Route all internet traffic over box-to-box VPN

[daffymd]

We have a client who currently has an Internet connection at Site A and a pair of routers that link Site B to Site A via 64k private circuit. All Site B Internet traffic goes via Site A.

They want to replace the private circuit with some DSL circuits and Cisco routers but still route all Internet traffic from Site B via Site A (all content filtering etc.. happens here).

I have used Sonicwalls to do something similar before (they had a "Route all traffic via this tunnel" tickbox) but never Cisco routers.

Has anybody had to set this up. If so did it work?

 

[Minue]

Hi,
We are taking Cisco routers.Tese can even make coffee ;-)
On the serious side,you can do this with a site-to-site VPN,the site's will need 2 public address.Or with a Easy VPN 1 of the sites will need a public address.
As for the configuration it can be easily done with the Cisco SDM (the new GUI).Doing it with the command line for someone new to Cisco would be a days work.
In any case you can find examples configs on Cisco website or I can send you one.
Regards

 

[romerott]

I have a related question, which my gut tells me has the same answer. I was recently told by an IT admin that my 1811 router at SiteB could not be used in conjunction with their SonicWall VPN server at SiteA. The IT admin said that with this combo we could not route all internet traffic from SiteB through SiteA's firewall.

The IT admin claimed this could only be done w/ a SonicWall to SonicWall connection.

Given the maturity of VPN technology, I find this hard to believe. Of course, I don't have a SonicWall to test against, so I'm at a bit of a disadvantage. Anyone have any experience with this particular combo? Anyone believe routing all internet traffic via VPN from remote Cisco to central SonicWall is *not* possible?

I suspect that I'm being stonewalled and the IT admin just doesn't know how to do this or doesn't want to figure it out.

Thanks

 

[burtsbees]

I agree with you, though I do not have experience with the combination. I mean, the traffic for a site to site VPN is in tunnel mode, so...

Burt

 

[watchguardmonkey]

the hardest part would be setting up the VPN tunnel between the Cisco and the sonicwall, once you get the tunnel up, it's just a matter of defining interesting traffic at the cisco end and making sure it routes back correctly via the sonic wall, best if you don't have to NAT the traffic from the Cisco side.

It can be done, but you maybe need someone with CLI experince other than the easy to use GUI, sounds like the IT people don't know how to setup a VPN between sonicwall and non sonicwall device.

WGM