Cisco Routers :: RV042 Route Between Two Private Networks And One ISP
Nov 2, 2011
I have two private networks and want/need to route traffic between them. I also have an ISP connection and want/need to provide internet to at least one of the private networks. Providing internet access to both is not required or desired.
Can this be accomplished with an RV042? If so, how?
P.s. The problem space, once again, in a non-narrative form with some addresses thrown in:
Private Network A: 192.168.200.0/24
Private Network B: 10.50.3.96/27
ISP Network C: 192.168.0.0/24 192.168.0.1GW 192.168.0.2 is WAN1 address on RV042
Required Traffic Flow
A <--> B
A ---> C
View 3 Replies
ADVERTISEMENT
Sep 28, 2012
I'm tryig to put a computer into the DMZ and then access it from computers on the LAN using a local IP address. My reason for doing this is that I'd like my DMZ computer to be a locked down web server (just ports 80 and 443 open to the outside), but I need to be able to have more access to it from inside my LAN (e.g. I want to be able to SSH into it from the LAN).
Thus far I've been able to get a computer set up in the DMZ and can access the Internet from the DMZ computer. And I can access the DMZ computer from the LAN computers using the public address for the DMZ computer. But I can't access the DMZ computer from the LAN computers using a private address for the DMZ computer. see the attached file for a diagram of our current settings. A few descriptions:
- Verizon provides us with a number of static IP addresses, i.e. 71.123.123.10-12 (note these aren't actually the addresses, but representative).
-- In the RV042, I have the following configurations made:
- Setup > Network > LAN Setting
- Device IP Address = 10.4.20.1
[Code]......
View 7 Replies
View Related
Feb 15, 2011
my RV042 is not able to propperly update my ddns. If you try to resolve my dyndns subnet kitus-network.dyndns.org you will get 192.168.0.2. How can I make the router update my ddns with the real public ip rather than the private ip it "sees" on the WAN interface?
View 5 Replies
View Related
Jan 23, 2011
I'm going to move offices into a shared situation with 3 companies. Each company will want its own private network so there's no snooping between companies. I am planning on using VOIP for the phone system (Nextiva cloud based). Is it possible to set up the system so that each company has access to the VOIP system but yet remains sequestered in the their own network for everything else. I was hoping to do this with one data port at each workstation using Cisco SPA-303 phones. The way I understand this, is that the phone plugs in to the data port and you daisy chain the workstation off from each phone. Is this possible to do this while having the system I described? Another wrinkle is that I'd also like all the networks to be access shared printers.
View 7 Replies
View Related
Oct 25, 2011
I defined a static route: 192.168.0.0 / 255.255.255.0 / 192.168.1.201 (gateway), I can connect from 192.168.1.0 to 192.168.0.0 but we cannot ping in this local network. We have a CISCO 18000 as a VPN IP configured between this two local network.
View 1 Replies
View Related
Oct 29, 2011
i have two cisco 2800 routers , and i have three different networks , so can cisco routers supports more than one private network example,My First location i have one public connection of 200.100.100. 1 and private network of 192.168.1.x network and the second router i have one public connection of 200.100.100.10 and two private networks of 192.168.50.x and 192.168.60.x , So can i route my first location to this two different networks , because my router have only two FastEthernet connection , so how it's possible or not.
View 3 Replies
View Related
Dec 4, 2011
i have Cisco 5505 and i configured a remote VPN clients. here is my scenario
Cisco switch 2950 === holds two private network 192.168.8.x and 192.168.4.x
vlan 2 outside interface - Eth 0/0 155.155.155.x
Vlan 1 inside interface -- Eth 0/1 192.168.8.180
VPN pool ip address = 192.168.8.100 --110
I drag i cable from my Cisco switch and put in to Eth0/1. and i want to access this two private networks 192.168.4.x and 192.168.8.x . Now i can access to 192.168.8.x . But i can't access 192.168.4.x ..
View 3 Replies
View Related
Jun 6, 2012
I have a new customer that needs to send data to us occasionally, we normally install the Cisco VPN Client on their PC, but this customer has the same private network we do.
I know this could be done with NAT Policy on my ASA 5510 with a site-to-site VPN, but the customer does not want to change the network hardware or addressing. They have cable router with no VPN capability, and they don't want to spend any more money on this project.
Can this work if their are no duplication of IP addresses?
View 25 Replies
View Related
Mar 13, 2011
how to redistribute routes between three independently managed private networks.
Currently: See attachment The two buildings managed by Company 1 are connected by 4x1GB fibre channel ports on Cisco 3750G Standard Image switches. Static routing is used between the two building and static routes are used to direct traffic to Company 2 and Company 3 via routers managed by their respective companies. No NAT is required as all three companies use separate private address schemes.
Network Improvements: See attachment To increase network resilience Companies 2 and Company 3 are planning on installing new routers in building 2. Companies 2 and 3 use Dynamic routing protocols on their internal network. Incoming and outgoing resilience is required in all three companies. There is no direct connectivity between Company 2 and 3.
I would like the following questions answered:
1. Is dynamic routing needed in Company 1?
2. Given that only 4 devices are managed by Company 1 will RIPv2 work? NB. Company 2 and 3 have very large networks (3000+ sites).
3. Would route redistribution be best performed on Company 2 and 3’s CE routers?
4. How can route redistribution be controlled by Company 1?
View 4 Replies
View Related
Jul 18, 2011
We have a private network, multiple vlans etc. for our domain users/employees across several amenities. We also have a Public network, that we have managed by a 3rd party for guests/conference rooms/attendees.Private network is all static ips, mac restricted port security, as strict as possible from a security and PCI Compliance standpoint. The public network is all DHCP with hundreds of users. Having them physically separate has always been the best option. Separate switches, server, and I even have the uplinks separated on a 3825 router. However, unfortunately it seems as though that luxury is coming to an end.One of the meetings that is taking place is going to be at one of our outer amenities so I've got to push that "public" network through my network, over my backhaul to the other side.
My suggestion was to create a new vlan on the switches with the shortest path possible to get where it needs to go. This way the traffic never goes through our ASA, and it has a small footprint on our network, it plugs into the switch access port with the dedicated vlan at the entry point into our network, and leaves from an access port on the other end. To me that seems to be the best/most secure way to handle it. We're also in the process of rolling out Public Wifi through the entire property and since we'll want to push both Public and Private vlans over it....merging the two networks to a point is only inevitable. Especially since it will be going through a controller and the property covers a good 7000 acres.
A good IDS/IPS...other than already having port security on every port, I'd definitely like to know if somebody inadvertently cross connects the two networks and it starts flooding whatever vlan access port it's plugged in to with dhcp...especially since a lot of the laptop users on the domain are set to DHCP first with a static in the alternate for working at the office and remote.
View 2 Replies
View Related
Mar 11, 2013
Currently a network consists of two subnets, one subnet is behind a ASA and the other behind a PIX, both connecting to the ISP's routers. If the PIX is retired, is it possible to create/consolidate the two networks protected by the ASA5510 with the default gateway being the ISP?
How can two private networks be protected by the ASA5510? One conceptual way is to create the VLANS on a layer 3 switch, on the "inside" interface of the ASA. In this senario what would the "inside" network's IP address? If the above is possible, how would natting occur?
Is there an efficient configuration to protect two networks protected by the 5510, other than creating a DMZ?
Is it possible to create two private networks with same level of security, 100 on a three network interface connections?
View 12 Replies
View Related
Apr 10, 2013
I am looking to create an office network with each person having internet access but on a private network. however everyone will need to be able to access a communal printer. would they be able to see it if they were all on a different subnet or would i need to set up vlans?
View 4 Replies
View Related
Jul 25, 2011
I have purchased a subnet of 8 private IP addresses from my ISP. 109.x.x.128/29.The ISP has placed a juniper router within our data centre which is routing purely from 109.x.x.206/30 to 109.x.x.128/29 with the ip of fa0/1 set to .129.
I have linked a cisco 5505 to fa0/1 of the juniper from fa0/0 and configured its IP to .130. I have configured NAT to translate our client pool 192.168.16.x /24 address' to the internet.
Is it possible for the 5505 to route / map my remaing private IP addresses through its external port? I have tried creating a seperate VLAN for a DMZ for our servers to sit within but am returned with a subnetting error as VLAN for my external port is all ready configured within the same subnet.
View 2 Replies
View Related
Oct 23, 2012
We have many remote offices that we want to add public wifi and a couple of other services that would be completely outside of our internal network. Each office has a 3750 with plenty of open ports. How can I safely create a vlan for public access on these switches which currently have our internal network on. I have read that people are doing this to save on the cost of purchasing a dedicated switch. Some people are using access lists and one person mentioned creating a private vlan for the public network. I looked up private vlan and it seemed bit confusing.
View 3 Replies
View Related
Jun 6, 2011
I have a two RV042 VPN Router, I successfully connected the IPSEC tunnel. I cannot route Traffic in the tunnel. See the diagram.
MAIN Network
10.252.x.x
-------------->
FIREWALL
a.a.a.1
INTERNET
RV042a WANa <<------------------------------->> WANb RV042b
a.a.a.2 b.b.b.b
In this manner the network of b.b.b.b wil connect to the Main Network 10.252.x.x, unfortunately I can't pass traffic to RV042b going to RV042a. Everytime I trace the route, the traffic goes outside the Internet not to RV042a.
View 1 Replies
View Related
May 19, 2012
We have 36 cctv cameras slowing down our oracle network pc's all in same subnet. I want to remove the dvr's of cctv to a separate network to improve performance. How to accomplish that with a Rv042 linksys router? Or is there any other better way around. 5 Users access the cctv cameras all the time.
View 2 Replies
View Related
Jul 23, 2011
If we have catos 6509 and MSFC and we need to connect new building with L3 I want to Do static route between two network i need to but ip in interface of switch should I but this ip on catos or MSFC,
Switch(config)# interface fastethernet 2/1
Switch(config-if)# ip address x.x.x.x x.x.x.x
In catos if want want do like above command what is the command .
View 6 Replies
View Related
Apr 10, 2011
static route on RV042?
View 1 Replies
View Related
Aug 6, 2012
I have 2 networks.
NETWORK 1:EOC connection fro ISP going into a router (not the RV042) with a static WAN address from ISP. This router is hooked up to a switch that all the computers are connected to. All the computers on this network are using 192.168.1.x addresses. Most of these addresses are static, but the router is running DHCP in case we hook up temporary computers like laptops or client machines to this network.
NETWORK 2:DSL connection going into a router (not the RV042) with a static block of IPs from ISP. (8 IPs, 5 usable for the WAN interface, 1 static IP is being used for WAN interface). This router has a VPN connection set up for remote access to the linux machines on this network. This router is running DHCP on the LAN interface for this network with addresses 172.16.1.x. All the computers on this network are tied together with another switch, completely seperate from the 192.168.1.x network switch.
PROBLEM:We needed computers on the 192 network to be able to access computers on the 172 network. Someone decided to just run a cat 5 cable from the 192 switch to the 172 switch (not the routers, the switches). This "worked" - badly. Appearently there is a DHCP conflict (or something else going on) that was causing the router on the 172 network to try and assign addresses to the 192 network computers, and it was also "resetting" a connection about once an hour. This crashed our server on the 192 network. I disconnected that cat 5 cable between the two siwtches, and now each of the two networks are working properly, but they are now completely isolated from one another.
I need to create a bridge between the 2 networks so that machines on the 192 network can access machines on the 172 network while filtering out DHCP broadcasts from either network router to the other network. (I may need to filter out other protocols as well, but don't know yet.)So, I see 3 potential ways of doing this but don't know if they will work:
1) Can I just set up multiple subnets on the LAN interface of the RV042 and just run 2 cat5 cables from each switch on the two networks to the LAN ports of the RV042?
1a) If I do set up multiple subnets on the LAN interface of the RV042, do I need to assign the two ports to different VLANs? (I don't see any way to set each port to a specific IP address.)
2) Can I set up the 2 WAN ports on the RV042, one static for each network, and will the RV042 route traffic from 1 WAN port to the second WAN port?
3) Is there some other way I should consider setting this up?
Finally, someone mentioned that once I get the RV042 set up correctly as a bridge, I will need to route 172 addresses on the 192 network to the 192 interface of the RV042 via the DHCP router on the 192 network, and conversely, I will need to route 192 addresses on the 172 network from the DHCP router to the 172 IP interface of the RV042. I think this will be easy enough to set up in each of the DHCP routers...
View 3 Replies
View Related
Mar 30, 2013
I'm currently trying to configure a Site to Site tunnel between an IOS Router and an ASA 5505 running 9.1
When the private subnet of the IOS Router was 10.0.0.0/24 and the private subnet of the ASA was 172.16.1.0/24, it connected fine.
I'm now trying to set it up where both private networks are 10.0.0.0/24, and created network objects, edited the ACL for interesting traffic, and created the twice NAT translation rule, but the tunnels aren't coming up.
There is the IOS Router(R1) and the ASA(F2). In between them is one Internet posing router that is just set up to allow both sides to reach their WAN addresses.
R1 and F2 have private network (10.0.0.0/24) and need to communicate. Twice NAT can be done all on the ASA to allow this, but I must be doing something wrong. The way I understand it, is that the R1 should see the traffic coming from 10.51.0.0/24 and sending to that traffic. The ASA will take that traffic, and the inside network should see it come inbound as 10.50.0.0/24. So the F2 private network communicates with 10.50.0.0/24 and R1 private network sends traffic to 10.51.0.0/24.
I turned on "Debug crypto ipsec" and "debug crypto isakmp" but no output is showing up or giving any hint that it is trying to establish anything.
R1#show run
version 12.4
hostname R1
crypto isakmp policy 50encr 3desauthentication pre-sharegroup 2crypto isakmp key cisco address 10.2.0.254
[Code]......
View 3 Replies
View Related
Oct 11, 2012
I work in a small village in Africa and Interent access is often very unreliableTherefore I have 3 different ways of accessing the Interent from my home.The cheapest is Wifi from a local provider, but that doesn't always work. More expensive and still often unreliable is a 3G access. Then, when WiFi and 3G don't work I still can access the Internet via a Inmarsat BGAN satellite terminal, but that is very expensive.What I'd like do is to connect several computers to the same WiFi, 3G, BGAN Satellite Interent (all Ethernet) access via a home WiFi network.Now the questions I have:- can I just connect everything to a switch and then to the Wan-port of a wireless router?- how do the prioritisation works? When there is 3G available, I dont want to access the Internet via the BGAN, bacause that's too expensive?
View 2 Replies
View Related
Jan 7, 2013
We an 887m router in our office with an unmanaged switch. We have two networks, 192.168.0.x and 192.168.11.x connected to router on the same interface (192.168.11.253 is a secondary ip) but I can seem to be able to route packets from one network to the other. Internet traffic is fine from both networks. I can't see what I'm doing wrong here. I can ping the 192.168.11.253 (router) from the 192.168.0 network but nothing beyond that.
I tried this at home with no other config and its the same. Is this by design?
View 4 Replies
View Related
Mar 20, 2012
Currently i am having a scenario where i have setup RV042 and which is connected to Microsoft Forefront 2010. PPTP works fine only on rv042 subnet but i am not able to access the "internal" network of TMG.RV042 (172.16.1.1) ---> TMG [external] (172.16.1.2) ---> TMG [internal] (192.168.1.1) Is there any way through static route to access the TMG internal network through RV042 pptp server?
View 1 Replies
View Related
Jun 28, 2012
connecting to separate private lans:
A) 192.168.1.x
B) 192.168.0.x
A is behind a Watchguard XTM25 11.5.3
B is behind a CISCO SA520W
Both have static public facing IP's.
B only has a IP based PBX system attached to it over a SIP ALG. (originally it was hooked up to the watchguard but they didn't play nice, but works great with the Cisco. Problem is the Cisco don't have all the features of the Watchguard)
A has all my users workstations attached. The issue is that computers on A need to talk to server on B for a desktop application to work. Since they are on separate subnets, it isn't working. The app itself still doesn't work by port forward/sNats, etc.
A & B are right next to each other, so cabling between them is not an issue.
Currently, I have a cable between the watchguard and the Cisco. The watchguard end is configured with a static private ip on the subnet A (the cisco side), and plugged into the lan on the cisco side. I have a policies to let all traffic flow freeley, and from the logs on the Watchguard, all A subnet traffic is correctly going to the Cisco via said cable.
But, nothing is coming back from the Cisco. So my question is, how can I get the Cisco to play nice with the other subnet and send traffic back to the B subnet?
View 1 Replies
View Related
Jun 2, 2013
I'm looking to update our office network and replace our old wireless box.I've been looking at the RV110w after a google search and need to find out some things before suggesting anything.
Currently our network is running a public IP address for each piece of equipment which we'd like to keep, mainly for ease. We have a wireless access point running in invisible mode for wireless client access to the entire network, and also a Netscreen firewall.
What I'd like to do is the following:
1. Keep public ip addresses for wired clients, complete with existing network/local server access/RDP.
2. Set up two VLans on private ip addresses - one to have full access as per the wired clients and the other only for guest Internet access.
Is this something the RV110w is able to do? If so how would I go about setting it up?
View 3 Replies
View Related
Apr 2, 2012
I just moved into an apartment where the internet is being provided to me via wifi (open). The landlord doesn't have a private network, he is with me. What I'm was curious about is if it is possible for me to use a second router to create a secured network for all my devices? My thought would look like this: ISP>Landlords Router>wireless>MyRouter. I know you can have private and public wifi but the two routers have to be connected. I haven't talked to him about the fact that he needs to secure his router mainly because we never cross paths.
View 6 Replies
View Related
Jan 24, 2013
I have RV042 and E4200 routers . I tried the manual UPnP port forwarding using Rv042 router and was succesful ( by typing 192.168.1.1 in the explorer and logged in using user name and password )
I am using a linux embedded system whose Internal IP ,Internal port are mapped .This system is connected to one of the LAN ports
I want to try auto UPnP port forwarding both for RV042 router and Linksys E4200 routers
After enabling the Upnp option only and logging out ,Can i add a port mapping entry in this router without logging in using a C++ program which runs on linux embedded system .
View 2 Replies
View Related
Aug 22, 2012
I was looking for a small business router that has VPN support and dual WAN support for load balancing. Upon reading reviews, I think RV042/RV042G is a good choice. Now am thinking if it supports intervlan/ router-on-a-stick configuration?
View 5 Replies
View Related
Mar 6, 2013
I have RV110W connected in private network 192.168.5.0/24, I have redirected pptp port from adsl modem to the RV110W and VPN works OK. DDNS on the adsl modem is not available.I need to use Dynamic DNS functionality on my RV110W. The device supports several DDNS services (TZO.com, Dyn DNS.com, 3322.org and noip.com). For all but TZO the public "Internet IP Address" shows as 192.168.5.110, which also gets auto registered with the DDNS service.I have tested this with free noip.com account and this is obviously undesired behavior. I need the router to register my real public IP.For TZO it shows the proper public IP, but TZO service is no longer available on TZO.com.
View 8 Replies
View Related
Jan 23, 2013
I live in a two family residential house and we share a common fibre connection to the internet. In the basement we have a modem/router(zyxel) which is in "bridge mode". Therefore not acting as DHCP. Behind this zyxel we have a Cisco RVS4000 router. Ports 1 and 2 go to family A, and Ports 3 and 4 go to family B. Family A and B have separate routers which are both set to "access point mode". Family A has an ASUS RT-N66U router while family B has a dlink DIR-615. The asus has an "access point mode" while the dlink needs to be set up manually to achieve this. The dlink must also have a static IP adress. The asus can receive ip adress.
What I have unsuccessfully tried to achieve and am currently trying to separate the networks so that both families can access internett, but at the same time it must be impossible to access VLAN1(Family A) from VLAN2(Family B) vice versa. Meaning no communication between the two families through the local network.
I have tried different options but I am not sure how to deal with trunk, tagged, untagged etc. etc. etc. It seems every time I manage to create two different networks there is still accessability/communication between the two VLANs and everytime I manage to give out different IP adresses to different ports i.e. 192.168.10.xx and 192.168.2.xx it is still possible to communicate. What also usually happens is that the internetconnection is severed at the same time.
View 15 Replies
View Related
Sep 7, 2012
My plan is to use VLAN1 for the internal private network and VLAN2 for free public wifi. My question is can I use a PC on VLAN1 to configure/manage my access points? There are no dedicated PCs on VLAN2.
View 7 Replies
View Related
Jan 27, 2012
I'm planning to set up a network with two routers and one cable connection. One router will be for public wifi at my business and the other will be for my Point of sale system and private use. I think I have it figured out but want to double check the set up. Someone tell me if this isn't correct or if there's a better way of doing it.Cable modem --> connect via ethernet to Router #1 WAN port. Router #1 Lan port 1: connect via ethernet to router #2 WAN. Now, router 1 and 2 will have two different subnets; 192.168.1.x and 192.168.2.x respectively. Router #2 is the one that I should use for my private network and for the POS system since it can't be accessed by users from router #1 correct? I have DD-WRT installed on both routers but I plan on putting Tomato firmware for router #1 to limit bandwidth for public wifi and keep DD-WRT installed for router #2.
View 1 Replies
View Related
Jan 5, 2012
I would replace an old Levelone Router with a Linksys E2500.I have 3 different routed private networks (e.g. 192.168.1.0/24 , 192.168.101.0/24 and 10.0. 0.0/24)How can I forward different ports to this 3 different private networks with an E2500.In the "Games&Applications" Menu are the first 3 octets of the "to IP-address" are fix and corresponds with the LAN ip address.
View 3 Replies
View Related
