03-26-2009 10:55 PM - edited 02-21-2020 03:22 AM
Good day to all.. Problem:
asa5510(config)# sh route
S 192.168.2.0 255.255.255.0 [1/0] via 195.xx.xx.xx, outside
S 10.1.1.0 255.255.255.0 [1/0] via 10.2.2.1, inside
S 192.168.1.0 255.255.255.0 [1/0] via 195.xx.xx.xx, outside
S* 0.0.0.0 0.0.0.0 [1/0] via 195.xx.xx.xx, outside
asa5510(config)# sh run | i route
route outside 0.0.0.0 0.0.0.0 195.xx.xx.xx 1
route inside 10.1.1.0 255.255.255.0 10.2.2.1 1
route inside 192.168.1.0 255.255.255.0 10.2.2.1 1
What is the route to 192.168.2.0 is STATIC(!)? And why 192.168.1.0 routes to outside interface?
Also, if I send command like as route inside 192.168.2.0 255.255.255.0 10.2.2.1, asa's answer ERROR: Cannot add route entry, conflict with existing routes. If I send command no route ouside 192.168.2.0 255.255.255.0 195.xx.xx.xx, asa's answer %No matching route to delete
Any ideas?
Software Version 8.0(4).
03-26-2009 11:07 PM
I may suppose that you have configured RRI (reverse route injection)
03-26-2009 11:32 PM
No. There is no any reverse-route commands in config.
03-26-2009 11:34 PM
show the configuration
03-26-2009 11:42 PM
There is a base (factory-defaults) config. I have added only a static routes.
03-27-2009 12:05 AM
try to reload the ASA
03-27-2009 12:18 AM
I think the same as you, that if I reload ASA, problem will gone. But I can't to do this right now.
I'm trying to reload it on weekends. But any replies how to fix it without reload are welcome.
12-09-2010 05:49 AM
Try the following commands:
route outside 192.168.2.0 255.255.255.0 195.xx.xx.xx
no route outside 192.168.2.0 255.255.255.0 195.xx.xx.xx
12-09-2010 01:24 PM
I have seen some issues before, not exactly with 5510 but with other ASA's where when you factory reset your config, it'll sometimes make inside security 0 and outside security 100, effectively reversing the interfaces. This could be the cause.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: