cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to the Cisco Small Business Community

Have a question? Click on a topic board below to get started in the community.

394
Views
0
Helpful
1
Replies
brian.russell31
Participant

Help with Site to Site Routing UC520

Hi All,

Looking for assistance \ guidance on trying to get the routing correct thus to reach each sites devices.

I have attached a network diagram to help you understand my setup:

Network Diag.JPG

I can establish the link between both sites and ping both the 10.54.8.1 and the 192.168.20.1 from each end.

What I am trying to reach is the devices on the Sky Router 192.168.0.0 subnett - I have tried via CCA to enter the correct static route but failed miserably. However when I SSH onto the Scotland device from the router and CLI I can ping the Sky router 192.168.0.1 but from Poland the router goes out via my local ISP provider and gets routed to nowhere. What would be the router I would need to enter on both ends thus to access devices on both Poland 10.54.8.0 and the 192.168.0.0 subnetts?

When I try the route I think is correct CCA gives me a warning that the router is not valid and doesnt add it in.

Thanks for you help in advance

Brian                  

1 REPLY 1
CHRIS YEO
Beginner

Hi Brian,

So there would be a few things you would have to do.

1) Update the nat rules to make it so the UC doesn't nat the traffic out (which is what you are saying is happening)

2) You need to update the acl's that describe the interesting vpn traffic

3) You need to ensure the acl's for the appropriate interfaces are not blocking what you are trying to do

4) update the routing tables

5) This "may" be supported.

A much safer way is to use an ISR in front of the UC's to run dynamic routing and something like dmvpn, which makes a lot of this easier... more complex to setup, but 'easier'.

Now you can also do dmvpn, and dynamic routing on the UC.  This is NOT a supported configuration, but I know it works and is very functional.  When you have an update or you need support, you will have to verify this configuration manually.

This widget could not be displayed.