From: richardd@mi.madritel.es
Date: Sun Jul 16 2006 - 18:01:36 ART
Stefan,
RRI works as follows: R3 negociates the IPSec tunnel and receives a /32 IP address from the pool on R5. Then R5 installs this /32 static route in his routing table. If you have configured static redistribution on R5 then BB3 will be able to see it
Cheers
-- Richard
CCIE #13891
---- Stefan Grey <examplebrain@hotmail.com> escribiC3:
> Well I have such topology: R3-R5-BB1. Router R3 is the EasyVPN client for
> R5. R5 is EasyVPN server. Between R5 and BB1 is Eigrp. The ip local pool is:
> 195.1.111.201 195.1.111.225.
> Everything works fine but I use also the reverse-route command on R5 and BB1
> doesn't see the route to the 195.1.111.0. Is this the normal behaviour?? (If
> yes than why do I need reverse route command). If not what could be the
> problem in??
>
> Thanks,
> The config of R5 is below.
>
> hostname R5
> aaa new-model
> !
>
> aaa authorization network l-author local
>
> ip cef
>
> crypto isakmp policy 10
> hash md5
> authentication pre-share
> group 2
> no crypto isakmp ccm
> !
> crypto isakmp client configuration group EZVPN-Client
> key trinetnt
> dns 195.1.111.53
> wins 195.1.111.54
> domain trinetnt.com
> pool ClientPool
> !
> !
> crypto ipsec transform-set tset esp-des esp-md5-hmac
> !
> crypto dynamic-map dmap 10
> set transform-set tset
> reverse-route
>
> interface Loopback55
> ip address 10.55.55.55 255.255.255.0
> !
> interface FastEthernet0/0
> ip address 195.1.5.5 255.255.255.0
> ip authentication mode eigrp 500 md5
> ip authentication key-chain eigrp 500 EIGRP
> !
> interface Serial0/0/0
> ip address 195.3.56.5 255.255.255.0
> encapsulation frame-relay
> ip ospf message-digest-key 1 md5 cciesec
> ip ospf network point-to-multipoint
> no fair-queue
> frame-relay map ip 195.3.56.3 503 broadcast
> frame-relay map ip 195.3.56.6 503 broadcast
> no frame-relay inverse-arp
> frame-relay lmi-type cisco
> crypto map secure
>
> router eigrp 500
> redistribute ospf 1 metric 1 1 1 1 1
> network 55.55.55.0 0.0.0.255
> network 195.1.5.0
> distribute-list 1 out FastEthernet0/0
> no auto-summary
>
> ip local pool ClientPool 195.1.111.201 195.1.111.225
>
> _________________________________________________________________
> Customise your home page with RSS feeds at MSN Ireland! http://ie.msn.com/
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Tue Aug 01 2006 - 07:13:47 ART