VPN Routing Question

[JohnTylerPearce]

This is the routing table of are VPN_ASA

route outside 0.0.0.0 0.0.0.0 20.90.21.1 1

route inside flair 255.255.255.255 172.18.0.1 1

route inside 20.110.208.0 255.255.240.0 172.18.0.1 1

route inside 20.110.216.0 255.255.255.0 172.18.0.1 1

route outside 0.0.0.0 0.0.0.0 204.90.21.1 1

route inside flair 255.255.255.255 172.18.0.1 1

route inside 20.110.208.0 255.255.240.0 172.18.0.1 1

route inside 20.110.216.0 255.255.255.0 172.18.0.1 1

Why is it, when I VPN, I can ping 20.110.211.11, even though there is no route to it.

The 20.90.21.1 address is on our outside interface. It seems to me it would match

the default route since there is no specific entry to 20.110.211.11 and be routed

out the outside interface?

[JORGE RODRIGUEZ]

Hi ,

You do have a route  for  that host you are pinging .  the  20.110.208.0/20 static route is   pointing to 172.18.0.1  ,    the 20.110.211.11 host is part of that 20.110.208.0/20 network.  

20.110.208.0/20    subnet size is 20.110.208.1  to  20.110.223.254

Regards

[JohnTylerPearce]

I can't believe I didn't see the /20

How embarrasing.

[JORGE RODRIGUEZ]

no biggie my firend,  could happen to any one  especially on Fridays  when we all want to go home  from our jobs :-)

Regards