Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Need Help: Cisco 2620 Configuration for Dual t1s (1 t1 to ISP and other t1 to branch office)

Posted on 2005-04-25
5
Medium Priority
?
572 Views
Last Modified: 2008-03-06
I just picked up a Cisco 2620 router and I'm pretty new to configuring them.
I have used Cisco Config Maker 2.6 to setup the wan interface and 1st T1 csu/dsu to connect to our ISP
I need help in configuring the second T1 CSU/DSU card in the router to route traffic to wan interface to access our network and to the other T1 csu/DSU for internet access.
What would be the best way to set this up?

Our branch office is connected directly to our building with a T1 point-to-point.
Can I give them private IP addresses on the second card and their router to connect them?
How does the IP unnumbered setting work and is this applicable?
How to route traffic from the serial 0/1 card (branch office) to the serial 0/0 card (ISP) for internet access?

I am also learning the IOS commands so your answer might have to a be a little more detailed.

Here is some info for our existing config.

serial 0/0
T1 csu/dsu:

ip - 216.194.30.xxx
subnet - 255.255.255.xxx


Wan interface:
IP - 216.194.32.xxx
subnet - 255.255.255.xxx

serial 0/1
T1 interface:
NOT CONFIGURED

Thanks in advance

0
Comment
Question by:ugh138
  • 3
  • 2
5 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 13860982
What kind of connection do you have to the branch office? point-to-point T1? What's your IP addressing scheme on the LAN? What kind of router do you have at the branch office?
Have you considered all the security ramifications of having the inter-office WAN link and the Internet link on the same router? It is not recommended practice, but if you insist....

Interface Serial 0/0
  ip address 216.194.32.xx 255.255.255.252
  no shut
  ip nat outside

Interface Serial 0/1
  ip address 192.168.255.1 255.255.255.252   -->remote site will be 192.168.255.2
  no shut
  ip nat inside

Interface FastEthernet 0/0
  ip address 192.168.254.1 255.255.255.0
  no shut
  ip nat inside
!
ip nat pool MYNATPOOL 216.194.30.x-216.194.30.y netmask 255.255.255.xxx
access-list 1 permit 192.168.0.0 0.0.255.255
ip nat inside source list 1 pool MYNATPOOL overload
!
ip route 0.0.0.0 0.0.0.0 216.194.30.yy

router eigrp 101      ====> identical config on remote office side
 network 192.168.255.0
 redist static
 redist connected
0
 
LVL 1

Author Comment

by:ugh138
ID: 13861502
Lrmoore

From the the looks of the config that you posted it doesn't look like it's practical for this type of connection.
I was hoping I could use one router to achieve this but you've made me aware that there are security issues.
I do have another cisco 1720 I can use for the inter office WAN. I'll go that route.  Thanks for the insight.
I am new to Cisco so I'm just learning of the capabilties and how to set these up.

I have posted a graphic of the the proposed layouts.
http://home.nyc.rr.com/zuhalter/ISP_layout.jpg

Network #1 would be configured as above.

Network #2 would be configured using a second router at the main office.
Any comments would be appreciated.
Thanks
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 2000 total points
ID: 13861614
I like config #2 much better, but I'm not sure where the Watchguard soho fits in at the remote site if all Internet goes through your Watchguard and out your internet connection..

R1 to ISP
  interface Serial 0/0
    descript MetTel ISP
    ip address 216.194.30.xx 255.255.255.252
   no shut

  interface Fast 0/0
    descript Connect to Watchguard
    ip address 216.194.32.xx 255.255.255.xxx
    no shut
  ip route 0.0.0.0 0.0.0.0 serial 0/0
!

R2 to remote site
  interface serial 0/0
   descript p2p to <site>
    no shut
    ip address 192.168.255.1 255.255.255.252
  interface fast 0/0
   descript local LAN
    ip address 192.168.1.99 255.255.255.0
    no shut
  router eigrp 101
   network 192.168.255.0
   redist static
   redist connected
  ip route 0.0.0.0 0.0.0.0 192.168.1.100

R3 at remote site
  interface serial 0
   ip add 192.168.255.2 255.255.255.252
   no shut
   descript p2p to HQ
  interface FastEthernet 0
   ip add 192.168.10.1 255.255.255.0
    descript <site> LAN
    no shut
  router eigrp 101
   network 192.168.255.0
   redist connected
 ip route 0.0.0.0 0.0.0.0 192.168.255.1
   

Watchguard has static route for 192.168.10.0 / 24 pointing to R2 192.168.1.99

Done!
0
 
LVL 1

Author Comment

by:ugh138
ID: 13862084
You're great

I'm going to go with config #2.  Haven't decided if I'm going to keep the SOHO in the mix or not. Might need it for a redundant connection or something.

Thanks for all your help.
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13862373
Glad to help!
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
It happens many times that access list (ACL) have to be applied to outgoing router interface in order to limit some traffic.This article is about how to test ACL from the router which is not very intuitive for everyone. Below scenario shows simple s…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question