Networks

Ask something
Discussion Locked

Entry through Cisco 805 router

0 helpful
13 replies

by sataychicken

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

One of our sites has a Cisco 805 router which is used to control dialup via a 56Kps modem to the Internet. The inside of the 805 has an IP address of 10.1.1.1/24 and is connecting to a WatchGuard SOHO firewall which has an external IP addressof 10.1.1.2/24. People in the office can browse the Internet fine, send emails and stuff, but I cannot connect remotely, either to the firewall's HTTP admin page or to the server through terminal services. Another of our sites has the same setup andworks correctly, and both the Cisco settings appear similar.

Any ideas on what I need to do to the Cisco 805 to allow access? and how remotely? I know jack-all about Cisco devices!!!

To reiterate:
Modem >>> 805 >>> WatchGuard >>> Switch >>> Server

Thankyou for any help.
JA

13 replies

by kernow_boy

Are you able to log on to the router in either USER or PRIVILEGED EXEC modes ?

If you can telnet in to you routers, compare the two setups by typing show running-config, if you have the same set up at both locations, both routers should(if configured by same person)more or less the same apart from IP addresses, look for
any discreptancies between the two configurations. also check any access control lists on both routers.

If not, then contact you network administrator. With out looking at the configuation files of the routers, or knowing how both firewalls are configured its a bit like looking for a needle in a hay stack.

Hope this helps, if I can be of any more help you can contact me through the peer directory

KERNOW BOY

by joseph moore

You really should use Telnet to connect to the Cisco router and make changes since you are remote. But, you still might not be able to do this since you are outside the router (if I understand your description of the configuration correctly).
The Access Control List on the router probably denies port 80 access to the router from the outside. It will probably block Telnet (port 23) access also.
You should get behind the router and firewall using a remote control program like Windows Terminal Services, pcAnywhere, etc, and control a workstation in the office that passes through the router for Internet access. From that point, either launch a Telnet session to the management IP of the router (10.1.1.1) or a web browser (http://10.1.1.1) to connect to the router.
Then, you will probably be able to connect to the router and make changes.
But, since you are outside of it, I don't think you are gonna be able to connect, due to security reasons.

hope this helps

by bainessj

Do you have a vpn server set up so you can give your self access throught user mnger. That way you can use the up address of the vpn server.

by bainessj

Are you could just save the configuration of the one router to the ftp server and pull it from there and save the configuration of the other changing ip's if necessary.

by sataychicken

Thanks for your thoughts Joseph, I had a similar idea. I will get someone in the office to connect a spare laptop to the console port of the Cisco 805 router, dialup to the Internet using the laptop's internal modem, and then I will connect via VNC into the laptop.

This discussion is closed to new replies.