November 19, 2008 02:28am pst

1. batry_boy 632,921
2. lrmoore 520,600
3. PeteLong 141,217
4. Voltz-dk 120,870
5. MrHusy 120,045
6. mkielar 107,219
7. JFrederic... 103,500
8. Cyclops3... 98,738
9. Pugglewu... 73,677
10. _jesper_ 65,025
11. harbor235 50,640
12. rsivanandan 49,505
13. grblades 46,350
14. raptorjb007 44,800
15. nodisco 40,900
16. arnold 40,323
17. ck459 39,525
18. 2PiFL 35,575
19. RPPreacher 35,046
20. Jay_Gridley 34,935
21. from_exp 34,120
22. mabutterfi... 33,425
23. MikeKane 32,090
24. clearacid 31,205
25. naughton 28,380

1. lrmoore 2,467,881
2. batry_boy 1,001,045
3. rsivanandan 352,134
4. grblades 349,235
5. PeteLong 328,058
6. nodisco 277,487
7. calvinetter 254,590
8. MrHusy 241,746
9. Voltz-dk 228,809
10. Cyclops3... 215,644
11. JFrederic... 160,500
12. harbor235 121,650
13. tim_holman 120,177
14. carribeant... 108,132
15. mkielar 107,219
16. keith_ala... 105,619
17. _jesper_ 86,525
18. Pugglewu... 73,677
19. RPPreacher 73,023
20. stressedo... 60,512
21. td_miles 60,417
22. pruecons... 57,463
23. charan_j... 55,118
24. jjoseph_x 46,722
25. billwharton 45,258

07.09.2008 at 07:43AM PDT, ID: 23550433

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.2

Need Assistance with Routing Traffic from ASA5510 > 2821 Router (DMVPN) > VPN Traffic to Spoke Sites

Asked by chunjo in Network Routers, Virtual Private Networking (VPN), Cisco PIX Firewall

Tags: Cisco, ASA, 5510, ASA5510 need to route traffic to 2821 Router (DMVPN)

Cisco Guru,

I have project that I'm working on, I want to route all the traffic to the ASA5510. My goal is to have the 2821 Router (DMVPN) in front of the ASA5510 and be able to route LAN traffic to VPN and back. When I attempt to do this I'm not able to pass LAN traffic to the router and out to the spoke sites through VPN. From the ASA to the router I was able to ping but not from any devices inside interface from the LAN. Currently, I'm using 192.168.0.x /23 which consist of 192.168.0.x and 192.168.1.x. On the ASA, I thought as long as it was on a different subnet I was able to make it work. The purpose for doing this project is to support 2 gateways on the ASA. I can't get the spoke site to see the traffic pass the 2821 router.

This is how I configured the ASA5510 and 2821 Router.

ASA5510 Config
FW(config)# int ethernet 0/2
FW(config-if)# ip address 192.168.191.2 255.255.0.0
FW(config-if)# nameif VPN_TRAFFIC
FW(config-if)# security-level 100
FW(config-if)# no shut

FW(config)# access-l VPN permit ip any any
FW(config)# access-g VPN in interface VPN_TRAFFIC
FW(config)# same-security-traffic permit intra-interface
FW(config)# same-security-traffic permit inter-interface
FW(config)# access-l no_nat permit ip any 192.168.0.0 255.255.0.0
FW(config)# nat (inside) 0 access-l no_nat
FW(config)# route VPN_TRAFFIC 192.168.0.0 255.255.0.0 192.168.192.1

2821 Router Config
2821#config t
2821(config)#ip route 192.168.0.0 255.255.0.0 192.168.192.2

I've added a diagram of the project. If you need additional information I can provide please let me know.Start Free Trial

Attachments:

Slide1.JPG (30 KB) (File Type Details)

Current Network