topic Route-based VPN Proxy ID 0.0.0.0/0? in General Topics

Route-based VPN Proxy ID 0.0.0.0/0?

Nik_Bloemers — Thu, 06 Jun 2019 11:08:24 GMT

Hi CheckMates,

Am I correct in understanding that for route-based VPN with unnumbered interfaces the only available option is universal tunnel, so proxy ID of 0.0.0.0/0?

If not, can anyone tell me how you're supposed to get the proxy ID right?
Kind regards,

Nik Bloemers

Re: Route-based VPN Proxy ID 0.0.0.0/0?

Timothy_Hall — Fri, 07 Jun 2019 12:12:22 GMT

Correct, a route-based VPN tunnel has to be universal since we do not know ahead of time what traffic IP routing will dump into the VPN tunnel; set one tunnel per gateway pair in the VPN Community object to get 0.0.0.0/0's. With a domain-based VPN we do know exactly what IP addresses will appear in the tunnel based on the static VPN domain definitions.