Cisco Routers :: RV042 LAN Subnet Restriction And Firewall Bypassed For One To One NAT
Mar 31, 2013
I have 2 questions to confirm and/or get direction on how to modify.
1) is there a way to get around the (seemingly arbitrary) class C (slash 24+) subnet restriction for the primary/main IP address for the internal LAN?
(I realize I can setup multiple internal subnets but that also seems to introduce restrictions for port ‘forwarding’ and ‘one-to-one NAT’ use because those features seem to be restricted to the primary/main IP subnet)
2) it seems like all traffic is passed to the host on the internal side of a ‘One-to-One NAT’ regardeless of the firewall rules in place, is that what is be expected?
View 6 Replies
ADVERTISEMENT
Apr 30, 2012
I'm trying to set up 2 subnet with two RV042 routers. One router will act as a gateway and both WAN ports will be used by two different isp connection. The first router (gateway) LAN IP will be 192.168.0.1/24. I would also like to set up another router behind the gateway with with separate subnet 192.168.1.X/24. And I would like clients on the 192.168.1.x subnet to use the internet through the gateway router and clients on the 192.168.0.x subnet to access resources on the 192.168.1.x subnet. Am I able to do this with two RV042?
View 6 Replies
View Related
Jul 10, 2012
I have RV042 Router, I'm using only one Internet conection, I'm using IP group like this 192.168.95.x, my DHCP setting use 192.168.95.120 to 192.168.95.240, but in this time I have 245 workstations (may be I will have 25 additionals workstations) and some times I see IP conflict message in my current work stations.
I had read about SUBNET like response about my problem, but I'm not sure about that and how to make subnet with my RV042.
View 7 Replies
View Related
Dec 2, 2012
We connected to locations to the RV042 by setting up 2 Gateway - to - Gateway VPNs - both locations can communicate with the RV042 and devices within the local LAN of the RV042 - however at the moment it is not possible to send traffic from 1st VPN Location to the 2nd VPN location
View 1 Replies
View Related
Aug 24, 2011
I have a RV042 with multiple subnet, 192.168.10.0 and 192.168.9.0. 192.168.10.0 is assigned to the LAN, 192.168.9.0 is created under multiple subnet. Both subnet can access Internet by accessing IP address, but 192.168.9.0 cannot access Internet by using host name. It looks like DNS is not working for the 9.0 network.
View 1 Replies
View Related
Apr 29, 2013
Small office, 2 RV042, 2 DSL connections. 1 is used striclty for the business side, and the other is for our CCTV network. They also have seperate DSL connections as we have 2 external IP address for clients to connect remotely. We don't want to take away our exisring setup, but would like to bridge both networks so a few of our internal clients can connect to our CCTV network and use some of the devices. Right now they come in on VPN but its not as fast.Is this doable without adding additional hardware? Both networks need DHCP enable as well.
Breakdown:
DSL 1
|
RV042
|
192.168.20.X
|| Would like to somehow join the 2 networks together.|
DSL 2
|
RV042
|
192.168.40.X
View 1 Replies
View Related
Sep 27, 2012
I'd like to set each individual LAN port with different address i.e. LAN 1 192.168.1.1 and LAN 2 10.1.1.1 instead of using the multiple subnet feature and having all ports replying for the addresses created.
View 3 Replies
View Related
Aug 24, 2011
I have an RV042 with the PPTP server configured, which is working because I can connect with my iPad and droid phones, however, I'm unable to access resources on the RV042 side (192.168.1.X) when my local network is the same ip scheme (192.168.1.x). It works fine when I'm on a different network like 3G or someone else's Wifi network (192.168.11.X).
View 1 Replies
View Related
Feb 15, 2011
my RV042 is not able to propperly update my ddns. If you try to resolve my dyndns subnet kitus-network.dyndns.org you will get 192.168.0.2. How can I make the router update my ddns with the real public ip rather than the private ip it "sees" on the WAN interface?
View 5 Replies
View Related
Aug 19, 2011
I have an RV042 with the PPTP server configured, which is working because I can connect with my iPad and droid phones, however, I'm unable to access resources on the RV042 side (192.168.1.X) when my local network is the same ip scheme (192.168.1.x). It works fine when I'm on a different network like 3G or someone else's Wifi network (192.168.11.X).
View 1 Replies
View Related
Jan 17, 2011
I would like to the the RV042 for a one to one NAT, but I need it to NAT to an address that is not on it's local subnet. I have it routing properly to the address, but web interface only allows adding an IP on the local subnet. Is there a way around that?
View 1 Replies
View Related
Mar 20, 2013
I recently bought my daughter a refurshed dell 17" laptop which has Windows 8 home edition on it. She also has another smaller laptop with windows 7 on it, an X-box-360 and a PS3 all connected to this RV042 Business router.
I do not have access to the firmware version of the RV042. I believe it was updated in 2011 or early 2012.
We found out that with the RV042 firewall set to ON, she is UNABLE to hit her college website with the new win 8 computer
She CAN go to the college web site with the smaller win 7 computer when the firewall is off or on.
The win 8 computer will allow google searches, but when you click on any of the links, it will not load.With the win 8 computer, facebook will not load, MSN and Hotmail will not load.
Disable firewall, and most (if not all) items that did not work, magically DO work when the RV042 firewall is disabled for the win 8 laptop.
Having issues with with win 8 home edition and the RV042 firewall enabled? Is there a "simple" cure for this, other than slicking the laptop and putting win 7 on it?
View 3 Replies
View Related
Jan 14, 2013
this is regarding my RV042. Its firmware version is v4.1.1.01-sp (Dec 6 2011 20:03:18), unchanged from how I received it. I purchased less than a month ago. I have a problem wherein the firewall behavior is not what I expect it to be, where I expect only allowed ports/services to be open to a given private IP from the outside but am finding that all are open to that private IP!
Let me describe the current configuration. I am going to blank out all digits of the public IP addresses when discussing them except for the final digits for security reasons.Router's WAN1 is set up as static, X.X.X.189. This is part of my public IP block. WAN2 is disabled. One-to-One NAT is enabled. Three instances of it are set up. One, for example is 192.0.2.89 (a private IP) mapped to X.X.X.180, a public IP, part of our public block. Forwarding is not enabled. There is no DMZ Host. That is set to 192.0.2.0. Firewall and SPI are Enabled. Access Rules for the firewall are set up in addition to the default rules which are present to Deny all traffic with WAN1 and WAN2 as the source from any source to any destination. This to me means that unless I set up Allow actions, there should be no access from the outside, WAN1. As an example of one of my Allow rules, I have this:
Action: Allow
Service: HTTP
Log: Not log
Source interface: WAN1
Source IP: ANY
Destination IP: Single, 192.0.2.89
Time: Always
My problem: My expectation is that based on the One-to-One NAT setting, the public IP X.X.X.180 is now associated with the private IP 192.0.2.89, but nothing from public to private is allowed unless allowed by the firewall, which is only set to allow HTTP / port 80 to 192.0.2.89. But the behavior is that 192.0.2.89 is, as presently configured, open to everything from the associated public IP, not just port 80, but all ports! It is as if my firewall rules have no impact whatsoever.
View 3 Replies
View Related
Aug 23, 2012
Is there a way to force the user to use the modem dns settings? I'm using open dns (set within the modem settings) but think the users are simply entering alternate dns servers in the browser settings or temporarily re-configuring the network settings. I know the easy solution is to take away administrative privileges, but due to the work the users are doing, they need admin privileges.
View 7 Replies
View Related
Sep 9, 2011
Replaced an older RV042 that had damage from lightning. The new RV042 is V03 with firmware 4.0.0.7. This router supports 7 branch offices using site-to-site VPN to other RV042 routers. After connecting the new RV042 at the main office, three of the branch offices had very slow response over the VPN tunnel. I disabled the firewall on the new RV042 and the problem resolved. The three branches with the problem have Windows 7 systems and the other 4 have Windows XP. I confirmed that the Windows firewall was disabled on the Windows 7 systems.I did try leaving the firewall enabled and disabling SPI, but that didn't work. Have to have firewall disabled to resolve the problem. I would not expect the firewall on the main office RV042 to affect VPN tunnel traffic, but apparently it does. Do we need specific access rules to fix the issue. It works fine with firewall disbaled, but I'd be more comfortable with it enabled.
View 2 Replies
View Related
Aug 25, 2012
I need to configure a new RV042 behind a SSG5 firewall. All VPN connections is client to gateway.
Firstly, i tried doing a direct connection(bypassing the firewall), the quickVpn status says connect but I can't even ping the rv. I suspect is due to client own ip is 192.168.1.x and the gateway ip is also 192.168.1.10. How do I resolve this such that users can connect anywhere without having to worry about clash of ip?
View 10 Replies
View Related
Apr 8, 2012
I wanna block the Lan IP address(eg:192.168.2.106) to visit wan web, and allow it to lan.How can i set it in access rules?
View 2 Replies
View Related
Feb 5, 2013
I have an RV042 which is being used as an interface to an ISP.The WAN address (public) is obtained via PPPoE.The LAN address (also public) is entered manually from an assigned block of public addresses. This is the internet gateway for other publicly-addresses devices like firewalls, VPN devices, etc.
I have an RV042 to play with as will as one in production that I can access.Because the accesses are both through public addresses, I want to use https to access the device. I've generated a number of questions as I'm not sure the behavior is understandable to me and maybe the behavior isn't even consistent.
- If the firewall is Disabled, the https setting is still available. So, presumably https will work with the firewall enabled or disabled? Is that right?
- I take it that the Remote Management setting and port number are associated with the WAN port. For example, can one set Remote Management ON with port 443 and still access via the LAN on port 80? on port 443?
- If Remote Mangement is OFF then I presume that one cannot access the device through the WAN. Yet, that seems to not be the case. I wonder if the public addresses on this device affect this?
Well, I guess we might forget about the Port number and just ponder the following - Sort of a truth table:
Remote OFF
http...........WAN access: NO LAN access: YES
https..........WAN access: NO LAN access: YES
Remote ON
http...........WAN access: YES LAN access: YES
https..........WAN access: YES LAN access: YES
This is what it would seem to me to be but it doesn't seem to work that way.
View 3 Replies
View Related
Oct 6, 2011
if possible with the RV042.Primary External IP address uses port forwards for some ports, all okay.I would like to have other external ip addresses assigned to machines on my lan.Basic host multiple web servers, on different IP addresses, using port 80. [code]
From what i am reading, it looks like the RV042 can do this, but I am not real clear what my rules should look like.
I would think my high priority rule for each external IP address would be to deny all traffic first for each machine on the lan.Then create one entry with source 202.x.x.2 port 80 -> 192.168.168.2 ?
How should I set my rules to do this, and what settings should I have on the Nic of the second machine?
View 3 Replies
View Related
Oct 13, 2011
I have a new (about 4 months old) RV042 V3 4.0.0.07 firmware that I am trying to use in fail over mode. I have a SOHO and I normally use cable Internet connection. It is quite fast (15 megabit), but not super reliable. I have added DSL (3.3 megabit) which is five nines (supposedly) but not so quick.
I have a Westell 7500 wireless DSL modem located in the basement, where the telephone lines enter the building. This gives me a wireless link to the second floor server room through a wireless router that connects to WAN 2 of the RV042. The cable modem is in the server room and connects directly to the WAN 1 of the RV042. The cable works, but when it goes down, the DSL link comes up but does not allow Internet traffic. The RV042 is set up as a Bridge and I have set up port forwarding to get the cable to work and used similar firewall commands to route the traffic if the router switched over. I suspect that the problem is in the port forwarding (port 80) or the firewall rules(which are pretty simple) because everything looks like it switches over, but it just doesn't work on WAN2.
View 2 Replies
View Related
Jun 9, 2012
I'm trying to set up a RV042 to do the following:
1) Block all WAN connections, except for:
2) Allow all port 80 connections, and forward to 10.4.20.60
3) Allow all port 443 connections, and forward to 10.4.20.60
4) Allow port 22 connections from specific IP addresses, and forward to 10.4.20.60
5) After a remote client has connected using Client to Gateway VPN, allow that remote client to access anything on the LAN
I'm able to do #1-4 above, but I can't get #5 to work. Or I can get #5 to work, but can't implement the restrictions I need in #1-4. Attached are some relevant screenshots. I think the problem is that I have Forwarding rules set up that require me to have a firewall rule to Deny All Traffic from WAN1 (unless I'm specifically allowing it). In the Access Rules screenshot, rule #6 is the problem. If I enable it (thereby denying all WAN1 traffic), then VPN clinents can't access anything on the LAN. However if disable this rule, VPN clinents can access anything on the LAN, but the firewall also opens up all outside connections to SSH, since that's set up in the Forwarding rules. I would have thought that once a remote client is connected using client to gateway VPN, then that client is considered to be on the LAN, as far as the firewall is concerned. Thus a firewall rule (like #6) that is specified for WAN1 shouldn't effect remote VPN clients.
View 1 Replies
View Related
Nov 1, 2011
We have a setup where our e-mail server is hosted in-house.Our network is connected through a RV042 gateway. Port 25 is forwarded to our internal e-mail server.Our smtp service should be limited to receiving incomming connections only from 4 specific ip ranges which I set up in the firewall rules.The reason is that all smtp is managed and protected by an external anti-spam/vires provider.
However it looks like any computer is able to connect to our port 25 and be forwarded to our e-mail server.Does portforwarding overrule firewall rules - ie. you can not limit access with the firewall if you decide to port forward?Is this a "fixable" situation - or is the RV042 not built for handling this setup?
View 5 Replies
View Related
Jul 2, 2012
There are 10, 50 and unlimited users profiles for the ASA 5505, reason for that restriction? Does that mean for example that only 10 users can go through a 10-user 5505?
View 6 Replies
View Related
Nov 23, 2011
We are using ASA 5510 Version 7.2(4) at our organisation. The requirement is we need to give an access to a user with limited access so that he can run only specific commands on configuration mode. We don't have Cisco TACACS server instead of that we are using a microsoft radius server.
View 6 Replies
View Related
Dec 4, 2011
I'm having an issue where our RV042 router is blocking some of our customers from sending us e-mails.I noticed thatCISCO has produced a newer version of the RVO42 V3.0 and has firmware version 4.x. can you upgrade the Linksys RV042 Hardware V 1.2 to the 4.x firmware? I have found a few articles and forums online about otherpeople having the same issue with the RV042 v1 randomly blocking, e-mail but no one ever has a solution to correct the issue.Some people have recommend to roll back to factory default and reconfigure the router as the config may by corrupt.
View 4 Replies
View Related
Nov 15, 2011
I recently installed an RV042 v1.1 vpn router (older hardware revision but using the latest available firmware 1.3.12.19-tm) and set up VPN access with the QuickVPN client. QuickVPN requires that the HTTPS setting be enabled under the Firewall options, so I did. I then scanned our static IP with grc.com's ShieldsUP! to check for open or non-stealthed ports and discovered that ports 80 and 443 show as wide open, while port 113 is closed but not stealthed. If I disable the HTTPS setting under Firewall, then ports 80 and 443 become stealthed. Is there any way to use QuickVPN and keep these ports stealthed?
View 1 Replies
View Related
Jul 7, 2012
i have asa 5520 configured as VPN Gateway to terminate remote access vpn , i have question , how can i restrict the access to only 1 range of public source IPs to access my corporate via RA ,is this possible?if so how to configure it?
View 1 Replies
View Related
Jun 4, 2013
I have a RV042 router on a single WAN and an internal LAN. I have configured port forwarding as follows: HTTP[TCP/80~80]->10.0.0.6HTTPS[TCP/443~443]->10.0.0.6IMAP[TCP/143~143]->10.0.0.5IMAP SSL[TCP/993~993]->10.0.0.5SMTP SSL[TCP/587~587]->10.0.0.5
Everything works just fine when I have the firewall DISABLED. However, when I enable it the behaviour is erratic. 1 out of 10 attempts to connect to ANY port forwarded works. Almost all attempts time out. Notice that this happens even if using only the default firewall rules (which should be bypassed by the port forwarding as I read in other posts).
My second try was to create firewall rules manually, overriding the default ones. I tried adding rules from source WAN1 (where my connection is) to ANY and to SINGLE IP's on every port. Nothing seems to work.
I don't know what I'm doing wrong, this is really bugging me. I had to turn the firewall off so we can access our servers from outside the office. This shouldn't have to be done.
Just found out that my firewall is getting LOTS and LOTS of Blocked - SYN Flood entries. I think this is why we are having trouble with the firewall. Could this be the problem? I have no idea where all these SYN packets are coming from since they appear with spoofed IPs or come from different bots all over.
View 1 Replies
View Related
Aug 5, 2011
I am using an RV042 router/firewall -- firmware v1.3.13.02-tm -- connected to a cable modem.I have one public address (WAN1) assigned by my ISP's DHCP server.All my machines on the LAN have static IPs. (RV042 DHCP Server is disabled.)I have set up port (80) forwarding to 192.168.1.101 The HTTP port forwarding does work if an http client on the LAN sends a request to http://<public-ip>:80But I cannot get a response if I send a request to http://<public-ip>:80 from a machine on the WAN.
I did configure Access Rules to allow http traffic (and then tried to allow *all* traffic) between a single IP on the WAN and 192.168.1.101 The incoming log table shows a connection is made from the http client on the internet to the correct http server on the LAN, but there is no resonse from the LAN to the remote client.Is my configuration the problem, or is this feature not supported by the RV042 router? Could my cable modem be blocking outbound traffic?
View 1 Replies
View Related
Oct 20, 2010
One of my Clients just aquired a CISCO ASA firewall, and they would like to restrict internet access, that is they want to block internet for Junior employees while managemnet remains connected, Looking at the situation, The ASA serves as the gateway,I tried an Access list like below for one pc to test if it works but instead everyone just went off, may be i misfired somehwere.
Access-list 110 deny tcp any host 192.168.20.100 eq wwwAccess-list 110 deny tcp any host 192.168.20.100 eq 443Access-list 110 permit tcp any any eq wwwAccess-list 110 permit tcp any any eq 443access-group 110 in interface inside
View 11 Replies
View Related
Mar 25, 2013
I have no problem configuring both devices to successfully connect when the juniper firewall isn't in the picture. But due to policy; the RV042 at our main site must sit behind the firewall.
I've got the port forwarding setup but I'm not able to connect. I know I"m missing some configuration on the RV042 but I can't think of it! I've attached a GIF to give an example of both setups.
View 3 Replies
View Related
Mar 13, 2012
How to set up a home network with 2 routers, where R1 acts as the DHCP server and R2 is basically a switch, connected LAN to LAN and everything is on the same subnet. Currently I have a different setup:Both routers have the DHCP server enabled and I connect R2's WAN port to R1 LAN. Therefore I have 2 subnets. Now my special requirement is that R2 is a DD-WRT router, which establishes a VPN connection to StrongVPN, so that all internet traffic via R2 is encrypted and goes through the StrongVPN server. Now my question:If I change my router setup to the same subnet, meaning R2 connects LAN to R1 LAN and I disable DHCP server on R2, will R2 still be able to establish the VPN connection?
View 5 Replies
View Related
Jan 24, 2013
I have RV042 and E4200 routers . I tried the manual UPnP port forwarding using Rv042 router and was succesful ( by typing 192.168.1.1 in the explorer and logged in using user name and password )
I am using a linux embedded system whose Internal IP ,Internal port are mapped .This system is connected to one of the LAN ports
I want to try auto UPnP port forwarding both for RV042 router and Linksys E4200 routers
After enabling the Upnp option only and logging out ,Can i add a port mapping entry in this router without logging in using a C++ program which runs on linux embedded system .
View 2 Replies
View Related
