From: John Moor (johmoor@gmail.com)
Date: Thu Aug 17 2006 - 10:43:01 ART
Hello I have got a problem with reverse route injection:
R3-R2-PC
ethernet between R2 and the PC. serial between the routers. I configure the
remote access vpn between R2 and the PC. Everything works fine. PC receives
its parameters and can ping the serial of R2 and even R3 if the static route
is added to R3. (ospf is configured between the routers). I configured the
reverse-route injection. But it doesn't work. R3 doesn't receive any route
to the 10.0.0.0 network. I just have now idea how to fix it and what can be
a problem in.
Maybe it is due the reverse-route is configured under the dynamic crypto
map???
Please help.
Thanks
hostname R2
!
aaa new-model
!
!
aaa authentication login auth local
aaa authorization network auth local
!
username ccie privilege 15 password 0 ccie
!
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
no crypto isakmp ccm
!
crypto isakmp client configuration group ccie
key ccie123
dns 10.4.2.254
wins 10.4.2.254
pool cciepool
acl 199
!
!
crypto ipsec transform-set cisco esp-3des esp-md5-hmac
!
crypto dynamic-map DYN 10
set transform-set cisco
reverse-route
!
!
crypto map cisco 10 ipsec-isakmp dynamic DYN
!
crypto map cmap client authentication list auth
crypto map cmap isakmp authorization list auth
crypto map cmap client configuration address respond
crypto map cmap 10 ipsec-isakmp dynamic DYN
!
!
!
!
interface Loopback0
ip address 152.4.2.2 255.255.255.0
!
interface FastEthernet0/0
ip address 151.100.2.2 255.255.255.0
duplex auto
speed auto
crypto map cmap
!
interface Serial1/0
ip address 151.4.3.2 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-multipoint
no fair-queue
frame-relay map ip 151.4.3.4 204 broadcast
frame-relay map ip 151.4.3.6 206 broadcast
!
router ospf 1
router-id 152.4.2.2
log-adjacency-changes
network 151.4.3.2 0.0.0.0 area 0
network 152.4.2.2 0.0.0.0 area 0
!
!
ip local pool cciepool 10.4.2.1 10.4.2.7
access-list 199 permit ip 151.4.3.0 0.0.0.255 any
access-list 199 permit ip 151.100.2.0 0.0.0.255 any
access-list 199 permit ip 10.0.0.0 0.255.255.255 any
This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:57 ART