we have the following config in Cisco 2811:
interface FastEthernet0/1
ip address 10.1.2.1 255.255.255.0 secondary
ip address 10.90.11.1 255.255.255.0 secondary
ip nat inside
(10.90.11.0/24 goes via IPSec to another routers)
ip nat inside source list 101 interface FastEthernet0/0 overload
ip nat inside source list 103 interface FastEthernet0/0 overload
access-list 101 permit ip 10.1.2.0 0.0.0.255 any
access-list 103 deny ip 10.90.11.0 0.0.0.255 10.90.0.0 0.0.255.255
access-list 103 permit ip 10.90.11.0 0.0.0.255 any
everything works. the hosts inside 10.90.11.0/24 and the hosts in 10.90.* networks connected via IPSec can see each others, the remote routers can see this Cisco 2811 as well.
But Cisco can't see any router or a host except a hosts in the local 10.90.11.0/24. Small but annoying problem.
how can I solve this? help plz.
