Re: Cisco 1841

From: Lucky <iamreallylucky_at_gmail.com>
Date: Fri, 4 May 2012 18:02:25 +0800

After a long I am reply for this, since the need has arised to sort out
this ...

need help on this

OPtion 1 -

I am thinking to have additional HWIC slot for the router and configure it
so that from router 1 interface for wan link, 2 interface for lan - (from
which 1 interface will go to one firewall for one tunnel) - from 2nd lan
interface will go to second firewall for second tunnel.

OPtion 2

I should upgrade... an 1841 by getting - 3900 series router and do the
consiguration

 once i get the card and insert I need help in the configuration changes -

what i need to do inorder to configure adsl router so that from router 1
interface for wan link, 2 interface for lan - (from which 1 interface will
go to one firewall for one tunnel) - from 2nd lan interface will go to
second firewall for second tunnel.

Total 16 wan ips i have.

I Need help on a sample configuration - on how this can be achieved.

On Wed, Apr 4, 2012 at 9:07 PM, Jay McMickle <jay.mcmickle_at_yahoo.com> wrote:

> So, the CP FW is the outer facing edge, where the NAT occurs, and the 1841
> is the VPN termination point?
>
>
> Regards,
> Jay McMickle- CCNP,CCSP,CCDP
> Sent from iJay
>
> On Apr 3, 2012, at 11:47 PM, Lucky <iamreallylucky_at_gmail.com> wrote:
>
> Thanks jay,
> to be more precise ,
> currently two ports in 1841 are already used for nat inside and outside
> and it gets terminated at production network through checkpoint firewall -
> this has an existing tunnel to london. I want to create another tunnel to
> london without disturbing the existing network and put another port in 1841.
>
> in the 1841 i want to insert another card with ethernet port, configure
> so that i can connect to another firewal and create my tunnel- is this
> possible
> is it possible for the 1841 to handle this
> right now only two ports are there in 1841 and already used for nat
> inside, outside , so the above scenarios is possible.
> thanks
> lucky
>
>
> On Wed, Apr 4, 2012 at 12:11 PM, Jay McMickle <jay.mcmickle_at_yahoo.com>wrote:
>
>> Are you stating that you want to stand up another L2L tunnel, with a
>> separate IP (from the same /28 block) on the outside Interface of the 1841?
>> You might be able to use ip add x x secondary, but I don't know that it
>> would work, and could get messy. Now, you mentioned a checkpoint device, so
>> I'm assuming maybe you have a checkpoint device on the inside? Could you
>> NAT from the outside to the inside to the checkpoint and terminate your VPN
>> there?
>>
>> Sorry of I missed the context of your question.
>>
>> Regards,
>> Jay McMickle- CCNP,CCSP,CCDP
>> Sent from iJay
>>
>> On Apr 3, 2012, at 10:31 PM, Lucky <iamreallylucky_at_gmail.com> wrote:
>>
>> > Hi expert guys,
>> >
>> > i am using cisco 1841 which is terminated from - fiber link 22mbps
>> > connection in singapore .
>> >
>> > I have 16 free ip for this line. right there is only two ethernet
>> interface
>> > used for in and out.
>> >
>> >
>> > from my network vpn is created to another location in london , now i
>> want
>> > to create another vpn connection using another ip and isloated few users
>> > through another
>> > firewall (checkpoint).
>> >
>> > is this possible with single link termination from one router nat
>> outside
>> > and two ports for nat inside with the other ips.
>> >
>> > thanks
>> > lucky
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> > _______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri May 04 2012 - 18:02:25 ART

This archive was generated by hypermail 2.2.0 : Sun Jun 17 2012 - 09:04:19 ART