I have a set of cisco catalyst switches, that are configured with vlan and I have a CPE from my provider, which is configured with the following information:

Network: Gateway: CPE:

How can i connect these devices, so that i can access the CPE from my workstations, configured with the addresses from the and .1 networks?

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 27 '17 at 17:34

You have 3 options:

  • configure a local route on each host (computer) so the traffic to the VPN goes to the CPE. This is bad solution.
  • add a route on your firewall so it redirect traffic to the CPE. This is the simplest solution.
  • use Layer 3 switches, configure them as the gateway for your local networks, add a route for the Internet to your firewall and another route for the VPN to the CPE. This has some advantages in term of performance, but if your switch are not already Layer3 capable, include additional costs.
  • I'm trying to do option 3. I have on my static routing: destination mask gateway I've tried setting another route as destination mask gateway but it doesn't work (no error is specified) – user35640 Mar 30 '17 at 12:45

Configure the Gateways of VLAN and on CPE, by connecting the catalyst switches to CPE and you are done :)

  • I can't, the gateway to these vlans is my firewall, which then goes to the internet. The CPE is going to be used for another VPN, which is not used in the public internet. – user35640 Mar 30 '17 at 11:31
  • Add a VLAN via your switch from firewall to new CPE, Plus you have to route packets towards CPE from firewall for the segments on VPN(So static routes should be configured)... Can that be done? – Anirudh Malhotra Mar 30 '17 at 11:33
  • I would like to try to avoid messing with the firewall, as it's only going to add more steps. I just want to connect the CPE to my lan. – user35640 Mar 30 '17 at 11:37
  • Well In any case you have to add routes to the VPN segments on firewall. So either you can follow the solution above. Or you can give the CPE interface an IP from the existing VLANs( and and route packets towards that IP... Or switch IP of clients when they want to access the CPE(which is not practical). – Arjun sharma Mar 30 '17 at 11:41
  • Can't i route the traffic from my lan with the following rules? Something that has a destination of goes to the CPE, others have a destination of (firewall) – user35640 Mar 30 '17 at 11:49

Connect the CPE to a layer 3 switch. Configure the layer 3 switch with the following:

Default route to the Firewall add another route to the network.

  • What switch models do you have? And do you have any experience in configuring routing? – ssedwards Oct 26 '17 at 17:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.