Cisco ASA Dynamic Routing – Originating a NAT Block

ciscocisco-asaeigrprouting

Network guy working on Security problems — hoping for some guidance!

I have a subnet that I am using as a NAT block for one of my inside subnets.

NAT from inside->outside : Convert source 10.0.0.0/23 to 10.100.0.0/23

I am doing EIGRP with the outside. I need to originate 10.100.0.0/23 and advertise it to the outside EIGRP neighbor. However, the ASA won't originate the block because its not in the routing table.

CiscoASA#show route | inc 10.100.0.0
CiscoASA#

I tried doing an interface-level summary to override this behavior.

interface Port-channel21 (outside interface)
 summary-address eigrp 10 10.100.0.0 255.255.254.0

CiscoASA#show route | inc 10.100.0.0|Null0
CiscoASA#

But the route still isn't in the table, no Null0 route gets generated, and the neighbor doesn't see the summary.

As far as I can tell, there is no static null route or loopback interface functionality in the code I'm using (9.1).

What is the correct way to get a NAT block into the routing table, and then into EIGRP?

Best Answer

Creating a static route for "10.100.00.0/23" and redistributing it to EIGRP should do the trick.

The static route would lift it into the routing table and the redistribution of static routs will announce the route to the EIGRP neighbors.