Question : IPSec VPN tunnel not running to Def. Gateway

I have a Cisco 2600 with an IPSec VPN tunnel running to another site.  The router has one outside interface pointed to the internet and one inside interface pointed to the LAN..I also have another Internet gateway on the local LAN with a firewall. So I want all traffic coming in from the other site inside the VPN tunnel to route across the LAN and out to the Internet through the other firewall.  So in order to do that I tried to change the default route in the 2600 to point to the LAN ip of the firewall and then I created a static route to the end point IP of the tunnel at the other site to the next hop (internet side) on the 2600..So theoretically the tunnel should be able to build through the outside interface and when traffic from the other site comes into the router trying to get to the Internet it should route to the firewall on my network..However as soon as I change the Def. Gateway the tunnel goes down...even though I can ping the tunnel endpoint IP and when I run a trace it's running out the right interface..What am I missing? Do I need more than the 1 static route to support the IPSec tunnel?

Answer : IPSec VPN tunnel not running to Def. Gateway

You need minimum of three static routes
ip route 255.255.255.255
ip route 255.255.255.0
ip route 0.0.0.0 0.0.0.0
Random Solutions  
 
programming4us programming4us