Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Routing over multiple subnets and IP VPN

Hi there,

here is my situation. I have two 1720 routers and my company wish to route them to a single point entry. here is a simple graph

Firewall

|

|

|

1720A-------------------1720B

they wish to route 1720b through firewall out to the internet.

between 1720a and 1720b is a dedicated line using adsl VPN mode by ISP

1720a's ip information

wan 10.17.1.253 255.255.255.0

lan 10.0.0.10 255.255.255.0

gw 10.17.1.254 255.255.255.0

1720b's ip information

wan 10.16.1.253 255.255.255.0

lan 192.168.1.10 255.255.255.0

gw 10.16.1.254 255.255.255.0

Firewall

lan 10.0.0.2

wan 61.219.234.xxx

both 1720s are using NAT on all interfaces(WAN/LAN).

as you can probably guess, the subnet under 1720 b is using 192.168.1.10 as their gateway. my problem is how do i route 1720b's subnet pc to the internet through 1720a then firewall. do i do IP ROUTE 10.16.1.0 255.255.255.0 10.0.0.2 ?

btw, the 1720a is not used as a gw to the outside, the firewall 10.0.0.2 is the one that is used as a gw to the outer world. its presence is purely as a source to connect two sites together.

plz help me. i am desparate. i have ask many people, but they all are clueless.

1 REPLY
New Member

Re: Routing over multiple subnets and IP VPN

I don't understand the topology from the info you provided so I'll make assumptions. It seems 1720b is at a remote site? Why is it's WAN interface numbererd 10.16.1.253 when 1720a is 10.17.1.253 (255.255.255.0). You sure you're not masked 255.255.0.0? In any case if 1720a is the last router before the firewall, it should gateway at 10.0.0.2 and 1720b should gateway at 1720a WAN interface (10.17.1.253?). All your client PC's should all gateway at their respective routers LAN interface. The firewall (What is it, by the way?) Should have specific routes for the neworks inside it, pointed at 10.0.0.10. Without the configs, it's hard to see just where you're at with this. You might want to do over it with TAC.

214
Views
0
Helpful
1
Replies
CreatePlease login to create content