Cisco Routers :: RV082 V3 - IPsec Client VPN Not Working
Aug 29, 2011
A customer of mine has two RV082 in different locations. The "main" router is providing a gateway-to-gateway VPN tunnel, and is also used by a few road warriors for VPN access. We've had some issues with the "main" router lately, so we've decided to exchange it for a brand new device (v3). The old RV082 was a hardware revision v2 device, so I had to manually rebuild the config on the new router. The new router is working fine so far - connectivity and gateway-to-gateway VPN are fine. IPsec Client VPN, however, doesn't work at all. The config of the new router is identical to the config of the old one, IPsec Client VPN used to work fine on the old router.
The router is running the latest firmware (v4.0.4.02-tm). I've been trying to make IPsec VPN work with "QuickVPNplus ver: 1.0.6" and the "Cisco QuickVPN Client v1.4.2.1". From what I understand, both programs first connect to the routers external IP and download some sort of VPN config file. The info in that file is then used to create the actual connection. The problem is that the config file is invalid. It contains HTML code instead of config data. This is the code: "<HTML><HEAD><meta http-equiv="refresh" content="0; URL=/cgi-bin/welcome.cgi"></HEAD><BODY></BODY></HTML>". The URL is the same I see when logging in to the admin interface of the router. The Cisco client tells me in its "wget_error.txt": "rwConnStart message=All 1 wget requests did not return a valid vpnserver.conf". Both clients connect to the router fine, and the config download itself is working - only the returned data is invalid.
I've already tried lots of stuff to make the problem go away - enabling/disabling the firewall, VPN passthrough options, and other things. I'm beginning to think that there may be a bug in the firmware I'm using, or that the way Client VPN works has changed in a way that makes connecting with a client implementing the "old" method impossible. By the way, PPTP is working fine, so we're using it as a temporary workaround. My client, however, isn't happy with this workaround - he bought a relatively expensive router so he can make use of its advanced features, after all.
i have an ipsec tunnel between two rv082 routers. (1 v3 Hardware and the other with v2). On both devices are the latest firmware installed.
Everything working fine, the routers establish an ipsec connection but after about two hours, the router with hw version 3 freezes.... nor the wan neither der lan interface is pingable. I can only pull out the power cord. Below attached are the ipsec settings. It´s a Gateway to Gateway connection
We have tried a variety of options in an attempt to use Load Balancing (Protocol Binding) with an RV082 that has a site to site IPsec tunnel with another RV082. Both are v3.
Here is the issue. We have dual ISPs, one has great bandwidth, but we incur overages. The other has mediocre bandwidth, but has unlimited usage.
GROUP1 - We want most PCs to use the "unlimited" ISP for general surfing, email, etc. (Bound all ports for range of internal IPs to ANY dest to WAN1)
GROUP2 - We want to use the "faster" ISP for our VPN tunnel (mostly RDP and SIP traffic). (Bound all ports for range of internal IPs to ANY dest to WAN2)
So far everything works. The router will route traffic appropriately and GROUP 1 uses WAN1 and GROUP 2 uses WAN2.
Unfortunately, sometimes GROUP1 users need access to resources over the VPN (WAN2).
There is something not right with the routing. For example GROUP1 can ping and receive responses from devices on the other side of the tunnel, but GROUP1 can't access intranet sites on the other side of the tunnel. They also can't RDP to PCs on the other side of the tunnel.
Why does the router correctly route ICMP, but not RDP?
We've tried adding additional protocol binding rules for specific ports(80, 3389, etc) and ip ranges (both local and remote) to see if we could force GROUP1 traffic destined via VPN through WAN2, but it doesn't work.
Shouldn't VPN tunnels created and configured in the RVs not adhere to protocol binding? It just seems logical to me, but maybe I am missing something.
If i set up a pptp vpn between a Cisco rv082 router and a microsoft client,Can i set the client idle timeout someway? or Have a default value pre- configured for this?Because this device support 5 users to connect at the same time. It would be best for me, if the device drop the client if it does not use the tunel.
When I attempt to export the certificate for the quickvpn client via the router web interface, it looks as if the export works, and it asks me to save the zip file. However, upon opening the zip file I receive the error: The compressed folder is invalid or corrupted.
This happens in multiple browsers, from multiple machines.
I have a Cisco RV082 and can successfully connect with the Cisco QuickVPN Client, 1.4.2.1. However, after 1 to 5 minutes I see the Windows 7 bluescreen indicating that the system has halted due to a problem with a driver. I have installed the latest Windows updates and reinstalled the client.
The bluescreen only occurs if I use the Cisco QuickVPN Client.
I am trying to configure RV082 router with Mac Native VPN Client for my remote access. However, no matter what I did, I am not able to make it works. Can any one can give me an example of how to conguration my RV082 router and Mac Book Pro(Mountain Lion)?
I have a VPN tunnel from one RV082 to another, first router has IP range of 192.168.1.0 and the second one has range of 18.18.18.0, the connection works fine, here is where the issue starts, I am at a PC in the 18.18.18.0 network and I ping an IP in the other one e.g. 192.168.1.50 and it pings fine, but when I try to RDP into it or do anything to it I get no response, is it a firewall issue? Is it a NAT issue? I am at a loss, now that IP i mentioned does have RDP enabled and working because it is being port fowarded in the 192.168.1.0 router and I can access it through the public IP.
Also a workstation with a static IP 192.168.1.18 I can ping it if im in the local network but if I am in the remote one I cannot at all.
We're getting the following message in the logs when we ry to connect: encrypted Informational Exchange message is invalid because it is for incomplete ISAKMP SA
One of the router is a V2 and the other is a V4 if that makes any difference.
I have a RV082 v2 with Firmware 2.0.2.01-tm with a Site-to-Site VPN to a Cisco ASA5510.
The PCs behind the RV082 can not see two webservers behind the ASA5510. Both servers have full DNS registration and are accessable from other sites with RV042 routers.
i have a Cisco Rv082 with Firmware v4.0.4.02-tm (Jul 4 2011 13:30:56)I have configure WAN1 with a public IP and netmask 255.255.255.252. (Only one public IP in use) Internally the LAN is a 192.168.169.0/255.255.255.0.I need to add some rules like
Service: HTTP Interface: WAN1 From: ANY To: 192.168.169.2
But after rule configured the connection still not working, it only works when I add a port forwarding.For HTTP maybe port forwarding is OK, but other services I need to grant access to a specific public IP address, not to everyone. So I need the Firewall rule, but is not working, it always block the request. [code]
I was using NETGEAR FVS338 as a main router but it is discontinued now and I found the CISCO RV082 as a good replacement option. I am trying to set up a VPN the same way I used to do it with the netgear one but seems like something is being missed upI am trying to connect the VPN to a SonicWall 100 device using gateway to gateway, 3DES/MD5, agresive mode and IKE with preshared key. I already have the local id, remote ID and subnet configured in the SonicWall device as well as the remote IP address. I used to enter these information in the IKE and VPN configuration screens in the Netgear FVS338 we used to work with. I also have the PreShared Key code I entered in the configuration.
I have a problem to configure a IPSEC VPN on the SA520W ( 1.0.39) with Cisco VPN Client (5.0.05.290). In the logs are following error:
ERROR: Could not find configuration for x.x.x.xERROR: Could not find configuration for x.x.x.xERROR: Could not find configuration for x.x.x.xERROR: Could not find configuration for x.x.x.x
We have an RV082 (firmware 2.0.2.01-tm),with an ADSL connection over PPPoE. It connects fine, and I can ping anything, and I can also access websites with HTTPS, but when trying to access any website with HTTP, it doesn't work.There's no load balancing going on, and it's the same whether we have the Firewall turned on or off, and everything else is pretty much as default.
I try to connect to RV220W with windows 7 client but I fail : error 789. I compare again and again pre shared key, but it doesn't change anything. How to connect to RV220W with IPsec client ?
Is it possible to configure the RV180W VPN to use IPsec and connect to that VPN using the built in windows vpn client in Windows 7 and 8?I have been testing this but I have not been able to get it to work. What are the settings on the Router to make it compatable with the Windows VPN client?What are the settings I need in the Windows VPN client to allow it to connect to this router?I initially setup the QuickVPN client and that worked, but some of my users can't get it to work and I thought this might be a good alternative to try for those users.
We have 2 RV220W Routers installed in seperate offices. We are attempting to setup a IPSec tunnel between the two sites. So far we have been unsuccessful in getting this to work.On both sides, we are getting a successful connection established, but netiher site is recieving any packets. Both sides are transmitting packets though. We have exhausted our resources trying to figure out why.
Problem: IPsec VPN setup seems ok (Client to gateway) but is not responding from client requests. However, remote manage works, PPTP works.
My environment:
Hardware: RV016 10/100 16-Port VPN Router Firmware: v4.2.1.02 (Jan 18 2012 14:10:55) Clients: Mac OS X 10.8 (integrated VPN client) , Windows 7 (build in VPN client) OR both with NCP-E VPN client.
None of the above works with IPsec. I have tried all kinds of combinations. I don't think the problem is wether I use Group1 or Group2 or DES or AES...It must be something else... Neither of the built-in VPN (IPsec) clients in Mac OS X or Windows can be configured in an easy way. BUT the NCP-E client can. I have tried to set it up to exactly meet the settings on the server but no progress...How do I setup an IPsec VPN group so that I can use any of my VPN clients to work?
PS. I have also tried the client that comes delivered. 1- It does not work and 2- it's only available for Windows.
We have two offices connected using Site-to-Site VPN (IPSEC) as shown:(IP ficticius)Office 1 - We had to use 2 routers since we have a range of valid IPs: From a host in office 2 we normally ping 192.168.102.1 (gateway at office 1),But when pinging a host inside office 1 (eg: 192.168.102.8) 50% of packets have been lost.Could it be a hardware problem?
Does RV082 can establish PPTP VPN connection as CLIENT? (i'm aware it can provide function of VPN PPTP server but could not find if it can act as client).To explain further: I'm based in Europe and use US VPN to access some US services like Netflix, Pandora, etc.. (i'm paying for US VPN account as service so I have no other choice than PPTP). I would like to establish permanent PPTP VPN tunnel with remote server so all computers in the house can go through tunnel when i browse for Pandora or Netflix for example (is this router capable of routing policy too so not all the traffic would be routed through tunnel?)
I currently have an RV180 in a small business set-up and curently being accessed remotely by laptops (Quick VPN) and Ipads/Android ICS tablets (PPTP). All is working well but I've become concerned about the security risks of PPTP and would like to shift the tablets to IPSec.
1) For a small business are the PPTP risks real?
2) What are the alternatives for Android ICS? I can't find a Quick VPN client for Android, has anyone seen one.
3) I can't get the core IPSec VPN in Android to connect to the RV180? Is this possible? Has anyone succeeded?
I have made the following change to my ASA 5520 using ASDM to try and force VPN clients to use a self assigned certificate from the ASA. I made the following changes Remove Access VPN > Certificate Management > Identity Certificates > Add Certificate.Then I made the following change.. Remote Access VPN > Network (Client) Access > IPSec(IKEv1) Connection Profiles > Connection Profile > Edit > IKE Peer Authentication > Pre Shared key and pointed the identity certificate to the one I created in the step above.Having made this change I am still able to VPN without a certificate configured in authentication settings.I was expecting that the VPN would attempt to issue the self assigned cert to client machine?
Currently I'm using Cisco VPN client software to connect to a remote IPSec server on the workstations. I want to to configure IPSec client on Cisco 2600 router which connects to the remote IPSec server so the workstations can access VPN subnet without using VPN software. how to configure IPSec client on the router?
I am having a tough time getting my VPN client to reach any devices on my office network. I have a Cisco SR520 configured with IPSec to terminate Cisco VPN client sessions. The client is able to connect successfully. I get a username/password challenge, and then I get assigned a pool IP address on the client computer. So the VPN connection looks good at that point but I cannot reach any devices in the office network.
Config below:
Building configuration... Current configuration : 8066 bytes ! ! Last configuration change at 06:14:35 PDT Wed Apr 13 2011 by admin ! NVRAM config last updated at 06:17:11 PDT Wed Apr 13 2011 by admin ! version 12.4
We have an ASA 5540 successfully using SSL VPN Client Tunnels with no issues, and have been attempting to build the ability for IPSec Clients to connect as well. I have the authentication working, yet cannot complete the establishment of the tunnel for the client. The client receives an error of "Secure VPn Connection terminated by Peer, Reason 433: (Reason not specified by Peer)". In the log on the client, I see the following when the connection drops:
(this is after successful connection, split tunnel setups, then this set of items appears in the log) 377 09:29:08.071 02/28/13 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from <outside IP of ASA> 378 09:29:08.071 02/28/13 Sev=Info/5 IKE/0x63000045 RESPONDER-LIFETIME notify has value of 86400 seconds
[code]...
I see the message where it terminates and where is says 'Account Start Failure' but I can't figure out what that is indicating..
Got some issues when setting up IPSEC/VPN on the asa 5505. I want to connect from the ipad with the built in IPSec client..Get these errors when i run the debug crypto isakmp.
I have difficulties with configuring Remote IPSec VPN with Cisco ASA 5505 and Windows 7 native VPN client. My client PC gets VPN pool IP address, and can access remote network behind ASA, but then I lose my internet connectivity. I have read that this should be an issue with split tunneling, but I did as it is told here and no luck.On Windows VPN Client settings, if I uncheck "use default gateway on remote network" I have internet connectivity (since client is using local gateway), but then, I cannot ping remote network.In log, I see this warnings of this type:Teardown TCP connection 256 for outside:192.168.150.1/49562 to outside:213.199.181.90/80 duration 0:00:00 bytes 0 Flow is a loopback (cisco)I have attached my configuration file (without split-tunneling configuration I tried). If you need additional logs I'll send them right away.
