Route Health Injection (RHI) allows the ACE to advertise the availability of a VIP address throughout the intranet as a host route. The ACE send this RHI information to the MSFC in the Catalyst 6500 series switch or the Cisco 7600 series router, which periodically propagates the VIP availability according to the RHI information it receives.
What is reverse route injection in Linux? Reverse Route Injection. Reverse route injection (RRI) is the ability to automatically insert static routes in the routing process for those networks and hosts protected by a remote tunnel endpoint. These protected hosts and networks are known as remote proxy identities.
How does reverse route injection (RRI) work with VPN? By using the remote Virtual Private Network (VPN) router as the next hop, the traffic is forced through the crypto process to be encrypted. Enhancements to the default behavior of RRI, the addition of a route tag value, and enhancements to how RRI is configured were added to the Reverse Route Injection feature in Cisco IOS Release 12.3 (14)T.
What is the difference between Route-source and inject-map? The route-source consists of the prefix-list matching the advertising source address of the aggregated route. It is the IP address of a BGP neighbor with the prefix length /32. The inject-map contains a sequence matching a single or more injected routes.
How to inject a component route using conditional route injection? The command for conditional route injection consists of two route-maps. The condition here is represented by exist-map. The map contains two statements that should be matched in order to inject a component route.
What is reverse route injection in Linux?
What is reverse route injection (RRI)? Feature Information for Reverse Route Injection. Reverse route injection (RRI) is the ability to automatically insert static routes in the routing process for those networks and hosts protected by a remote tunnel endpoint. These protected hosts and networks are known as remote proxy identities.
What does the reverse-route distance command do? The addition of the set reverse-route distance command under either a crypto map or IPsec profile allows you to specify a different distance metric for VPN-created routes so that those routes will be in effect only if a dynamic or more favored route becomes unavailable.
What are the restrictions of reverse route injection? Restrictions for Reverse Route Injection If RRI is applied to a crypto map, that map must be unique to one interface on the router. In other words, the same crypto map cannot be applied to multiple interfaces. For static crypto maps, routes are always present if RRI is configured on an applied crypto map.
What are the RRI commands available in IPsec? The following commands were introduced or modified by this feature: reverse-route, set reverse-route. This command displays routes that are created through IPsec via RRI or Easy VPN VTIs. This feature provides support for relevant RRI options on IPsec profiles that are predominantly used by VTIs.