Tying Corporate VPN router to existing Internet LAN router

[fonegirl]

Thanks in advance for your suggestions.

We are a branch office with a Cisco 1841 router connected to the Internet T-1 with an internal IP scheme of 10.0.0.0. We also have a Cisco VPN router on a DSL circuit with an internal IP scheme of 10.1.1.0. These networks are currently separate and if a user wants to get to a corporate application they use a computer connected to that network. Our corporate HQ wants us to connect both routers on the Internet T-1 and they want us to put in routing tables so that Internet traffic goes out the Cisco 1841 and all other traffic goes out the Cisco VPN router. The Cisco VPN router is managed by a 3rd party International vendor.

Would it be easier to change our Cisco 1841 to the 10.1.1.0 network and if so how do I create routing tables?

 

[burtsbees]

If you wanted to put both subnets on the 1841, you would need a WIC-1ADSL, or whatever can support the dsl. What model is your "VPN router"?

/

 

[fonegirl]

Burtsbees, thanks for your help -

Corp HQ wants to move their VPN router to our existing T-1 circuit so that both routers would be on the same Internet t-1. We can assign the VPN router it's own public IP address. The VPN router is a Cisco

Corp envisions the following diagram:

Internet --- Internet VPN Internal Lan
T-1 router Cisco 1841 ->router Cisco 1800--> 10.1.1.0
Internal 6x.x49.xxx.33/ 10.1.1.252
255.255.255.224 255.255.255.0
External 6x.x49.xxx.32 6x.4xx.xxx.59/
255.255.255.224
How do I configure the routing tables on the Cisco 1841???

 

[burtsbees]

That depends---does Corporate want you to simply connect both subnets, and just separate traffic and keep the DSL, or trash the DSL completely and have the VPN config in the 1841, and separate the traffic in the 1841?

If they want to keep both circuits, how do you connect both routers now, or are they even connected (i.e. L3 switch)?

/

 

[fonegirl]

We would trash the DSL and separate the traffic in the 1841

 

[burtsbees]

Have you considered have both the VPN config AND the LAN in the 1841? If not, how (physically) would you plan on connecting the two routers? Also, can we assume that they both will have their own respective switches?

/

 

[fonegirl]

The VPN router is provided by a 3rd party security company and there is one at every branch office. Unfortunately that has to stay. So I am open to suggestions with how to tie both routers into the LAN using the Internet T-1