I have 2 Cisco 1700s setup.
1 each at 2 different sites and connected via a private P-P T1 connection.
Site A : NetworkA = 192.168.0.0/20 LAN with 2 DMZs via 2 other routers 192.168.16.0/20 and 192.168.32.0/20
Site B : NetworkB = 192.168.111.0/24
NetworkA T1 side is 172.x.x.0
NetworkB T1 side is 172.x.x.1
Routes are set on NetworkA Cisco to go to 172.x.x.1 for any 192.168.111.x traffic
Routes are set on NetworkB Cisco to go to 172.x.x.0 for 192.168.0.0/20 traffic
The two other routers/firewwalls at Site A as configured to route any 111.x traffic to CiscoA to handle.
This all works perfectly.
Note: I do not know how to configure this router, which is why I am seeking help (I am unfamiliar with Cisco commands etc)
I am nervous about making changes with my level of ignorance on syntax 🙂
What I am trying to do:
I would like that NetworkA Cisco routes traffic for each DMZ to it’s respective router (192.168.1.1 and 192.168.1.2 in this case)
I would also like NetworkA Cisco to route all other general IP traffic to 192.168.1.1 (Internet bound traffic)
I would like the NetworkB Cisco to route both DMZ subnets through to A as well (add 2 more static routes, or reconfigure the 1 to increase the IP range that it routes I assume) so that A can pass the traffic on to the respective internal gateway of those DMZs (192.168.1.1 and 192.168.1.2).
I would also like NetworkB Cisco to route all Internet bound traffic arriving to it through to NetworkA Cisco for it for pass it on to the Internet Gateway on NetworkA (192.168.1.1)
From what I assume, NetworkB Cisco can essentially be configured to route any/all traffic other than 192.168.111.x on to NetworkA Cisco as anything sent to NetworkB Cisco from Site B is ulitmately bound for somewhere on Site A.
The reasons for all this is twofold
1) I want Site B to be able to access both DMZs at Site A (Note: Site A has all routes configured on routers 1.1 and 1.2 already to point back to CiscoA when expected)
2) I want Site B to be able to switch to CiscoB router (192.168.111.200) as thier gateway in a pinch, should the normal Gateway or ISP at SiteB (192.168.111.1) fail for whatever reason – give them internet access via the private tunnel as a temporary measure while the issue is resolved.
Site B only has 10 users.