Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

515e WAN Routing Question

Hi,

I have two 515e's at different locations which are currently connected using a L2L vpn.

We have just had a managed BT MPLS link installed.

We gave BT our internal network ranges and they confirmed their side of the work has been completed.

what I want to do now is use the pix at either end to route and connect the internal networks.

So far I have managed to establish connectivity between the 515e's on their 192.168.1.0/24 and 192.168.3.0/24 networks but am not sure where to go now?

I have posted the configs for both PIX's and would be really grateful if anoyone could help.

Kind regards

J Mack

7 REPLIES
Community Member

Re: 515e WAN Routing Question

Hi,

Can anyone help with this at all?

Thanks

J Mack

Community Member

Re: 515e WAN Routing Question

Where is the MPLS network located to the PIX Firewalls? On the DMZ or the inside interface.

Community Member

Re: 515e WAN Routing Question

Hi they are located on spare ports the PIX has so i guess that would be DMZ. The inside int's are connected to the internal LAN's.

Community Member

Re: 515e WAN Routing Question

All i really want to do is use the pix as a router and send traffic from two Internal LANS to each other via the MPLS line. while maintaining the outside interface for the internet.

Is it a case of the PIX just isn't built for this type of functionality?

Would i be best off just connecting the mpls to a Vlan on a switch?

Some help would be much appreciated as i'm really stuck.

Regards

J Mack

Community Member

Re: 515e WAN Routing Question

If it is from the inside network (eth1) going to the DMZ (eth2) to get to the MPLS network then you should not have an issue. Are both sites set up this way? The problem occurs when (6.X and below) the networks are located off of the same interface. Sounds like you should be good to go in your scenario. All you will need is a translation and some rules. Are the networks you want to run via MPLS currently sent through the VPN?

Community Member

Re: 515e WAN Routing Question

Hi,

It is, i want to route my internal networks to (eth3) in this case and over the MPLS to the Pix at the other end. They are exactly the same networks that are going through the VPN, which was a temporary solution.

Can you give me some pointers on the translation and rules?

Also there is another remote site as per the attcahed diagram. At the moment i'm tying to connect A - B, and also hope to connect A - C over the MPLS.

Now the BT router has been installed at C but is not yet connected to the internal PIX. Will that be an issue connecting A - B, ie do all three sites have to be connected for the MPLS links to converge?

Thanks For your help

J Mack

Community Member

Re: 515e WAN Routing Question

Could anyone suggest which NAT config and which rules i should use to achieve this?

Kind regards

J Mack

154
Views
2
Helpful
7
Replies
CreatePlease to create content