Securing My remote Sites

[dmalamba]

I have a Cisco 2611 router which I use to connect to the internet but at the same time to some remote sites. I have a firewall between this router and my internal Cisco 2610 router which connects my LAN and other remote sites. My company says it can not buy another 2611 router, so that the remote sites connected to the internet router are protected by my firewall using the proposed new Cisco 2611 router, leaving the Cisco 2611 router connected to the internet outside.I still want to protect my remote sites. Would anyone know how I can go about this problem.

[ruwhite]

This will be ugly. :-) You could do this:

remote sites

|

internet----2611----\

| |

pix----/

You can policy route traffic coming into the 2611 from the remotes and destined to the internet out to the pix, and let the pix route it back in and out to the internet. You could also policy route the traffic off the internet to the pix, and then let the pix route it back to the 2600 for routing towards the remote sites.

Like I said, this is ugly.

Russ