reverse route

[davy.timmermans]

I was playing with reverse routing and noticed the following behaviors

1)it can't deal with permit ip any any? Exact From subnet --> To subnet required

2)the created static routes are not the same as usual static routes? see below

SPOKE -- HUB1

|

|

HUB2

HUB1 and HUB2 are connected and talking RIP.

Dynamic tunnel terminates on HUB1

I do a ping from SPOKE_IP to a loopback LOO on HUB2

thus traffic goes via SPOKE to HUB1 to HUB2

I see that a static route is created on HUB1. The route is redistributed in RIP and available on HUB2.

But from HUB1 I can't ping SPOKE_IP while it is possible via HUB2 which passes HUB2

[Peter Paluch]

Hi Davy,

1.) You can't use "permit ip any any" as the ACL for reverse route creation. That is simply too unspecific and can't be used as a template to generate routes in your routing table. Note that the reverse-route uses the destination part in the crypto map's ACL to generate routes into the routing table.

2.) I do not quite understand the description of your topology and router inerconnections. Is it possible for you to post the entire configurations of all three routers?

Best regards,

Peter