Routers / Firewalls

Yahoo Archive
1
All,

Thanks for the replies on and off line.

I had to get an Adtran tech to understand I'm only trying to connect a
couple of PC's in my remote location not hundreds.
I'm connecting two PC's remotely using Windows Remote Desktop to two PC's in
the host building computer room.
I had to change the default gateway on both PC's to the local Adtran's on
each side.
The Adtrans were not originally programmed properly so that was my hang up,
the needed to act as routers since I don't have any routers on either
network.

Since the bandwidth for Remote Desktop is low and I'm using about 19 T1
channels for data the performance has been great. With newer PC's on both
ends I'm getter better performance than some of my old PC's running Vantage
in my Host building. Not sure where the break point is for setting up
Terminal Services but it's beginning to sound like that's the direction near
future.

For printing I'm letting the host PC send directly to an HP printer in my
remote location. All I had to do was set the Default Gateway on the HP to
the Adtran's IP and it was off an running.

Patrick
-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
pjw@...
Sent: Tuesday, May 16, 2006 8:57 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Routers / Firewalls

All cisco pix / Adtran administrators,

I have Cisco pix 506 firewalls in two buildings which connect each buildings
network to the internet.
I just recently connected a dedicated T1 circuit between the buildings.
Both sides go into Adtran Total Access 624 routers which split voice and
data.

Voice Side is working Great but the Data Side is not flowing.
Both Buildings have completely different IP ranges.
I can ping the local Adtran in both buildings.
If I change the Default Gateway IP address on a PC from the PIX to the Local
Adrian's IP I can ping the Adtran in the other building.


What needs to be configured in the Adtran or PIX to not send the other
buildings IP requests out to the internet but thru the Adtran Router to the
other building.

My Adtran guy is blaming by PIX guy and vise versa.

Does my PIX on each end need a STATIC ROUTE to the local Adtran Router?
Does my Adtran Router need some type of STATIC ROUTE?

Patrick


This e-mail and any attachments may contain confidential and privileged
information. If you are not the intended recipient, please notify the sender
immediately by return e-mail, delete this e-mail and destroy any copies. Any
dissemination or use of this information by a person other than the intended
recipient is unauthorized and may be illegal.

[Non-text portions of this message have been removed]



------------------------ Yahoo! Groups Sponsor --------------------~--> You
can search right from your browser? It's easy and it's free. See how.
http://us.click.yahoo.com/_7bhrC/NGxNAA/yQLSAA/PhFolB/TM
--------------------------------------------------------------------~->

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links







This e-mail and any attachments may contain confidential and
privileged information. If you are not the intended recipient,
please notify the sender immediately by return e-mail, delete this
e-mail and destroy any copies. Any dissemination or use of this
information by a person other than the intended recipient is
unauthorized and may be illegal.
2
All cisco pix / Adtran administrators,

I have Cisco pix 506 firewalls in two buildings which connect each buildings
network to the internet.
I just recently connected a dedicated T1 circuit between the buildings.
Both sides go into Adtran Total Access 624 routers which split voice and
data.

Voice Side is working Great but the Data Side is not flowing.
Both Buildings have completely different IP ranges.
I can ping the local Adtran in both buildings.
If I change the Default Gateway IP address on a PC from the PIX to the Local
Adrian's IP I can ping the Adtran in the other building.


What needs to be configured in the Adtran or PIX to not send the other
buildings IP requests out to the internet but thru the Adtran Router to the
other building.

My Adtran guy is blaming by PIX guy and vise versa.

Does my PIX on each end need a STATIC ROUTE to the local Adtran Router?
Does my Adtran Router need some type of STATIC ROUTE?

Patrick


This e-mail and any attachments may contain confidential and
privileged information. If you are not the intended recipient,
please notify the sender immediately by return e-mail, delete this
e-mail and destroy any copies. Any dissemination or use of this
information by a person other than the intended recipient is
unauthorized and may be illegal.

[Non-text portions of this message have been removed]
3
Patrick
I don't know that this will be much help, but I will try.
In the past we had a dedicated frame relay line to the Mexico office.
At that time we had to establish a dedicated "tunnel" between the 2
routers.
Now we have a PIX firewall in Mexico and a Watchguard firewall in Ohio,
and we just use the Internet (Cable modem & microwave). We have
different IP ranges, but are members of the same network.

The firewalls are set up to see each other as ends of a dedicated
tunnel. Usually these are set up usinge IP address interal and external
address for the firewalls.

Are your routers "inside" the firewalls or "external"? I am guessing
"external" so the voice works and the receiving firewall sees the
incoming data and says " I don't know you get lost". Another thought;
does the router know it is suppose to send the data to the firewall?

Nancy

-----Original Message-----
From: pjw@... [mailto:pjw@...]
Sent: Tuesday, May 16, 2006 9:57 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Routers / Firewalls

All cisco pix / Adtran administrators,

I have Cisco pix 506 firewalls in two buildings which connect each
buildings network to the internet.
I just recently connected a dedicated T1 circuit between the buildings.
Both sides go into Adtran Total Access 624 routers which split voice and
data.

Voice Side is working Great but the Data Side is not flowing.
Both Buildings have completely different IP ranges.
I can ping the local Adtran in both buildings.
If I change the Default Gateway IP address on a PC from the PIX to the
Local Adrian's IP I can ping the Adtran in the other building.


What needs to be configured in the Adtran or PIX to not send the other
buildings IP requests out to the internet but thru the Adtran Router to
the other building.

My Adtran guy is blaming by PIX guy and vise versa.

Does my PIX on each end need a STATIC ROUTE to the local Adtran Router?
Does my Adtran Router need some type of STATIC ROUTE?

Patrick


This e-mail and any attachments may contain confidential and privileged
information. If you are not the intended recipient, please notify the
sender immediately by return e-mail, delete this e-mail and destroy any
copies. Any dissemination or use of this information by a person other
than the intended recipient is unauthorized and may be illegal.

[Non-text portions of this message have been removed]



------------------------ Yahoo! Groups Sponsor --------------------~-->
You can search right from your browser? It's easy and it's free. See
how.
http://us.click.yahoo.com/_7bhrC/NGxNAA/yQLSAA/PhFolB/TM
--------------------------------------------------------------------~->

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links
4
Hi Patrick,

We are setup with Cisco routers with a T1.
The Cisco routers have two channels 0 and 1 each having an Ethernet
cable
Connection. Each has its own ip and network to connect to.

If the voice udp packets are flowing you are half way there.
Try using the ping command from each of the routers to check ips.
Also check your arp tables on each end.

Let us know how you are progressing.

Thanks,

John Mansfield
General Sheet Metal