?
Solved

Tunnelling between serial interface

Posted on 2005-04-04
11
Medium Priority
?
638 Views
Last Modified: 2008-01-09
I would like to setup tunnelling between 2 serial interfaces in our CISCO 7206 so that both locations have got a secure point to point connection.

If I do a tunnelling between these 2 interfaces, what would be an added advantage apart from the fact that it is already point to point at the moment ?

CISCO 7206

Serial interface 1/0/1:0
ip address 10.10.1.9
encapsulation ppp

serial interface 1/0/2:0
ip address 10.10.1.13
encapsulation ppp  

Here is the setup

Location1  (cisco router 1702 )   <----------- T1 ------------>  CISCO 7206  <----------------- T1------------------->  Location 2 (Adtran router)

CISCO router 1720 config :
------------------------------

serial 0
ip address 10.10.1.10

Fastethernet 0
ip address *.*.*.9

ip route  0.0.0.0 0.0.0.0  serial0

Adtran router config:
------------------------
WAN IP :10.10.1.14
Far End IP :10.10.1.13

LAN IP : *.*.*.13

Thanks
SR
0
Comment
Question by:sunray_2003
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
11 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 13699938
This one's easy. No can do GRE tunneling to Adtran. Period.
No real added value. I know I led you down this path to think about it, but I forgot about the Adran Netvanta not being capable...
0
 
LVL 49

Author Comment

by:sunray_2003
ID: 13700118
We have Adtran Totalaccess 612 router.
I donot think that has that capability too.

In order to understand about this tunnelling , lets say If I have cisco 1702 at both of these locations , will I be doing the actual tunnelling between these cisco 1720s or will I be doing something in both CISCO 1720 and the CISCO 7206 ?

0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13700240
A GRE tunnel is strictly between the two endpoints irrespective of what is in between them.
The tunnel appears as another interface that you can route through. Data is encapsulated in GRE packets, but not encrypted. You can add encryption through the tunnel.

Here's an example. Disregard the IPX information, but yes, this is also how you would have to tunnel IPX across the internet that is not IPX capable.
http://www.cisco.com/en/US/tech/tk827/tk369/technologies_configuration_example09186a0080093f70.shtml
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 49

Author Comment

by:sunray_2003
ID: 13700279
Thanks..

Just thinking if there would be a good solution for this..

Is there a way to do a private network between these 2 locations that I had mentioned so that , file sharing , plotter sharing can be done. The reason I am concerned is that both locations have got a public IP address. If they open up ports 135 through 139 on the linksys and Adtran router , that wont be totally safe as they have public IPs..

Before this they had a point to point T1 between 2 locations (direct and not through any router) and they have private IP on one router and private IP on the other router and hence were able to do mapping drive , share plotters etc..

I am not quite sure about the security and the doability..

Any suggestions.

SR
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13700346
IPSEC w/GRE VPN would be a good solution if you replace the Adtran, and probably have to upgrade the 1720 also.
You are very wise to consider this a huge risk to open it up with public IP's.

0
 
LVL 49

Author Comment

by:sunray_2003
ID: 13700410
Though it may not take much time to do so , how about the option of purchasing a VPN router from Linksys ( http://www.linksys.com/products/product.asp?grid=34&scid=29&prid=589)..

I know I can do the VPN work on the CISCO 1720 but as you know I want to give the control of the internal network to the customer as they already have an IT person who can take care of it..

PC <---> LINKSYS VPN router <---->  CISCO 1720    on one location

PC <---->Linksys VPN router <------> Adtran total Access on another location.

The Adtran is kept at the other location cos that location has got both Data and Voice ..
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 1000 total points
ID: 13700732
That's a good, cost effective solution. I would suggest the RV042/RV082 model Linksys...
0
 
LVL 49

Author Comment

by:sunray_2003
ID: 13722834
The VPN router that you had suggested is an excellant choice. We tested in our lab and did put at the customer premise and is functional.. Thanks so much

SR
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13725631
very cool....
0
 
LVL 49

Author Comment

by:sunray_2003
ID: 13980910
Lrmoore,

We got a RV082 for our office which has around 25 machines and this router is working rock solid. The dual WAN capability is really a nifty feature.. Just wanted to inform you as i was not aware of this linksys product prior to your suggestion

SR
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13981013
That's great! Thanks for the update!
0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question