cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
380
Views
0
Helpful
1
Replies

impact expected when adding tunnel gateway

charlie.ford
Level 1
Level 1

What impact can we expect when we add a tunneled command to an existing firewall configuration?

I have attached my configuration to TAC case    #622427385         but if you advise I can share it with you?

route inside 0 0 10.22.16.1 tunneled

Especially concerned about the 50 or so IPSec tunnels and the Employee SSL/IPSec. We have some Employee VPN routing issues with a company we just acquired and we must keep the VPN tunnel to then as a backup until a (backup) circuit is installed.

This firewall is our VPN gateway and our default gateway to the Internet

Perhaps best practice is to have a tunnel gateway in the first place?

1 Reply 1

Luis Silva Benavides
Cisco Employee
Cisco Employee

Hi Charlie,

Basically this command will force the ASA to send the VPN trafifc to 10.22.16.1 after it is decrypted.

It depends on your bussiness needs, if the router 10.22.16.1 knows how to get to the all the required destinations it will be a good approch and will reduce the routing table size on the ASA.

Luis

Luis Silva
Review Cisco Networking products for a $25 gift card