Direct Traffic for certain networks to specific route

Direct Traffic for certain networks to specific route
NewsGroups | Search | Tools
User Password
Register Now! Lost Password?
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Direct Traffic for certain networks to specific route GNY 03-29-2007
Posted by GNY on March 29, 2007, 8:58 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello!

I have a 2811 where 1 int has an internal IP and the other has a
public IP. The serial port brings a T1 in.

I would like certain addresses that are internal to be routed to the
interface which has a LAN IP.

Whats the best way to achieve this?

I tried using serveal ip route methods, but it failed.

Any ideas?

Thanks..


GNY


Posted by GNY on March 29, 2007, 9:08 pm
Sorry let me be clear .

I would like certain internal addresses that are sought after on the
public network0/1 to be routed to the internal interface0/0.


Posted by Walter Roberson on March 29, 2007, 11:12 pm
>Sorry let me be clear .

>I would like certain internal addresses that are sought after on the
>public network0/1 to be routed to the internal interface0/0.

Unfortunately that's not quite clear. What's doing the soughting?

The traffic to be handled this way:
- where (which segment) does it start on?
- what destination IP address does it start out with?
- where (which segment) should it end on?
- which destination IP address should the packet have when it
reaches the new destination?
- should it have changed source IP addresses in the process of
being redirected?

Or am I reading this wrong and what you've got is a public IP
range that is offering some services known to the outside, and
that's translated at the 2811 into internal IP addresses,
but sometimes someone inside tries to or wants to or
(for some obsure reason) really -needs- to access the resource
using its public IP and those publically-addressed packets are
normally getting out to the far side of the T1 and being routed
back in and you want to fix this all so that when the public IPs
of the internal resources are referenced, that the traffic gets
turned around at your 2811 instead of having to go all the way out?

Posted by GNY on March 30, 2007, 9:25 am
On Mar 29, 11:12 pm, rober...@hushmail.com (Walter Roberson) wrote:
>
> >Sorry let me be clear .
> >I would like certain internal addresses that are sought after on the
> >public network0/1 to be routed to the internal interface0/0.
>
> Unfortunately that's not quite clear. What's doing the soughting?
>
> The traffic to be handled this way:
> - where (which segment) does it start on?
> - what destination IP address does it start out with?
> - where (which segment) should it end on?
> - which destination IP address should the packet have when it
> reaches the new destination?
> - should it have changed source IP addresses in the process of
> being redirected?
>
> Or am I reading this wrong and what you've got is a public IP
> range that is offering some services known to the outside, and
> that's translated at the 2811 into internal IP addresses,
> but sometimes someone inside tries to or wants to or
> (for some obsure reason) really -needs- to access the resource
> using its public IP and those publically-addressed packets are
> normally getting out to the far side of the T1 and being routed
> back in and you want to fix this all so that when the public IPs
> of the internal resources are referenced, that the traffic gets
> turned around at your 2811 instead of having to go all the way out?

Sorry i wasnt clear.. I'll try again ..

I have 3 interfaces on the 2811.

s0/0/0= T1
fe0/0= LAN IP Range
fe0/1= WAN IP Range

The services that i want the WAN int to access are on the LAN int
network.The services are never available on the WAN side; hence why i
need to force over to LAN. So when i type in 123.456.78.90 it should
never try to resolve it using the default gateway to the T1 internet;
it should use the LAN int next hop route immediately. Also hosts
connected to the WAN int should also be able to get there also.

Hope this is helps you help me.

GNY


Posted by Mysticmoose06 on March 30, 2007, 10:21 am
> On Mar 29, 11:12 pm, rober...@hushmail.com (Walter Roberson) wrote:
>
>
>
>
>
>
> > >Sorry let me be clear .
> > >I would like certain internal addresses that are sought after on the
> > >public network0/1 to be routed to the internal interface0/0.
>
> > Unfortunately that's not quite clear. What's doing the soughting?
>
> > The traffic to be handled this way:
> > - where (which segment) does it start on?
> > - what destination IP address does it start out with?
> > - where (which segment) should it end on?
> > - which destination IP address should the packet have when it
> > reaches the new destination?
> > - should it have changed source IP addresses in the process of
> > being redirected?
>
> > Or am I reading this wrong and what you've got is a public IP
> > range that is offering some services known to the outside, and
> > that's translated at the 2811 into internal IP addresses,
> > but sometimes someone inside tries to or wants to or
> > (for some obsure reason) really -needs- to access the resource
> > using its public IP and those publically-addressed packets are
> > normally getting out to the far side of the T1 and being routed
> > back in and you want to fix this all so that when the public IPs
> > of the internal resources are referenced, that the traffic gets
> > turned around at your 2811 instead of having to go all the way out?
>
> Sorry i wasnt clear.. I'll try again ..
>
> I have 3 interfaces on the 2811.
>
> s0/0/0= T1
> fe0/0= LAN IP Range
> fe0/1= WAN IP Range
>
> The services that i want the WAN int to access are on the LAN int
> network.The services are never available on the WAN side; hence why i
> need to force over to LAN. So when i type in 123.456.78.90 it should
> never try to resolve it using the default gateway to the T1 internet;
> it should use the LAN int next hop route immediately. Also hosts
> connected to the WAN int should also be able to get there also.
>
> Hope this is helps you help me.
>
> GNY- Hide quoted text -
>
> - Show quoted text -

I'm a little confused on what you're trying to do.. but have you
looked into creating policy routing? You can set based on ACLs,
traffic to use a certain 'next hop' address or go out a different
interface.
You set up a policy, match it against ACLs and set your 'next hop'..
then apply the policy to the interface that the traffic comes in on,
such as: int ethernet 0/0; ip policy < route name> in ' .

If this is what you're looking for, I can help set up policy routes.

Good luck,
Aaron


Similar ThreadsPosted
how to route traffic from server via specific static IP? May 1, 2008, 8:55 pm
redirect traffic on specific ip to specific interface June 3, 2005, 12:51 pm
Using route-map to route packets coming from different networks. July 24, 2005, 8:59 am
Monitoring specific traffic. October 3, 2006, 3:31 am
Can i forward all the traffic to a specific website? November 9, 2005, 11:10 pm
Forwarding traffic originating from a specific Internet host October 11, 2006, 8:49 am
Redirect Outbound SMTP Traffic to Specific Server - 837 and 2621 July 21, 2004, 5:15 pm
Need to route SMTP traffic through static interface (not default route) March 27, 2007, 5:19 pm
WE BUY used, new and refurbed Sun, Cisco, Lucent, Nortel, Alcatel, 3com, IBM, HP, Compaq, Dell, Madge, Cabletron, Juniper Networks, Bintec, Siemens, Foundry, Networks, Extreme Networks, Fore/Marconi, Tellabs Lucent/Avaya/Ascend, Xylogics, Brocade, In November 18, 2007, 7:00 am
WE BUY used, new and refurbed Sun, Cisco, Lucent, Nortel, Alcatel, 3com, IBM, HP, Compaq, Dell, Madge, Cabletron, Juniper Networks, Bintec, Siemens, Foundry, Networks, Extreme Networks, Fore/Marconi, Tellabs Lucent/Avaya/Ascend, Xylogics, Brocade, In January 12, 2008, 10:50 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map