Cisco Routers :: RV042 Browser Certificate Errors When Logging Into Web-based Gui
Jan 2, 2012
I have set the RV042 up for QuickVPN access. The router config recommends turning HTTPS on in the firewall when using QuickVPN. The side effect to this is any web browser throws me certificate errors and warns me not to continue logging in to the router's config. How do I fix this so the browser does not throw these messages?
Router is Linksys-branded, using latest firmware for this hardware (1.3.13.02-tm)
I like to use "URL Blocking" with keywords in the firewall properties. When I activate this feauture, I get errors from the router certificate when I browsing to any site in the Internet. Is there a way to manage this problem without using a public certificate?
The entire "incoming log table" is just full of this! It's all the same! This is on the current firmware 4.0.4.02Sep 20 12:49:35 2011KernelOut of memory: Killed process 5385 (iptables). Sep 20 12:49:39 2011KernelOut of Memory: Kill process 5387 (iptables) score 591 and children. Sep 20 12:49:39 2011KernelOut of memory: Killed process 5387 (iptables). Sep 20 12:49:43 2011KernelOut of Memory: Kill process 5389 (iptables) score 591 and children. Sep 20 12:49:43 2011KernelOut of memory: Killed process 5389 (iptables). Sep 20 12:49:48 2011KernelOut of Memory: Kill process 5391 (iptables) score 591 and children. I see no one has a clue. Anyway, added a copy of the log file. It's just streaming out errors. Serious bug in the new firmware.
RV042 router is giving out the outer certificate instead of server certificate. Outlook anywhere is failing and we are receiving certificate errors for any secure site behind this firewall. I'm not talking about remote management. I'm talking about people trying to access our web site, which is secured, and getting an error because the RV042 is giving its own SSL certificate instead of the Server's certificate. Firmware Version: 1.3.13.02-tm. I don't see any updates for that hardware. I do have it working on an RV042 with the same firmware at a different location. How do we turn that off or keep it from happening? Output from a test site Attempting to resolve the host name xxxx in DNS.The host name resolved successfully. Additional DetailsTesting TCP port 443 on host xxxx to ensure it's listening and open. The port was opened successfully. Testing the SSL certificate to make sure it's valid. The SSL certificate failed one or more certificate validation checks. Test Steps ExRCA is attempting to obtain the SSL certificate from remote server xxxx on port 443. ExRCA successfully obtained the remote SSL certificate. Additional Details Remote Certificate Subject:
SN=California, L=Irvine, C=US, O="Cisco-Linksys, LLC", OU=RV042, CN=68:ef:bd:b8:0f:78, Issuer: SN=California, L=Irvine, C=US, O="Cisco-Linksys, LLC", OU=RV042, CN=68:ef:bd:b8:0f:78.Validating the certificate name. Certificate name validation failed. Tell me more about this issue and how to resolve it Additional Details Host name xxxx doesn't match any name found on the server certificate SN=California, L=Irvine, C=US, O="Cisco-Linksys, LLC", OU=RV042, CN=68:ef:bd:b8:0f:78.
Just installed RV042 router. And it's giving out router certificate instead of server certificate so people who are trying to access our secured server are getting errors. I'm not talking about remote management. I'm talking about people trying to access our web site, which is secured, and getting an error because the RV042 is giving its own SSL certificate instead of the Server's certificate. How do we turn that off or keep it from happenning?
The RV042 firm version is v4.0.0.07-tm (Aug 19 2010 19:19:50)
i was connected to my rv042 via remote management / browser, and tried to add vpn clients. i generated a new certificate and then i clicked on export for clients. by doing this, the remote management disconnected and i cannot access the router anymore.
how can i get the new .pem file from remote? do i have to make somebody turn off and on the unit to get back remote access??
p.s.: after turning off an on i tried the same steps again: everytime i click on "export for admin" or "export for client", this kills the remote management and the unit must be hardreset. now: how do i get the newly created client certificate off that unit ?? otherwise i will have to drive 350 km just to grep that file ?!?!
I have an RV042 (it's old, silver/dark grey plastic front one) w/ firmware 1.3.13.02-tm.
The reason we bought this (long ago) was to balance two WAN connections, one with unlimited data and one capped monthly. It did that once, but for a couple years both connections have been unmetered so it's just been balancing them 50/50. As of today one WAN connection (the new much faster one) is back to being metered but I can't figure out how to configure the RV042 as it once was to prefer sending traffic over the slow, unmetered connection first, and only use the faster metered connection when necessary.
It's been a long time and honestly I only vaguely remember the ability to prioritize a connection based on % of bandwidth used so that all traffic would go over the unlimited connection 1st until it was flooded, and only then fall over to the metered connection. This is totally different than the weighted round robin, or smart link backup.
I found this 3rdparty forum post that supports that vauge memory and suggests this was eliminated between firmware 1.23 and 1.3: [URL] Is it possible to replicate this functionality with the current firmware? if so how? If not, how to do roll back to firmware 1.23?
It sounded like perhaps I could assigned WAN1 a bandwidth of 100000 (even though it's really 1500) and then assign WAN2 a bandwidth of 1 (even though it's really 20000) and the result might be the prioritization I'm looking to achieve... but I feel like I'm stumbling in the dark at the point.
I ran into a problem a few weeks ago and am still trying to figure out why either the 3560 switch or our Cacti syslog server did not alert us when one of our ports was experiencing heavy CRC and Input errors.
I had upgraded the IOS to 12.2(55)SE6 and rebooted the switch. About a week later, someone was troubleshooting why print jobs were having problems printing to a high speed printer. When I looked at the interface it showed a few thousand CRC and Input errors. I cleared the counters and had them print again and watched as the CRC and Input errors went up. When I did a "show log" there were no error messages. Looking at our Cacti Syslog there were also no errors present for the past 6 months.
We found that the device on the port was set to auto speed and duplex and the switch port was at 100/Full. Once we got them to match the problem was resolved, but we were left wondering why we never got any alerts.
We also have some 3548 and 3550 model switches that Cacti picks up %LINK-4-ERROR for any ports that show CRC and Input errors. I did some research and it appears that the 3560 switches do not have the LINK facility code. I believe it has been replaced with a PHY link code but I'm not sure. We do have some "%PHY-4-EXCESSIVE_ERRORS: Excessive FCS, data, or idle word errors found" but they are all for 3750 switches. I could not find any 3560 that had alerted for that error or the LINK error.
I also tripped port security on the 3560 switch just to make sure that it was reporting correctly to Cacti and that alert did show up.
My question is how do I get a 3560 switch to alert in the logging buffer for CRC/Input/FCS errors? Also, how I can generate CRC and Input errors on purpose for testing? I tried mismatching the speed/duplex/Auto and only got collissions, no CRC or Input errors.
I got many certificates errors. When ISE Server tried to retrieve CRL: CRL verification failed - possibly signed by wrong or unknown CA,When client tried to connect using EAP-TLS: X509 decrypt error - certificate signature failure.
I have just setup a vWLC for lab purposes and it´s up and running. I have a few used 1131 LAP:s that tries to join the AP but I just get DTLS certificate errors like these:
*Sep 14 13:25:27.229: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up *Sep 14 13:25:27.258: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up *Sep 14 13:25:36.198: %CAPWAP-3-ERRORLOG: Go join a capwap controller *Sep 14 13:26:41.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.105 (code)
These AP:s (I have tried 2 so far) have earlier been in use connected to a cluster of 5508:s.
We have a design of two 6509 running in a VSS with dual supervisor each having fthree 10/100/1000mb etherner modules. We have diagnosed a wierd problem that none of the switchports in module 1 and 2 on either switches are having layer2/layer 3 connectivity.
Tried everything from changing the cables to changing the end device but no luck with it.
Module results show pass and no errors in the logging.
I have just renewed the self signed certificate on a v5.2 ACS and expiry date of 2013 is showing in the ACS GUI. However, when I start an ACS Admin session and view the certificate information in the browser it is showing the old expiry date of 2010. I have tried this in IE and Firefox and the certificate information is the same.
Is there a way I can get the browser to pick the new certificate ?
My issue occurs on ALL of my home computers (MacBook and iMac using wi-fi) and ALL of my browsers (Safari, Firefox, Chrome).The problem:- Security Certificates: They pop up daily for Facebook mostly, but also Twitter. I will click Continue, which takes me to...- 404 Error/Page Not Found Error: After the Certificate error mentioned above, this happens. Mostly to YouTube. It will stay like this for a few hours. I've cleared cache, rebooted, etc. etc. Nothing works.- Images turn into little blue boxes with a question mark in them. **When this happens, it's an indication that a Certificate box will pop up out of the blue.- Even on Google.com, it will say: Invalid URLThe requested URL "/", is invalid.Reference #9.df260e6b.1336506889.420cf4fSo what can I do? It happens on both my Macbook Pro and iMac - both connected wirelessly to a Linksys router/cable modem. The router is Wireless-N Broadband Router WRT160Nv3 with Firmware Version: v3.0.02.
I have been researching this for some time now and I can't find a solution to fit my needsI'm deployed in Afghanistan and on the base the local company they brought in has a hard wired network setup which makes you log in for internet. I want to setup wireless off of that with my own router and charge a smaller price. I know this sounds bad but they charge a pretty absurd amount. I would like to lessen that amount for the guys in my unit by splitting the price between everyone. I would like to make it look good though.
The login for the existing internet is a web based login. So, what I have come across so far is I need a router that will support logging into a web based login and support a landing page that will charge/ accept Paypal payments for new accounts and will expiredaily/weekly/monthly based on what they choose. I would like to set this up like you as a customer were loging in at a regular hot spot if that makes sense.
When I try to access the browser based utility through the address bar, I don't have the username or password.....tried admin for both and for just the pw. When I try to access advanced settings through Cisco Connects router settings / advanced settings, it comes up as if many objects were unable to load. Linksys E2500.
We use a combination of Cisco ACS and Cisco catalyst 3560 switches for network authentication and authorization. Clients (Windows XP) have a certificate installed which will grand access to the network and put them in the correct VLAN. So far, so good. Some users are testing with Windows 7 in the same set-up as above and run into strange behaviour. The problem is that after a random timer the machine gets de-authenticated and nothing besides a reboot works to get the computer authenticated again (from a Windows point of view). It looks like this only happens to users who are using a certificate to authenticate, Windows 7 MAC bypass users have no such problems. If it occurs, the following logging appears in ACS: [code] We are using ACS 4.2(0) Build 124 and 3560-48PS switches with IOS 12.2(55).
I have cisco 2504 WLAN controller with 7.4 IOS. My query is can I configure the MAC authentication with certificate based. And without using any external servers like Radius, ACS and LDAP.
I'm trying to access the browser based utility (@ http://192.168.1.1) on my router and having no luck. I've tried from two different computers (each Win 7) and each browser. I've tried wired directly to the blue/LAN ports and through Wifi. I've confimred that the IP is correct (or is at least the default gateway for each machine). The Cisco Connect tool can't find the router either.the only thing that can find the router is the CiscoConnect Express app on my iPhone.Internet is working fineish (some problems with Wifi), I just want to play with some settings.
I have a AIR-AP1121G-A-K9 running c1100-k9w7-tar.123-7.JA2 (Autonomous)We have monitoring setup with Orion NPM and we consistently see output errors, Transmit discards and big buffer errors The users at the site have not reporting any issues but was wondering how to prevent these or are these normal?What causes the output errors on Wireless Radio ? How to troubleshoot further ?
Radio0-802.11G Total Output Errors 0 47749 Small Buffer Misses 4 misses 139 misses
I'm encountering what I think is an issue on logging system on FW ASA 5520 - Asa Version 8.4(2), ASDM version 6.4(5). When I disabled the logging inside a rule from ASDM, or from console with the "log disable" option inside ACL, If I check in ASDM logging real time window I continue to see all the entry related to disabled rules. This is a correct behaviour about ASA logging ? How I can "hide" the entry related to disabled rules (this is what I need for troubleshooting purposes) ?
We are running DHCP Server on our cisco 1841 routers with 12.4 IOS. We want to maintian a Database of all the DHCP IP Leases by the server (ie router), the time and date of lease all the information in a Central / Branch Database.
When I log into my router I can see the navigation tree on the left, but the rest of the screen is blank. I was at one time able to see the info on my Windows 7 computer and not my Vista, but now all my computers are blank.
Recently i bought a Cisco RVS4000, upgraded the firmware to latest stable release (Firmware Version: V2.0.2.7) and started configuring it.Yesterday i found out that as the dsl connection drops (i'm using PPPoE with an ethernet ADSL Modem) the product stops logging, both locally and to an external configured syslog (which resides on a linux box over the LAN).
Looking for a SOHO device that could accomplish not only to connect people from home to Internet, but also to let me remotely access my work stuff (from my home office), RV180W sounded great and really cost effective. I could connect to Internet, FROM Internet, separate home, work and guest VLANs, all in just one device... sounded just GREAT! Bought one but (unfortunately) I have to say I'm quite disappointed with its performance, outnumbered errors (how many!) and continuous lost of Internet connectivity (can't stay a full day without one).I've searched a lot (not only here) and tried many things, listing some:
- Upgrading firmware (now v1.0.2.6): done several times, once with nothing connected to the router besides a local wired laptop, to ensure integrity - Resetting to factory defaults and performing a "clean configuration", from scratch (done several times) - Disabling Firewall functions (once all of them) - Checking the real need of every option and making sure I had just the ones I needed configured
I have (in a very "consistent" way) the following problems:
- Poor performance (it's clearly much better when I directly connect to the cable modem's WiFi OR to another router connected to this cable modem). I could say that it seems to have 50% of the performance I had with my CISCO/Linksys E4200 and Netgear "elder" routers.
- Persistent disconnections / resets: Sometimes it happens only with wireless, sometimes it looses the "Internet forwarding capability", retaining the local wireless connection (to other devices), sometimes it seems to make a full reboot (including a new DHCP request to cable modem). In a day this happens several times, I'd say from 3 to 15 times, depending on the day (couldn't figure out why).
CPU utilization is always shown as being 100%, what sounds amazing, because:
- There are usually just 4 wired connections (3 storage devices + 1 Desktop) and at most 5 wireless connections (including my laptop connected to the main VLAN and 3 Android devices and 1 "guest" laptop connected to GUEST VLAN) - The utilization % remains when I have jut one laptop performing Internet browsing and nothing more - VPN wasn't enabled yet (and it will be, as I want to remotely connect to my home office) [code] ......
Just set up a ClearOS gateway - internet works, DNS everything OK.I can ping the two routers (set up as switches) but i cannot access them via the browser from my PC (CYLON). I CAN access ClearOS panel from my PC?
I just got myself a Cisco RV220W, connected my laptop to configure it. I receive an IP adress by DHCP (192.168.1.x) and can ping the router (192.168.1.1). However, when I try to connect to the router by the web interface, I receive this message in my browser (Chrome):
The webpage at https://192.168.1.1/ might be temporarily down or it may have moved permanently to a new web address. Error 113 (net::ERR_SSL_VERSION_OR_CIPHER_MISMATCH): Unknown error.
In FireFox: Secure Connection Failed An error occurred during a connection to 192.168.1.1. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)
In IE9: I get no error message, the page never loads
Is it DoA or how to get connected to the web interface?
There is ASA with remote access VPN and users are authenticated using third party signed certificates (CA is not local in ASA).When user certificate expires i can see it in syslog messages. For example:
%ASA-3-717009: Certificate validation failed. Certificate date is out-of-range, serial number: (...)
I would like to know if there is an opportunity to view user's certificate expiry date beforehand, say, 3 days before?
I have RV042 and E4200 routers . I tried the manual UPnP port forwarding using Rv042 router and was succesful ( by typing 192.168.1.1 in the explorer and logged in using user name and password )
I am using a linux embedded system whose Internal IP ,Internal port are mapped .This system is connected to one of the LAN ports
I want to try auto UPnP port forwarding both for RV042 router and Linksys E4200 routers
After enabling the Upnp option only and logging out ,Can i add a port mapping entry in this router without logging in using a C++ program which runs on linux embedded system .
I was looking for a small business router that has VPN support and dual WAN support for load balancing. Upon reading reviews, I think RV042/RV042G is a good choice. Now am thinking if it supports intervlan/ router-on-a-stick configuration?
