ASA Stops sending OSPF hellos

Question

ASA Stops sending OSPF hellos
Dear Support,
Wondering if anyone else has come across this problem, but have two Cisco ASA 5510s ASA V7.2(1), DM V5.2(1) (in active/passive failover configuration). These are connected to a pair of 3750G-48-EMIs in a stack, OSPF is running on both, The ASAs are redistributing the outside, and DMZ interfaces by a defined route-map.
Everything normally works fine, but today I found that the neighbour relationship between the ASAs and 3750s had broke. I tried clearing the OSPF process on both the ASAs and 3750, but this would not resolve the problem. The 3750 would not show the ASAs in the neighbour list, but did have other devices (via a point-to-point link) as FULL state. The ASAs however would show the 3750s as INIT/DROTHER state.
Debugs showed that the ASAs were receiving hellos from the 3750s but was not sending any. The 3750s showed it was sending hellos but not receiving any from the ASAs
To resolve I had to reboot the ASAs. This is not my preferred solution as should not need to do this.
Has anyone else come across this problem, and is there a resolution? Or a bug track id?
Thank you in advance for your assistance.
I always rate helpful replies.
Best regards, Adrian

Answer 1

Hi,
Your symptoms seem to indicate you may be affected by this bug. If you are running one of the affected codes then apply the workaround suggested.
CSCsg00914 Bug Details
Headline OSPF neighbors dont form due to corrupted arp entry
Product pix-asa
Feature Unicast Routing Components Duplicate of
Severity 3 Severity help Status Verified Status help
First Found-in Version 7.2(1), 7.0(6) First Fixed-in Version 7.2(2), 7.2(1.26), 7.1(2.30), 7.0(6.10), 8.0(0.111) Version help
Release Notes
Symptom:
OSPF neighbors don't form
Conditions:
show ospf neighbors on the ASA running
7.2.1 displays the neighbors in INIT/DROTHER state.
The ASA may be attempting to send OSPF packets to a MAC address other than the
intended one, though non broadcast is disabled on the interface.
Workaround:
Clear the arp cache on the asa. If clearing the arp does not work, try adding a
static arp entry.
Further Problem Description:
A show arp should list the multicast address on the ASA.
HTH
Sundar