Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

EasyVPN + xauth + reverse route injection

I can assign a static IP for the IPSec connection using  Framed-IP-Address = 172.16.15.1 with xauth authentication.

Is it possible to add additional crypto subnets for a remote IPSec client using RADIUS?

See attached crude drawing.

Thanks,

Andrew

1 REPLY
Cisco Employee

Re: EasyVPN + xauth + reverse route injection

Andrew,

I'm not sure I understand the question? Could you maybe re-phrase?

If you're asking about RRI for EZVPN yes it does exist (on both ASA and IOS), a very neat solution on IOS is to use DVTI ezvpn configuration.

On ASA under dynamic-map you can have 'set reverse-route'.

Let me know how we can help you better

Marcin

206
Views
0
Helpful
1
Replies
CreatePlease to create content