Cisco Routers :: RV180 PPTP VPN Server Limitation?
Oct 29, 2012
For the past week, I have tried to setup the PPTP VPN server on the RV180. The setup was straight forward, but I could not log-on no matter what I tried. I decided to call Cisco small business support, and as I was talking to the engineer, it mysteriously started to work. I was puzzled and somewhat embarrassed because I'd hate to admit it was an id10t problem on my part. As I tried a few different configurations, I began to realize there might be a limitation in the RV180 PPTP VPN server with the current firmware (1.0.1.9).
In short, the RV180 PPTP only works with 192.168.xxx.xxx/24 subnet. My setup has 3 vlans: vlan1 in 172.xxx.xxx.xxx/24 subnet, vlan2 192.168.0.xxx/24, and vlan3 10.xxx.xxx.xxx/24. My originally plan was to keep vlan3 isolated by disabling inter-vlan routing, but I needed a way to manage a couple of devices on vlan3 remotely, thus I wanted to setup a VPN in the 10.xxx.xxx.xxx/24 subnet. This turned out to be the reason why it never worked before. Today when I called Cisco support, I assigned the PPTP VPN server a 192.168.0.xxx ip range, and it worked. Later, I tried assigning 172.xxx or 10.xxx ip addresses to the PPTP VPN server, and they both failed to work. I created another test vlan4 with 192.168.2.xxx/24 subnet, and assigned the PPTP VPN server to that vlan, and it worked again.
I'd like to mention that I already configured the 10.xxx.xxx.xxx/24 subnet with a few devices before I replaced my router with RV180, and I don't want to have to change and test the setup of all the devices. Another reason I want to have my VPN server outside the 192.168.xxx.xxx range is that it's way too commonly used by wifi hotspots that it increases the chance of wifi and vpn in the same subnet.
I can test a few more configurations, but I think the results will be the same. Perhaps Cisco should test the RV180 in the lab to confirm what I found.
Being new to the RV180 (and VPN routers for that matter) I have been struggling to get a VPN going, supporting both my Android and iPad devices. However, I understand a IPSEC connection would be a more secure sollution. Unfortunatly I cannot find a clear instruction anywhere to do this.I found the settings/descriptions in the RV180 quite different from the (few) settings in the mobile platforms. So far no success in getting it setup.
Can I configure a PIX (515), as PPTP client to establish a tunnel with non-Cisco PPTP server ? Can my PIX initiate this type of connection ?Today, I use a PC with PPTP client to establish this and I want replace this with a PIX and I don´t want depends of a PC.
So if the PPTP server is enabled, and "Block MAC address not on the list" is enabled under the DHCP settings, will the PPTP client get an IP address?Similarly, if the PPTP server is enabled and the range of IP addresses configured on the PPTP server screen is outside the IP range of the router due to a subnet mask (like 255.255.225.248 for example), will the IP still be assigned to the PPTP client? If assigned, will that IP have any connectivity to the LAN?
I possess a RV220W (firmware 1.0.3.5) but I can't seem to work with the PPTP server on one VLAN only.
My default VLAN is in 192.168.1.1/24. I created a VLAN ID 10 in 192.168.50.1/24 inter-vlan routing : disabled and Device Management : disabled. (Menu Networking > LAN > VLAN Membership and Multiple VLAN Subnets).
Then I configured a PPTP server on the IP range 192.168.50.200 to 192.168.50.210.
To finish I created my user. (Menu VPN > IPSEC > VPN Users).
The PPTP tunnel is working, but on all my local network and not only the VLAN ID 10.
Web server is behind Cisco RV180 VPN Router. Port 80 is forwarded to web server. all the rest is default. when web application requests user's host address, then it appears as coming from our router's local address (10.0.0.1). what needs to be configured so that RV180 would pass on client's original IP?
We have just acquired a Cisco RV120W Firewall Router and we are experiencing issues with this router. I've read some threads related to port forward issue with RV120W before writing this new topic.
We have 2 locations (site A and site B) connected with a Site to Site VPN (PPTP) running under Windows Server 2008 R2 with TMG 2010. This Site to Site VPN worked very well until we replaced our old router with the RV120W at site B. Since this moment, our engineers are not able to make the site to site VPN work again. The TMG box are located just behind the router.
We have followed some threads about Port Forwarding but it did not solve our issue (others port forwarding rules for RDP for example work). Our RV120W is running the last stable firmware (1.0.2.6) provided by Cisco.
I have configured PPTP Server on RV042, and created 3 accounts. I am able to connect from Windows PC without any problems.
In the router's logging utility, there doesn't appear to be any log entries indicating either successful or failed attempts to connect to PPTP server. The only access logs I see are for access to the router's configuration utility. Is there a way to view PPTP access in the router system log?
Internet <-> Residential Gateway (RG) from ISP (OEM: Pace) [192.168.1.254/255.255.255.0] <-> RV180 [192.168.1.253/255.255.255.0] <-> SG500 switch [192.168.1.250/255.255.255.0] <-> rest of network.
I know this is a cascading LAN-to-LAN arrangement. The cable from the RG to the RV180 is from a LAN port on the RG to a LAN (not WAN) port on the RV180.
I eventually want to segment my network into a few VLANs from the RV180 down. I am aware most people would recommend DHCP on the "primary" router, but the RG is non-VLAN aware, so I figure I need to handle the DHCP off the RV180. At the same time, I have also opted not to do a LAN-to-WAN cascade because I want to retain the ability to configure the RG from the rest of the network and not have to cart a computer over to the RG to do it.
On the RG, I've disabled DHCP, and placed 192.168.1.253 in the DMZ.
On the RV180, I've enabled DHCP and put it in Router mode.
The issue is that I do not have any Internet connectivity. If I allow the computers in the network to receive IP addresses over DHCP, the default gateway that is communicated is 192.168.1.253, which is the RV180. If I configure static IPv4 information on my computers to point to 192.168.1.254, I am able to connect outside, as you would expect.
How can I get the RV180 to pass out DHCP IP addresses, but point to 192.168.1.254 as the default gateway? I thought the solution might be to create a default route (or something). I went to the static routes tab but it wouldn't let me enter 0.0.0.0 as a destination IP to route through 192.168.1.254.
Further down the line, is it possible for both the RG and the RV180 to connect directly to the SG500, along with the other nodes in my network? That way the RV180 only serves to maintain the VLANs and pass out IP addresses via DHCP, instead of having it be the choke through which everything goes through on the way out?
I want to use a subnet mask of 255.255.254.0. The setup window doesn't allow me to type in that mask, rather it only allows me to choose from options on a drop down menu (which doesn't include that mask). Is there a way to do this?
I need to know it the adsl router SRP547w or SRP546 permits to set class B subnetting ( or class A) on the Lan interface. I read the model SRP527 has a limitation to set ip address on the lan interface but I did not find any information about 547 or 546.
I am trying to configure a Cisco 871 to act as a PPTP VPN server on my home network. I have referenced Cisco's documentation regarding this which I will include below as well as a copy of my current running configuration and terminal monitor information from when I attempt to establish a connection.
When I attempt to connect from a Windows machine I receive the following error: 'Error 807: The network connection between your computer and the VPN server was interrupted.' 'The remote device won't accept the connection.'When I attempt to connect VIA my mobile, I get 'The server has hung up'.The 871 does detect the incoming connection which can be seen from the terminal monitor output: url...
We have a 1941 router configured with LAN/WAN access. Additionally, we need to allow outside Microsoft RRAS connections to an inside Windows 2003 R2 Server. What commands are required to enable this?
WAN IP: 211.XXX.XXX.XXX Server IP: 10.XXX.XXX.XXX
We've configured the 1941 router to allow outside RDC/RDP to the server at 10.XXX.XXX.XXX
I'm trying to configure 1700 K9 router to act as PPTP client and connect to Microsoft VPN server (in order to enable all clients on LAN to seamlessly access host on remote location). [URL]
I'm using GMS3 to test everything in lab environment. I managed to connect to Microsoft VPN server but the connection drops immediately. Below is debug info from router R1 (router R2 just simulates host on LAN) and configurations for both routers. The only clue I got from debug is that immediately before closing connection there's a message "CCP: Failed to negotiate with peer"...
R1#sh debug PPP: PPP detailed event debugging is on MPPE Packet Details debugging is on
we are not able to connect to a outside PPTP vpn server;The scenario is this :Connections are started from inside netwok to a VPN server on the outside zone.
I have add these configs and still not working.policy-map global_policy class inspection_defaultinspect pptp ?i also have a acess-list for it.access-list inside_access_in extended permit tcp object inside-network any eq pptp access-list inside_access_in extended permit gre object inside-network any access-group inside_access_in in interface inside? I am missing something or this is all configs i have to get done ?
I setup my Windows 8 desktop for a PPTP VPN server so I can connect my iPhone 5 to it.Using the Cisco Connect Firmware, as I was having internet speed issues with the Smart Wi-Fi Firmware and I wasn't loving the interface of the Smart Wifi Firmware anyway.According to the router the firmware is up to date. All three VPN settings are enabled.PC is set to a static IP internally. 192.168.1.116 to be precise.PPTP port forwarding (1723) is set to the PC's static IP, though I have tried without port forwarding and it didn't work either.If I have my iPhone connected to the wireless network and point it to the internal IP address of the PC, I can connect to the VPN.If I bypass my router and hook my desktop directly to the modem (and point my iPhone to the IP that gets assigned to my desktop from my ISP) I can connect to the VPN.But if I have everything hooked up normally and try to connect to the VPN from my iPhone (using the IP address my ISP assigned to the router), I get a PPTP server not responding error.
I have a 2821 ciso router and i want to setup a vpn for my windows domain users , they must to reach the domain from outside. There is posibile to intregrate Active directory auth with pptp running on 2821 router? kind of dialin via radius server(IAS running on windows server 2003).
I cannot connect to a PPTP on the outside of my network.We have a RV082, port 1723.It says verifying username and password but then disconnects.The error log says Blocked IP Spoofing.
I am trying to allow PPTP traffic through my Linksys WRT320n to a PPTP VPN server on my home network.The Linksys WRT320n is running firmware 1.0.05 build 002Mar 31, 2011.I have created a Port Forwarding rule on the Linksys to allow TCP & UDP port 1723 through to my internal IP of the PPTP VPN server,but everytime I try to connect with a PPTP client from outside of my network I get a connection error on the client.Checking the PPTP VPN servers logs I see the following errors (Please note all IP's have been masked) Mar 2 11:15:07 ap-01 pptpd[5300]: CTRL: Client x.x.x.x control connection startedMar 2 11:15:07 ap-01 pptpd[5300]: CTRL: Starting call (launching pppd, opening GRE)Mar 2 11:15:07 ap-01 pppd[5301]: pppd 2.4.4 started by root, uid 0Mar 2 11:15:37 ap-01 pppd[5301]: Exit.Mar 2 11:15:37 ap-01 pptpd[5300]: GRE: read(fd=8,buffer=41fe30,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logsMar 2 11:15:37 ap-01 pptpd[5300]: CTRL: PTY read or GRE write failed (pty,gre)=(8,9)Mar 2 11:15:37 ap-01 pptpd[5300]: CTRL: Reaping child PPP[5301]Mar 2 11:15:37 ap-01 pptpd[5300]: CTRL: Client x.x.x.x control connection finished
From looking at the above errors, it seems as if the Linksys isn't forwarding GRE through to my PPTP server.I have tried various settings, including enabling and disabling the PPTP Passthrough option on the Linksysbut still can't get PPTP to work.What is the correct way to get GRE traffic forwarded through the Linksys?
I set up a PPTP VPN with an RV220W recently. It was working flawlessly until a recent power outage and now users are getting the 807 error when attempting to connect. I have PPTP passthrough enabled and TCP/UDP 1723 open. As far as I can tell GRE 47 is open as well. Why it was working and is not working after a power outage?
I recently installed a new 220W with the sole intention of setting up the PPTP server. I got the router installed and working but cannot get the PPTP server working. Also when i configure a block of IP address from my lan for the server it tells me i cannot use that subnet? i have set it up this way with other routers ( RV042 ) with no issues.
I have a pptp server on my network and am trying to configure my new RV110W so that I can tunnel through to it from outside.
I believe I must do port forwarding for TCP on port 1723 to get those packets going to my PPTP server. PPTP also uses GRE and I don't see that as an option anyware in port forwarding... Does that just work... as a matter of the VPN pass through checkbox being enabled ?
My netgear router would lock up every few days but it under the firewall configuration it had list of services that included PPTP and I just selected that, entered the IP addresses on the outside that I would accept, and the IP address on the inside that the PPTP clients would connect to, and it worked....
I'm thinking it is harder on this device because this device supports actually logging into it.. I am interested in learning more about that technique especially if it is more secure but the way I see it the firewall device can see all of my network and the pptp server I am using is on a file server and limited to those files shared on that server.
I Have RV220W Rev 1.0.3.5/I want to create 5 users adn connect remotely to the office network using a PPTP connection.
I have enabled the PPTP server and created users.From a remote location (WAN) on Windows 7, I have created a PPTP connection and I can connect however I can not ping or map to the office network.
My network to use a RV042 router. It is connected to my cable modem and working well. I may add a DSL connection later in the month as a backup. All I really want to do now is setup my PPTP VPN connection. I have not been able to find a guide so I will assume it isn't that bad. I set up 2 accounts in the VPN-PPTP Server screen. Built my connection on my android phone and voila nothing works. So I tried to disable the "Block WAN requests". I tried port forwarding the VPN to 192.168.1.1 (address of the router) and no luck. AT this point I am stuck. I know my infrastructure is right because from outside the network I can [URL] and see my router configuration. Now if I could just get a simple PPTP connection
I have an RV180 VPN router.I try to enable the VPN users with PPTP or QuickVPN but is not working.For PPTP sometimes my windows 7 connects to the router, sometimes doesn't connect with a random error message.When it connects, the windows 7 from outside the lan can see the computers from inside the lan but the computers from inside the lan cannot see the windows7 one. This is random also. When i succed to connect, from that computer, the internet is not working anymore.I tried to set the VPN in the same subnet as lan, i tried with different subnet. Is not working.I updated the last firmware. The same.Restore factory settings couple of times, the same.
I noticed if you add more than 10 access rules to the Access Rule table, you are unable to reorder past the first 10.Steps to reproduce:Create 11 rules of the same stream direction, outbound or inbound (...I found the bug with outbound, did not test inbound).try to reorder one of the first 10 rules to the end of the list, either by entering "11" manually, or by pressing the down arrow.System responds that "11" is an invalid number, or that the rule cannot be moved.This issue is not reported in the "Known Issues" section of the release notes for 1.0.1.9.
