11-19-2011 07:42 AM - edited 03-04-2019 02:20 PM
Hello all,
I have a customer which has a main location office and a remote one. Recently we interconnect their facilities using a local ISP service called Virtual Connectivity, which basically is a private network which can be accessed over aDSL or any other data circuit. They are using Cisco 888 routers to interconnect both sites.
At the main site the customer also has an Internet circuit (with a Cisco 857 router)and he wants to remove the Internet circtuit from the remote site and provide them access over their main location Internet circuit.
At the primary offices, we installed Cisco 2811 router as a gateway to route the Internet and remote network traffic over the required data circuit. Everything is working fine, but we can not access Internet from the remote location over the circuit installed a the main site. I understand this is a routing issue, since the traffic hits the main office network it does not knows how to reach the Internet. I am assuming this routing must be set into the main office Cisco 888 router (installed by the ISP to interconnect to their private cloud) in order to properly route it over the Internet circuit.
My questions are:
Am I correct on my assumptions?
Since I already have access over the Internet router and the gateway router at the main site, but not into the ISP router, is there any other way I can make this configurtion over the routers I already have access?
Any suggestions?
Please find attached a .PDF showing the basic networks layout. I am very sorry since this layout is in Spanish, but the equipment names and IP address are shown as well as each location network IP address structure.
Thank you in advanced for your appreaciated help.
Aramis...
11-19-2011 09:37 AM
Hi,
Are you doing NATing at 2811 ??
If yes, I assume the NAT would be only for subnet 172.16.20.0/24 subnet. Correct ?
If again yes, then you need to have subnet 172.16.21.0/24 NATed as well.
Also if you can post traceroute from you edge site the following IPs:
traceroute 172.16.20.1
traceroute 74.125.236.84
Regards,
Smitesh
11-19-2011 04:27 PM
Aramis,
This is a commonly faced scenario. Two things you need to do here.
1. First, as smitesh suggested you need to NAT for both the subnet ranges 172.16.20.0/24(Head office) and 172.16.21.0/24 ( remote office). You can just create an ACL to permit the 172.16.21.0/24 and create a route map and attach is to the nat overload statement.
2. Also ensure that there is return traffic between head office and remote office either by using static route or some dynamic routing protocol.
Hope this helps
Let us know if u need more info
Regards,
Kishore
11-20-2011 03:04 AM
All the points above are valid and it can be the issue
However we need to know how you do the routing between the sites is a routing protocol or just static
And generally speaking remote site has to have default route points to the head office wan router and the wan router default routes must point to the Internet router
Bothe wan and Internet routers have to have route back to the remote office
And nating has to be considered as mentioned by the post above
Hope this help
If helpful rate
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide