topic crypto map vpn_map1 2 set reverse-route command needed? in Network Security

crypto map vpn_map1 2 set reverse-route command needed?

CiscoBrownBelt — Fri, 21 Feb 2020 17:23:07 GMT

So on a 4100 Firepower, I see the command "crypto map vpn_map1 2 set reverse-route". I am not all sure it is needed.
The IPSEC profile is for has all static IPs on both ends (for sources, destinations, etc.).
No IGP protocols are running the the FW.
Anyone know what else I should check in regards to why this command may be needed?

Re: crypto map vpn_map1 2 set reverse-route command needed?

Rob Ingram — Fri, 09 Aug 2019 14:01:56 GMT

Hi,
If you aren't using a routing protocol to redistribute those VPN routes then it probably isn't necessary - it's just creating static routes for each VPN network, but doing nothing with them. If you had a redundant configuration and using routing to failover it would be useful.

HTH