setting up guest internet access with router

Unanswered Question
Aug 8th, 2008
User Badges:

Hi all, I have a new site where they want some sort of guest internet access that does not touch our lan, I have a 873 router that has a public ip address that is only been used for remote vpn into the site, however I need to now use this for internet access also,

Can anyone show me how I can do this, I simply only want to allow clients on the 10.117.202.0 subnet out to the internet, the vpn clients that need no nat are on the 10.117.198.0 network. There is also a route back to my internal network for the whole 10.0.0.0 network, I want an access list that blocks anything from the guest internet clients going to this also, would it be something like ip access-list exentended internet, permit 10.117.202.0 0.0.0.255 any ?


hope for your help


cheers


Carl


hope you can help cheers

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
dhananjoy chowdhury Fri, 08/08/2008 - 02:49
User Badges:
  • Silver, 250 points or more

If Internet is connected on S0/0, and LAN on

int f0/0, then configure this way on the router -


int s0/0

ip nat outside


int f0/0

ip nat inside


access-list 10 permit 10.117.202.0 0.0.0.255


ip nat inside source list 10 interface serial 0/0 overload


Hope this Helps.

Actions

This Discussion