how to create new unique self-signed certificate on RV120W? I can create request for singning by external CA, but I cannot create new unique self-signed certificate itself.
View 2 RepliesThe establishment of IPSEC tunnel between the RV220 and QuickVPN client works properly with the security certificate of origin of the router.RV220 V1.0.3.5QuickVPN V1.4.2.1
Since the establishment of a security certificate self-signed, the RV220 and QuickVPN client refuses to work together .
Here are the log of the QuickVPN client
2011/09/27 12:45:14 [STATUS]OS Version: Windows 7
2011/09/27 12:45:14 [STATUS]Windows Firewall Domain Profile Settings: ON
2011/09/27 12:45:14 [STATUS]Windows Firewall Private Profile Settings: ON
2011/09/27 12:45:14 [STATUS]Windows Firewall Private Profile Settings: ON
[code].....
When I try to export an SSL Certificate for a Client I get a htps . CSR file instead of the .PEM file. So, I can't update the client computer with the correct certificate.
Firmware: 1.0.2.6
I've been reading over the documentation, but only see instructions for using a self-signed certificate for SSL. Or even trusted certificates between LMSes. But I can't seem to find anything on LMS 4.0 using a Certificate Authority. And I have a security requirement to do so.
Is this possible in LMS 4.0?
Can I import a self signed certificate from a Cisco 871 router to a Cisco ASA 5505? The 5505 replaced the 871 and I have a VPN that goes to another company that we have a connect to. The device on the other end is a VPN concentrator ( I do not have access to modify this device without going through multiple channels.) I only need to mimic this device for the site to site VPN tunnel only. It appears that there are no pre-shared keys only a self signed certificate.
View 1 Replies View RelatedOur ACS (5.3) has self signed certificate, we have exported it and declared it in Certificate Authorities.We have exported it to have a Trusted Certificate for client machine.
This certificat has been installed on a laptop.The wlc is successfully setup for eap (peap & eap-fast has been tested > ok)I have this error in the log:
12514 EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain.I think the Access Policies (identity & authorization) are misconfigured: [code]
I have just renewed the self signed certificate on a v5.2 ACS and expiry date of 2013 is showing in the ACS GUI. However, when I start an ACS Admin session and view the certificate information in the browser it is showing the old expiry date of 2010. I have tried this in IE and Firefox and the certificate information is the same.
Is there a way I can get the browser to pick the new certificate ?
I have two Cisco WLC 5508 controllers that I'm trying to set-up for our new corporate WLAN. I've gone through most of the configuration fine but have ran into an issue uploading a signed certificate to one of my controllers. I should point out that I have managed to upload the certificate successfully to one of the controllers, I just can't seem to upload it to the second.The issue is as follows:
- I've logged into the controller, gone to Security -> Web Auth -> Certificate -> Download Certificate
- I've specified my tftp server details and selected apply
- the process begins and I can see through my tftp client that the controller is attempting to copy and install the certificate
- The controller tries to install the certificate but fails, reporting the same
I have a doubt about CiscoWorks. I need to generate the self-signed certificate with a key of 2048 bits to generate a CA with VeriSign. CiscoWorks do this automatically with a key of 1024 bits and I do not find a form to elect a a diferent key. Is it possible to generate a certificate with 2048 bits key?
Another problem is that I have CiscoWorks installed on Solaris. Many times at day the web application does not work and the only way to recuperate it is with the command "init 6" and I have to way 15 minutes until I can have access again. Why is produced this error? Who can I fit it?
Right now the Self-signed Certificate on my RV180W generates errors as it was issued to the MAC address instead of the current IP address. Need instructions on Generating a Self-Signed certificate (or 1 from my Windows Server 2012 Certification Authority) that will eliminate the constant barreage of certificate errors I get when trying to access the management interface of my device? the internal domain is mythos.local, netbios name of MYTHOS, and the device name in question is surtur.
View 2 Replies View RelatedI am support one client for, whom falls under Security scans mandatory for new implementation of ASA 5520 device. The client uses Nessus Scan and the test results are attached.The Nessus scanner hit on 1 Medium vulnerabilities.
View 2 Replies View RelatedHow do I set up my N750 so that I can give my network my own name and my own password? I do not have the CD.
View 1 Replies View RelatedOur ISP hands us an ethernet link. ISP router has one address of (for argument sake) 1.1.1.0/30 net, - let's say they have 1.1.1.1 we have the other usable address of 1.1.1.2/30 assigned to our 3825 router. Is it possible to use hsrp or vrrp if there is not two valid/unique "wan" IPs to assign to our routers? For example, if we had a pair of 3825 routers? are we stuck with basically a manual failover or requesting our isp to provide a larger address wan block?
View 2 Replies View RelatedWe find ourselves in a difficult situation with the Cisco VPN Client version 5.0.07.0290 where it keeps giving us an
"Error 42: Unable to create certificate enrollment request"
When we attempt to use the Online enrollment method to create and enroll a new certificate. There is no additional information in the VPN client logs where we have set 3-High for all logs. In addition, Wire shark does not show any packets sent from the machine running the client to the Cisco 3825 router which runs the Cisco CA.
To create and enroll a certificate we do the following:
1. Click on the Enroll button to show the Certificate Enrollment dialog
2. Select Online
3. Select <New> for Certificate Authority
4. Enter http://192.168.120.1 as CA URL (note, 192.168.120.1 is the IP of the Cisco 3825)
5. Click Next to display the dialog where we can enter certificate details
6. Enter details in all fields except IP Address and Domain
7. Click Enroll which shows a dialog with the Error 42 ... message in it.
If we attempt to create a request by using the File method, all works fine, that is, the client creates a file with the enrollment request. The fact that the client does not send any messages to the Cisco CA leads us to believe that we have a problem on the client machine. However, the client does not write any information in the logs, so it is a bit hard to fix the problem. I can provide additional configuration information if required for both the client and the Cisco CA. Note that we have not modified any client configuration. Basically, we installed the client on a Windows 7 64bit machine and attempted the steps listed above.
I would like to set up a site to site VNP connection between 2 RV120W routers, preferably via IPsec.
The problem is that I would like/have to use a 4G modem router (model TINY) which connects to internet in front of the RV120W (on the local side)
I have no problem with that on the remote site that RV120 connects directly to internet via a public IP address on the WAN port.
Local network 192.168.1/24-----RV120W----192.168.100.1—Tiny---Public IP--------INTERNET
INTERNET--------PublicIP—RV120W—Remote local network 192.168.2/24
I've a RV120W with the last firmware version (june 2011), i want to create two vpn tunnel:
- Professional: lan routing all packet for the 192.168.0.0/24 to the first VPN tunnel
- Other: all other address IP destination to a second VPN tunnel
The first tunnel (professional) is ok but what rules can i use to configure the second ?
What is the default login/pass of cisco rv120w for ssh access ?
View 1 Replies View RelatedUpgraded to 1.0.2.6 and all of a sudden SIP devices working over the VPN no longer work. Downgrade to 1.0.1.3 and they work again. My guess is that some ports are blocked over the VPN in 1.0.2.6
I thought the general idea was that firmware ugrades fixed bugs rather than introducing them.
Suggestion for Cisco:- Zip the firmware image downloads, or else have an upgrade process that includes a CRC check, that way at least the poor punter will have an indication if they have been corrupted. I had a subtle memory problem that was corrupting some files. The firmware upload appeared to complete properly and you could log on OK but some of the menu choices resulted in a hang with the "Please wait... the page is being loaded" message. Careful checking of file sizes revealed that the file I was uploading into the router was a few hundred bytes different in size to the one on the website, must have been corrupted during the download. But the upload proceeded normally with no indication of any error. It's a pretty basic safeguard that should be in there as a matter of course with the router performing a CRC check and showing an error if it fails.
I had WRT54G2 and recently switched to an RV120W. I have an Internet accessible camera system connected to my router. Before, this worked fine... there is a dns service (DynDNS.com) that is configured as part of the camera setup. I would then just enter [URL] and I would connect to the cameras. I install the new router (RV120W) and I can no longer connect to the cameras. I do not recall any configuring that I had to perform on the old router.
why the RV120W isn't letting me get to the cameras?
Rx:, recently I have perchase 2 RV120W routers thinking that it must be very easy to setup the site to site vpn. i cannot get my remore office to link to my main office and vice verser.
Scenaro
- I'm using 2 RV120W routers for each site.
- Site A using a subnet of 192.168.10.0 mask 255.255.255.0
- Site B using a subnet of 192.168.11.0 mask 255.255.255.0
I have setup the VPN using the wizard and I got site to site tunnels connected and show as 1/1 Connected (1 user) in the status he IPsec connection status show
--Policy Name: VPNA
--Endpoint : public IP address from my ISP 203.117.222.221
--Packets Tx:145 Rx:0 and Kbytes shows Tx: 29.55 Rx:0
Q1 why I cannot use dynamic DNS naming in the policy setting ? eg: aaa.dyndns.org, I have to use the ip address instead eg: 203.117.222.221
Q2. I cannot connect from Site A to Site B , I can't even do a ping to 192.168.11.1 from Site A. even though it show the Site to site tunnel is coonected.
I've just set up an IPSec VPN between 2 x RV120W which are both behind other router. Here's what we have :
RV120W #1 (192.168.1.254) --- (192.168.1.1) Office Router #1 (PUBLIC IP) --- (((Internet))) --- (PUBLIC IP) Office Router #2 (192.168.2.1) --- RV120W #2 (192.168.2.254)
It works great, tunnel is UP.
[Code]....
I've just set up an IPSec VPN between 2 x RV120W which are both behind other router. Here's what we have :
RV120W #1 (192.168.1.254) --- (192.168.1.1) Office Router #1 (PUBLIC IP) --- (((Internet))) --- (PUBLIC IP) Office Router #2 (192.168.2.1) --- RV120W #2 (192.168.2.254)
[Code]....
Now, I need to be able to reach the server (192.168.1.100) from a PC on LAN #2 with IP 192.168.2.50. So, I've created au static route on Office Router #2 (192.168.2.1) because of course it doesn't know how to reach private subnet 192.168.1.x. My static route looks like this :
192.168.1.0 / 24 (Destination network) --- 192.168.2.254 (Gateway)
...but it doesn't work, no ping. When I do a tracert to server IP (192.168.1.100) from PC on LAN #2 (192.168.2.50), the result is :
1st jump ---> 192.168.2.1
2nd jump --> 192.168.2.254
...and it doesn't go further.
I configured my RV120W (Firmware:1.0.2.6) to count the traffic on my network. I set the monthly limit to 99999 and did not change anything else.So after a few hours, the traffic counter shows 2048 MB for outgoing traffic. This is impossible, because the DSL-connection is too limited in upload to cause this huge outgoing traffic in 6-8 hours. When I reset the counter at night, the next morning the device shows 2048MB again (even if there was no traffic at all, just some clients syncing time with NTP). I did already reset the device to factory defaults and reconfigured everything from scratch.
View 0 Replies View RelatedI have a problem with firewall rules. If I set some rules for open communication and some for closed, so I cannot reorder from the end to begin.
Last rules are at the end of all. So I can only reorder in one pages.(I have about 33 rules = 3 pages of rules)
I was wondering if I could setup my router CIsco RV120W to be able to connect to a VPN serice for my internet connection. Looking to give my small home netwok more sercurity. Is it possible with the Cisco firmware to be able to setup a connection to VPN serice. Do I have the compabilites with this router?
View 1 Replies View RelatedThe PPTP client from Windows 7 is not working with this router; therefore I would like to try the quickvpn.Is there any paper from Cisco explaining how to setup the RV120W for quickvpn ?
View 1 Replies View RelatedI need to configure a rv120w in order to make it work at the same time for data and digital tv. The fact is that the set top box for the idtv needs an IP address that will be delivered directly from the ISP. So I need to setup one LAN port that will be bridged to the WLAN connection (the stb will be connected to that lan port), and another port that will be connected to the LAN swicth so that the rest of the network has internet access. I can't see anywhere a way to create such a bridge. Quite disappointing as it's possible to do so on open source platforms such as openWRT..
View 3 Replies View RelatedI have just received an RV120W. Default setup (out of box), but when I http://192.168.1.1 and login, the next page comes up as : Internet Explorer cannot display the webpage ? Internet Explorer is version 9.
I have allowed both http and https at 192.168.1.1 in Internet Explorer security settings/Trusted Sites ?
Is there a console connection to this box ?
Is it possible to have 2 IP addresses on wan and setup specific routing rules for each IP ? Or do I need to use another router for that and if which one ?
View 4 Replies View RelatedWhere can I download the new firmware 1.0.3.10 for RV120W?
[URL]
I have been battling with my Cisco RV120W router and QuickVPN.Running Windows 7 Home PremiumPerformed a fresh install to factory out-of-box install for WindowsRemoved NortonDid NOT perform any windows updatesInstalled QuickVN version 1.2.4.1I have updated the firmware to the latest version (confirmed by cisco)I can connet to the router and have a stable connectionI can ping both the router IP and the shared file server IPWhen I enter the shared file server IP into the search field (e.g. \192.168.100.199) and press enter, I see a connection to "share", so I click on this and then see "FolderName" of my shared files. I click on this folder and I get a timed out error.When I enter the routers IP address into a browser (IE8 as factory installed) I get a timed out error also.In the past, I have installed all important and recommended updates for Windows and still get the same scenerioI have called cisco support and went through router settings, assigned them a VPN username, they log in and can access the files without issue (What the @#$$@#$)Cisco support spent plenty of time with me, but since they could access my network and since I could ping my devices, they had no other suggestions further.
I have this fresh factor out-of-box install. I know this is most likely something to do with my laptop that I am trying to use to connect to the network. I have Frontier as my ISP for home. I don't know if there is anything they are doing to interfere with my connection. I have tried to connect to the network via ComCast as well, with no luck.tell me if there is something I need to tweak in my Windows 7 settings?
I gave setup a vpn gateway between two cisco RV120W. The connection is established.
Active IPsec Security Association Table: Policy NameEndpointPacketsKBytesStateActionRxTxRxTxVPN-INTERDIO87.65.38.62000.000.00IPsec SA Established Poll Interval: (Seconds)
The problem is that there is no trafic. Even ping te remote internal nework is not working. For testing i have disabeld at both sites te firewall and have configured both with an access rule any to any.
I have a Cisco RV120W connected to the internet. I have configured a QuickVPN user on the router, but I cannot connect via QuickVPN no matter on what PC I try (with firewall or without firewal, Windows XP, 7, ...). On the router it says the VPN user is connected, but on the client PC I receive remote gateway not responding. In the logs it says failed to ping remote VPN router. I tried changing all settings I could find on this forum, but the result stays the same (changed port to 60443, deleted all IKE and VPN policies, allowed ping, disabled fragmented packets etc...). None of all the settings seems to get any result.
View 11 Replies View Related