Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Securing My remote Sites

I have a Cisco 2611 router which I use to connect to the internet but at the same time to some remote sites. I have a firewall between this router and my internal Cisco 2610 router which connects my LAN and other remote sites. My company says it can not buy another 2611 router, so that the remote sites connected to the internet router are protected by my firewall using the proposed new Cisco 2611 router, leaving the Cisco 2611 router connected to the internet outside.I still want to protect my remote sites. Would anyone know how I can go about this problem.

1 REPLY
Gold

Re: Securing My remote Sites

This will be ugly. :-) You could do this:

remote sites

|

internet----2611----\

| |

pix----/

You can policy route traffic coming into the 2611 from the remotes and destined to the internet out to the pix, and let the pix route it back in and out to the internet. You could also policy route the traffic off the internet to the pix, and then let the pix route it back to the 2600 for routing towards the remote sites.

Like I said, this is ugly.

Russ

80
Views
0
Helpful
1
Replies