topic Hi Paul, in Network Security

Routing traffic to site-to-site VPN

Paul M1 — Tue, 12 Mar 2019 07:01:33 GMT

Hey folks,

Quick question regarding routing on ASAs;

I have a site to site VPN using a crypto map with an ACL for interesting traffic. But do I need to configure a routing protocol to forward the traffic to the tunnel?

thanks,

Paul

Hi Paul,

rvarelac — Thu, 10 Dec 2015 16:21:02 GMT

Hi Paul,

Is not necessary to have a routing protocol running in order to route the traffic.

The only requirement is that the destination networks in the interesting traffic are send over the interface where the crypto map is applied. Normally this is accomplish through static routes.

Hope it helps

-Randy-

So a default route that sends

Paul M1 — Thu, 10 Dec 2015 16:33:53 GMT

So a default route that sends all the traffic to the outside interface will make sure that any 'interesting' traffic will be encrypted and tunneled ?

Right, that will work as long

rvarelac — Thu, 10 Dec 2015 16:46:13 GMT

Right, that will work as long as you don't have any overlapping route pointing this traffic to the inside interface.

thanks

Paul M1 — Thu, 10 Dec 2015 16:47:59 GMT

thanks