Network guy working on Security problems -- hoping for some guidance!
I have a subnet that I am using as a NAT block for one of my inside subnets.
NAT from inside->outside : Convert source 10.0.0.0/23 to 10.100.0.0/23
I am doing EIGRP with the outside. I need to originate 10.100.0.0/23 and advertise it to the outside EIGRP neighbor. However, the ASA won't originate the block because its not in the routing table.
CiscoASA#show route | inc 10.100.0.0
CiscoASA#
I tried doing an interface-level summary to override this behavior.
interface Port-channel21 (outside interface)
summary-address eigrp 10 10.100.0.0 255.255.254.0
CiscoASA#show route | inc 10.100.0.0|Null0
CiscoASA#
But the route still isn't in the table, no Null0 route gets generated, and the neighbor doesn't see the summary.
As far as I can tell, there is no static null route or loopback interface functionality in the code I'm using (9.1).
What is the correct way to get a NAT block into the routing table, and then into EIGRP?