Core issue
When Cisco EzVPN is used in the Network Extension mode to connect to a VPN concentrator with Reverse Route Injection (RRI) enabled, no route is injected for interfaces configured with a 32-bit netmask.
An example for such an interface is a loopback with a /32 IP address, used for remote management through the VPN tunnel.
This problem occurs only when EzVPN is used on the router, and does not affect regular LAN-to-LAN configuration on both sides.
Resolution
This issue is due to the presence of Cisco bug ID CSCsc66851.
As a workaround, use a netmask that is lower than 32 bits.
Problem Type
Troubleshoot software feature
Product Family
Routers
VPN - hardware & software clients
VPN 3000 Software Version
4.7
VPN 3000 Model
3060
3080
3015
3030
VPN Tunnel End Points
Router
VPN 3000 series
Features & Tasks
Reverse route injection
Easy VPN
Network extension mode
VPN Protocols
IPSec
Bug ID
Bug ID not listed