cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
485
Views
0
Helpful
2
Replies

Creating a s2s vpn ikev2 with different inside network classes

Fartingdragon
Level 1
Level 1

let's say inside network A is 10.0.0.0 /24 and the peer on the other inside is 192.168.1.0/24. Would a static route on each make each peer pingable and see each other? Or is this mainly done via the ACL? I am expecting NAT should be turn off on the vpn traffic.

 

how about for remote vpns?

2 Replies 2

@Fartingdragon if you were using a route based policy then yes defining static route via the tunnel interface would work.

If you are using a policy based VPN with a crypto map, the ACL defines the interesting traffic to encrypt, then you would have to modify the ACL with the new networks.

route VPN or policy VPN both you need route to other side LAN and this route must pass through the interface you config with crypto map or tunnel protection.