Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

vpn and internet

hi friends,

i have one 2811 router and i am having one internet leased line and one ADSL line bothe are connected in 2811 router.

my scanerio is,

i need to give internet to the local network users using only ADSL line.

and remote vpn client also needs to configure in the router using the leasedline internet line.

leased line is having static public ip.

the leased line i need to use only for vpn not for any other purpose.

is it possiblle? .

thanks

cyril

5 REPLIES

Re: vpn and internet

Yes, it is possible.

1. apply crypto map under the leased line interface

2. configure default route to use ADSL interface

3. configure a static route to "vpn pool IP range" to leased line interface.

New Member

Re: vpn and internet

hi Wu,

i am attaching my config ,please just look into it.

and suggest me the changes i need to do in this

thanks

cyril

Re: vpn and internet

Ok, you are using enhanced Easy VPN (DVTI). Here is some comment.

1. based on the following, you have FTP/HTTPS server terminated on leased line interface. Currently default route is point to ADSL interface. You might need to use policy route to forward the traffic from 192.168.0.5 port 21/443 back to the leased line interface.

ip nat inside source static tcp 192.168.0.5 21 interface FastEthernet0/1/0 21
ip nat inside source static tcp 192.168.0.5 443 interface FastEthernet0/1/0 443

2. If you don't have any firewall, I would suggest to enable IOS FW feature on this box to protect your inside network.

3. DVTI should add route for remote vpn client automatically, so you don't need add any route for remote vpn.

I might miss some points but the above should give a basic to start with.

New Member

Re: vpn and internet

hi ,

according to your suggestion my config is ok.

is the vpn will work in this config?

or i need some changes . nat i ll take care.

thanks

cyril

Re: vpn and internet

Yes, your VPN config looks good.

232
Views
0
Helpful
5
Replies