Link to home
Start Free TrialLog in
Avatar of pspomaha
pspomahaFlag for United States of America

asked on

Cisco EASYVPN

We have a cisco asa 5510 at our main office and a ASA 5505 at a remote office. We have set easy vpn at the remote site due to us not being able to get a static ip address. The remote site can connect to the main office. The remote site can ping and access all network items at the main office. The problem is the the main office cannot connect to the remote location.


Thanks
SOLUTION
Avatar of lruiz52
lruiz52
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of pspomaha

ASKER

This would not be the answer as we can connect from the remote to the main site.
You need to configure reverse route injection so that your main site has a return path

Sample:

crypto dynamic-map crypto_map_name 10 set reverse-route
Do you have to run OSPF with reverse route injection?
If you want your OSPF process to know about it you will need to redistribute them:

Create the route map:

access-list OSPFredistribute standard permit VPN.IP.POOL.ADDRESSES 255.255.255.0

route-map redistribute permit 1
 match ip address OSPFredistribute

Under the OSPF process:

redistribute static subnets route-map redistribute

Edit: You don't need to have a dynamic routing protocol on your ASA if all your traffic defaults to it as a gateway anyway, as the ASA will know of the RRI routes as static routes.
I have set RRI on the asa but when i try run a trace from the main office to the remote office it trys to go out the internet.

I am not running ospf just static routing. what else has to be done to get this to work?
When your office is connected via VPN do you see their network in the ASA's routing table via `show route` ?
No i do not see there subnet.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
It is set up on the headend asa. I set it up in asdm.