Routing Internet Traffic via ADSL

[mavx]

Morning all, any ideas on the following?

We had an ADSL line installed recently and are deperate to start using it to alleviate the traffic on the current link to our ISP which carries all VPN, Mail traffic etc.

Basically I'm trying to figure out the routing I need to implement on a cisco router or switch to separate internet bound traffic from the rest so as to point it to a different port / interface or am I on the wrong track here ??

 

[Moederloos]

Morning all, any ideas on the following?

We had an ADSL line installed recently and are deperate to start using it to alleviate the traffic on the current link to our ISP which carries all VPN, Mail traffic etc.

Basically I'm trying to figure out the routing I need to implement on a cisco router or switch to separate internet bound traffic from the rest so as to point it to a different port / interface or am I on the wrong track here ??

Not sure what you need.
Can you explain the infrastructure - in particular the path a PC will take to VPN and internet.
Do you have VPN over Diginet?

If, for example , you have PC into switch and on the switch a ADSL router and a CISCO router with CISCO via Diginet, then you may need to go
switch > linux router > and the CISCO and ADSL plugged into seperate NICS on the linux router. Then its easy.

 

[mancombseepgood]

Morning all, any ideas on the following?

We had an ADSL line installed recently and are deperate to start using it to alleviate the traffic on the current link to our ISP which carries all VPN, Mail traffic etc.

Basically I'm trying to figure out the routing I need to implement on a cisco router or switch to separate internet bound traffic from the rest so as to point it to a different port / interface or am I on the wrong track here ??

There are many ways to do this, I would suggest the trusty old wingate or similar - set up static routing for stuff you are aware of and route the rest to the ADSL line. I seriously recommend getting someone in who knows what they are doing though, even if it costs you a grand or so.

 

[cprheeder]

create a ACL seperating the internet trafic from the rest of the trafic.
apply the ACL to the right port and you should be done. if you need help with the ACL let me know i might be able to help you.

 

[mavx]

Thanks for the feedback guys, Ive been in touch with the chaps who will be handling our infastructure in the future and it doesnt look too good.

Apparently there are a couple of problems doing it this way.

1) In order for the reporting and firewall to work effectively they need to be able to talk to the NOC and therefore ADSL's dynamic addressing wont work.

2) If one wants to still have the firewalling and filtering etc you would have to plug an extra firewall into the ADSL itself and manage it seperately.

3) Apparently ADSL is not a business suited tool and is not really used like this.

Sooo, it looks like a proxy server and firewalled PC setup specifically for that line and then plugged into the lan might be an idea, sorry to only reply now, rather hectic friday!!

 

[mavx]

create a ACL seperating the internet trafic from the rest of the trafic.
apply the ACL to the right port and you should be done. if you need help with the ACL let me know i might be able to help you.

That could be an option, can you perhaps give a few pointers as to what should be in the ACL that would seperate HTTP etc from say mail, vpn traffic etc ?

 

[cprheeder]

This is more advanced with a lot more options

R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#access-list 100 permit tcp any any eq 80
R1(config)#route-map TRAFFICPOLICY1 permit 10
R1(config-route-map)#match ip address 100
R1(config-route-map)#set interface (YOUR INTERFACE)
R1(config-route-map)#route-map TRAFFICPOLICY1 permit 20
R1(config-route-map)#set interface (YOUR INTERFACE)
R1(config-route-map)#exit
R1(config)#interface s1/0
R1(config-if)#ip policy route-map TRAFFICPOLICY1
R1(config-if)#exit
R1(config)#interface S1/1
R1(config-if)#ip policy route-map TRAFFICPOLICY1
R1(config-if)#^Z
R1#



not so advanced but less options, might be what you need

follow web link http://www.networkclue.com/routing/Cisco/access-lists/index.aspx