Managing Remote Routers over a VPN Tunnel

Document

Jul 2, 2009 10:00 PM
Jul 2nd, 2009

Managing remote routers, which use only site-to-site VPN for connectivity, can sometimes be a challenge. Most management services on the router send traffic sourced from the interface closest to the destination (typically the outside or WAN interface). However, this traffic will likely not hit your crypto maps and thus never reach theheadend through the VPN tunnel (possibly leaving you unable to remotely manage the router).

To remedy this problem on your remote routers, set the source-interface option for your protocols to the interface on your remote LAN. This causes the traffic to be sourced from the specified interface, hit the crypto maps, and be directed through the VPN tunnel to the headend. Some common examples are listed below (replace e0 with the interface on your remote LAN).

ip ssh source-interface e0
ip ftp source-interface e0
ip tacacs source-interface e0
ip telnet source-interface e0
ip tftp source-interface e0
ip domain lookup source-interface e0
ntp source e0

- Jonathan Strine, The Patriot-News Co., Harrisburg, PA, USA

To receive the latest information on Cisco online tools, certifications, support documentation, insights from Cisco experts and peers, and upcoming events, check out the Cisco Technical Services Newsletter today.

Average Rating: 0 (0 ratings)

Comments

Actions

Login or Register to take actions

This Document

Posted July 2, 2009 at 10:00 PM
Stats:
Comments:1 Avg. Rating:0
Views:3203 Contributors:1
Shares:0

Related Content

Documents Leaderboard

Rank Username Points
1 65
2 56
3 55
4 30
5 24
Rank Username Points
5