Routing traffic to site-to-site VPN

[Paul Morgan]

Hey folks,

Quick question regarding routing on ASAs;

I have a site to site VPN using a crypto map with an ACL for interesting traffic. But do I need to configure a routing protocol to forward the traffic to the tunnel?

thanks,

Paul

[rvarelac · Accepted solution]

Hi Paul, 

Is not necessary to have a routing protocol running in order to route the traffic.

The only requirement is that the destination networks in the interesting traffic are send over the interface where the crypto map is applied. Normally this is accomplish through static routes. 

Hope it helps

-Randy-

[Paul Morgan]

So a default route that sends all the traffic to the outside interface will make sure that any 'interesting' traffic will be encrypted and tunneled ?

[rvarelac · Accepted solution]

Right, that will work as long as you don't have any overlapping route pointing this traffic to the inside interface. 

[Paul Morgan]

thanks