20 to network 0.0.0.0* *O*E1 0.0.0.0 0.0.0.0 [110/12] via 6.6.146.20, 0:04:01, outside* *ASA1(config-subif)# * * * *ASA1(config-subif)# summary-address eigrp 89 0.0.0.0 0.0.0.0 * * * *EIGRP-IPv4(Default-IP-Routing-Table:89): route installed for 0.0.0.0 (Summary)* *EIGRP-IPv4(Default-IP-Routing-Table:89): route installed for 0.0.0.0 (Summary)* *EIGRP: Holdtime expired* *Going down: Peer 10.17.17.9 total=1 stub 0, iidb-stub=0 iid-all=0* *EIGRP: Neighbor 10.17.17.9 went down on Ethernet0/1.17* *EIGRP: New peer 10.17.17.9* * * *ASA1(config-subif)# sh route | incl 0.0.0.0 * *Gateway of last resort is 0.0.0.0 to network 0.0.0.0* *D* 0.0.0.0 0.0.0.0 is a summary, 0:00:13, Null0* * * *On R9 the summary route has been installed:* * * *R9#sh ip route | incl 0.0.0.0* *Gateway of last resort is 10.17.17.10 to network 0.0.0.0* * 10.0.0.0/24 is subnetted, 1 subnets* *D* 0.0.0.0/0 [90/28416] via 10.17.17.10, 00:02:10, FastEthernet0/1* *R9#* * * *Brandon, please enlighten me. ;)*
2010/5/6 Brandon Carroll <[email protected]> > The first step is to get a real default route in your routing table. > Usually you'll see a default to null0 when summarization is configured. > I'd make sure there is no summary-address configured, which there probably > isn't. > > I might try to remove eigrp on the ASA. Verify the OSPF route is in the > table, then add the redistribution back in. Without trying it I'd say based > on the outputs below that the ASA thinks its doing a summarization for eigrp > be it on the interface or something. > > HTH > > > -- ------- Jimmy Larsson Ryavagen 173 s-26030 Vallakra Sweden http://blogg.kvistofta.nu -------
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
