Solved

CISCO ROUTING - How do I route a public IP block on an inside interface to a different public IP block on an outside interface?

Posted on 2010-09-01
10
542 Views
Last Modified: 2012-05-10
I have a Cisco 806 for access to a Cox ethernet handoff.

The information I have from Cox is:

Customer LAN space:
Network for use on customer's equipment: 70.x.28.144/28
Subnet Mask: 255.255.255.240
IP Space Available to Customer: 70.x.28.145 - 70.x.28.158

Customer's Connection to Cox:
IP address of device facing Cox: 70.x.30.98
Subnet Mask: 255.255.255.252
Gateway for device facing Cox: 70.x.30.97

How do I get the 806 config'd to pass traffic for this config?  One address is to a mail server running all usual mail protocols and a web interface.  Another address is to a spam filter.  There are also two addresses going to two SonicWall NSA240s for Internet access to two different buildings.

Any help would be greatly appreciated.
0
Comment
Question by:scholfieldauto
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 15

Expert Comment

by:bkepford
ID: 33580996
806 configuration====

interface FastEthernet 0/0
ip address 70.x.30.98 255.255.255.252
interface FastEthernet 0/0
ip address 70.x.28.145 255.255.255.240

ip route 0.0.0.0 0.0.0.0 70.x.30.97

==============================
Now each of your other devices will be configured with an IP between 70.x.28.146 and 70.x.28.158 with a subnet mask of 255.255.255.240 and a default gateway of 70.x.28.145 (your 806 router)


0
 
LVL 10

Accepted Solution

by:
qbakies earned 250 total points
ID: 33581069
I'm not sure what it is you are asking as this seems pretty straight forward.  If the 806 is acting as your border router then you just need to put the 70.x.30.98/30 IP on the interface connected to the handoff and set a default route to 70.x.30.97.  That will send all your traffic out to the world.  From there it depends on what your network diagrams look like on how you connect to the other devices.  You have 14 useable public IPs with the 70.x.28.114/28 subnet and the best thing to do would be to put that on the internal facing interface going to one of the firewalls.  Then you you can do NAT/PAT on the firewalls for your LAN traffic.  

Providing a basic network diagram of your situation will help to clear up exactly how this will work in your situation.
0
 
LVL 15

Expert Comment

by:bkepford
ID: 33581159
interface FastEthernet 0/0
ip address 70.x.28.145 255.255.255.240

was meant to be

interface FastEthernet 0/1
ip address 70.x.28.145 255.255.255.240
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:scholfieldauto
ID: 33581252
qbakies: It is pretty basic, just wasn't sure if the 806 was going to require anything special to make it work.

bkepford: Will give that a try in a few minutes.  If it works, I'll close the Q.  Thanks!!!
0
 
LVL 10

Expert Comment

by:qbakies
ID: 33581265
The biggest consideration that I can see is where you are going to want to perform your NAT.  The rest is pretty straightforward.
0
 

Author Comment

by:scholfieldauto
ID: 33581723
qbakies: I think that's my biggest question... Will the 806 REQUIRE me to NAT, or can I just use it as a router to pass traffic?  Both sets of addresses are public IP, the firewalls are AFTER the router, on Ethernet 0/1.  I guess my question reall is, will a very simple routing scheme get the job done, or do I have to NAT?  I'm going to try the first suggestion and see how it goes shortly.  Thanks!!!
0
 

Expert Comment

by:hostarica
ID: 33582824
you need NAT if you don't have enough public IPs to assign each one to each internal host.  but if your configuration is one to one (the public IP is directly associated with only one device at the other end), then you won't need NAT.  
but as qbakies said, it depends in whether or not the 806 is your border router, and on how your network diagram looks like.
0
 

Author Comment

by:scholfieldauto
ID: 33582859
I'm sure QBakies and BKepford have it right, as the 806 is the border router for our Cox connection.  The diagram goes ISP ethernet handoff -->: 806 -->  Hosts ( Mail Server / Firewalls (2) / Spam Filter )  I have plenty of public IP addresses, My question was twofold...  I've never done a router config that simple, so I didn't know if just the 0.0.0.0 would do the trick, AND if the 806 required NAT to be in place as some routers do, or if it would do just fine with only routing turned on.  QB and BK are probably going to get a points split when I get into work in the AM and put it online.  Thanks :)
0
 
LVL 15

Assisted Solution

by:bkepford
bkepford earned 250 total points
ID: 33587016
The NATing will take place on the Sonicwall as it is where you go from a public IP to a private IP. The reason why the router is so simple is because it si only doing routing and the only subnets that it needs to get to is the Internet(the default route) and the two subnets it is connected to. By NATing at the Sonicwalls the rest of the internal address will look like the Public subnet directly attached to the router.
0
 

Author Closing Comment

by:scholfieldauto
ID: 33600915
Thanks a mil!!!  It was as easy as you said and I thought. :)
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now