1841 and two (2) WANs

[nutmeg_a_p]

Hello,

I have two (2) Internet connections - one is Time Warner cable, and the other is Ethernet over Copper.  What I would like to know is if it is possible to configure an 1841 to act as a router for both of these Internet connections simultaneously while providing a NAT for each connection.  I would also need to be able to have both LANs communicate with each other when necessary, primarily for network printing and file sharing (AFP, SMB). 

Conceptually, what I am looking to do is have one group of users connected to the cable connection, and another group of users connected to the Ethernet over Copper connection, while still having a way for each group of users to connect with each other.

Any guidance you can offer is appreciated.  Thanks for reading!

[Thotsaphon Lueangwattanaphong]

Hi,

  The concept behind this is as follows:

Assumming that you are using the router as a gateway for users.

1. You just create  2 groups of users. Let's say GroupA(VLAN 10 - 192.168.1.0/24) and GroupB(VLAN 20 - 192.168.2.0/24).

2. You just use 802.1q on Ethernet interface on the router to be gateways for both groups.

3. GroupA and GroupB can be applied ACLs on the gateway. Let's say GroupA can only access GroupB via TCP/445.

4. You can use PBR to re-direct internet traffic of each group to the internet links you design.

5. Yes, you can use 2 internet interfaces on the router. NAT can be done as well.

PBR

Ref: http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a008009481d.shtml

IOS NAT 2 ISPs

Ref: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080950834.shtml

HTH,

Toshi

[nutmeg_a_p]

Hello,

Thanks for responding!  Since the 1841 only has two (2) Ethernet ports on the chassis (FE0 and FE1), I would need a HWIC-2FE to make this possible, correct?  One (1) port on the HWIC-2FE would be the cable Internet connection, and the second port on the HWIC-2FE would be the Ethernet over Copper connection.  My network switches would be connected to the FE ports on the chassis.  Then I would configure the router based upon your initial response to make this work, yes?

[Thotsaphon Lueangwattanaphong]

Hi,

   You can use Ethernet Switch Module for your lan segments. You can creat VLAN interfaces to be gateways of users.

Ref: http://www.cisco.com/en/US/prod/collateral/routers/ps5853/product_data_sheet0900aecd8016bf0b_ps5855_Products_Data_Sheet.html

   Yes, you can use HWIC-2FE. It costs you more than HWIC-4ESW. I think

Ref: http://www.cisco.com/en/US/prod/collateral/routers/ps5854/product_data_sheet0900aecd80581fe6_ps5853_Products_Data_Sheet.html

   The steps I told you should be fine.

HTH,

Toshi