Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

How to configure reverse route injection on IOS software

What is Reverse Route Injection?

Routing is a critical part of almost every IPsec VPN deployment. Be certain that your encryption devices such as Routers and PIX or ASA Security Appliances have the proper routing information to send traffic over your VPN tunnel.

Moreover, if other routers exist behind your gateway device, be sure that those routers know how to reach the tunnel and what networks are on the other side.

Reverse Route Injection is used to learn routes without the use of dynamic routing protocols like EIGRP, OSPF or RIP, the problem with dynamic routing protocols are - you not always want to expose our whole infrastructure by sharing our routing updates or different parties use different routing protocols.

Core issue

Reverse Route Injection (RRI) provides a scaleable mechanism to dynamically learn and advertise the IP address and subnets that belong to a remote site that connects through an IPSec VPN tunnel.


For information on configuring RRI, refer these documents:

Problem Type

How to (General Information)

Product Family

Firewall - IOS firewall

Features & Tasks

Reverse route injection

Version history
Revision #:
1 of 1
Last update:
‎06-18-2009 03:48 PM
Updated by:
Labels (1)
Everyone's tags (3)