Unable to connect to an outside Citrix services after switching to Com

[kal65]

Hi,
we used to connect to a published citrix app at a client's site from the remote site using ica, we are unable to connect now after configuring the router to switch to comcast internet at the remote site ,we get the message "there is no server configured at the remote location", we tested the connection from the HQ and it works fine, we still have some traffic go to the HQ through a T1. We need everyone at the remote site to be able to access this app. Please provide me with the config to allow this connection.
Below is the current config on the router;

Current configuration : 2859 bytes
!
version 12.2

service udp-small-servers
service tcp-small-servers
!
hostname Router1
!

ip subnet-zero
no ip source-route
ip cef
!
!
no ip domain-lookup
no ip dhcp conflict logging

!
interface FastEthernet0/0
ip address 192.168.20.1 255.255.255.0
ip nat inside
no ip mroute-cache
ip policy route-map RM-RemoteExchange
no keepalive
speed 100
full-duplex
!
interface Serial0/0
description Point-to-Point
bandwidth 1544
ip address 192.168.x.y 255.255.255.252
!
interface FastEthernet0/1
description internet connection
ip address 173.161.x1.y1 255.255.255.252
ip nat outside
no ip mroute-cache
no keepalive
speed 100
full-duplex
!
interface Serial0/1
no ip address
shutdown
!
router eigrp 10
network 192.168.20.0
network 192.168.30.0
network 192.168.x.0
auto-summary
no eigrp log-neighbor-changes
!
ip nat inside source list ToNAT interface FastEthernet0/1 overload
ip nat inside source static tcp 192.168.2.40 444 interface FastEthernet0/1 444
ip nat inside source static tcp 192.168.2.40 3101 interface FastEthernet0/1 3101
ip classless
ip route 0.0.0.0 0.0.0.0 173.161.x2.y2
ip route 192.168.0.0 255.255.0.0 Serial0/0
no ip http server
ip pim bidir-enable
!
!
ip access-list extended ToNAT
permit ip host 192.168.20.18 any
permit ip host 192.168.2.40 any
access-list 111 permit ip host 192.168.2.40 any
access-list 199 permit icmp any any echo
access-list 199 permit icmp any any echo-reply
priority-list 1 protocol ip normal tcp 1494
priority-list 1 default high
dialer-list 1 protocol ip permit
route-map RM-RemoteExchange permit 10
match ip address 111
set interface Serial0/0
!
route-map naci-worm permit 10
match ip address 199
match length 92 92
set interface Null0
!
snmp-server community public RO
!

no scheduler allocate
end

 

[unclerico]

sounds like a firewall issue to me. did anything change on the remote site firewall??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[burtsbees]

You may need to force the routes to go through using PBR?

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[kal65]

there is no firewall.
why would I force it using PBR if that is the path the packets to the internet are going anyway?

 

[burtsbees]

I think I misunderstood your request then...I thought they were maybe different interfaces...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[kal65]

the router has eth0/0--->local subnet
S0/0---->T1 to HQ
eth 0/1---> to internet

do you think the existing PBR has anything to do with this issue?