Contivity 1100 Point to Point Config

[viper222]

First, I apologize for being a newbie on this. I have done router configs but only home/small business configs and point to points via VPN using the WAN. I am trying to get two Contivity 1100's to interface with each other via a Point to Point T-1. We have a T-1 from point A to point B. I tried setting the Interface Slot 3 on both Routers to a ip address on the same subnet ie: 192.168.15.1 and 15.2 then setting up a static route telling it 192.168.4.0 (Point B Lan) to use gateway 192.168.15.2 and 192.168.1.0 (Point A Lan) to use 192.168.15.1, this has came up with still no connection. I can ping my Slot 3 ip 15.1 and 15.2 from the local site of each but not to each other. Is anyone willing to help with this issue OR IS ANYONE WILLING to give me the config file from two routers that are working in this manner (just a site to site routing with Point to Point T-1's) and I will upload the config in to the routers and I will just look at all the settings and figure it out myself. Thank you so much in advanced.

 

[biv343]

Someone correct me if I'm wrong, but I think the stateful firewall keycode is needed to route between private networks (i.e, over a point to point T-1).

 

[viper222]

biv343: I had found this thread:

http://www.tek-tips.com/viewthread.cfm?qid=1142872

and from what I understood it to say was if going from Public to Private. We are only going Private to Private ie: Point to Point from A to B, basically a VPN just with a Point to Point T-1 instead of an internet connection. I may be wrong on this.

 

[biv343]

He was correct - since your traffic isn't encapsulated in a VPN tunnel, you would need the stateful firewall license, even though all it would require is an any/any/all rule to route between the interfaces.

However, what the last poster mentioned should work also, just define both interfaces as private and let-er-rip.

I've never tried using a Contivity as a "non vpn router" across a point to point T-1, so I've never experienced it for myself, but I've used to to route between VLANs with 802.1Q, and that worked fine.

 

[VPNSteve]

Actually, you are both only partially correct. You do *not* need the Stateful Firewall licence key. I wrote about this in a reply to the thread that Viper222 posted here.