EasyVPN + xauth + reverse route injection

[andrew]

I can assign a static IP for the IPSec connection using  Framed-IP-Address = 172.16.15.1 with xauth authentication.

Is it possible to add additional crypto subnets for a remote IPSec client using RADIUS?

See attached crude drawing.

Thanks,

Andrew

[Marcin Latosiewicz]

Andrew,

I'm not sure I understand the question? Could you maybe re-phrase?

If you're asking about RRI for EZVPN yes it does exist (on both ASA and IOS), a very neat solution on IOS is to use DVTI ezvpn configuration.

On ASA under dynamic-map you can have 'set reverse-route'.

Let me know how we can help you better

Marcin