My VPN terminate on an inside IOS router (7204VXR) connected to local switched lan with a 10/100 Lan card in trunk mode.
VPN trafic comes from outside accross pix inside interface (static nat and access list) mixed with inbound/outbound clear trafic
I have a free Pix Lan interface that I would use to forward only VPN encrypted traffic (Isakmp & Esp)
I connected that pix intf to a switch port and created static nat for 7204 on this new interface.
I created a new Vlan associating this switch port and a new subinterface on 7204 FastEth interface, with crypto map.
Encrypted VPN traffic successfully comes from Pix in new Vlan to 7204 sub intf, but outgoing VPN replies from 7204 go to its default route, then finally to inside Pix interface, where it is dropped.
How can I configure 7204 in order to reply through the same subinterface as VPN traffic comes ?
I thought to a route-map but no way to specify dest IP add since it can be anything (ISP's dependant).
Is there a way to route-map based on protocol (ISAKMP,ESP,UDP4500) ?
thanks for help
