ASA RRI on L2L VPN w/NAT

[Darren Roback]

I have a L2L VPN tunnel on a Cisco ASA 5520 that I'm trying to get RRI to work on. On my cryptomap ACL I have defined a local object-group and a remote object-group, and I'm performing one-to-one NAT on the local group. I also have a route map configured that will take the static routes and redistribute them into my EIGRP AS. Two things I've noticed -1, I'm not seeing any static routes on my ASA that point to the remote subnets, and 2, the ACL that I've used in my route map definition is not getting any hits on it.

Any thoughts on where I may be going wrong?

Thanks,

Darren

[Jennifer Halim · Accepted solution]

Do you have the following configured:

crypto map set reverse-route

If you do, can you remove it and re-add it and see if that resolve the issue?

[Darren Roback]

Hi Jennifer -

I figured it out. Somehow my crypto map ACL dropped. I did have the reverse-route command specified, and once I reapplied my crypto map ACL everything took off.

Thanks for the reply!

Darren