If the SDM software did not already generate the appropriate static routes, then you can configure them manually:
You have to configure static routes pointing to the subnets of the remote network on both sides. This is needed because the routing protocol updates cannot pass over an IPSec VPN tunnel. (GRE over IPSec is needed for this).
Then you need to configure a static route pointing to the peer interface of the VPN on both sides (if you have no such route in the routing table). This is needed so the initial isakmp and ipsec negotiations can occur.
If you tell more about your network then I will be able to tell you more specific guidelines.
Thanks for your help. Here is a little on my network. I have an 877 at site A, and I am needing to connect to Site B (Another Company) wich is being brought up by their network guys.So they send me their mirror config wich is below. Like I mentioned in a previous postI have used SDM and created the site to site with nowhere to place the static route.
Here is the mirror they sent me.
Ip route 192.168.94.0 255.255.255.0 access-list 105
Thanks for all your help, the configuration that I provided was sent by them to me for setup on my end. I am using SDM and cannot seem to figure where the IP ROUTE address goes. I can setup the site to site but when I test the connection I get no response. I am not sure if I am supposed to set up the connection via gre over ipsec but I have already sent a note.
Good day, I was informed it is not a gre over ipsec but a lan to lan tunnel, would you be able to assist me with this via SDM? I really need to set the static mapping. NOTE I am using a Cisco 877 I have configured the DSL to interface dialer0. but still cant bring up this vpn.
Thanks again, I do have access to the CLI, and they will only send me a mirror config from their router not the whole config, I have asked. . I could possable send you my running config, I hope this is enough, please give me your thoughts.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :