VPN Tunnel on Internal router with Public IP

[Ninad Thakare]

Hi,

I have an Public IP pool 1.1.1.1/29. With a Firewall & a cisco 1900 router.         

I need to establish a setup as :

(public IP) Firewall -> (public IP) Router (Private IP) -> Switch (unmanaged) -> End users.

My concern is to use INTERNET from Firewall and VPN Tunnel trough Router.

Is this possible by placing a router under Firewall.

Please help me with this scenario.

Regards,

Ninad Thakare

[Jan Rolny]

Hi Ninad,

yes it is posible but question is why you want to terminate VPN on router instead of Firewall. Maybe firewall is not VPN capable?

With your scenario you can make NAT on firewall so your router will have public IP and then you can establish VPN to this router from internet. Also inside hosts will have access to the internet if you want to do so.

What type of firewall you have?

Best regards,

Jan

[Jeff Van Houten]

Since you have 6 usable public ip addresses and since you indicated you could terminate the ISP connection directly into the firewall, the easiest way is to terminate the ISP connection into a small switch then connect the firewall and external router interface to the same vlan on the switch. The. Assign appropriate ISP gateways and public ips to the external interfaces of both the firewall and the router.

Sent from Cisco Technical Support iPad App