IPSEC VPN from router to ASA default route injection.

[westie1981]

Hi,

I have a HA VPN built between two routers and an ASA.  The ACL for the VPN is as follows on the routers.

permit ip x.x.x.x any - to the internet

What I want to achieve is if the VPN is up/active then a 0.0.0.0 route is injected into the routing tables without putting a static route in.

I have tried this with reverse route injection on the crypto map but to no avail.

Can anyone enlighten me as to wether or not injecting routes into the routing table based on the IPSEC's availability is possible without having to put a static 0.0.0.0?

Thanks

Paul

[Jennifer Halim]

You can configure reverse route, and also redistribute static on your dynamic routing protocols.

Reverse route can only inject route if you are running dynamic routing protocols on your ASA, and configure redistribute static on your routing process.