<div>
You can redistribute static route into OSPF. If it is the only static route present there is no need to filer routers during redistribution.
<pre><code class="code-1 nolinks" id="code-20-42538069-1"><span>router ospf 1</span>
<span> redistribute static subnet</span>
</code></pre>
</div>


<div>
Unfortunaetly there are multiple static routes on the Gateway Router as it faces outside our network so I can't redistribute the subnet.
</div>


<div>
You can still redistribute, but, in that case, you need to filter static redistribution.<br />

<pre><code class="code-1 nolinks" id="code-20-42538079-1"><span>router ospf 1</span>
<span> redistribute static subnets route-map REDIST_STAT</span>
</code></pre>
And create REDIST_STAT route-map to redistribute only route that you want to advertise.
</div>


<div>
So on the outer router I did the following:<br />
ip access-list extended GW_Loopback_IPA<br />
permit ip 192.168.100.7 0.0.0.0 any log<br />
deny ip any any log<br />
deny tcp any any log<br />
deny udp any any log<br />
<br />
router ospf 1<br />
&nbsp;redistribute static subnets route-map GW_Loopback_IPA<br />
<br />
Went to the internal Router.<br />
typed:<br />
sho ip route<br />
<br />
Display shows as follows (editied):<br />
O &nbsp; &nbsp; 192.168.100.6 [110/2] via 192.168.2.246, 2wod, GigabitEthernet0/0/1<br />
S &nbsp; &nbsp; 192.168.100.7 &nbsp;[1/0] via 192.168.2.24<br />
O &nbsp; &nbsp; 192.168.100.8 [110/67] via 192.168.3.1, 3d02h, GigabitEthernet0/0/3<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [110/67] via 192.168.1,150 3d02h, GigabitEthernet0/0/0<br />
<br />
I'm still not able to ping from workstation 192.168.1.34.
</div>


<div>
Predrag Jovic,<br />
I've added the information (slightly modified)<br />
<br />
router ospf 1<br />
&nbsp;redistribute static subnets route-map GW_Loopback_IPA<br />
<br />
ip prefix-list GW_Loopback_Filter permit 192.168.100.7/32<br />
<br />
route-map GW_Loopback_IPA permit 10<br />
&nbsp;match ip address prefix-list GW_Loopback_Filter<br />
<br />
Initially I can ping from Workstation 192.68.1.32 to 192.168.100.7. &nbsp;After about 3 minutes I am not able to ping the address.<br />
As this is a NAT router is it possilbe that the NAT and NAT Pool EACL are affecting this?<br />
<br />
NAT is set as followed:<br />
<br />
ip access-list extended NAT<br />
deny udp host 192.168.1.2 eq domain host 192.168.1.142 log<br />
deny udp host 192.168.1.3 eq domain host 192.168.1.142 log<br />
deny icmp host 192.168.1.2 host 192.168.1.142 log<br />
deny icmp host 192.168.1.3 host 192.168.1.142 log<br />
permit ip any any<br />
<br />
ip nat pool External 192.168.236.137 192.168.236.137 netmask 255.255.248<br />
ip nat inside source list NAT pool External overload<br />
<br />
Show ip route display shows the same (editied):<br />
O &nbsp; &nbsp; 192.168.100.6 [110/2] via 192.168.2.246, 16:59:20, GigabitEthernet0/0/1<br />
S &nbsp; &nbsp; 192.168.100.7 &nbsp;[1/0] via 192.168.2.24<br />
O &nbsp; &nbsp; 192.168.100.8 [110/67] via 192.168.3.1, 16:59:20, GigabitEthernet0/0/3<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [110/67] via 192.168.1.150, 16:59:40, GigabitEthernet0/0/0
</div>


<div>
On local device static route should be present in routing table (since it has better administrative distance (AD)). If route is redistributed properly on device where route is redistributed should be visible in OSPF database (as external route).<br />
sh ip ospf database<br />
<br />
I don't know what can be issue, since I see only portion of configuration of one device.<br />
And, generally, <i><u>permit ip any any</u></i> is not allowed/supported in new IOS versions for nat access-list, so you should replace that statement in NAT ACL with more specific statements.
</div>


<div>
When I issue the sho ip ospf database on the internal router it states the following:<br />
Type-5 As External Link States<br />
Link ID = 192.168.100.7<br />
ADV Router = 192.168.100.6<br />
Age=1978<br />
Seq#= 0x800000D8<br />
Checksum=0x00536<br />
Tag=0<br />
<br />
show ip route shows that 100.7 is (S) Static.<br />
The Internal Router is directly connected to the NAT Router.<br />
<br />
On additonal Internal Routers that are not directly connected, the sho ip ospf database displays the following:<br />
Type-5 As External Link States<br />
Link ID = 192.168.100.7<br />
ADV Router = 192.168.100.6<br />
Age=192<br />
Seq#= 0x800000D8<br />
Checksum=0x000337<br />
Tag=0<br />
<br />
sho ip route does is listed as O E2 192.168.100.7 [110/20] via 192.168.2.XXX<br />
<br />
<br />
I am to assume that it is now showing in OSPF based on the output of the OSPF Database (show ip ospf database).
</div>


<div>
That is how it supposed to look like. Route is redistributed properly.
</div>


<div>
I'm seeing the OSPF change on my multiple routers througout my network but am still unable to ping the IPA 192.168.100.7 via multiple remote networks even though I can see the IPA being routed in OSPF.
</div>


<div>
Option 1:<br />
router where 192.168.100.7 is located does not have knowledge about source networks in routing tables (ping are reaching interface 192.168.100.7, but icmp replay is dropped or sent to WAN (best matching route is default route))<br />
Option 2:<br />
some device between devices is dropping pings (ACL, firewall), traffic is not natted (and router does not have return route)<br />
<br />
issue on &nbsp;router that is redistributing static <br />
debug ip icmp <br />
to check if pings are reaching interface.<br />
<br />
to remove debugging issue:<br />
u all<br />
<br />
That should provide you more information.
</div>


<div>
So I believe we are getting somewhere now.<br />
When I ping from IPA 192.168.1.32 --&gt; 192.168.100.7 I see no ICMP packets being caught in the debug which indicates it is not passing through the NAT router.<br />
<br />
When I ping from IPA 192.168.100.19 --&gt; 192.168.100.7 I see ICMP packets being caught in the debug with a value of:<br />
ICMP: echo reply sent, src 192.168.100.7, dst 192.168.236.137 (NAT IPA), topology BASE, dscp 0 topoid 0<br />
<br />
I then ping again from IPA 192.168.1.32 --&gt; 192.168.100.7 I see ICMP packets being caught in the debug with a value of:<br />
ICMP: echo reply sent, src 192.168.236.142 (GIG 0.0 NAT Router), dst 192.168.236.137 (NAT IPA), topology BASE, dscp 0 topoid 0<br />
<br />
I believe it has something to do with NAT which is making it work then not work.
</div>


<div>
Hi James. It's not that I don't want to help, but what we are discussing now is not in any way related to your original question.
<blockquote>
Cannot Route-MAP Loopback IPA into OSPF.<br />
<br />
Setting static routes I'm able to ping from a PC to IP Address (IPA) 192.168.100.7. &nbsp;I would like to have IPA 192.168.100.7 distributed via OSPF to illminate static routes.<br />
<br />
I've attempted to use Extended ACL but have failed.
</blockquote>
Original issue is resolved and now we are discussing why ping is still not working, which that is, generally, unrelated to solving redistribution problem.<br />
<br />
Related to your previous post:<br />
- as long as pings are reaching 192.168.100.7 and icmp reply is sent - there should be no NAT issue. NAT issue would be present in the case that ping is present, but source network is unknown. That would mean that traffic was not natted and route to the source of ping is not present in the routing table of the destination router. Now, since route to network 192.168.100.7/32 is correctly redistributed into OSPF if there is no some other issue along the path from ping source to 192.168.100.7/32 there should be no reason for pings not to reach 192.168.100.7 (problem should only be return path to the ping source)..
</div>


<div>
Thanks for you assistance. &nbsp;I've opened a Tech Support case with Cisco to identify why the IPA is re-distributed into OSPF and the subnet not showing up in the routing table.
</div>


<div>
router ospf 1<br />
&nbsp;redistribute static subnets route-map GW_Loopback_IPA<br />
!<br />
ip prefix-list FILTER permit 192.168.100.7/32<br />
!<br />
route-map GW_Loopback_IPA permit 10<br />
&nbsp;match ip address prefix-list FILTER
</div>


<div>
Followup:<br />
<br />
On the NAT Router I had to apply an additional lines:<br />
<br />
router ospf 1<br />
passive-interface default<br />
no passive-interface GIG 0/0<br />
<br />
Once this was applied it fixed all the remaining issues.
</div>


<div>
<div class="content wysiwyg-content">
Cannot Route-MAP Loopback IPA into OSPF.<br />
<br />
Setting static routes I'm able to ping from a PC to IP Address (IPA) 192.168.100.7. &nbsp;I would like to have IPA 192.168.100.7 distributed via OSPF to illminate static routes.<br />
<br />
I've attempted to use Extended ACL but have failed.<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w16/1302378/Trouble-Shooting.vsd" target="_blank" class="file-inline" title="Brief topology of current network diagram. (159 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Trouble-Shooting.vsd</a>
</div>
</div>


Brief topology of current network diagram.

Trouble-Shooting.vsd

Cannot Route-MAP Loopback IPA into OSPF.

Setting static routes I'm able to ping from a PC to IP Address (IPA) 192.168.100.7.  I would like to have IPA 192.168.100.7 distributed via OSPF to illminate static routes.

I've attempted to use Extended ACL but have failed.

How to  Cisco Route-MAP Loopback IPA into OSPF.

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.

Routers

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Networking software modules are interfaced with a framework implemented on the machine's operating system that implements the networking functionality of the operating system. The best known frameworks are the TCP/IP model and the OSI model. Systems typically do not use a single protocol to handle a transmission. Instead they use a set of cooperating protocols, sometimes called a protocol family or protocol suite.[9] Some of the best known protocol suites include: IPX/SPX, X.25, AX.25, AppleTalk and TCP/IP. Other protocols indirectly related to networking include the hypertext transfer protocol (HTTP) and its related technologies, Dynamic Host Configuration Protocol (DHCP), Domain Name Server (DNS) and other Internet protocols.