EIGRP does not work with ASA5505 (OUTSIDE)

Answered Question
Aug 26th, 2010

Hello.

I configured EIGRP between a Switch 3550 and an ASA-5505., The session of neighbors work without problems, but no EIGRP routes are exchanged.

I try change the nameif and the security level but it still does not work ...

************************************************************************************************

ASA5505# sh ver

Cisco Adaptive Security Appliance Software Version 8.0(2)
Device Manager Version 6.1(5)

************************************************************************************************

Configuration ASA-5505

!
interface Vlan2
description $---> OUTSIDE SW-3550 <---$
nameif OUTSIDE
security-level 0
ip address 10.100.100.86 255.255.255.252

!
router eigrp 10
no auto-summary
network 10.0.0.0 255.0.0.0

ASA5505# sh eigrp neighbors
EIGRP-IPv4 neighbors for process 10
H   Address                 Interface            Hold     Uptime        SRTT        RTO       Q       Seq
                                                           (sec)                       (ms)                    Cnt     Num
0   10.241.3.85              Vl2                    10     00:00:04 1     3000                      2          0
ASA5505#

ASA5505# show route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is 10.100.100.85 to network 0.0.0.0

C    19.16.0.24 255.255.255.252 is directly connected, DMZ3
C    127.1.0.0 255.255.0.0 is directly connected, _internal_loopback
C    10.41.3.252 255.255.255.252 is directly connected, DMZ1
C    10.100.100.84 255.255.255.252 is directly connected, OUTSIDE
S*   0.0.0.0 0.0.0.0 [1/0] via 10.100.100.85, OUTSIDE
ASA5505#

I have this problem too.
0 votes
Correct Answer by Kureli Sankar about 6 years 3 months ago

See if this applies in your case:

CSCsk61945    ASA incompatible with routers using EIGRP version 3

resolved in  8.0.2.(21)

Symptom:

EIGRP routes are not installed on the ASA nor the neighbor.

Conditions:

This occurs when the IOS Router is running software with EIGRP version 3.0
or higher.  The version of the IOS neighbor can be checked via the
"show eigrp neighbor detail" command.

Workaround:

If possible, downgrade to an IOS release which uses the older version
of EIGRP.

-KS

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Kureli Sankar Thu, 08/26/2010 - 15:15

See if this applies in your case:

CSCsk61945    ASA incompatible with routers using EIGRP version 3

resolved in  8.0.2.(21)

Symptom:

EIGRP routes are not installed on the ASA nor the neighbor.

Conditions:

This occurs when the IOS Router is running software with EIGRP version 3.0
or higher.  The version of the IOS neighbor can be checked via the
"show eigrp neighbor detail" command.

Workaround:

If possible, downgrade to an IOS release which uses the older version
of EIGRP.

-KS

Actions

This Discussion