Connecting VLAN's through Routers HELP!!!!!!!!!!! 1

[networkgod99]

I have a set of VLAN's that work perfectly on my LAN ... the problem is, I need to connect remote offices to those VLANs and I have NO IDEA how ... if someone can give me a step by step .. I would really appreciate it ....

4506 core switch .... 2611 router, 14 VALNs

remote offices - 2611 router, 2924xl switches, need to connect 3 vlans at each .. there are 6 remote offices

example .. vlan 101, 102, 103 at head office, need to be accessed by location 3 HELP!!!!!!

 

[RookThis]

Route between the sites...

 

[lambent]

...and use ACLs to allow traffic from remote sites to certain VLANs/subnets.

 

[networkgod99]

I was really hoping for a little bit more detail in the explanation

 

[lambent]

First, either create a new VLAN for the subnet between 4506 core switch and head quarter 2611 router, or create a layer-3 interface on 4506 core switch and use a 30-bit subnet on that L3 port and the 2611 ethernet/fastethernet port.

Then:

For using dynamic routing protocol (e.g. OSPF)

1) enable OSPF on 4506 core switch on every VLAN/L3 interfaces that you want to provide access to remote sites
2) enable OSPF on 2611 routers on head quarters and remote sites
3) use ACL on either the WAN interface on headquarter 2611 router or remote 2611 router to limit access to certain VLAN/subnets
4) Properly set the default gateway on all the hosts...

For using static routes

1) 6 static routes on 4506 core switch for the 6 LAN subnets in 6 remote sites, using the head quarter 2611 router as the next hop (or 12 static routes if you want to include the 6 WAN subnets for the 6 remote locations)
2) 6 static routes on head quarter 2611 router for the 6 LAN subnets in 6 remote sites, using the corresponding remote site 2611 WAN interface IP as the next hop (e.g. ip route <remote site 1 LAN> <subnet mask> <remote site 1 WAN IP>).
3) Either a default route on head quarter 2611 using 4506 as next hop, or create 14 static routes for the 14 VLANs using 4506 as the next hop.
4) Create 3 static routes on each remote site 2611 router for the 3 VLANs that are allowed to access, using head quarter 2611 WAN IP as next hop.

 

[NetworkGhost]

Do you have your remote sites VPN'd in?

 

[networkgod99]

The remote sites are connected via frame relay, not VPN