Cisco Systems 2.5 - page 275

11-21
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter11 Site-to-Site VPN
Create Site to Site VPN
•Tunnel all traffic—All traffic will be routed through the tunnel interface and
encrypted. Cisco SDM creates a default static route entry with the tunnel
interface as the next hop.
If a default route already exists, Cisco SDM modifies that route to use the
tunnel interface as the next hop, replacing the interface that was originally
there, and creates a new static entry to the tunnel destination network that
specifies the interface in the original default route as the next hop.
The following example assumes the network at the other end of the tunnel is
200.1.0.0, as specified in the destination network fields:
! Original entry
ip route 0.0.0.0 0.0.0.0 FE0
! Entry changed by SDM
ip route 0.0.0.0 0.0.0.0 Tunnel0
! Entry added by SDM
ip route 200.1.0.0 255.255.0.0 FE0
If no default route exists, Cisco SDM simply creates one, using the tunnel
interface as the next hop. For example:
ip route 0.0.0.0 0.0.0.0 Tunnel0
•Do split tunneling—Split tunneling allows traffic that is destined for the
network specified in the IP Address and Network Mask fields to be en crypted
and routed through the tunnel interface. All other traffic will not be
encrypted. When this option is selected, Cisco SDM creates a static route to
the network, using the IP address and network mask.
The following example assumes that the network address
10.2.0.0/255.255.0.0 was entered in the destination address fields:
The following example assumes that the network address
10.2.0.0/255.255.0.0 was entered in the destination address fields:
ip route 10.2.0.0 255.255.0.0 Tunnel0