Link to home
Start Free TrialLog in
Avatar of SneakyJones
SneakyJones

asked on

Custom subnet mask and Cisco ASA 5510 site to site issue

just wondering if it is possible to have a site to site tunnel with each side using a different subnet mask? My issue is that I setup a tunnel between two sites. One site is using a 23 bit mask (10.9.6.0 /23) and the other site is using a 24 bit mask (10.10.10.0 /24). The configs mirror each other on both sides but I keep getting an error indicating that there is a mask mismatch. Once I change the configs so that each site's mask matches ex I change 10.10.10.0 /24 to 10.10.10.0 /23, the tunnel comes up.
Avatar of Istvan Kalmar
Istvan Kalmar
Flag of Hungary image

Hi,

Could you show the config..?

Best regards,
Istvan


This ACL do you need for VPN:
 
access-list VPN extended permit ip 10.10.10.0 255.255.255.0 10.9.6.0 255.255.254.0 

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of surbabu140977
surbabu140977
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial