Help with BCM 400, contivity 1010, and I2004 2

[chrisrudeau]

hello all,
First of, what a nightmare we are having with this setup. We had first issued Netopia to everyone with an IPsec VPN setup and seemed to function but was based on Static IP's. Since most of our remote sales people have comcast cable at their houses with DHCP, this didnt work so well.

Here's what I'm looking to setup and seem to be having some trouble setting it up.

On the BCM we want to only use Lan 1 with a private IP address. I have a Contivity 1010 setup already on the network that has a public IP and a private IP.

The IP's phones in house are working fine, they are all on the private network. What I need to do is figure out how to setup up the contivity 1010 to forward all the ports from it's public IP to the BCM's IP. This way the I2004's at the sales people's homes can connect with out the need for VPN's.

Problem I'm having is how to setup the port forwarding on the 1010. I can't seem to figure it out, and also what all the ports I need to forward are.

Once this is working I am then going to start to setup a VPN tunnel for a remote office. There will be a contivity 1010 out there that will tunnel to our main 1010.

 

[chrisrudeau]

I got the DNS setting correct now. As far as the NAT rule. It's using the default Private to Public that the contivity had setup.

One odd thing I just noticed. in the admin/tools, I can ping

http://www.yahoo.com

but I have to specify the source, it will ping from either the public IP or the private IP, but not if that field is blank. Is this normal? i can ping anthing on the private network without putting anything in the source field.

 

[chrisrudeau]

it actually appears if the tunnel is now up. I have internet access on both ends and the tunnel says successful. But the I2004 is not connecting.

How do i verify that the tunnel is actually up? And do I need to do anything with port forwarding or anything for the i2004?

 

[chrisrudeau]

I can't figure out how to edit or add to a post either. lol

I think my problem is with the IP addressing. My HQ is based on 192.168.2.xx address's, and the 1050 on the other end has 192.168.1.xx address's. With the tunnel up I can't ping anyone on the other side of the tunnel because of this. Probably also the reason the i2004 can't find the server.

 

[biv343]

Have you enabled branch to branch forwarding on the 1010? By default branch offices can't speak to other branch offices. It's under System, Forwarding.