PIX 515 site to site vpn on non-default route interface

[robertor1981]

Hi,

I have to pix 515e - one in NY and on in DC.
I am trying to setup a site to site VPN on an interface that is not the default route of the pix.

All my access-list and crypto map are correct because the second i change the default route to the interface that has the vpn, it quickly comes up.

I have put static routes to each other pix using the secondary interface and it will not work. But the minute i put the default route on the secondary interface, the vpn comes up.

Any Ideas?

 

[JackyZhang]

Hi, did you fix your problem? we might setup same way as you, two interface connect to different ISP and VPN on both interface, but if it doens't work, I have to change.






Jacky Zhang
CNE,MCSE

 

[robertor1981]

Jacky,

The only VPN site to site that will work is if its on the default interface. I been banging my head on this. If you think of anything post.

 

[brianinms]

If its a site to site vpn merely route that ip to that interface.