Routing of Public Address

[doohder]

I have a address that has to be for our wireless system that was put in by our ISP and we are centralizing right now so meaning we are putting in routers to bring all the hotels together right now they are linked together by vpn so each wireless sytem has a public address and so does the rotuer but now the problem im having is routing that public address through the privated addressed interfaces anyone have some steps to help me out I provided a picture to help you out ....so you can help me out ......
<img src="

http://i28.photobucket.com/albums/c236/doohder/wirelessrouting.jpg">

 

[SQL2KDBA69]

Please explain this more clearly :

im having is routing that public address through the privated addressed interfaces

 

[doohder]

Ok right now we have all our sites connected through VPN which I am takin out so here is how the hotel works now. <img src="

http://i28.photobucket.com/albums/c236/doohder/WirelessCurrently.jpg">

the wireless system has a public address goes straight to the ISP they maintain the wireless system. And now we are centralizing so it looks more like this.
<img src="

http://i28.photobucket.com/albums/c236/doohder/wirelessrouting.jpg">

I need to keep that public address but have to route it through our internal network out to the ISP.

 

[SQL2KDBA69]

Im seeing 3 public address two are T1 and one is wireless. So you want to route the t1 traffic thru your network and out the wireless(216.x.x.162).

 

[doohder]

Well the two t1 lines at the top are strictly for internet and all the other routers behind that are point to points I have the the internal users set to go through the ISA server by setting the isa server up as the gateway of last resort. Now providers of the wireless system say that I can't have there radius wireless server go through the isa because it has to be a public address. So I need to route that public address of 216.x.x.161 through to the top T1 Router with out going through the ISA.

 

[doohder]

Easier Put I need to feed 216.x.x.161 straight out the two load balanced T1 lines. Wireless system is strictly for guest and don't want it restricted by a firewall. Was thinking on doing a static route out but lil rusty on the static routing. Know more about routing protocols.

 

[SQL2KDBA69]

so some thing this :
GrandRios
ip route 0.0.0.0 0.0.0.0 10.2.0.1

PLP
ip route 0.0.0.0 0.0.0.0 10.5.0.2



that should route your traffic from the wireless to the t1 with out going thru the sna interface.

 

[SQL2KDBA69]

do some thing like this :
GrandRios
ip route 0.0.0.0 0.0.0.0 10.2.0.1

PLP
ip route 0.0.0.0 0.0.0.0 10.5.0.2



that should route your traffic from the wireless to the t1 with out going thru the ISA Firewall.

 

[doohder]

I have tried that also. The problem I had doing that is all my internal clients then won't get internet. Because then it also routes my internal users straighto out the T1 lines and they Need to be NAT'd before a private address can get out the internet. When I did that it changed my gateway of last resort to the ip address that i did the ip route for. I just so confused on it all!

 

[SQL2KDBA69]

well for you internal users what is there default router giving out by the dhcp server?

 

[doohder]

you are a genius I never though about that there going to be a dhcp server behind the GrandRios router I can just have that 10.1.0.10 which is my ISA server as the default Gateway. And another dhcp server between the the T1 router and the PLP router. If that static route works i should be able to remote into my desktop at home and ping that public address. I am going to give it a try last time I tried this earlier today haha. I couldn't ping that address. but maybe i had typo's

 

[doohder]

Ok....here's what I got I can ping from the GrandRios router to the T1 line 216.x.x.166. Then I go up to the T1 router and try to ping the GrandRios Eth1 interface which is 216.x.x.181. I get no response.

 

[SQL2KDBA69]

are u pinging from the wireless connection to the t1. if so u have to have the return routes.

 

[SQL2KDBA69]

that because u need to have routes going the other way for the reply packets :

like this

T1 Router
ip route 0.0.0.0 0.0.0.0 10.5.0.1


PLP Router
ip route 0..0.0.0 0.0.0 10.2.0.2

 

[doohder]

ok now here my results half way works. I can ping from the PLP router to the GrandRios interface 216.x.x.181. Then I move up to T1 router and try to ping 216.x.x.181 and it won't ping it. its kidna weird. could some of it be because of going over the private network.? does the Arp tables help any?

 

[SQL2KDBA69]

did u put this router on the t1 router:

T1 Router
ip route 0.0.0.0 0.0.0.0 10.5.0.1

 

[doohder]

yeah the problem I have when I do that I am where the switch is now 10.1.0.1 users or whatever the second I put that 10.5.0.1 in I kick all of us off gotten a few phone calls about that. Another thing right now grandrios is connected to us also its just through a vpn connection so when i do that i also kick them off. I am kinda in a test enviroment right now I have a spare router that i am programming up now for the grandrios through a t1 crossover cable. I can still telnet into the T1 router after adding that in just can't ping that interface on the GrandRios router.

 

[SQL2KDBA69]

when u use static routes u have to put in routes for all posible path on your router. for example for the t1 router there should be 4 routes because it has four active interface in use. static routes is alot more work than using a routing protocol like Rip v1.

 

[doohder]

yeah I am using rip right because it seemed the easiest. Now if i want to do static routes I am going to have to come in some night to get that all working. I can get the PLP router and GrandRios router ready for static routes. but the way its setup now it will affect the users we have now. I though i could do router rip and make one static route and not affect anything.

 

[SQL2KDBA69]

i have almost the same setup on my cisco lab at home. where i have to go thru three routers to get to the net.


Computer
|
|
1924 Switch
|
|
1601 Router
|
|
1605 Router
|
|
1720 Router
|
|
Cable Modem


that my lab at home and i get internet access using static routes or RiP