Two routers at the same time?

Hi guys,

we just bought Cisco 1841-T1 router to replace Netgear FVS318 V3. I was wondering if it is possible to use Cisco router as a main router and Netgear just for VPN connection?

Thank you.
LVL 7
Yury MerezhkovDevelopment Team LeadAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Zenith63Commented:
It really depends on your setup.

How are the VPNs setup at the moment?  Do the remote users get IPs in your subnet or are they on a seperate subnet?  Do you have a fixed list of IPs that will be "VPNed" people connecting in?

What you need to overcome here is how do computers on your LAN know where to route packets to?  Normal behaviour is if a computer wants to talk to another computer on the local LAN (decided by considering it's own IP address and subnet mask) it broadcasts it on the LAN, if it wants to talk to a computer it has decided is NOT on the LAN (again considering it's own IP and subnet mask) it sends the packets to its default gateway.
Again without knowing your setup I'm guessing a bit here, but basically you'll need to modify this behaviour to say: If on the LAN broadcast as normal, if trying to talk to an IP used by a VPN user send packets to the Netgear, otherwise send it to the default gateway (Cisco).  You can do this with the route command on any computers that may need to talk to VPNed clients as follows -

Assume VPNed users have IPs 192.168.2.x and your LAN has IPs 192.168.1.x.  The internal IP of the Cisco is 192.168.1.253 and the internal IP of the Netgear is 192.168.1.254.
Set the default gateway on all internal computers to 192.168.1.253.  Now issue the command
'route -p add 192.168.2.0 mask 255.255.255.0 192.168.1.254'
This tells the computer to route all traffic for 192.168.2.x addresses to 192.168.1.254 (the Netgear).

Another option, if your Cisco allows it, is to have it send traffic destined for 192.168.2.x over to the Netgear.  Only certain Ciscos support sending traffic back out the interface it came in like this.  This would save the route command on the LAN PCs but puts more load on the Cisco.
0
Yury MerezhkovDevelopment Team LeadAuthor Commented:
I kinda understand what you are saying.

What we have now is two Netgear routers. One in the main office, the other one is across the road. The VPN location right now has only one pc but will have 5 more in the near future. VPN users have their own subnet (192.168.0.xxx). Main office is 192.168.1.xxx. So, basically yes, I do have a fixed list of IPs. Let's say they are 192.168.0.1 - 192.168.0.5.
0
Zenith63Commented:
Perfect!

In the smaller site you don't need to make any changes.
In the main site you'll be changing the default gateway on all the pcs/servers to the IP of the Cisco.  Then on any computers that users in the remote site will want to talk to (usually just the servers but it applies for any pcs as well) just run the route command above adjusting the IPs as appropriate.  Assuming the IP of the Netgear will be 192.168.1.254 the command would be -
'route -p add 192.168.0.0 mask 255.255.255.0 192.168.1.254'

The -p means persistent, so the PCs can be restarted and won't lose the route.  You could add the route command to a logon script for all PCs though so it doesn't need to be remembered each time you add a new PC.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Yury MerezhkovDevelopment Team LeadAuthor Commented:
Perfect solution for me. Thank you very much.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.