internet sharing from hq to branch office

[msheraze1]

Dears,

I have to use the internet from my HQ to my branch office the connection between the HQ & branch is BGP & i m using an ISA server at HQ.

but the problem is that I am not able to browse while I can ping from My remote office to ISA server.

please help me to find out a solution.

[Calin C. · Accepted solution]

Here we go

You can ping 4.5.6.7, as there is on the same router with 192.168.15.x, 192.168.1.x, so before NAT is coming to play. This tell us that the routing part seems to work fine.

Now it's about the NAT part and the ISA.

To see if the NAT is the guilty part, I would sugget to NAT the 129.168.16.0 to the 4.5.6.7 (so without ISA involvement).

If this is working, then you have an issue on the ISA

Let us know please if you can do this test.

Cheers,

Calin

[msheraze1]

Hey,

Thanks Calin,

that is working bypassing the ISA.

thanks & regards,

[Calin C.]

OK, great!

I'm not very good with ISA, but I can give you a possible solution. This depends on your hardware. It's called Policy Based Routing (PBR)

Here is a very good explanation:

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6642/prod_white_paper0900aecd804fa16a.html

And you can find an example on my blog:

http://www.firstdigest.com/2008/12/cisco-traffic-manipulation-with-policy-based-routing/

Or if you don;t like the above one:

http://www.cisco.com/en/US/docs/ios/12_0/qos/configuration/guide/qcpolicy.html

This has nothing to do with NAT. You just tell the router that packet from source X (like 192.168.16.0) entering the interface Y (your LAN / VPN interface) have next-hop Q (your ISA server).

I hope this helps!

Good luck!

Calin