Cisco ASA Firewall Active / Standby Failover

Hello Lee

Yes, this behaviour is expected. It is true that enabling FIPS mode on the ASA, it requires DH keys of 2048 bits or larger, which is something that IKEv1 does not support. For this reason, IKEv2 must be used with a DH key size of at least 2048 bits. Note that this is done based on FIPS certification compliance 140-2 of the ASA as part of the update in ASA 9.4(1) and later. More on this can be found at the following link:

In order to redistribute routes from BGP to EIGRP, you must use the redistribute command either under the router bgp configuration mode or under the address family mode. More on mutual redistribution between BGP and EIGRP can be found here:

Now if you want to redistribute only particular prefixes rather than all available BGP routes, then you can use the redistribute command with the appropriate route map that will filter out the particular prefixes you want. You can find more information about how to do this in the Cisco command reference for this command:

I hope this has been helpful!

Laz