cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1017
Views
0
Helpful
1
Replies

Will an ASA Redistribute IPSec Tunneled Subnets via EIGRP

mloraditch
Level 7
Level 7

Is this possible? My ASA is not going to be my 0.0.0.0/0.0.0.0 gateway and I would like to avoid a massive table of static routes.

Thanks in advance!

1 Reply 1

Ivan Martinon
Level 7
Level 7

We have 2 options here:

Easiest is to have your remote peers connecting to your ASA to a dynamic crypto map, then you can configure Reverse Route Injection on this dynamic crypto map and and have the static routes created by RRI redistribued into EIGRP. This will cause that when the tunnel comes up RRI will automatically inject a static route to your device which will be injected to EIGRP. With static crypto maps, I believe these routes will be advertised regardless of the tunnel not being created and completed, but should follow the same principle.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: