ASA 5510 static routes

[Daniil Yanov]

Good day to all.. Problem:

asa5510(config)# sh route

S 192.168.2.0 255.255.255.0 [1/0] via 195.xx.xx.xx, outside

S 10.1.1.0 255.255.255.0 [1/0] via 10.2.2.1, inside

S 192.168.1.0 255.255.255.0 [1/0] via 195.xx.xx.xx, outside

S* 0.0.0.0 0.0.0.0 [1/0] via 195.xx.xx.xx, outside

asa5510(config)# sh run | i route

route outside 0.0.0.0 0.0.0.0 195.xx.xx.xx 1

route inside 10.1.1.0 255.255.255.0 10.2.2.1 1

route inside 192.168.1.0 255.255.255.0 10.2.2.1 1

What is the route to 192.168.2.0 is STATIC(!)? And why 192.168.1.0 routes to outside interface?

Also, if I send command like as route inside 192.168.2.0 255.255.255.0 10.2.2.1, asa's answer ERROR: Cannot add route entry, conflict with existing routes. If I send command no route ouside 192.168.2.0 255.255.255.0 195.xx.xx.xx, asa's answer %No matching route to delete

Any ideas?

Software Version 8.0(4).

[a.alekseev]

I may suppose that you have configured RRI (reverse route injection)

[Daniil Yanov]

No. There is no any reverse-route commands in config.

[a.alekseev]

show the configuration

[Daniil Yanov]

There is a base (factory-defaults) config. I have added only a static routes.

[a.alekseev]

try to reload the ASA

[Daniil Yanov]

I think the same as you, that if I reload ASA, problem will gone. But I can't to do this right now.

I'm trying to reload it on weekends. But any replies how to fix it without reload are welcome.

[Renato Morais]

Try the following commands:

route outside 192.168.2.0 255.255.255.0 195.xx.xx.xx

no route outside 192.168.2.0 255.255.255.0 195.xx.xx.xx

[clamasters]

I have seen some issues before, not exactly with 5510 but with other ASA's where when you factory reset your config, it'll sometimes make inside security 0 and outside security 100, effectively reversing the interfaces.  This could be the cause.