pspomaha
asked on
Cisco EASYVPN
We have a cisco asa 5510 at our main office and a ASA 5505 at a remote office. We have set easy vpn at the remote site due to us not being able to get a static ip address. The remote site can connect to the main office. The remote site can ping and access all network items at the main office. The problem is the the main office cannot connect to the remote location.
Thanks
Thanks
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You need to configure reverse route injection so that your main site has a return path
Sample:
crypto dynamic-map crypto_map_name 10 set reverse-route
Sample:
crypto dynamic-map crypto_map_name 10 set reverse-route
ASKER
Do you have to run OSPF with reverse route injection?
If you want your OSPF process to know about it you will need to redistribute them:
Create the route map:
access-list OSPFredistribute standard permit VPN.IP.POOL.ADDRESSES 255.255.255.0
route-map redistribute permit 1
match ip address OSPFredistribute
Under the OSPF process:
redistribute static subnets route-map redistribute
Edit: You don't need to have a dynamic routing protocol on your ASA if all your traffic defaults to it as a gateway anyway, as the ASA will know of the RRI routes as static routes.
Create the route map:
access-list OSPFredistribute standard permit VPN.IP.POOL.ADDRESSES 255.255.255.0
route-map redistribute permit 1
match ip address OSPFredistribute
Under the OSPF process:
redistribute static subnets route-map redistribute
Edit: You don't need to have a dynamic routing protocol on your ASA if all your traffic defaults to it as a gateway anyway, as the ASA will know of the RRI routes as static routes.
ASKER
I have set RRI on the asa but when i try run a trace from the main office to the remote office it trys to go out the internet.
I am not running ospf just static routing. what else has to be done to get this to work?
I am not running ospf just static routing. what else has to be done to get this to work?
When your office is connected via VPN do you see their network in the ASA's routing table via `show route` ?
ASKER
No i do not see there subnet.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It is set up on the headend asa. I set it up in asdm.
ASKER