cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2275
Views
0
Helpful
2
Replies
Highlighted
Beginner

Cisco Anyconnect clients routing routes

Hi,

I have a doubt about the behaivor of the Cisco ASA on the Anyconnect clients routing.

I can see that every time a Anyconnect client establishes a VPN connection with the ASA, a static route entry is created in the routing table of the ASA.

What ASA characteristic creates this static routes?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Hall of Fame Guru

Your question is not clear to me. Are you asking about the static route that is added to the routing table of the ASA for the IP address assigned to the client for this session? Or are you asking about some other static route?

When the AnyConnect client establishes a VPN session it is assigned an IP address from the configured pool. The ASA creates an entry in the routing table that associates the assigned pool address with the peer address of the client. The ASA uses this to be able to know how to send traffic to the VPN user to the correct remote IP address.

So the ASA characteristic is the effective use of the pool of IP addresses used for AnyConnect.

HTH

Rick

HTH

Rick

View solution in original post

2 REPLIES 2
Highlighted
Hall of Fame Guru

Your question is not clear to me. Are you asking about the static route that is added to the routing table of the ASA for the IP address assigned to the client for this session? Or are you asking about some other static route?

When the AnyConnect client establishes a VPN session it is assigned an IP address from the configured pool. The ASA creates an entry in the routing table that associates the assigned pool address with the peer address of the client. The ASA uses this to be able to know how to send traffic to the VPN user to the correct remote IP address.

So the ASA characteristic is the effective use of the pool of IP addresses used for AnyConnect.

HTH

Rick

HTH

Rick

View solution in original post

Highlighted

Hi Richard,

Thanks for the answer, that's what I wanted to know.

I was not sure about why a new static route with the Anyconnect client assigned IP address was created every time a new VPN session is established.