8-53
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Chapter8 Site-to-Site VPN
Create Site to Site VPN

Static Routing

Static routing can be used in smaller VPN deployments in which only a few
private networks participate in the GRE-over-IPSec VPN. You can configure a
static route for each remote network so that traffic destined for the remote
networks will pass through the appropriate tunnels.
Static Routing Information
You can configure a static route for each remote network so that traffic destined
for the remote networks will pass through the appropriate tunnels. Configure the
first static route in the Static Routing Information window. If you need to
configure additional static routes, you can do so in the Rout ing window.
Check this box if you want to specify a static route for the tunnel, and select one
of the following:
•Tunnel all traffic—All traffic will be routed through the tunnel interface and
encrypted. SDM creates a default static route entry with the tunnel interface
as the next hop.
If a default route already exists, SDM modifies that route to use the tunnel
interface as the next hop, replacing the interface that was originally there, and
creates a new static entry to the tunnel destination network that specifies t he
interface in the original default route as the next hop.
The following example assumes the network at the other end of the tunnel is
200.1.0.0, as specified in the destination network fields:
! Original entry
ip route 0.0.0.0 0.0.0.0 FE0
! Entry changed by SDM
ip route 0.0.0.0 0.0.0.0 Tunnel0
! Entry added by SDM
ip route 200.1.0.0 255.255.0.0 FE0
If no default route exists, SDM simply creates one, using the tunnel i nterface
as the next hop. For example:
ip route 0.0.0.0 0.0.0.0 Tunnel0