Static Route

[doohder]

Ok I have been stuck on this for about a week and its getting old it kinda sucks that I have to set it up this way but don't have much of a choice company won't put in another T1 line for the wireless users. I supply a diagram and I want the static route to follow the arrows I have put on it. The reason being for this is the at the wireless system has to have a public address is what the providor told me. And I don't want it going through a firewall.

I currently have the all the internal users going through the ISA server by doing ip route 0.0.0.0 0.0.0.0 10.1.0.10 which is the ip of the ISA server. Is there any way to do a static route for the 216.x.x.181 to the top T1 router with out affecting the internal users? I have had a static route far enough to where I can ping from the PLP router to 216.x.x.181 and 216.x.x.177 but I can't move up to T1 router and ping 216.x.x.181. Any suggestions would be great!

 

[KiscoKid]

Well if the PLP router can ping the public subnet you want, I'd have thought all you'd need on the T1 router was a route for the public range with the gateway being the PLP router.

To control the outbound traffic from the public subnet so that it doesn't hit the ISA server, I'd recommend either distributing a different default gateway via DHCP (if you can). If not, you can use something called PBR (policy based routing) which basically allows you to specify what the next hop should be for any source subnet (i.e. it will override the default routing behaviour).

Hope this helps

 

[doohder]

I guess it kinda help just not to familiar with PBR. I guess if you could help me with command or routes that I may need to do that would awesome.

 

[KiscoKid]

Following is a link on how to configure it:

http://www.cisco.com/en/US/products...figuration_guide_chapter09186a00800c75d2.html

However I think you'll need something like the following:

interface fa0/0
ip policy wireless

route-map wireless permit 10
match ip address 1
set ip next-hop 10.5.0.2

access-list 1 permit x.x.x.x

Where fa0/0 is the interface where the wireless traffic enters the router and x.x.x.x is the IP address range(s) used by wireless clients. I would apply this config to the PLP router in your diagram.

 

[doohder]

would I have to do anything on the GrandRios Router or the T1 Router..... another thing since it needs IP of 216.x.x.161 and 216.x.x.162 I would enter
access-list 1 permit 216.x.x.161
access-list 1 permit 216.x.x.162

 

[KiscoKid]

The T1 router simply needs a static route for the wireless clients pointing to the PLP router. The GrandRios router should already know how to get to the wireless clients as they are on a connected interface however it will need a default static route pointing to the PLP router so outbound traffic has somewhere to go.

That access list looks fine.