Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco ASA - OSPF area 0 - cascading context

Hi guys

I hope you might be able to help me with an issue with ASA OSPF.

Setup (also see attached drawing):
I have a Cisco ASA 5550 running ver. 9.1(4). The ASA is running multiple context (routed firewall mode). I am trying to form an OSPF area between two of the context (cascading conext) so I can route between them. However when I try to configure the OSPF area 0 no neighbors are formed, no routing etc. It also says "Area BACKBONE(0) (Inactive)".

cascading context

 

Notes about setup and show output:

- Unique MAC addresses have been configured for each context (mac-address auto prefix 666)

- If I try the same setup with EIGRP it is working.

- It is also working if I configure OSPF in another area than 0.

- I am able to ping the firewalls on the shared interface (10.1.0.1 <-> 10.1.0.2)

 

context test

interface outside
 nameif outside
 security-level 0
 ip address 10.0.0.1 255.255.255.0
!
interface inside
 nameif inside
 security-level 100
 ip address 10.1.0.1 255.255.255.0

!
router ospf 1
 network 10.0.0.0 255.255.255.0 area 0
 network 10.1.0.0 255.255.255.0 area 0
 log-adj-changes
 redistribute connected subnets

 

sh ospf

 Routing Process "ospf 1" with ID 10.1.0.1 and Domain ID 0.0.0.1
 Supports only single TOS(TOS0) routes
 Does not support opaque LSA
 It is an autonomous system boundary router
 Redistributing External Routes from,
    connected, includes subnets in redistribution
 SPF schedule delay 5 secs, Hold time between two SPFs 10 secs
 Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs
 Number of external LSA 0. Checksum Sum 0x0     
 Number of opaque AS LSA 0. Checksum Sum 0x0     
 Number of DCbitless external and opaque AS LSA 0
 Number of DoNotAge external and opaque AS LSA 0
 Number of areas in this router is 1. 1 normal 0 stub 0 nssa
 External flood list length 0
    Area BACKBONE(0) (Inactive)
        Number of interfaces in this area is 2
        Area has no authentication
        SPF algorithm executed 7 times
        Area ranges are
        Number of LSA 1. Checksum Sum 0xcad   
        Number of opaque link LSA 0. Checksum Sum 0x0     
        Number of DCbitless LSA 0
        Number of indication LSA 0
        Number of DoNotAge LSA 0
        Flood list length 0

!

sh ospf inter

outside is up, line protocol is up  
  Internet Address 10.0.0.1 mask 255.255.255.0, Area 0
  Process ID 1, Router ID 10.1.0.1, Network Type BROADCAST, Cost: 10
  Transmit Delay is 1 sec, State DR, Priority 1
  Designated Router (ID) 10.1.0.1, Interface address 10.0.0.1
  No backup designated router on this network
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 0:00:04
  Index 2/2, flood queue length 0
  Next 0x00000000(0)/0x00000000(0)
  Last flood scan length is 0, maximum is 0
  Last flood scan time is 0 msec, maximum is 0 msec
  Neighbor Count is 0, Adjacent neighbor count is 0
  Suppress hello for 0 neighbor(s)
inside is up, line protocol is up  
  Internet Address 10.1.0.1 mask 255.255.255.0, Area 0
  Process ID 1, Router ID 10.1.0.1, Network Type BROADCAST, Cost: 10
  Transmit Delay is 1 sec, State DR, Priority 1
  Designated Router (ID) 10.1.0.1, Interface address 10.1.0.1
  No backup designated router on this network
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 0:00:02
  Index 1/1, flood queue length 0
  Next 0x00000000(0)/0x00000000(0)
  Last flood scan length is 0, maximum is 0
  Last flood scan time is 0 msec, maximum is 0 msec
  Neighbor Count is 0, Adjacent neighbor count is 0
  Suppress hello for 0 neighbor(s)

!

sh ospf neighbor

 <no neighbors>

!

sh arp
        inside 10.1.0.2 a29a.0200.0004 1886

******

context test2

interface outside
 nameif outside
 security-level 0
 ip address 10.1.0.2 255.255.255.0
!
interface inside
 nameif inside
 security-level 100
 ip address 172.16.0.1 255.255.255.0

!

router ospf 1
 network 10.1.0.0 255.255.255.0 area 0
 log-adj-changes
 redistribute connected subnets

 

sh ospf

 Routing Process "ospf 1" with ID 172.16.0.1 and Domain ID 0.0.0.1  (note I have tried to change router ID to 10.1.0.1 but it didn't help)
 Supports only single TOS(TOS0) routes
 Does not support opaque LSA
 It is an autonomous system boundary router
 Redistributing External Routes from,
    connected, includes subnets in redistribution
 SPF schedule delay 5 secs, Hold time between two SPFs 10 secs
 Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs
 Number of external LSA 1. Checksum Sum 0xc75d  
 Number of opaque AS LSA 0. Checksum Sum 0x0     
 Number of DCbitless external and opaque AS LSA 0
 Number of DoNotAge external and opaque AS LSA 0
 Number of areas in this router is 1. 1 normal 0 stub 0 nssa
 External flood list length 0
    Area BACKBONE(0) (Inactive)
        Number of interfaces in this area is 1
        Area has no authentication
        SPF algorithm executed 7 times
        Area ranges are
        Number of LSA 1. Checksum Sum 0xc5d8  
        Number of opaque link LSA 0. Checksum Sum 0x0     
        Number of DCbitless LSA 0
        Number of indication LSA 0
        Number of DoNotAge LSA 0
        Flood list length 0

!

sh ospf inter

outside is up, line protocol is up  
  Internet Address 10.1.0.2 mask 255.255.255.0, Area 0
  Process ID 1, Router ID 172.16.0.1, Network Type BROADCAST, Cost: 10
  Transmit Delay is 1 sec, State DR, Priority 1
  Designated Router (ID) 172.16.0.1, Interface address 10.1.0.2
  No backup designated router on this network
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 0:00:02
  Index 1/1, flood queue length 0
  Next 0x00000000(0)/0x00000000(0)
  Last flood scan length is 0, maximum is 0
  Last flood scan time is 0 msec, maximum is 0 msec
  Neighbor Count is 0, Adjacent neighbor count is 0
  Suppress hello for 0 neighbor(s)

!

sh ospf neighbor

 <no neighbors>

!

sh arp            
        outside 10.1.0.1 a29a.0200.0006 0

 

 

Any help would be greatly appreciated.

Thank you.

Everyone's tags (1)
243
Views
0
Helpful
0
Replies