One of my sites on a WAN has a partner company that wants to install a Cisco router to give access to their network. It is OK for the partner company to access that site (and the clients must access both systems); however, we cannot allow the partner company to come accross our WAN. It is easy enough to setup access lists to prevent their router from sending traffic on our WAN. But how can I prevent them from changing the IP address of their router to that of a workstation that can access our WAN? I have to be prepared that at 3AM in the morning, they may try to do something like that so they can access our AS400 from their remote network. Is there a way to protect against action like that? Most likely I will not have access to their router.
Thanks - John Weldin
jweldin@focusbsi.com
