Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
Start a conversation
607
Views
0
Helpful
4
Replies

Route VPN site to site on a route other than the default gateway

Go to solution
asstec2
Level 1
Level 1

ā€Ž03-22-2010 02:50 AM

I would like to route VPN site to site on a route other than the default gateway

Asa 5510

os 8.0 soon 8.3

1 interface line adsl  (surf) default gateway

1 interface line SDSL (10 VPN site to site)

1 interface LAN

that it is possible ?

thank you

Sorry for my English

Labels:
Preview file
48 KB
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
Jennifer Halim
Cisco Employee
Cisco Employee
In response to asstec2

ā€Ž03-22-2010 04:33 AM

Here is the assumption that I will make:

- Your SHDL interface ip address is 200.1.1.1, and next hop is 200.1.1.2

- Your LAN-to-LAN is terminated on this interface (crypto map interface SHDL)

- VPN peer 1 - 150.1.1.1, and LAN is 192.168.1.0/24

- VPN peer 2 - 175.1.1.1, and LAN is 192.168.5.0/24

Here is the routing based on the above assumption:

route SHDL 150.1.1.1 255.255.255.255 200.1.1.2

route SHDL 175.1.1.1 255.255.255.255 200.1.1.2

route SHDL 192.168.1.0 255.255.255.0 200.1.1.2

route SHDL 192.168.5.0 255.255.255.0 200.1.1.2

Hope that helps.

View solution in original post

0 Helpful
4 Replies 4

Go to solution
Jennifer Halim
Cisco Employee
Cisco Employee

ā€Ž03-22-2010 03:20 AM

Yes that is possible for the site-to-site vpn tunnel.

The VPN must terminate on the SDSL line interface of the ASA, and you would need to configure the following route pointing towards the SDSL line next hop:

- Route for the crypto peer addresses

- Route for the peer LAN subnets

Hope that helps.

0 Helpful

Go to solution
asstec2
Level 1
Level 1
In response to Jennifer Halim

ā€Ž03-22-2010 04:17 AM

Thank you for your response

Could you give me an example for different routing?

0 Helpful

Go to solution
Jennifer Halim
Cisco Employee
Cisco Employee
In response to asstec2

ā€Ž03-22-2010 04:33 AM

Here is the assumption that I will make:

- Your SHDL interface ip address is 200.1.1.1, and next hop is 200.1.1.2

- Your LAN-to-LAN is terminated on this interface (crypto map interface SHDL)

- VPN peer 1 - 150.1.1.1, and LAN is 192.168.1.0/24

- VPN peer 2 - 175.1.1.1, and LAN is 192.168.5.0/24

Here is the routing based on the above assumption:

route SHDL 150.1.1.1 255.255.255.255 200.1.1.2

route SHDL 175.1.1.1 255.255.255.255 200.1.1.2

route SHDL 192.168.1.0 255.255.255.0 200.1.1.2

route SHDL 192.168.5.0 255.255.255.0 200.1.1.2

Hope that helps.

0 Helpful

Go to solution
asstec2
Level 1
Level 1
In response to Jennifer Halim

ā€Ž03-22-2010 05:39 AM

thank you very much

it works

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents