reverse-route in IPsec

[mahesh-gohil]

Dear all,

Can anybody explain the use of reverse-route in Ipsec with help of any diagram.

Please help

Regards

Mahesh

[Collin Clark]

Cisco documentation explains it thoroughly.

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_rev_rte_inject_external_docbase_0900e4b1805b0675_4container_external_docbase_0900e4b1807b3707.html

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00809d07de.shtml

[mahesh-gohil]

I have below network

Remote client---> Ipsec router----> MPLS cloud----> customer network

I have enabled reverse-route for one vrf called RAVPN-TESTING on Ipsec router

-----------

crypto dynamic-map RAVPN-TESTING 10

set transform-set CommonTransform

set isakmp-profile RAVPN-TESTING

reverse-route

-----------

I am running BGP between MPLS cloud and customer network .

Now whether I enable or disable reverse-route I am always receiving the Ipsec assigned Ip address 192.168.1.2/32 in customer network

I am not clear what is the role of reverse-route here

Thanks in advance

[Collin Clark]

Basically it enters the far end subnets into the local routing table. From there you can redistribute it into your interior routing protocol.

[mahesh-gohil]

Hi collin,

You mean to say Ip assigned to remote cliendt will be available to customer network of central site or i understood wrongly

Please explain

thanks in advance

[Collin Clark]

In a L2L there are not 'assigned IPs' so I think we have some confusion there.