You'll need a NIC for each ISDN router, but couldn't you do this with a static route for each subnet to use when the client initiates traffic to that IP or subnet?

 

route add -p 123.456.x.x MASK 255.255.255.248 192.168.1.100 METRIC 1

 

This statement should take traffic trying to get to 123.456.x.x through the ISDN gateway(192.168.100)  that would be connected to your ISDN router appropriate for that subnet.

 

Change your destination and gateway to the gateway for the appropriate ISDN router for your 30 subnets.

 

I'm struggling with trying to get the appropriate access rules\networks\computers to my destination through ISA, but building routes for this should get your trafiic there.

 

HTH-Doug

Hi

 

A typical setup of two routers router 1 and router two using IPSEC

 

Current configuration : 1404 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SV3-2
!
boot-start-marker
boot-end-marker
!
no aaa new-model
ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
ip ssh break-string
no ftp-server write-enable
!

!--- These are the Internet Key Exchange (IKE) parameters.

crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
crypto isakmp key cisco123 address 10.5.76.57
!

!--- These are the IPSec parameters.

crypto ipsec transform-set myset1 esp-3des esp-md5-hmac
!
crypto map mymap 10 ipsec-isakmp
 set peer 10.5.76.57
 set transform-set myset1
 
!--- Encrypt traffic to the other side.

 match address 100
!
interface Serial0/0
 description Interface to Internet
 ip address 10.5.76.58 255.255.0.0
 ip nat outside
 clockrate 128000
 crypto map mymap
!
interface Ethernet0/0
 ip address 172.16.1.1 255.255.255.0
 no ip directed-broadcast
 ip nat inside
 half-duplex
!

!--- This is the NAT traffic.

ip nat inside source static network 172.16.0.0 172.18.0.0 /16 no-alias
ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0
!

!--- Encrypt traffic to the other side.

access-list 100 permit ip 172.18.0.0 0.0.255.255 172.19.0.0 0.0.255.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
!
end

Router B
 
Current configuration : 1255 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SV3-15
!
boot-start-marker
boot-end-marker
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
!

!--- These are the IKE parameters.

crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
crypto isakmp key cisco123 address 10.5.76.58
!

!--- These are the IPSec parameters.

crypto ipsec transform-set myset1 esp-3des esp-md5-hmac
!
crypto map mymap 10 ipsec-isakmp
 set peer 10.5.76.58
 set transform-set myset1

 !--- Encrypt traffic to the other side.

 match address 100
!
interface FastEthernet0/0
 ip address 172.16.1.1 255.255.255.0
 ip nat inside
 duplex auto
 speed auto
!
interface Serial0/0
 description Interface to Internet
 ip address 10.5.76.57 255.255.0.0
 ip nat outside
 crypto map mymap
!

!--- This is the NAT traffic.

ip nat inside source static network 172.16.0.0 172.19.0.0 /16 no-alias
ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0
!

!--- Encrypt traffic to the other side.

access-list 100 permit ip 172.19.0.0 0.0.255.255 172.18.0.0 0.0.255.255
!
line con 0
line aux 0
line vty 0 4
!
end

Hi Russ,

 

Can you elaborate on the 2 ISDN routers please? SBS doesn't play nice with more than 3 nics, and if you have multiple WAN connections, you would do better to get a multi-WAN router that is doing those.

Hi Russ,

 

Sorry, I still don't get the picture. Please, post an ipconfig /all from the server and a workstation. Open a command prompt by opening Start -> Run from the Start Menu and type cmd. From the command prompt type ipconfig /all >ip.txt. Attach this file to your answer.

Hi Paul,

 

thanks for the reply

i assume they go into

->IP Routing -> static routes ??

 

i will try this and hopefully it will work!!

 

Cheers

 

Russ

Hi Guys,

 

Doug,

from what i can tell Paul is correct, the routes are not propagated to the client if you do a route add

that was the first way i tried to achive this objective.

 

Paul.

 

I have added the routes in the RARS and it all works like a charm

 

thankyou.

 

Russ

Hi Guys and Gals,
 
I also added some static routes in RRAS on my SBS but they won't propagate. If I add the routes locally on the clients it works just fine. It would be great if somebody could tell me why this is not working on 2 locations.

 

It was working fine, until I replaced the SBS2000 by SBS2K3 servers.

 

Marcel