Can you add routes to use ipsec0 interface on SRP521W?

[Troy Moldenhauer]

I bought a couple of these to trial for location to remote telemedicine sites.  However I am only able to route one network range over the IPSec VPN.  I have to route multiple network ranges, and I am not able to make any modifications to the static routes for the ipsec0 interface, only WAN1 and LAN1.  Ideally, I would change the default route to use ipsec0.  But if that isn't an option, then just add specific ranges. 

Can anyone help with this?

Thanks,

Jim

[Troy Moldenhauer]

I was looking up GRE tunnels, and wondering if this was a possibility.  I have a 4507 and a 7010 switch behind an ASA 5520 and a 3030 concentrator for options at the main site.

[Andrew Hickman]

Hi Jim,

As you've seen it is only possible to add a single route via an IPSec tunnel. 

If you can use GRE, that might be better, as you can route to multiple subnets with this feature.

Andy

[Troy Moldenhauer]

That sucks.  I have never used a GRE tunnel before, I tried yesterday building one to my Nexus 7010 with no success.  It seems like it would be so easy if I could just get the option to select the ipsec0 interface when adding static routes.

Can you recommend the next step router or firewall I could use to be able to send all traffic over the VPN, or at least add additional routes or network lists to send over the VPN?  I am assuming the ASA 5505 would work perfectly, but I was hoping for a more budget concious option as we'll have these all over town.

Otherwise, if anyone can give me tips or suggestions on how to build the GRE tunnel from the SRP521W to a Nexus 7010 that would be great.

Thanks,

Jim

[Troy Moldenhauer]

This is the ASA 5505 bundle I was considering:

http://www.cdwg.com/shop/products/Cisco-ASA-5505-10-user-Bundle/1065037.aspx

I assume this bundle will not require me to have a router in the back end and would accomplish routing for my devices behind it along with IP address assignment via dhcp if needed, with VPN tunnel back to my main ASA 5520 and allow all traffic to be transmitted over the VPN, or specific network ranges.