?
Solved

routing through a vpn

Posted on 2011-03-03
3
Medium Priority
?
353 Views
Last Modified: 2012-05-11
We have a handful of buildings all over town connected to the main office (building A) via point to point t-1s.  For this we have used cisco 2600 routers using static routes.  Works fine until now.
We have one building(building B) that is connected to our main building with the same point to point for access back to the main.  But for political reasons they have their own cable internet using a sonic wall tz170 (and own IT guy sigh).  Still no real issues.  Internet traffic gets routed out the sonicwall, internal traffic out the cisco router.

Now the issue: that remote building(building B)as added a sub building(building C).  This sub building also has a cable line and a sonic wall tz100.  There is a vpn setup between the remote building and its sub building and that is working fine.  Where I have issues is trying to route anything from the main building(building A) to the sub building(building C).  With basic static routes I only manage to get all traffic from building a routed to building C out the cable internet in building B, never the vpn (going to building C)

After a bit of research I realized this may take a bit more them my basic Cisco knowledge.
Any help would be appreciated
0
Comment
Question by:lrpage
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 1

Accepted Solution

by:
rwellender earned 2000 total points
ID: 35027907
If I read this correctly, the only connection C has back to the rest of the network is through a VPN tunnel to B.  If this is correct, I would review the access list that define the traffic that goes over the VPN tunnel between B and C.   It seems as though you have the routing tables working OK, it just the definition of what gets sent over the VPN tunnel.  From the perspective of the Sonic Wall at location B, the networks at A and B would be 'local'  and C would be "remote".  At the Sonic Wall at location C, the reverse would be accurate where the networks at A and B would be defined as remote.
0
 
LVL 3

Author Comment

by:lrpage
ID: 35028395
Your thoughts are correct.  I have already made sure the vpn traffic on building c includes all the subnets from all the buildings (we are running a 10.x.x.x. subnets so i just said 10.0.0.0/8 so all traffic would go through originating from building C to rest of network.
Just noticed though (since you made me look at it :-)) That the rules from building b to building c only allowed building b on the vpn.  So looks like i need to add the whole network as the rules.  Should be easy enough.
I will let you know how successful I am
0
 
LVL 3

Author Closing Comment

by:lrpage
ID: 35036104
Works great now.  Of course I overlooked something as easy as that.  sigh
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question