I have a Cisco 5505 router that I need help configuring. I have 3 VLANs set up. VLAN 1 is set for subnet. I have one computer hooked up to this subnet with the address The VLAN 1 address is which is the default route set in the computer. VLAN 2 is set to get its address from company DHCP server.

I also have it configured to set the default route in the router to this same subnet. VLAN 3 is configured for the subnet I have a static route set so packets with a 192.168.10.x address from the PC are vpn-tunneled through VLAN 3. The problem is I can't get packets with any other address to go out the default address set in the router, e.g., out to the company network which, by the way, is not a VPN.

Do I need to set another static route in the router to make this happen? If not, what do I need to do?


Cisco 5505 is a Firewall, it's possible that in the license base vlan3 is restricted. Verify the Crypto Map used in your VPN (configuration, site-to-site-vpn, advanced, crypto map)


It looks like the company gateway where your router default route points to does not know how to reach your VLANs.

You need the routes and configured on that gateway pointing to the IP set on the VLAN2, therefore using DHCP is not a good option as this IP may change.

(company gateway)---VLAN2----(your router)----VLAN1

Do the VLANs have the same security level? If so, make sure you have :

hostname(config)# same-security-traffic permit inter-interface

Also confirm that there is a default route to the ASA firewall from where ever it is that you need to access the outside.

I hope this'll work.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.