Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Router/VPN concentrator setup.

We are trying to optimize our network set up, and would like to give our vpn concentrator a public ip.

Our ISP has given us a serial ip address of (ip address made up, but last 2 octets are real) 12.123.201.174 which is currently going to our cisco 2811 router.

We have a public ip address range of 12.123.202.97-126

We would like to give the vpn concentrator a public ip of 12.123.202.115

There is an hwic on the 2811 router which has 4 open switch ports.

I ran a cable from one of these ports on the router to the vpn concentrator, but I don't know what gateway to tell the concentrator to use since the serial ip is not on the same subnet as our public ip range.

Is there an optimal way to do this?

1 REPLY
Hall of Fame Super Silver

Re: Router/VPN concentrator setup.

Hello William,

in this case you should assign an IP address from the pool to the Vlan SVI interface to be able to act as default gateway for the VPN concentrator.

the interface Vlan could be the first IP address on range:

vlan database

vlan 10

apply

exit

int vlan 10

ip address 12.123.202.97 255.255.255.224

the etherswitch port has to be associated to Vlan 10

int fasx/y

switchport

switchport mode access

switchport access vlan 10

desc to vpn concentrator

note:

you need also to exclude the ip address assigned to the vpn concentrator from the NAT pool definition.

Hope to help

Giuseppe

280
Views
0
Helpful
1
Replies
CreatePlease to create content