Need Assistance with Routing Traffic from ASA5510 > 2821 Router (DMVPN) > VPN Traffic to Spoke Sites

Cisco Guru,

I have project that I'm working on, I want to route all the traffic to the ASA5510.  My goal is to have the 2821 Router (DMVPN) in front of the ASA5510 and be able to route LAN traffic to VPN and back.  When I attempt to do this I'm not able to pass LAN traffic to the router and out to the spoke sites through VPN.  From the ASA to the router I was able to ping but not from any devices inside interface from the LAN.  Currently, I'm using 192.168.0.x /23 which consist of 192.168.0.x and 192.168.1.x.  On the ASA, I thought as long as it was on a different subnet I was able to make it work.  The purpose for doing this project is to support 2 gateways on the ASA.  I can't get the spoke site to see the traffic pass the 2821 router.

This is how I configured the ASA5510 and 2821 Router.

ASA5510 Config
FW(config)# int ethernet 0/2
FW(config-if)# ip address 192.168.191.2 255.255.0.0
FW(config-if)# nameif VPN_TRAFFIC
FW(config-if)# security-level 100
FW(config-if)# no shut

FW(config)# access-l VPN permit ip any any
FW(config)# access-g VPN in interface VPN_TRAFFIC
FW(config)# same-security-traffic permit intra-interface
FW(config)# same-security-traffic permit inter-interface
FW(config)# access-l no_nat permit ip any 192.168.0.0 255.255.0.0
FW(config)# nat (inside) 0 access-l no_nat
FW(config)# route VPN_TRAFFIC 192.168.0.0 255.255.0.0 192.168.192.1

2821 Router Config
2821#config t
2821(config)#ip route 192.168.0.0 255.255.0.0 192.168.192.2

I've added a diagram of the project.  If you need additional information I can provide please let me know.Start Free Trial