Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

WAN Security - adding second router to one location

One of my sites on a WAN has a partner company that wants to install a Cisco router to give access to their network. It is OK for the partner company to access that site (and the clients must access both systems); however, we cannot allow the partner company to come accross our WAN. It is easy enough to setup access lists to prevent their router from sending traffic on our WAN. But how can I prevent them from changing the IP address of their router to that of a workstation that can access our WAN? I have to be prepared that at 3AM in the morning, they may try to do something like that so they can access our AS400 from their remote network. Is there a way to protect against action like that? Most likely I will not have access to their router.

Thanks - John Weldin

New Member

Re: WAN Security - adding second router to one location

You need to setup a firewall to filter traffic coming from their site. It needs to inherently block all traffic unless it was requested by your site.

CreatePlease login to create content