Solved

hub and spoke vpn topology with cisco routers

Posted on 2006-07-19
7
808 Views
Last Modified: 2012-05-05
Hello Experts,
I have a question:
I have 3 separate locations.
 
Site A has a 1800 router that has a static public ip and a 192.168.10.x address range on the inside network.
 
Site B has an 800 series router which has 10.2.0.x internal range and the router has a dynamic public ip address.
 
site C has an 800 series router which has 10.3.0.x internal range and the router has a dynamic public ip address.
 
All locations use static private defined ip addresses for all workstations and nat is used for translation from public to private.  In addition:

Site A has a nat transalation for an additional public ip address to an internal private ip address for email (smtp - port 25)  An internal DNS server exists (whereby all machines internal are set to resolve from, the dns server forwards queries to two public dns servers for unanswered queries.)
 
All locations are connected by ADSL.

My requirement is to establish site to site vpn so site b and c can access resources at site A (Exchange and domain controllers)
Site A needs to access the workstations in site B and site C.

Additionally I need to be able to connect to site A using the cisco vpn client to access internal servers etc and it would be good to access site B and C through site A.

So I need somewhat full routing between Site A and the rest of the sites and for the Cisco VPN client :)
Please suggest how I should set this up. as I am clueless.
0
Comment
Question by:eggster34
  • 5
  • 2
7 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17143693
0
 

Author Comment

by:eggster34
ID: 17147747
HEllo
The client VPN part works fine.
But how can I connect the 2 remote sites via vpn? I need site-to-site VPNs between sites A, B and C to be established between the routers.
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 500 total points
ID: 17147888
http://www.cisco.com/en/US/products/sw/secursw/ps5318/products_user_guide_chapter09186a0080531f28.html#wp998818

Okay, then above will be the link for site-to-site vpn with routers.

Cheers,
Rajesh
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 

Author Comment

by:eggster34
ID: 17149073
thanks again, but I don't have SDM and I wish to use the CLI.
Is there a guide on how to do it through the CLI?
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17151381
I can't find any using cli. But once you configure it using SDM you will get the config anyways right ?

http://www.cisco.com/en/US/customer/products/ps6635/products_white_paper0900aecd803645b5.shtml

Try the above link, which would kinda give something.

Cheers,
Rajesh
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17151410
Ok. Found it, here it is;

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml#diag

You need a CCO account to view this.

Cheers,
Rajesh
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17151419
forget the last link, it pix again.

Cheers,
Rajesh
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

In a WLAN, anything you broadcast over the air can be intercepted.  By default a wireless network is wide open to all until security is configured. Even when security is configured information can still be intercepted! It is very important that you …
We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now