Is there a way to configure RV180 to allow PPTP clients to route Internet traffic via its own internet connection?
I.e. supporting these client options: "Send all traffic" (Mac/iOS), "Use default gateway on remote network" (Windows).
I have a RV180 router and i am trying to use the Quick VPN Client version 1.4.2.1. It works fine on my Windows 7 pc, and worked successfully once on the windows XP sp3 pc. But now the XP pc will not work.
What looks strange is in the VPN Client Connection Status on the router I see the status is Online, however the XP pc will not ping anything on the network or connect to the RDP pc i want. The QuickVPN Client hangs on "Verifying Network".
I tried the suggestions i saw online:
Disabling Firewall
Enabling Firewall
Making user name shorter
Allowing for PING on WAN (replies all come back fast)
Reboot Router
Upgraded firmware to 1.0.1.9
I did not adjust the MTU rate as i was not sure what to change it too. AV is AVG 2012.
For the past week, I have tried to setup the PPTP VPN server on the RV180. The setup was straight forward, but I could not log-on no matter what I tried. I decided to call Cisco small business support, and as I was talking to the engineer, it mysteriously started to work. I was puzzled and somewhat embarrassed because I'd hate to admit it was an id10t problem on my part. As I tried a few different configurations, I began to realize there might be a limitation in the RV180 PPTP VPN server with the current firmware (1.0.1.9).
In short, the RV180 PPTP only works with 192.168.xxx.xxx/24 subnet. My setup has 3 vlans: vlan1 in 172.xxx.xxx.xxx/24 subnet, vlan2 192.168.0.xxx/24, and vlan3 10.xxx.xxx.xxx/24. My originally plan was to keep vlan3 isolated by disabling inter-vlan routing, but I needed a way to manage a couple of devices on vlan3 remotely, thus I wanted to setup a VPN in the 10.xxx.xxx.xxx/24 subnet. This turned out to be the reason why it never worked before. Today when I called Cisco support, I assigned the PPTP VPN server a 192.168.0.xxx ip range, and it worked. Later, I tried assigning 172.xxx or 10.xxx ip addresses to the PPTP VPN server, and they both failed to work. I created another test vlan4 with 192.168.2.xxx/24 subnet, and assigned the PPTP VPN server to that vlan, and it worked again.
I'd like to mention that I already configured the 10.xxx.xxx.xxx/24 subnet with a few devices before I replaced my router with RV180, and I don't want to have to change and test the setup of all the devices. Another reason I want to have my VPN server outside the 192.168.xxx.xxx range is that it's way too commonly used by wifi hotspots that it increases the chance of wifi and vpn in the same subnet.
I can test a few more configurations, but I think the results will be the same. Perhaps Cisco should test the RV180 in the lab to confirm what I found.
Being new to the RV180 (and VPN routers for that matter) I have been struggling to get a VPN going, supporting both my Android and iPad devices. However, I understand a IPSEC connection would be a more secure sollution. Unfortunatly I cannot find a clear instruction anywhere to do this.I found the settings/descriptions in the RV180 quite different from the (few) settings in the mobile platforms. So far no success in getting it setup.
View 2 Replies View RelatedI have 2 RV180's connected via Gateway to Gateway. It works fine when I have the Windows Firewall turned off on both PC's. Obviously this means that I need to have an exception rule in the Windows Firewall in order to use the Windows Firewall. What exception (inbound/outbound) rules that I need to set in order to use the Gateway to Gateway?
View 4 Replies View RelatedI've got two RV082's connected. Each has a dynamic IP (changes typically every few weeks). I've configured the tunnels on both ends with a local and remote "Remote/Local Security Gateway Type" of "Dynamic IP + Domain Name(FQDN) Authentication".If I look at the VPN Summary tunnel status, it shows an IP address of "mydomain.dyndns.org 0.0.0.0" under the "Remote Gateway" column heading. The Tunnel Test "Connect" button is N/A.I can resolve both of the mydomain.dyndns.org entries on both sides of each VPN using the Diagnostic DNS lookup tool within each router. If I hardwire a fixed IP address for the Local and Remote Gateway everything works just fine. VPN is good.
I just can't seem to get the "mydomain.dyndns.org" function to work. It appears the router can't resolve the dynamic IP from the domain names on each of the routers.
i'm having problems connecting to my RV220W using PPTP. The first time I set up PPTP on the box, everything worked just fine. Now, however, PPTP just won't work. No matter how I try to tweak various settings on the router, the connection fails. I have tried connecting with Windows 7, Android and OSX with no success.The router came with version 1.0.1.0, and I have tried downgrading to 1.0.0.26 and upgrading to 1.0.3.5, but alas, I can't seem to make PPTP work again.
View 1 Replies View RelatedI can use PPTP and access all the PCs on a flat network at a remote site. I can ping the pcs and connect with netsupport manager. When I use QVPN I cannot do this. Why? I have added custom ports 5405 for NSM and applied ACL put no joy. I also added PING to ACL but it still doesn't work.
View 1 Replies View RelatedI have a static IP for the host RV180, however do I need a static IP for the remote RV180 ?
View 2 Replies View RelatedI'm dessigning a network and this is my scenario:
5 - Remote sites (no static IP there)
3 - Remote users (comercial)
1 - Central building (using static ip address)
Is it possible to establish a permanent vpn tunnel between each one of my remote sites to the main building, even if I have no static IP address in the remote sites?
Do you think that RV180 is the best choice to mannage vpn connection between remote sites and the central building securely and faster?
I bought 2 RV180 to setup a VPN tunnel between a remote site and central office.The VPN tunnel is established, I can ping from central office to remote site but browsing on that server fails. [code]
Seems the routing is not really working through the VPN Tunnel.
I have a RV110W which is am using as a router (not gateway), because it is connected to the DSL modem (not planning to bridge it) through its WAN port. The DSL modem forwards all PPTP traffic to the RV110W.The only pupose of the RV110W for me is to use it as a VPN router.
Info:
Firmware version: 1.1.0.9
Below are the settings I have:
WAN:
LAN:N.B. The modem runs a DHCP server, so I am relaying the requets to it
VPN:N.B. Also tried with 192.168.0.0 and 12.168.2.0 networks; same thing.
Routing Settings:
Routing Table:NB: 192.168.1.11 and 10 are VPN clients (created automatically).
Firewall:Users are being able to successfully connect to the VPN; however, there are couple of problems:
1. They are not assigned a gateway; hence, not internet connectivty (i want them to use the remote gateway)
2. They are not able to access the 192.168.0.0 network; hence unable to reach their DNS server and other hosts (run a tracert; they couldn't go beyond the RV110W VPN server IP). For this, i tried to turnoff the firewall on the RV110W, and also tried to create and Access Rule to allow all outboud and inbound traffic between LAN and WAN, but no success.
I have a RV082 and several of my remote laptops cannot access my server using its domain name. It can be accessed using its internal ip address. The issue is that you can log onto the server using remote access and the ip however you cannot use any shortcuts using the domain name. You can see the server with the domin name however no access path is available. This is only on a few remote user laptops. Others work perfectly.
View 1 Replies View RelatedWe have successfully establish a site-to-site vpn, but we have some difficulties when PPTP users try to access the remote network linked by this tunnel. LAN users can access the remote network without problem, but users who are connected remotly to the lan (PPTP) can't access computer on the remote network. Is there a way to allow PPTP user to access the remote network ? Adding a route ?
View 1 Replies View RelatedI recently purchased a RV110W wireless router for a client. I am having issues with the VPN access. Here is the client's access log:
2012/04/17 10:59:41 [STATUS]Disconnecting...2012/04/17 10:59:47 [STATUS]Success to disconnect.2012/04/17 11:00:03 [STATUS]OS Version: Windows XP2012/04/17 11:00:03 [STATUS]Windows Firewall is OFF2012/04/17 11:00:04 [STATUS]One network interface
[Code].....
I've called Cisco tech support but the answer is disregard the log message and everything is working, and that I have a configuration issue on my end.
We have a Cisco 891 with this configuration belowI got several computer on my lan that needs to connect to an external Windows server with pptp. The windows server is not mine but it works. The clients are using the windows connection manager. We can connect to the windows pptp server for hours sometimes.But, sometimes we can just connect about 3-4-5 minutes, and it auto-disconnects. Is there something wrong in my configuration ? I heard the cisco router is messing with the keepalive or the connection state.It seems to happens when i have more than 5-6 clients connected at the same time on the same server. I got theses mesages : Link to VPN failed. OR ERROR 619 OR ERROR 651Before, I had a RV042 and it worked like a charm. We were 10 on the vpn server and it was working. I dont see why Its not working now.
version 15.0no service padservice tcp-keepalives-inservice tcp-keepalives-outservice timestamps debug datetime msec localtime show-timezoneservice timestamps log datetime msec localtime show-timezoneservice password-encryptionservice sequence-numbers!hostname Quantis891!boot-start-markerboot-end-marker!!aaa new-model!!aaa authentication login local_authen localaaa authorization exec local_author local !!!!!aaa session-id common!!!clock timezone PCTime -5clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00!!!no ip source-route!!ip dhcp excluded-address 10.10.10.1ip dhcp excluded-address 10.1.1.201 10.1.1.254!
[Code] .....
I'm trying to setup an rv180w to connect as a client to an remote vpn gateway and route all the lan traffic behind it direct to the remote vpn gateway. [code]
View 3 Replies View RelatedI am trying to connect with QuickVPN to my RVS4000 in another location. I get this message: "The remote gateway is not responding. Do you want to wait?'
View 15 Replies View RelatedRouter is a version 1.1 running with sw version V1.1.13-ETSI
Quick VPN is sw version Ver 1.4.1.2
The issue is that I can't connect due to that i cant ping the internal IP, get this error message in the QVPN log [WARNING]Failed to ping remote VPN Router![URL]I have disable the "Block WAN Request" and it is possible to ping the router on the external site.So as I see it, the router blocks for ping on the internal IP via QVPN, what have I done wrong?
I've just set-up one of the RV220W VPN solutions. This worked fine for a while, but now it reports the remote gateway is not responding. Other clients can connect, but not the computer I'm using at home.
Log file reports:
2011/08/31 21:10:31 [STATUS]Success to connect.
2011/08/31 21:10:31 [STATUS]Tunnel is configured. Ping test is about to start.
2011/08/31 21:10:31 [STATUS]Verifying Network...
[code]...
I've tried the most common stuff. Enabling ICMP, checked that remote administration runs on port 443, changed MTU to 1400 manually, It allows fragmented packages too. Checked that IKE and IP Sec services are running. I've also tried both with windows firewall ON and OFF. A colleague of mine had the same problem in the same time frame as me, but after a while - he suddenly was able to connect. I still can't!!
Firmware Version: 1.0.2.4
Edit: IP is not real.
We have 2 remote locations that are connecting to a server at our home location. Each remote computer uses quickvpn utility to establish a vpn with the home location. Our problem is that sometimes the vpn disconnects while we are working in remote desktop on server 2008. Luckily our sessions in remote desktop stay put but we lose the vpn connection. Most of the time we get a message that the remote gateway is not responding. Our dsl internet connection seems to work and we have previously had no trouble with connecting to the home location. We have 3 computers that connect simultaneously to the server at each remote location and sometimes one computer will stay connected while others disconnect.
View 3 Replies View RelatedI have a trouble with PPTP VPN between Windows clients and Cisco 2921 router with RADIUS (IAS) authorization. When I try to connect to Cisco 2921 from Windows 7 using MS-CHAP v2 I receive error 778: it was not possible to verify the identity of server . Then I use PAP - everythig is OK. On Windows XP the same situation.
Cisco config:
version 15.0
service timestamps debug datetime msec
[Code].....
RV082 Firmware Version 2.0.2.01-tmRV082 Firmware Version 2.0.2.01-tm
View 1 Replies View RelatedI need to establish PPTP VPN to 877 modem/router from Internet.The VPN client is a Windows XP standard VPN client.I configured the router basing on the document: "Configuring the Cisco Router and VPN Clients Using PPTP and MPPE". url...And... It works quite nice BUT only when I use PAP protocol to authenticate the user.When I try to use 'MS-CHAP' or 'MS-CHAP v2' I get error 691 on the client side("Access was denied because the username an/or password was invalid on the doman.") [code]
View 5 Replies View RelatedI am trying to set up a PPTP VPN connection which also provides internet access. I have the following configuration. The router named "Router1" connects 2 computers PC1 and PC2 on the LAN side with a network address of 192.168.1.0/24. It is a PPTP server and a DHCP server. It gives IP addresses to PC1 and PC2. It has a static address of 192.169.1.2 on the LAN side and a static address of 10.2.9.1 on the WAN Side. PC3 has a static address of 10.2.9.2 and is connected to the WAN port of Router1. "Router2" is connected to the LAN side of Router1 and it has a static IP of 192.168.1.1. Router2 is connected to the internet and provides internet connection to PC1 and PC2. PC1 and PC2 connects fine to the internet and can see each other. However, PC3 cannot connect to the internet even though it is connected to Router1 by PPTP VPN connection. PC3 can see PC1, PC2, Router1 and Router2 but it cannot connect to the internet because Router1 does not give it the default gateway(192.168.1.1) to connect it. When PC3 connects via PPTP, It receives a correct IP address(10.2.9.3), correct DNS addresses but the ip4 default gateway field is left blank, and the DHCP option is not enabled on connection properties of PC3. Router1 is a DD-WRT firmware router (DLink Dir 400) and has PPTP server enabled as a service. How do I get Router 1 to give PC3 a default gateway IP? And how do I forward all outgoing packets from Router 1 to Router 2? I do not need port forwarding for some ports, I need full access to the internet from PC3 though the PPTP connection via Router2.
View 3 Replies View RelatedI am trying to set up a PPTP VPN connection which also provides internet access. I have the following configuration. The router named "Router1" connects 2 computers PC1 and PC2 on the LAN side with a network address of 192.168.1.0/24. It is a PPTP server and a DHCP server. It gives IP addresses to PC1 and PC2. It has a static address of 192.169.1.2 on the LAN side and a static address of 10.2.9.1 on the WAN Side. PC3 has a static address of 10.2.9.2 and is connected to the WAN port of Router1. "Router2" is connected to the LAN side of Router1 and it has a static IP of 192.168.1.1. Router2 is connected to the internet and provides internet connection to PC1 and PC2. PC1 and PC2 connects fine to the internet and can see each other. However, PC3 cannot connect to the internet even though it is connected to Router1 by PPTP VPN connection. PC3 can see PC1, PC2, Router1 and Router2 but it cannot connect to the internet because Router1 does not give it the default gateway(192.168.1.1) to connect it.
When PC3 connects via PPTP, It receives a correct IP address(10.2.9.3), correct DNS addresses but the ip4 default gateway field is left blank, and the DHCP option is not enabled on connection properties of PC3. Router1 is a DD-WRT firmware router (DLink Dir 400) and has PPTP server enabled as a service. How do I get Router 1 to give PC3 a default gateway IP? And how do I forward all outgoing packets from Router 1 to Router 2? I do not need portforwarding for some ports, I need full access to the internet from PC3 though the PPTP connection via Router2
We have two ASA 5500 series Firewalls running 8.4(1). One in New York, another in Atlanta.They are configured identically for simple IPSecV1 remote access for clients. Authentication is performed by an Radius server local to each site.
There are multiple IPSec Site-to-Site tunnels on these ASA's as well but those are not affected by the issues we're having.First, let me start with the famous last words, NOTHING WAS CHANGED.
All of a sudden, we were getting reports of remote users to the Atlanta ASA timing out when trying to bring up the tunnel. They would get prompted for their ID/Password, then nothing until it times out.Sames users going to the NY ASA are fine.After extensive troubleshooting, here is what I've discovered. Remote clients will authenticate fine to the Atlanta Firewall ONLY IF THEY ARE USING A WIRED CONNECTION.
If they are using the wireless adapter for their client machine, they will get stuck trying to login to Atlanta.These same clients will get into the New York ASA with no problems using wired or wireless connections.Windows 7 clients use the Shrewsoft VPN client and Mac clients use the Cisco VPN client. They BOTH BEHAVE the same way and fail to connect to the Atlanta ASA if they use their wireless adapter to initiate the connection.
Using myself as an example.
1. On my home Win 7 laptop using wireless, I can connect to the NY ASA with no issues.
2. The same creditials USED to work for Atlanta as well but have now stopped working. I get stuck until it times out.
3. I run a wire from my laptop to the FiOS router, then try again using the same credentials to Atlanta and I get RIGHT IN.
This makes absolutely no sense to me. Why would the far end of the cloud care if I have a wired or wireless network adapter? I should just be an IP address right? Again, this is beyond my scope of knowledge.We've rebuilt and moved the Radius server to another host in Atlanta in our attempts to troubleshoot to no avail. We've also rebooted the Atlanta Firewall and nothing changed.
We've tried all sorts of remote client combinations. Wireless Internet access points from different carriers (Clear, Verizon, Sprint) all exhibit the same behavior. Once I plug the laptops into a wired connection, BAM, they work connecting to Atlanta. The New York ASA is fine for wired and wireless connections. Same with some other remote office locations that we have.
Below I've detailed the syslog sequence on the Atlanta ASA for both a working wired remote connection and a failed wireless connection. At first we thought the AAA/Radius server was rejecting us but is shows the same reject message for the working connection. Again, both MAC and Windows clients show the same sequence.Where the connection fails is the "IKE Phase 1" process.
-------------------------------------------------------------------------------------------------------------------------
WORKING CONNECTION
-------------------------------------------------------------------------------------------------------------------------
%ASA-6-713172: Automatic NAT Detection Status: Remote end is|is not behind a NAT device This end is|is not behind a NAT device
NAT-Traversal auto-detected NAT.
%ASA-6-113004: AAA user aaa_type Successful: server = server_IP_address, User = user
%ASA-6-113005: AAA user authentication Rejected: reason = string: server = server_IP_address, User = user
[code]...
A user in our office needs to connect to a client's remote PPTP VPN but can't connect. The user is running Windows 7. We have a Cisco PIX 515e firewall that is running PIX Version 6.3(3) - this is what our user is having to go through to try and make the connection to the client's remote VPN.
The client's network guys have come back and said the issue is at our side. They say that they can see some of our traffic but not all of it. The standard error is shown below, and they say it's symptomatic of the client-side firewall not allowing PPTP traffic:
"A connection between the VPN server and the VPN client XXX.XXX.XXX.XXX has been established, but the VPN connection cannot be completed. The most common cause for this is that a firewall or router between the VPN server and the VPN client is not configured to allow Generic Routing Encapsulation (GRE) packets (protocol 47). Verify that the firewalls and routers between your VPN server and the Internet allow GRE packets. Make sure the firewalls and routers on the user's network are also configured to allow GRE packets. If the problem persists, have the user contact the Internet service provider (ISP) to determine whether the ISP might be blocking GRE packets."
I have very little firewall experience and absolutely no Cisco experience I'm afraid. From looking at the PIX config I can see the following line:fixup protocol pptp 1723.Does this mean that the PPTP protcol is enabled on our firewall? Is this for both incoming and outgoing traffic?
I can see no reference to GRE 47 in the PIX config. What I should look for to see if this has been enabled or not?
My University has free Internet at student homes, but we need to login by PPTP to get an official, public IPv4 and be able to reach the outside world. The network people at the University says that when the PPTP is up, everything should be open (no firewall of any kind).
have my WRT160NL that gets a 10.10.73.0/23 address from DHCP on WAN port. Currently I have 10.10.74.21. My internal network uses 172.17.17.0/24.My PPTP-server is located at 10.192.1.1 and when I connect, I usually get an IP in the 158.37.73.0/24-range. Currently I have 158.37.73.28. I use DynDNS to make sure I always know the public IP by the host binders.dyndns.info ...
So, I have Remote management enabled with HTTP and HTTPS, any IP and default port 8080. But no response from the outside world seems to go through.If I turn of the "filter ICMP" but keep the SPI Firewall on, I get ping reply from external sources towards my router, but still no HTTP or HTTPS response.I also have a Torrent I try to port forward to to be active, this is 23277, and this is the only thing that keeps coming up in the incoming log on my router.
It's not possible to connect to the routers management over the PPTP-tunnel?And why can't I get the port forward to work .. Same reason? PPTP 158.37.73.28 -> 172.17.17.100 (LAN) won't work?
I have 4 desktops cat5 to Dlink DIR 615 router. All work fine. Any wireless clients, laptop or netbooks, see the desktop computers for a while then disconnect somehow. All machines can see the Internet through the router at all times. The desktops disappear from the laptop/netbooks but the wireless machines can be seen from the desktop computers but clicking on them gets 'Access Denied' message after a wait.3 desktops = XP, 1 98SE. All laptop/netbooks = XP
View 2 Replies View RelatedCan I configure a PIX (515), as PPTP client to establish a tunnel with non-Cisco PPTP server ? Can my PIX initiate this type of connection ?Today, I use a PC with PPTP client to establish this and I want replace this with a PIX and I don´t want depends of a PC.
View 5 Replies View RelatedI replace our aging rv082 routers with wireless rv220w routers. The gateway to gateway vpn works great, however I am no longer able to manage our print servers port 80 management page. I can ping any host with success, and I can manage hosts that have a port 10000 or 8000 web interface - but no port 80 ones... I had no issues when using the old rv082 routers...
View 0 Replies View RelatedI picked up a pair of RV220W's and before I spent loads of time at a remote site, I figured I'd go through some VPN testing at home to make sure I could get it setup properly. What this means is I've plugged the Internet uplink into a switch, then from the switch into both routers & configured them (using unique static IP's for each) from there. For what its worth: While I have some IT experience, I don't have strong networking experience.
I setup several VLAN's on the local RV220W, and the end result is to make it so that an asset at the remote site with an IP in any of the ranges (192.168.121.0/24, 192.168.131.0/24, 192.168.141.0/24 and any future VLANs) can communicate with/access resouces at the local site. Likewise, an asset at the local site with an IP in any of the ranges (.121, .131, .141 + any future VLANs) should be able to reach the remote resources (currently just 192.168.181.0/24, but future VLANs as well).
This evening I tried to focus on the relevant VPN pages of the Administration Guide to get the VPN up. Leaving the defaults I got as far as establishing a link between both sites and it seems that things are working right: From the remote site (.181) I can access the local site (.121, .131, .141); and from the local site I can at least ping resources (a laptop) on the remote site. (Yay!)
However, when I physically connected an asset that had a 192.168.121.X, 192.168.131.X and 192.168.141.X IP addresses to the remote RV220W (which is 192.168.181.0/24), I couldn't see it from the remote or local sites.I assume this is expected. But I'm reaching out to the community to see what other possibilities might be available becuase networking is a weak area for me. I figured it might be something like a Static [or Dynamic] Route but I really am not 100% sure.
'TECHNICAL' SPECS
Local Router LAN/WAN Settings:
LAN IP: 192.168.121.1 on default VLAN (1)
VLAN 13 defined 192.168.131.1 with DHCP enabled; Reservations created outside of DHCP scope
VLAN 14 defined 192.168.141.1 with DHCP enabled, Reservations created outside of DHCP scope
Inter VLAN Routing enabled for all VLANs
[URL]