Friday, June 4, 2021

Getting static routes to redistribute in EIGRP?

Hello,

I am trying to get the EIGRP on my L3 switch to propagate some static routes on said switch through the network.

The L3 Switch has an attached FTD device running Anyconnect. The routes I want distributed are the subnets VPN connected clients are put into.

Switch Info:

Switch Ports Model SW Version SW Image 1 54 WS-C3560X-48P 12.2(55)SE8 C3560E-UNIVERSALK9-M 

Unfortunately this cannot change right now. There is no maintenance time and the site is remote. It cannot go down as the entire business there is cloud based.

EIGRP Configuration:

router eigrp 100 network 10.10.0.0 0.0.255.255 network 172.16.0.0 0.15.255.255 network 192.168.0.0 0.0.255.255 offset-list EIGRP-OFFSET in 100000 Vlan253 offset-list EIGRP-OFFSET out 100000 Vlan253 passive-interface default no passive-interface Vlan252 no passive-interface Vlan253 no passive-interface Vlan254 no passive-interface Vlan255 eigrp stub connected summary 

Vlan 252 and 253 are the adjacent routers that are not recieving the routes as I would wish.

The subnets I'm trying to get distributed are:

10.10.200.0/24 10.10.220.0/24

I added them both as static routes pointing back to the FTD on the L3 switch.

I've tried this two different ways i've seen done in the past. Admittedly I don't know a lot about routing so please forgive me if I don't include everything.

I started trying to create a Standard ACL to list the subnets:

Standard IP access list 33 10 permit 10.10.200.0, wildcard bits 0.0.0.255 20 permit 10.10.220.0, wildcard bits 0.0.0.255 

Ok then in my mind, next step:

route-map VPN-POOLS permit 10 match ip address 33 

And finally after it's mapped?

 router eigrp 100 redistribute static route-map VPN-POOLS 

I got no routes on the adjacent devices doing this. so I went back and redid it but used a prefix-list instead of the Standard ACL, hoping that would make a difference.

ip prefix-list VPN-POOLS seq 10 permit 10.10.200.0/24 ip prefix-list VPN-POOLS seq 20 permit 10.10.220.0/24 

Then again with the route map

route-map PERMIT-VPN-STATIC permit 10 match ip address prefix-list VPN-POOLS route-map PERMIT-VPN-STATIC deny 20 

Then Re-add it

redistribute static route-map PERMIT-VPN-STATIC 

Still did not see the routes on the adjacent routers. Like I said, I don't know a whole lot about routing. In my mind this is to keep the default route from that core switch traveling across the network by just redistribuing all statics. Hence the route maps?

Is the stub connected command preventing these routes from getting learned in spite of my exercise here? I believe this is needed as it's included at all remote sites like this. Any help would be appreciated thank you.



No comments:

Post a Comment