cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
313
Views
0
Helpful
1
Replies

IOS IPSec VPN - Forwarding out non-default routed interface

response3
Level 1
Level 1

Hi all,

I have a setup with 2 ISP's, and a crypto map applied to the interface of each ISP. The default route points out ISP1. I would like to connect a client VPN to the non-default routed interface. My question is how does the router know which interface to send the packets with private source/destination IP's of the other end? I know there is an IP local pool statement given to the VPN group, but when is that taken into consideration?

I've never seen a route statement created for the IP's in the local pool, so can someone explain the logic of the router?

1 Reply 1

tstanik
Level 5
Level 5

For sending the packets to the private source/destination IP the router will normally use the default gateway. However certain traffic can be classified and can be made to go through some other routed interface. The IP local pool has no relation to the routing decision made by the router.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: