Network Ghost...could use some ideas.

cratejockey · ‎08-30-2007

We have recently moved a large client from a flat network structure at each site ( more than 30 total sites) and an unstructured routing plan from edge to core. They now have a structured WAN that coincides with their LAN Structure. Since we completed the transition we have noticed thousands of failed nat translations on the INSIDE of our ASA. From doing a bit a research we have narrowed these packets down to requests from hosts on the new networks requesting resources on the the old network.

I attempted to create static routes for these old networks with a gateway of loopback 0, to force the Core router to dump the packets instead of forwarding them to the default router which is my edge ASA. However I either did this wrong or I am trying to be to clever because it did not affect the packets getting through to the INSIDE of my ASA.

Does anyone out there have a better idea or can you help me understand what I did wrong with my static route? As a secondary does anybody out there have an idea or an example of how to run down all these devices that are calling old ip resources?

Thanks for your help.

Richard Burts · ‎08-30-2007

Josh

If I am understanding your post correctly you have some destination addresses that were part of the old network structure and they are being routed by the default route to your ASA since there is no longer a route to that network in the routing table. You attempted to configure a route for that network so that the traffic would no longer be routed to the ASA. That should be possible. Would you be able to provide some additional details (especially the specifics of the route that you attempted to configure)? If we had more specifics to work from we might be able to identify your difficulty and to suggest a solution.

HTH

Rick

HTH

Rick

bfele · ‎08-30-2007

try next hop interface null0 instead of loopback0.

dcarlton · ‎08-31-2007

You static routes for the old networks should go to null0 interface. This should dump them if the reach the router with the routes.

Did you redistribute the static routes you created?