Problem: bb01.lsrei01 is preferring a supernet static route to null0 over an external /32 LSA: 77.73.147.245 ip route 77.73.144.0 255.255.248.0 Null0 200 (needed for bgp announcement) router ospf 1 log-adjacency-changes passive-interface default no passive-interface GigabitEthernet0/1 no passive-interface GigabitEthernet0/2 no passive-interface GigabitEthernet0/3 network 77.73.144.0 0.0.0.255 area 0 default-information originate always bb01.lsrei01#sho ip ospf database external 77.73.147.245 OSPF Router with ID (77.73.144.65) (Process ID 1) Type-5 AS External Link States LS age: 259 Options: (No TOS-capability, DC) LS Type: AS External Link Link State ID: 77.73.147.245 (External Network Number ) Advertising Router: 77.73.144.69 LS Seq Number: 80000004 Checksum: 0x944C Length: 36 Network Mask: /32 Metric Type: 2 (Larger than any link state path) TOS: 0 Metric: 20 Forward Address: 77.73.144.9 External Route Tag: 0 bb01.lsrei01#sho ip route 77.73.147.245 Routing entry for 77.73.144.0/21 Known via "static", distance 200, metric 0 (connected) Advertised by bgp 42579 Routing Descriptor Blocks: * directly connected, via Null0 Route metric is 0, traffic share count is 1 bb01.lsrei01#sho ip route 77.73.144.9 <------------ next hop from the LSA Routing entry for 77.73.144.8/29 Known via "connected", distance 0, metric 0 (connected, via interface) Routing Descriptor Blocks: * directly connected, via GigabitEthernet0/2 Route metric is 0, traffic share count is 1 Yet this one is fine??? - bb01.lsrei01#sho ip ospf database external 77.73.148.32 OSPF Router with ID (77.73.144.65) (Process ID 1) Type-5 AS External Link States LS age: 426 Options: (No TOS-capability, DC) LS Type: AS External Link Link State ID: 77.73.148.32 (External Network Number ) Advertising Router: 77.73.144.71 LS Seq Number: 800005CE Checksum: 0x9B78 Length: 36 Network Mask: /32 Metric Type: 2 (Larger than any link state path) TOS: 0 Metric: 20 Forward Address: 0.0.0.0 External Route Tag: 0 Routing Bit Set on this LSA LS age: 231 Options: (No TOS-capability, DC) LS Type: AS External Link Link State ID: 77.73.148.32 (External Network Number ) Advertising Router: 77.73.144.72 LS Seq Number: 800005CC Checksum: 0x997B Length: 36 Network Mask: /32 Metric Type: 2 (Larger than any link state path) TOS: 0 Metric: 20 Forward Address: 0.0.0.0 External Route Tag: 0 bb01.lsrei01#sho ip route 77.73.148.32 Routing entry for 77.73.148.32/32 Known via "ospf 1", distance 110, metric 20, type extern 2, forward metric 510 Last update from 77.73.144.11 on GigabitEthernet0/2, 00:05:52 ago Routing Descriptor Blocks: * 77.73.144.11, from 77.73.144.72, 00:05:52 ago, via GigabitEthernet0/2 Route metric is 20, traffic share count is 1 77.73.147.245 is being advertised by an asa: router ospf 1 router-id 77.73.144.69 network 77.73.144.0 255.255.255.0 area 0 area 0 log-adj-changes redistribute static subnets route-map VPN-REDISTRIBUTE ! route-map VPN-REDISTRIBUTE permit 10 match ip address Remote-Staff_netblock ! access-list Remote-Staff_netblock standard permit 77.73.147.224 255.255.255.224 ! crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set reverse-route fw01# sho route | i 77.73.147.245 S 77.73.147.245 255.255.255.255 [1/0] via 77.73.144.9, outside