Hi, I just meet the same problem as you. I definitely agree with you, about Cisco ASA injecting the wrong route. As you add /24 in the network to solve that problem, my site is quite different. My purpose is to give every device that connects to ASA ...