I am in the process of setting up a point to point T1 line between our corporate office and a remote office several miles away. The leased "private" line has been installed and now it is up to me to configure the connectivity between the two sites. I have a question regarding the topology of the connectivity between the two sites (this is my first time setting something like this up). Here is my proposed config:
Remote Office LAN 172.16.92.0/26
|
|
Int E0/0 172.16.92.1/26
Cisco 2610 Router
Int S0/0 192.168.1.1/30
|
|
Adtran TSU
|
|
|
WAN P2P Private T1 Line
|
|
|
Adtran TSU
|
|
Int S0/0 192.168.1.2/30
Cisco 2610 Router
Int E0/0 172.16.91.1 /26
|
|
Int Gig1/0/1 172.16.91.2/26
Cisco 3750 Switch
|
|
Corporate Internal LAN 172.16.91.0/26
The 3750 is the backbone to my internal network at the corporate office. I have completely seperate T1 lines (running BGP) for Internet access at the corporate office going to a 3825 router - which a firewall sits behind. My concern is can I bring the P2P line directly into my corporate LAN without using a firewall at each site? I plan to run PPP encapsulation with CHAP authentication to ensure security across the private line. What is the "best practice"?
Any suggestions? Also, what configuration parameters need to be set on each of the adtran's?
Thanks!
Remote Office LAN 172.16.92.0/26
|
|
Int E0/0 172.16.92.1/26
Cisco 2610 Router
Int S0/0 192.168.1.1/30
|
|
Adtran TSU
|
|
|
WAN P2P Private T1 Line
|
|
|
Adtran TSU
|
|
Int S0/0 192.168.1.2/30
Cisco 2610 Router
Int E0/0 172.16.91.1 /26
|
|
Int Gig1/0/1 172.16.91.2/26
Cisco 3750 Switch
|
|
Corporate Internal LAN 172.16.91.0/26
The 3750 is the backbone to my internal network at the corporate office. I have completely seperate T1 lines (running BGP) for Internet access at the corporate office going to a 3825 router - which a firewall sits behind. My concern is can I bring the P2P line directly into my corporate LAN without using a firewall at each site? I plan to run PPP encapsulation with CHAP authentication to ensure security across the private line. What is the "best practice"?
Any suggestions? Also, what configuration parameters need to be set on each of the adtran's?
Thanks!