CONTIVITY BSR222 TO CISCO 1801 1

[jonnyred]

I wonder if any one can help. I am a non technical project lead (oh no the techies shout)and i am installing a dsl line at a remote site. The dsl comes with a Cisco 1801 router which has wireless connection.In need to connect two pcs wirelessly back to our lan.
To enable us to provide a secure vpn tunnel back to our Lan we are thinking of setting up a connection via a nortel contivity BSR222.This has to plug into a cisco 1801 and then back to a nortel 600 at our site.
My question is does anyone know if we can miss out the BSR222 and do a straight secure VPN tunnel from the cisco to the 600 box. All the techies i have asked so far have come up with "should be ok",or "try it and if it doesn't plug another box in between them".
My tech guy insists that i need to plug in a third box (basic 3com wireless router)to the contivity then the contivity into the cisco.
As i said im totally dependant on others but really want to deliver a good solution so any help would be gratefully received.

 

[jonnyred]

sorry the title should read Contivity 600 to Cisco 1801

 

[HungryHouse]

I think I have a simple solution. Why not just install Contivity VPN client on both PC's at remote site?

 

[jonnyred]

Thanks for the reply. We have thought of this, but at present we have only got kit to supply 50 VPN tunnels and we want to use these for some very remote sites and single user sites, as well as for some of our consultants to remote in on.

 

[HungryHouse]

Johnny, a tunnel is as a tunnel is. If you're saying to yourself, "House, what the x^%$#@^@& does that mean?", do not fear!
A branch office tunnel (also called a site-to-site tunnel....which is what you were originally proposing from the 222 to the 600) and an end-user or client tunnel are the same thing from a licensing perspective. They both are counted as (1)tunnel to the Contivity. So, if you are THAT short on the 600(keep in mind the issue is SIMULTANEOUS tunnels here...you could in theory have 100+ tunnels configured, but as long as only 50 are connected at any one time, you are good-to-go), then I agree with a site-to-site tunnel. I would stick to the BS222 router if you can do it, and just do IPSec passthrough on the Cisco1801 (it might already be wide open...does it even have the VPN/fw feature set on it...aka the part# on that would be "CISCO1801/K9"...if it just "CISCO1801" then it is not capable of IPSec or firewall, so the choice no longer exists anyway).
I hope this is helpful and clear.
-HH

 

[jonnyred]

Why cant i get the same clear concise technical help from my guys here !
They just say black is black and if you ask but why is it black they say because it is.

I will check out with our supplier what the sctual kit they intend to supply is. As part of the same project i have to sort access to remote staff at 31 other locations so i guess i will have a chance to use all the different options.

Many thanks for the help and advice.

 

[HungryHouse]

Johnny, you're very welcome.
Let us know if you need further help.
If you prefer to chat outside this forum, let me know.

Have a great day.
-HH

 

[jonnyred]

Hello HungryHouse would it be possible to talk to get some more info from you please.