cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1083
Views
0
Helpful
3
Replies

Full L2L Tunnel

cpratt
Level 1
Level 1

Hello,

I am curious to know if there is a way to make a full tunnel for a L2L option. I need to have all Internet traffic go through a trusted Internet connection. I know I can do this doing GRE over IPSec but was hoping for an alternative solution.

Thanks in advance

-Chris           

1 Accepted Solution

Accepted Solutions

Hi Cristopher,

When you create a LAN-to-LAN tunnel you define protected traffic in the crypto ACL, so if you would like to send all the traffic across the LAN-to-LAN tunnel, then do the following:

hostname(config)# access-list l2l_list extended permit ip 192.168.0.0 255.255.0.0 any

hostname(config)# crypto map abcmap 1 match address l2l_list

Where 192.168.0.0/16 is your LAN.

HTH.

Portu.

Please rate any helpful posts

View solution in original post

3 Replies 3

Hi Cristopher,

When you create a LAN-to-LAN tunnel you define protected traffic in the crypto ACL, so if you would like to send all the traffic across the LAN-to-LAN tunnel, then do the following:

hostname(config)# access-list l2l_list extended permit ip 192.168.0.0 255.255.0.0 any

hostname(config)# crypto map abcmap 1 match address l2l_list

Where 192.168.0.0/16 is your LAN.

HTH.

Portu.

Please rate any helpful posts

Thanks! That's what I thought but wanted to confirm.

Sent from Cisco Technical Support iPhone App

You are very welcome

Further information:

Configuring LAN-to-LAN VPNs

HTH.

Portu.

Please rate any helpful posts