Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

ASA Won't let go of route

Help! We have an ASA (7.2_4) that won't let go of a route it established.

Here's what happened:  We did some testing this weekend to try and route a branch office's VOIP traffic over a dedicated T1 instead of the L2L VPN connection.

We concluded our testing, and reverted the changes, but now the ASA keeps trying to throw some specific UDP traffic over the T1 instead of back onto the VPN as it had before.

When I try to do a packet tracer, traffic to other IP addresses in that same target network are fine, but traffic to the specific IP address that's causing the problem throws an error of "Drop-reason: (no-adjacency) No valid adjacency"

As best I can tell, the ASA is still trying to route the traffic for that destination IP over the T1, and is unhappy because it can't figure out the next-hop MAC address at layer 2.

Might the timeouts have something to do with it? When I do a 'show conn' I do see that connection to the destination IP via the T1, even after clearing conn and rebooting ASA.

timeout xlate 3:00:00

timeout conn 6:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

Ideas?

Here's log entry from the ASDM log:

6|Nov 13 2011 23:08:28|110003: Routing failed to locate next hop for UDP from inside:10.1.1.114/2427 to t1:10.21.8.3/2727

The 10.21.8.3 address is the troublesome destination.

625
Views
0
Helpful
0
Replies
CreatePlease to create content