Link to home
Start Free TrialLog in
Avatar of panjwanis
panjwanis

asked on

Networking question

What woud be the best way to implement a WAN for the following scenario.

Three locations are involved.
Location A: Internet connectivity with T1 connection.
I guess i need to have a router and for security purpose i have chosed Cisco PIX firewall for security protection. I have about 35-40 Computer network running on CAT 5 cable with HP pro curve 4000m ethernet switch. i do also have bunch of static IP addresses. Chosen Cisco 2600 series router.

Location B: DSL Internet Connection. 5 static IP address
very small network, basically 3-5 computers.

Location C: ISDN internet connection. 3 static IP addresses.
3-5 computers network.

the objective is to setup a WAN between all the locations so that when ever any user at any location browses the network neighborhood , he/she should be able to see all the computers at all the locations altogether. I need to have a firewall at location B and C so that the connection between all threee locations is safe and secure. (of course the firewalls wud be configured accordingly). what kind of router/firewall would be the best to have reliable and stable WAN among all 3 locations.

Please suggest and advise.

thanx,
Avatar of Les Moore
Les Moore
Flag of United States of America image

My first choice would be Cisco PIX 501 at each remote location, with IPSEC VPN tunnel between them:

http://www.cisco.com/warp/public/110/38.html
http://www.cisco.com/warp/public/110/pixmeshed.html
ASKER CERTIFIED SOLUTION
Avatar of MaartenS
MaartenS

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of panjwanis
panjwanis

ASKER

thanx for the comments.
what would you recommend on the TCP/IP adressing scheme. if i want to implement it as follows.

Location A:
Private IP Addresses, 192.168.1.1-192.168.1.254
Subnet mask: 255.255.255.0

Location B: 192.168.1.1-192.168.1.254
Subnet mask: 255.255.255.0

Location C:
192.168.1.1-192.168.1.254
Subnet mask: 255.255.255.0
any further information u think is necessary for the implementation part in terms of configuration, any recommendations.

appreciate your response.
Suggestion: do NOT use the same network at each location.
I don't even like to start at 1 because any reconnaissance ping sweeps will be cought before they get to you if you use higher numbers:

Location A: 192.168.122.0
Location B: 192.168.123.0
Location C: 192.168.124.0
etc..
all subnet mask 255.255.255.0


I agree with lrmoore
Use different ip ranges and also use higher numbers