Hello,
This is a generic question about an IPSEC tunnel which is to run between 2 devices which have a single physical interface on each side of the tunnel...
My concern is how the crypto ACLs will behave when traffic hits the interface inbound and needs to be sent across the tunnel, and how the crypto ACLs should be applied on the opposing side to ensure there is no duplicated encryption...
Also, does a routing decision get made after the crypto ACL decides wether or not to send traffic across the tunnel? i.e will a permit ACL send across to the other side of the tunnel ignoring the local routing table for a potentially routable destination?
Has anyone had a similar issue? Is the solution possible?
Any help would would be greatly appreciated.
Thanks
