cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
configure & troubleshoot anyconnect
349
Views
0
Helpful
3
Replies
Highlighted
Beginner

Full L2L Tunnel

Hello,

I am curious to know if there is a way to make a full tunnel for a L2L option. I need to have all Internet traffic go through a trusted Internet connection. I know I can do this doing GRE over IPSec but was hoping for an alternative solution.

Thanks in advance

-Chris           

Everyone's tags (5)
1 ACCEPTED SOLUTION

Accepted Solutions

Full L2L Tunnel

Hi Cristopher,

When you create a LAN-to-LAN tunnel you define protected traffic in the crypto ACL, so if you would like to send all the traffic across the LAN-to-LAN tunnel, then do the following:

hostname(config)# access-list l2l_list extended permit ip 192.168.0.0 255.255.0.0 any

hostname(config)# crypto map abcmap 1 match address l2l_list

Where 192.168.0.0/16 is your LAN.

HTH.

Portu.

Please rate any helpful posts

3 REPLIES 3

Full L2L Tunnel

Hi Cristopher,

When you create a LAN-to-LAN tunnel you define protected traffic in the crypto ACL, so if you would like to send all the traffic across the LAN-to-LAN tunnel, then do the following:

hostname(config)# access-list l2l_list extended permit ip 192.168.0.0 255.255.0.0 any

hostname(config)# crypto map abcmap 1 match address l2l_list

Where 192.168.0.0/16 is your LAN.

HTH.

Portu.

Please rate any helpful posts

Beginner

Re: Full L2L Tunnel

Thanks! That's what I thought but wanted to confirm.

Sent from Cisco Technical Support iPhone App

Re: Full L2L Tunnel

You are very welcome

Further information:

Configuring LAN-to-LAN VPNs

HTH.

Portu.

Please rate any helpful posts