Connecting 2 seperate Routers to a Non-Programmable Switch to 1 Cisco Interface

[fbeye]

I am currently using;

GE 03 (192.168.3.1) connecting to a Router (192.168.3.2) handing out 10.0.1.x IP's (10.0.1.1 Gateway) 

GE 06 (192.168.6.1) connecting to a Router (192.168.6.2) handing out 10.0.2.x IP's (10.0.2.1 Gateway)

The reason for this is that I have GE 06 hard coded to a VPN so whoever connects to it is on VPN no matter what.. Including my NAS. The problem with this is that I can not watch Netflix or log into my Bank etc, so I made GE 03 connect to a Router for the devices that need to be off the VPN.

The problem is that I can not access one subnet from the other. I am having trouble with the IP Routing. I understand creating a route from one router to the other, but how do I route it to, and through, one GE Interface to the other.

I have done as much research as I could and have come up with no answers. So I thought why not put both Routers on a non programmable switch connecting to one Interface, GE 03 so that routing does not have to leave one interface and into another.

I was thinking;

Router 1, connected to GE 03 (via switch) would be 192.168.3.2 w/ a Router 10.0.1.1 and 10.0.1.x subnet

Router 2, connected to GE 03 (via switch) would be 192.168.3.3 w/ a Router 10.0.2.1 and 10.0.2.x subnet

Would this allow easier routing to the LAN through both Routers and still allowing External connections (VPN or not) to work.

[Georg Pauwen]

Hello,

what device are interfaces GE 03 and  GE 06 on, is that a layer 3 switch ?

[fbeye]

Good afternoon

It is a Cisco SG112-24 Layer 2 Switch. If I need a Layer 3, and that is going to solve this, I will gladly do so.

That or if my situation as is can be done via routing, I would do that as well.

[Dennis Mink]

If you have two separate routers (Layare 3 devices) dishing out IP addresses for two different subnets. and you want to be  able to route between the two, you would need static routes so the routers can point to each other.  apart from that you would either introduce a third subnet that is shared between the two routers, so that routing can actually occur,. or that one of the routers has an IP addresses in the subnet of the other.

[fbeye]

I understand what you mean but that is the very issue I am having, or ignorant to.

If I were only routing between 2 routers I would indeed create an ip route from one to another, on each other. My issue with the current scenario is how would, lets say, my Laptop (10.0.1.5) on Router 10.0.1.1 connecting to 192.168.3.1 (the Cisco Interface) connect to my NAS (10.0.2.5) on Router 10.0.2.1 connecting to 192.168.6.1 (the Cisco Interface).

When creating IP Routes on my 2 Routers, D-Link and TPLink I have a destination, subnet and gateway which is common knowledge but what route would one router take to the other through 2 different Cisco Interfaces. That is why I thought eliminating an Interface and having 2 Routers connecting to a non programmable switch connecting to 1 Interface might help, or maybe not.

What Route would you use in this format, Laptop to NAS;

10.0.1.5 (Laptop) - 10.0.1.1 (Gateway ((192.168.3.2 WAN Side))- 192.168.3.1 (Cisco GE 03) - (Cisco GE 06) 192.168.6.1- ((192.168.6.2 (WAN Side) Gateway) 10.0.2.1 - (NAS) 10.0.2.5

[Dennis Mink]

you've lost me, can you add a small diagram with all relevant subnets and devices to this post. cheers

[fbeye]

Here is my "Topology".

Essentially, I want the 10.0.1.x Subnet to access the NAS on 10.0.2.x Subnet

[fbeye]

Any suggestions, hints or direction on my problem?

thank you 

[Dennis Mink]

Since every subnet is connected to your 5508, why dont you put an ACL on the relevant interfaces to allow 10.0.1.x to communicate with 10.0.2.x

[fbeye]

After throwing several scenarios around I have come to the conclusion that what I want to do, in the way I want to do it, is not possible.

It all falls back to the DLink with the VPN. When the VPN Client is enabled, it simply removes itself from my Network.

I have tested my theory by using another router and being successful with accessing its GUI from the other network. When I enable VPN on it, I no longer can.  So my VPN Router is simply not going to let me even with an IPRoute.

Now, on the VPN Router there is a Policy Based Routing option, but it still defies the fact that I need to get to the very internal IP ON the VPN. So that will not work.

My only other idea would be some sort of tunneling between a LAN Port on Dlink and a LAN Port on the TPLink.

Either way, knowing that without VPNS I can access each subnet on different Interfaces through the Cisco is satisfying in itself but as far as my initial desired configuration, I concede.