On Fri, 26 Nov 2004 11:55:59 +0000, Anubis wrote:
> Hello,
>
> I have a 1721 router with one Serial WAN card and one single port Ethernet
> WAN card.
> What I need to do is configure the router such that it routes all incoming
> (into my network) information from the Ethernet WAN card into my network and
> routes all the outgoing information to the Serial WAN card.
>
> I have a satellite linkup with TX and RX on separate devices thus requiring
> the above configuration.
>
> I also need to have all IP addresses and IP packets routed to my firewall
> which will perform the NAT for my network.
>
> Anyone who can provide assistance in this, could you please either reply to
> this post or contact me directly at
>
> Thanking any one in advance who can help!
>
> -Anubis
I apologize for being dense, but if you have a router with two interfaces,
and both of those interfaces are connected to your ISP/satellite
connection, how do you connect the router to your internal network or
firewall? Are you trunking the Ethernet?
If you have another interface or VLAN facing your internal network, then
this doesn't sound complicated. The router's default route would be
configured to point to the serial (outbound) interface and incoming
traffic over the RX Ethernet port could be directed to your internal
firewall using a static route. Asymmetric routing, of course, but that's
how your satellite provider designed it.
I'm thinking something like this:
(ethernet0) RX-\
ROUTER-(ethernet1)-FIREWALL-INSIDE NETWORK
(serial0) TX-/
So, for instance if you have the following interfaces and addresses:
TX interface is Serial 0 address 2.3.4.5/30
RX interface is Ethernet 0 address 4.5.6.7/30
inside interface is Ethernet 1 address 6.7.8.9/30
firewall's outside interface is 6.7.8.10/30
NAT address is 20.20.20.20/32
the relevant configuration would be:
===
interface Serial 0
ip address 2.3.4.5 255.255.255.252
interface Ethernet 0
ip address 4.5.6.7 255.255.255.252
interface Ethernet 1
ip address 6.7.8.9 255.255.255.252
ip route 0.0.0.0 0.0.0.0 serial0 (or ip route 0.0.0.0 0.0.0.0 2.3.4.6)
ip route 20.20.20.20 255.255.255.255 6.7.8.10
===
The firewall should forward all outbound traffic to 6.7.8.9