We have a RV082 Router and we are trying to do port translation.
For example:
88.123.2.5:80>192.168.1.10:2334
88.123.2.5:81>192.168.1.10:2335
However this does not seem to be possible as I can only choose the source port and the destination IP address unlike the RVS4000.
I have recently replaced an RV082 router that had failed with a new RV082. The previous router was set up to forward port 443 ssl requests to a server in the network. Worked flawlessly for years and that is why I replaced it with same model. The new router is also set up to forward port 443 ssl requests to the new server. The issue is that the router responds with its own certificate and does not forward the request to the server.
View 5 Replies View RelatedI have an RV082 V2 with 2.0.2.01-tm and I am having trouble with getting my Sprint Airvana to connect properly to the mobile service. I've read on the Sprint forums indicate putting the Airvana in the DMZ generally allows the device to work properly; however, none have the RV series routers for tips on how to do this appropriately. This device used to work fine behind the RV082, but I reset it one day and it no longer works.
The Airvana is a femtocell/router device with a WAN port and 3 LAN ports. If I connect the Airvana directly to my cable modem, I get the appropriate connection and can then make calls through the device instead of through the Sprint connection; I live in a basement unit and get crappy signal without the device. This proves the device works and that my ISP is not blocking the ports. Sprint indicates the device uses UDP 53, 67, 68, 500 and 4500. Their support sucks and they insist I put the Airvana before my router. I absolutely do not want to use the Airvana as the router. There are almost no configuration options in the router interface and it needs to be rebooted somewhat regularly, which would drop internet access throughout the house for 10-15 minutes while it reboots and finally establishes an internet connection.
As soon as put the Airvana behind the RV082, I no longer get the appropriate connection. I can, however, plug my computer into one of the LAN ports on the Airvana and connect to the internet in general. I have the router assign a static IP to the Airvana, and tried forwarding the required UDP ports to the IP. This did not fix the problem.
I can certainly troubleshoot the port forwarding issues, but I would also like to look into putting the device into the DMZ, if possible. I've not worked much in this area, so I am unsure how to appropriately configure the router to allow this to happen. Is it possible to have the Airvana in the router DMZ without having a public IP for the device itself?
I have found numerous posts discussing this but have yet to find a solution. I have an RV082 with firmware 2.0.0. 2.0.0.19-tm and I need a way to limit the incoming smtp traffic to just the spam filtering company.I have a port forwarding rule to forward WAN1 port 25 traffic to 192.168.1.10.I tried to add an access rule to deny all port 25 and then added one to allow WAN1 port 25 source <spam company> destination 192.168.1.10The RV082 log screen shows the traffic allowed but it does not work. If I uncheck the 'enable' box on the DENY port 25 rule email is still blocked. Only when I uncheck the 'enable' box on the ALLOW rule does email start flowing again.
View 10 Replies View RelatedI want to use WAN2 in DMZ mode on my RV082 router. I want to connect this to a router which will go to another network.
So it will look like this:
LAN1 192.168.188.0
|
|
|
[Code].....
UPDATE: This does not work. In case anyone else tries this, it is not possible with this model of router. The RV082 has to either be in gateway or router mode. In gateway mode, it is doing NAT, and the DMZ will not route correctly to the other LAN. In router mode, the DMZ does route correctly to the other LAN, but the internet will not work because NAT is turned off. We had to add a second RV082 to the configuration to get this working. It cannot be done with 1 RV082.
we use RV082 as main gateway and need to open/forward around 50 ports to inside. But during setting of the rules I got an error message "The max of Port Range Forwarding is 30 entries. You can't add any more.".
In the online help is explicitely said "4. Click the Add to List button, and configure as many entries as you would like."
How can we setup more than 30 port forwarding rules ?
I'd like to setup a WCCP in those routers, but as I read, it's not possible.
Another way to circumvent this limitation is to foward a request to the router from the LAN port 80 to a LAN IP, something like:
LAN 1 192.168.1.100:80 -> router -> LAN 2 192.168.1.101:80
I use a router RV082 with load balancing. My problem is when I try to access a specific site, I get the error message that my IP address changes and I can not use 2 ip address. I want to specify an ip range to always use the same WAN port.
View 2 Replies View RelatedI have a linksys rv082 VPN router with 35-50 computers, 2 VPN connections, 4 servers. I wondering if replacing the linksys rv082 router with a cisco rv180 VPN router is a good idea. According to the rv180's specifications, it seems to be a good router, my concern is that it looks small in size in comparation with the linksys rv082. I wonder if the rv180 can handle the work and the trafic of my network. I would like to know if it is ok to replace it or what are the risks.
View 4 Replies View RelatedI'm trying to migrate from olda PIX to newest ASA 8.4.1. Everything seems to be good except the static NAT. [code]
The inside interface uses implicit rule. ( permit any less secure network )
Although te above config the ASA logs the following.
TCP access denied by ACL from 94.94.94.94/2003 to outside:86.101.228.221/80
The 86.101.228.221 our public Internet IP whic are used as outside IP also.
I have some issues with Twin PAT on ASA (8.4.2), there is sth I dont udnerstand FTP server is on the inside and client is in outside.
I did sth like this
object network NATED-11
host 20.20.20.11
object network REAL-2
host 10.200.200.2
object service SRV-FTP
service tcp destination eq ftp
nat (outside,inside) source static any any destination static NATED-11 REAL-2 service SRV-FTP SRV-FTP so teoretically there should be a problem in NAT cause there is a second channel for data etc. BUT according to docs "For applications that require application inspection for secondary channels (for example, FTP and VoIP),the ASA automatically translates the secondary ports."
The problem is that it doesn't work at all and got the syslogs
Debug on ASA shows
ASA5510(config)# nat: untranslation - outside:20.20.20.11/21 to inside:10.200.200.2/21
nat: untranslation - outside:20.20.20.11/21 to inside:10.200.200.2/21
nat: untranslation - outside:20.20.20.11/21 to inside:10.200.200.2/21
nat: translation - outside:20.20.20.252/37924 failed - port is not found in xlate(0-0)
[code]....
To make it work I need to modify the nat rule to sth like this (translate source of client to inside inteface of ASA) nat (outside,inside) 1 source static any interface destination static NATED-11 REAL-2 service SRV-FTP SRV-FTP / why its not working in the first place? aaa I forgot to mention that both modes of FTP were tested (passive and active)
Trying to translate telnet for switches to the outside ip address at some random ports.
172.16.200.2:23 -> 10.199.199.2:2300
172.16.200.3:23 -> 10.199.199.2:2301
172.16.200.4:23 -> 10.199.199.2:2302
etc....
ASA 5510 running 8.4(3):
interface Ethernet0/0
nameif outside
security-level 0
ip address 10.199.199.2 255.255.255.248
interface Ethernet0/1.200
vlan 200
nameif inside
security-level 100
ip address 172.16.200.254 255.255.255.0
[code]....
I can not access the switch at 10.199.199.2:2301 . What am I doing wrong? Or should cleaning toilets be something I really should look at! Now if i run this NAT statment:
object network Switch_TN
nat (inside,outside) static 10.199.199.3 service tcp telnet 2301
I am able to access the switch at 10.199.199.3:2301
I have a server on the inside of my network (with a internet Routable IP). It has been requested to me that people from the internet access port 80, and that is translated at the firewall to port 7080. I have set up a temp Access rule to allow access to 7080 from the outside and it is accessable. I am not sure what I am doing wrong, but I am tion from 80 not able to get the translato 7080 to work.
View 1 Replies View RelatedI am trying to correctly configure our ASA 5520 and our Mitel Border Gateway in our DMZ. In the documentation for the Mitel border gateway it wants me to set up 2 external IP's on my ASA one to allow 443 traffice into the MBG, and another for 443 traffic that needs to be forwarded to port 4443 for the MGB in the DMZ. My problem is I don't know how to do this. the MBG only has one IP, and I need to have 2 different URL's mapped to two different external IP's both externally using port 443, and one of them forwarding to 4443 on the DMZ interface.
View 10 Replies View RelatedAfter adding a NAT rule on Friday morning, I'm now getting a bunch of "portmap translation creation failed" messages from my ASA5520. (It's currently running 8.4(3).) The failure errors appear to have nothing to do with the change that was made. [code] I have very similar rules in place for other vendors to access other machines. The only difference between this new one and those old ones is the use of the objects in the rule instead of the direct IP addresses. This is also the first one that invovles a range instead of a specific address or network. [code]
View 4 Replies View RelatedI have site to site vpn between cisco asa and cisco 2911 router.asa is static ip and cisco 2911 side is dynamic ip. my site to site vpn is working fine. I am just trying to make PAT over the vpn means i want forward one ip in my public pool to one of my local ip in the cisco 2911 side.
View 2 Replies View RelatedI have an 8.3(2) ASA with a single outside IP. Dynamic PAT translates inside addresses to the outside interface address. I would like to use static NAT with port translation to access an inside syslog server. I got an error when I tried using the outside interface address. Can I use both dynamic PAT and Port Translation with the same outside address?This is what I would like to use but I receive an error saying there is an overlap using the outside interface address.(192.168.1.0 is my inside network. 10.10.1.10 is the outside interface IP.)
object network inside-net
subnet 192.168.1.0 255.255.255.0
nat (inside, outside) dynamic interface
object network SYSLOG_SERVER
host 192.168.1.50
nat (inside,outside) static 10.10.1.10 service tcp ssh ssh
In my router I can set rule that all traffic incoming to router's extAddr:8888, is forwarded to my intAddr:8888. But I also need reverse rule that packets originating from intAddr:8888 are translated to extAddr:8888. Can I do that? What technique can I search on google to find more information, because it is not port forwarding. I would calll it reverse port forwarding or static port address translation, but I do not find anything useful in internet searching these keywords.
View 3 Replies View RelatedI have a RV082 VPN Router. But my internet connection is ADSL brodband. How can i connect and setup a VPN connection to other RV082.
View 1 Replies View RelatedI saw older discussions over WOL and RV082/RV042. As router blocks broadcast packets from internet to lan, to make WOL work, i should change router's ARP table using telnet, probably with V1 and V2 versions this action was possible, but trying telnet connection (http://<Router IP Address>/ sysinfo123.htm?ConsoleSimulation=1 with RV082 V3 nothing appears, and telnet connection on standard port (23) fails.
How to make pass WOL magic packets through a RV082 V3 from internet to LAN ? Using simply port forwarding don't work, as router discard broadcast packets incoming from internet.
We have 2 offices in different countries both using the RV082 router. Currently both offices have an internet connection on WAN1 and that is working fine. We are adding a Point to Point circuit between the two offices, and my question is on the RV082 configuration on each side.
I was going to configure WAN2 in DMZ mode on each router, then connect the point to point circuit to the WAN2 port. On the China side, the DMZ IP will have to be a private address (192.168.177.1), while the DMZ port on the San Diego side will be a public IP. We need internal computers to be able to go to the internet normally through WAN1, but also go through WAN2 if they are trying to reach the other network. I will be adding routes on each RV082 for this.
Is there anything wrong with this configuration? Do I need to change the routers from Gateway to Router mode? Does it matter if the DMZ WAN2 port has a private IP address?
My rv082 router protect link gateway is already activated. How do i change the key or activate it with a new activation key?The router dont have any link to change the key. I'm using v1-2 rv082
View 4 Replies View RelatedI am trying to configure RV082 router with Mac Native VPN Client for my remote access. However, no matter what I did, I am not able to make it works. Can any one can give me an example of how to conguration my RV082 router and Mac Book Pro(Mountain Lion)?
View 2 Replies View RelatedI attached an Iomego Home Media network hard drive to my Linksys E3000 router (via ethernet cable). Before setting up the remote access on the Iomega, I forwarded the ports that it wanted (443 and 21) to the static IP of the Iomega. I checked to see that they were open using yougetsignal.com and they were both open. After setting up the remote access on the Iomega, the 443 port closed and I cant even get into the "manage storage device" page for the Iomega. Iomega uses TZo for the domain names. They tell me that the association is made between the name and my public IP address. My router is out of warranty since Sept, so Linksys wont give me the time of day. I contacted my ISP and while they block a couple of ports, 443 is not one of them.I've installed the latest firmware (1.0.04 - Build 6). Reset and rebooted numerous times, Port 443 remains closed.
View 8 Replies View RelatedI am trying to set up a dual WAN on my RV082 - I have Verizon DSL on WAN1 and I am trying to establish Time Warner Road Runner on WAN2 as a backup in case DSL goes out on WAN1.I cannot get the router to recognize both connections at the same time. I have power cycled everything, the router is only picking up one internet signal at a time.
View 3 Replies View RelatedHow can I make a device or an IP go through a certain WAN? Basically I want to make the PC I use on the network go through WAN2, I have tried everything but I am really stumped on how to do this, my Firmware Version: v4.0.2.08-tm
View 1 Replies View RelatedI am using RV082 V3 router. After a reset of the router I have access via both LAN and WAN for some period of time (not yet known) later that day or the next day when I try to access it via the WAN it sits on "opening page" for a while eventually coming up with the login box. After logining in the page only partially loads. (All the settings are shown, but the proper selections are not made.) Internet explorer will then show something like "8 items remaining" in the status bar. If I close and re-open IE I am unable to connect at all. At this point I also cannot login via the LAN. However, internet access appears to be fully function through the router and the router also responds to pings. (I have the latest firmware loaded.) The only resolve I've found is power cycling the unit to regain login access to it. Very irritating, and impossible when not at the physical location.
View 1 Replies View RelatedI am setting up One-To-One NAT to redirect traffic from the internet. We have 5 static public IP addresses, and I set up One-To-One Nat to redirect to local Win servers. One of the servers running Web server and FTP server. For some reason redirection works fine for the Web server, but does not work for FTP server when I try to access them from the internet. FTP server works locally, but my FTP client cannot connect from the Internet. I opened the ports in the firewall, and these ports show as opened when I test them from external servers. What am I missing?
View 1 Replies View RelatedWe're getting the following message in the logs when we ry to connect: encrypted Informational Exchange message is invalid because it is for incomplete ISAKMP SA
One of the router is a V2 and the other is a V4 if that makes any difference.
How to setup the quickvpn.... I am getting the message Servers certificate doesnt exist on your local computer..... and the the window fail to establish the connection
View 1 Replies View RelatedNetworking isn't my strongest computer subject area, but I know I'm having a performance problem with my RV082 router. When I direct connect my PC to my cable modem, I can get very near the 7mb/sec rate advertised by my ISP. When I connect the modem to this router, then connect to the pc to the router, the speed drops to between 2-3mb/sec. All tests performed several time using dslreport.com speed test website. The result is very repeatable, so I figure it has to be some delay introduced by the router. I can't see to find any place in the router configuration to do performance tuning. I'm not using any firewall rules except for the default rules. Why I'm seeing a greater than 50% decrease in internet throughput using this router?
View 8 Replies View RelatedI have a RV082 router that is currently in prod. I have a Dell Powerconnect 5424 switch that I'd like to use in place of the unmanaged switches I am currently using.I have the switch configured with it's IP, subnet, gateway, etc. I can plug devices into it and communicate with no problems. However, when I attempt to plug in the router, nothign will communicate to or from the switch. The devices I plugged in will not talk to each outer, ping the switch, or the router. Also cannot ping to the switch from a device plugged into the router. If I unplug the router, comm opens back up.
View 1 Replies View Relatedwe have a RV082 and have the DMZ option enable for a range of IPs within the same sub-net of WAN IP and this works great. I have another range of Public IPs from our ISP that is not in the same sub-net of the WAN IP and do not see a way on the RV082 to include this 2nd bank of Public IPs in the DMZ.
Our ISP internet feed plugs into the RV082 WAN port and we have a switch plugged into the DMZ port of the RV082 that is used to connect the public devices in the current DMZ. Both banks of Public IPs from our ISP come over via the ISP internet feed plugged into the WAN Port.
My question is, if I cannot configure a DMZ rule to allow this 2nd range of Public IPs to "travel" to the RV082 DMZ port, how I can do this without one-to-one NAT or port port forwarding? The device I am deploying needs to be at the border of our network (like in the DMZ) and have some ability to talk to a device on our LAN.