cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
826
Views
0
Helpful
3
Replies

How to Route Internet Traffic Over a Remote Location Internet Circuit?

Aramis Salomon
Level 1
Level 1

Hello all,

I have a customer which has a main location office and a remote one. Recently we interconnect their facilities using a local ISP service called Virtual Connectivity, which basically is a private network which can be accessed over aDSL or any other data circuit. They are using Cisco 888 routers to interconnect both sites.

At the main site the customer also has an Internet circuit (with a Cisco 857 router)and he wants to remove the Internet circtuit from the remote site and provide them access over their main location Internet circuit.

At the primary offices, we installed Cisco 2811 router as a gateway to route the Internet and remote network traffic over the required data circuit. Everything is working fine, but we can not access Internet from the remote location over the circuit installed a the main site. I understand this is a routing issue, since the traffic hits the main office network it does not knows how to reach the Internet. I am assuming this routing must be set into the main office Cisco 888 router (installed by the ISP to interconnect to their private cloud) in order to properly route it over the Internet circuit.

My questions are:

Am I correct on my assumptions?

Since I already have access over the Internet router and the gateway router at the main site, but not into the ISP router, is there any other way I can make this configurtion over the routers I already have access?

Any suggestions?

Please find attached a .PDF showing the basic networks layout. I am very sorry since this layout is in Spanish, but the equipment names and IP address are shown as well as each location network IP address structure.

Thank you in advanced for your appreaciated help.

Aramis...

3 Replies 3

Hi,

Are you doing NATing at 2811 ??

If yes, I assume the NAT would be only for subnet 172.16.20.0/24 subnet. Correct ?

If again yes, then you need to have subnet 172.16.21.0/24 NATed as well.

Also if you can post traceroute from you edge site the following IPs:

traceroute 172.16.20.1

traceroute 74.125.236.84

Regards,

Smitesh

Aramis,

This is a commonly faced scenario. Two things you need to do here.

1. First, as smitesh suggested you need to NAT for both the subnet ranges 172.16.20.0/24(Head office) and 172.16.21.0/24 ( remote office). You can just create an ACL to permit the 172.16.21.0/24 and create a route map and attach is to the nat overload statement.

2. Also ensure that there is return traffic between head office and remote office either by using static route or some dynamic routing protocol.

Hope this helps

Let us know if u need more info

Regards,

Kishore

Marwan ALshawi
VIP Alumni
VIP Alumni

All the points above are valid and it can be the issue

However we need to know how you do the routing between the sites is a routing protocol or just static

And generally speaking remote site has to have default route points to the head office wan router and the wan router default routes must point to the Internet router

Bothe wan and Internet routers have to have route back to the remote office

And nating has to be considered as mentioned by the post above

Hope this help

If helpful rate