Networks

Ask something
Discussion Locked

Route i'net traffic through main office

0 helpful
7 replies

by ericrb 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Problem: We want to route internet traffic from satellite office through point-to-point t1's connected to main office. I would like to accomplish this using the routers rather than a proxy server.

Description: We have two offices connected via 3 T1's and Cisco routers. The satellite office has no internet connectivity. Our main office is connceted to the net by dedicated internet T1. The two offices are on separate networks.(HQ = 172.16.0.0, Satellite = 172.17.0.0) I can talk to deviceson both networks from either office. At the main office, IE detects settings automatically at main office and browses the net fine. No such luck at satellite branch. From a PC at the satelite office I can ping our PIX firewall which is the gateway for internet traffic at our main office but I can't get any pages to come up. It's resolving the IP's via our internal DNS server(located at main office) which forwards i'net DNS queries to our ISP's DNS servers. For example I can ping disney.com fromthe satilleite and it returns the resolved IP ( with no repies to the sent ping packets.)

Any help appreciated!

7 replies

by d.walker5

Your Router is premforming packet filtering. Check router configuration and you'll solve the problem.

by joseph moore

I would guess that the PIX is not configured to put a NAT on the IP addresses from the remote office.
Did you try running a traceroute from the remote office to an Internet-based address? If so, do the packets just drop after the PIX? If that is the case, then the PIX is probably not configured to apply a NAT Hide on the IP address segment that the remote offices use (172.17.0.0).
Set up a rule in the PIX for the remote office segment, then make sure it is gonna allow outbound connections touse TCP port 80 & 443 for web access.

basically, it is a routing problem at the firewall, I would guess.

hope this helps

by wlbowers

Programming in the router and Pix will solve your problem. Call Cisco. Their support is excellent.

This discussion is closed to new replies.