Making your Cisco Router act as a T1 term and push next hop

[evilrootsa]

I've have been trying to find information on doing this. Basically, here is the model that I’m trying to do. Lets presume my public IP is ranged between 192.168.25.1-3


ISP---->Cisco Router/T1(2611)<--------->Cisco Pix Firewall
25.1 25.2 25.3


How do I make the Cisco router push traffic to 192.168.25.3? I've done the exact same scenario on a Foundry and a Juniper box, but I don’t know how Cisco does it. Do you set up Multicast(multiplexing?) on the router?


ERS

 

[burtsbees]

Do you mean set the Cisco into bridge mode?

Burt

 

[burtsbees]

router>en
router#conf t
router(config)#no ip routing
router(config)#int fa0/0 (or whatever it is).
router(config-if)#ip address 192.168.25.2 255.255.255.0
router(config-if)#no ip directed-broadcast
router(config-if)#no ip route-cache
router(config-if)#no ip mroute-cache
router(config-if)#no mop enabled
router(config-if)#bridge-group 1
router(config-if)#exit
router(config)#int s0/0:0
router(config-if)#ip unnumbered Ethernet0/0
router(config-if)#no ip directed-broadcast
router(config-if)#bridge-group 1
router(config-if)#exit
router(config)#bridge 1 protocol ieee
router(config)#^z
router#
Like this---but if you do this, I don't know if you can ping or telnet, because of no ip routing...

Burt

 

[plshlpme]

your design is no good because your putting two interfaces into the same subnet.

what you want to do is use a /30 for the isp connection and then use a different subnet facing your pix firewall.

at that point youll probably let the pix do the natting for your lan.
so youll just need to make sure that you have a static route on your router for your lan address space using the pix as the next hop address.

please explain further to us what your trying to do if my above post doesn't make sense... there is no "muxing" going on here though it will be simple ip routeing.

 

[voltron1011]

You can do it in bridged mode like Burt has shown, but I'm not sure why you'd want to. Usually, it's setup like plshlpme said by using /30 addresses (so you don't waste your precious address range) and then NAT at the Pix.