Paul

It seems to me that we need to know a bit more about this situation. What is the subnet/network that the vendor was using? Was it 172.15.0.0/16 or was it some part of that range? Is there any other part of that address range that you need to access?

That kind of route x.x.x.x connected to null0 is sometimes the result of a configured summary address. Or it might be a static route configured that way (I see this with some frequency in the configuration of BGP routers) so that the route is always in the routing table. If you could cut and paste that line out of show ip route and post the output we might understand a bit better how it got there.

You mention that a router for the vendor was removed. Was that router running a dynamic routing protocol with your switch? Or were routes statically configured?

If we understood the situation better we could give better advice.

HTH

Rick

The vendor has PCs and printers on the 172.15.0.0 that connect to our AS400. They state they need that entire range. I swore when I looked yesterday it had a C, now when I look it has a S, so it is static route.

S 172.15.0.0/16 is directly connected,Null0

Paul

Yes that does indicate that it is a static route. You should be able to remove it without much problem and then if you want to configure a new static route which points that network toward your firewall it should be easy to do so.

HTH

Rick

Rick, I'm guessing I would use "no ip route 172.15.0.0" do I need to add the null0 to the command?

Paul

You could use the complete line including the mask and the null0. Or you could use the address and the mask and it would work. If you try with only no ip route 172.15.0.0 you get an error indicating incomplete command.

HTH

Rick

Thanks Rick