Showing results for 
Search instead for 
Did you mean: 


  • New Firmware Available for the RV340 Series Router Family! posted Apr 30, 2019
This includes the RV340, RV340W, RV345, and RV345P. To learn more and get the latest Firmware version click here

  • Important Update: Cisco RV340 Series and Cisco AnyConnect Secure Mobility Client posted Nov 10, 2018
The RV340 Series supports Remote Tunnel Termination of the best-selling and easy to use Cisco AnyConnect Secure Mobility Client... read more

Route RDP traffic through separate router



I have 2 x Cisco 887 routers both using ADSL2+.


I want to send all traffic through one router apart from RDP traffic which I want to route through the second router (see attached jpg)


I want the first router to be the Default Gateway for all the clients.


Can someone help me with the routing configuration?


Thanks alot

Everyone's tags (1)

Hi Mintola1976, You would

Hi Mintola1976,


You would apply a PBR (Policy-Based Routing). In my example, I would assume that the default gateway router interface connected to that LAN is Vlan1.


1) Define an access list for matching the interested traffic from your LAN towards any RDP:

access-list 110 permit tcp any any eq 3389


2) Define the route map:

route-map REROUTE-RDP permit 10
 match ip address 110
 set ip next-hop


3) Apply the route map on the interface:

interface vlan1
 ip policy route-map REROUTE-RDP


To verify if the policy is working or not, you would use the command "deb ip policy".




Hi Aref, Thanks so much for

Hi Aref,


Thanks so much for this.


Regarding the second router on, how would I best connect that to the gateway router?


Would I directly attach from Cisco to Cisco, or connect it to the switch on its VLAN1 interface.


Also, would I need to set up NAT on the second router and configure PAT to forward 3389 to the first cisco?


Thank you


You are very welcome Mintola.

You are very welcome Mintola.


I would connect them directly. Assuming that you have already natting enabled on RDP router, you would not have to apply any particular natting for RDP traffic, since that traffic would be natted based on the natting rule already applied on the RDP router, and it would come back without any problem unless you have any access list applied in inbound direction on the dialer interface that would block it, so no, you don't have to do any portforwarding. Portforwarding or static nat would have been needed in case you were to enable traffic from outside towards inside destined to RDP.




Thanks Aref, you are a great

Thanks Aref, you are a great help.


Just regarding the connection from the gateway router to the RDP router, would I just create VLAN1 ( on the RDP router, plug a cable from eth1 on the Gateway router to eth0 on the gateway router?

Would that enable the Gateway router to pass traffic through the RDP router?




Thank you, I really

Thank you, I really appreciate your kind words.

Yes, that would be enough, assuming you have all the other routing configuration set correctly towards the ISP, in other words, both of the routers can be on the same LAN with different ip address obviously, that's it.