Cisco Routers :: RV180 - Setting Up VLANs For Wireless APs With Two SSIDs
Mar 19, 2013
I am trying to setup a RV180 and 3 wireless access points. I want the AP's to have 2 ssids that are isolated from each other. IE guest network and main network. I have setup VLAN's and my AP's support 802.1q and have ssid's with matching VID's. I was able to get this to work basically, but things seem to have gotten confusing when I plug the AP's into a POE switch instead of directly into the rv180. At this point I'm not sure exactly waht to ask. Maybe start by providing basic info on how I'm supposed to do this. I was under the impression that since both devices support 802.1q I could configure the VLANs on the router, and tell the AP's to apply a VID to the SSID and thing would work. This isn't the case unfortunately.
View 5 Replies
ADVERTISEMENT
Aug 6, 2012
Our firewall just died - it was a windows server 2003 rackmount running Microsoft ISA server. I'm shopping for a replacement, but would like to get an appliance rather than have to purchase a whole server, which just seems like overkill.
We had four network ports on the old box - one for internal, one for the cable modem, one for guest wifi, and one for the VPN (We have a dedicated Barracuda VPN appliance, so we won't be using the VPN functionality on whatever new router we purchase)
What we'd like to do is have a set of rules similar to what we had on the ISA server. We denied everything by default, and then for example: Allow outgoing HTTP, HTTPS, FTP access from guest wifi and internal network to the internetAllow access from the VPN subnet to certain ports on certain machines on the internal networkForward incoming access from the internet on port 443 to the VPN boxetc.
From reading the manual for the RV180, i could get a rough configuration going by putting internal, guest wifi and VPN on different VLANs, and disabling inter-VLAN routing for the guest wifi. However this doesn't get me the detailed control that I am used to - guest wifi and internal would be able to see the whole internet, and the vpn would be able to see anything on the internal network.
Does the RV180 can actually give you this level of control? What would be the most cost effective router from Cisco that could do this for me?
View 1 Replies
View Related
Jun 7, 2012
Looking for setting up the RV180 behind the ActionTec MI424WR-GEN2. At the same time I want to be able to VPN into the network and be able to access objects.
Ideal setup:
Verizon ActionTec modem is primary network (192.168.1.x)
RV180 is secondary network (192.168.2.x)
VPN to 192.168.2.x network from remote locations (client-to-gateway)
I've tried asking from Cisco Support and was given the "we don't suppor that configuration" line. They want me to put it in front of the ActionTec FiOS modem/router in which case then Verizon will provide zero support for anything.Now, to add an extra twist, I do have STBs (Set-Top Boxes) connected to the Verizon FiOS modem/router but nothing special (i.e. no DVR or any stuff like that). How to get this thing up and running so that I can have remote folks VPN into the network? We work with data that needs to remain encrypted during transmission, hence the VPN.I have forwarded ports 443 (TCP), 60443 (TCP), 500 (UDP) and 4500 (UDP) to the WAN IP of the RV180. Network objects behind the RV180 cannot get past the router (it's in router, not gateway mode). The RV180 can ping objects both on the WAN and LAN side, so it seems that the RV180 is the problem child.
View 2 Replies
View Related
Jan 23, 2013
I live in a two family residential house and we share a common fibre connection to the internet. In the basement we have a modem/router(zyxel) which is in "bridge mode". Therefore not acting as DHCP. Behind this zyxel we have a Cisco RVS4000 router. Ports 1 and 2 go to family A, and Ports 3 and 4 go to family B. Family A and B have separate routers which are both set to "access point mode". Family A has an ASUS RT-N66U router while family B has a dlink DIR-615. The asus has an "access point mode" while the dlink needs to be set up manually to achieve this. The dlink must also have a static IP adress. The asus can receive ip adress.
What I have unsuccessfully tried to achieve and am currently trying to separate the networks so that both families can access internett, but at the same time it must be impossible to access VLAN1(Family A) from VLAN2(Family B) vice versa. Meaning no communication between the two families through the local network.
I have tried different options but I am not sure how to deal with trunk, tagged, untagged etc. etc. etc. It seems every time I manage to create two different networks there is still accessability/communication between the two VLANs and everytime I manage to give out different IP adresses to different ports i.e. 192.168.10.xx and 192.168.2.xx it is still possible to communicate. What also usually happens is that the internetconnection is severed at the same time.
View 15 Replies
View Related
Jan 17, 2013
I have recently purchase Aironet Access Point. I'm pretty new to Cisco systems and what i'm try to do is have the access point broadcast multiple SSIDs lets call them Guest and Admin. My problems is when i config router to have a DHCP address it works perfectly fine but when i assign a static IP it shows all the any connected device as unkown with IP 0.0.0.0. So i'm guessing i will need to setup a dhcp server. Is there a way access point can have its own DHCP server and IP address ( i don't want to use any from my STATIC ip subnet as i dont know alot of empty ones left) like home wifi router where they assign each device an IP like 192.168.0.1. Is this possible?
View 1 Replies
View Related
Aug 17, 2011
I have a Aironet 1240AG and have our main SSID set up on Radio0-802.11G. It uses WPA TKIP. Everything works fine on it. Recently we have been getting a lot of visitors who need wireless access, so reather than hand out our main key to visitors, I decided to create another SSID on Radio1-802.11A for guests. For some reason the new SSID does not show up on the available networks on client devices. You can connect to it manually by entering the name and key. But how do I get the SSID to broadcast on the 2nd SSID. A lot of these guests are not very computer smart, so it becomes a real pain to have to walk them through connecting to the guest network.
View 3 Replies
View Related
Feb 17, 2013
Getting a AIR-AP1141N to work with an existing SRP526.
The SRP has two VLANs and two SSIDS
- VLAN1 - Corporate Wireless
- VLAN100 - Guest Wireless
So far so good. Now we need to extend the Range of the Wireless and bought an AIR-AP1141N. And this AccessPoint works like a charm, BUT only with one SSID,
I configured in the Port Management Area of the SRP526 both VLANs on one Port and configured the Access Point for multiple SSID use, but i don't get an IP from the DHCP Server Range of the VLAN100.
Could it be possible, that die Access Point can not get the tag Information?
View 1 Replies
View Related
Oct 31, 2011
I have:
-Procurve 1810-24G
-Procurve 2520-8-PoE
Router (with Internet Connection) is plugged into port 24 of the 1810.My asterisk server is plugged into Port 1 of the 1810.The 2520 is plugged into Port 2 of the 1810, and all of the VoIP phones are plugged into the 2520.Rest of the office computers are plugged into the remaining ports on the 1810.
After setting up the subnet and assigning an ip to the 1810, everything else just worked out of the box. I would imagine that I should segment and prioritize the network so that the VOIP traffic is isolated and is higher priority from everything else.
I tried playing around a bit, but the phones lost connectivity, so I just defaulted everything back for now.
What would the suggestions be for setting up the VLANS properly to do this?I would also need one of the office PC's (say the one plugged into port 13 of the 1810) to be able to access the asterisk server.Also, would it be more optimal to have the asterisk server on the PoE switch or the main switch?
View 9 Replies
View Related
Mar 25, 2013
How to setup 3 SG300-52 (in L2 mode) as per this diagram:Port 1 on all switches should be able to talk to each other and access the blob at the right.The ports 25 on the other hand should only be able to talk among themselves in their own private vlan. They are to carry sensitive traffic. So I created 3 vlans, vlan 78 for ports gi1, gi51 and vlan 10 for port25,49,50 and a dummy vlan: 666 with the intent of segratating vlan 10 from vlan 78. My attempts so far have failed. ports gi49-50 are configured as trunk ports and gi1,gi51 as access ports as the following cli output (excerpts of the startup config):
vlan database
vlan 10,78,666
exit
interface vlan 1
ip address 172.16.10.11 255.255.255.0
[code]....
Ports gi1 can talk to each other and access the blob but ports 25 refuse to talk to each other. But as soon as I remove the access links to the blob they can! Obviously, at that point port gi1 lose access.Is such a topology feasable or even advisable?
View 7 Replies
View Related
Oct 2, 2011
I have recently purchased 2 SG 300 switches, 1 x SG 300 52 & 1 x SG 300 10, and I am hoping getting the following set-up working.To assist I have drawn the following simple network diagram (below) which hopefully makes it a little clearer what I am trying to do:I have 2 companies occupying a single office with the requirement to share printers/devices etc... so basically I am looking to set-up 2 VLANS (say VLAN 10 & VLAN 20) with inter-vlan routing. To add a little complexity the main comms area is located in the basement of the building, this houses the 2 DSL routers and 2 Servers, one for each company. I am proposing putting the SG 300 10 port switch in here and then use the 3 uplinks I have been given to connect back to the SG 300 52 which is in a patch cabinent 2 floors up. I want to use 2 uplinks (in a LAG) for Company A and 1 uplink for Company B. FYI. DHCP is being served out by each respective router.
View 6 Replies
View Related
Feb 4, 2011
I'm setting up a Cisco 3750 layer 3 switch with several vlans. I thought enabling routing would route between the vlans, but no such luck.What I want is to share the internet access of vlan 100 with the other vlans/ip-nets.How can I do that?
View 2 Replies
View Related
Jun 12, 2013
I have 2 sub nets within my office: 172.16.1.0/24 and 172.16.2.0/24. All devices on each subnet are wired independently from each other into the server closet. Previously each sub net had it's own switch in the closet to connect to that sub nets servers. We are replacing the 2 switches with a single Dell 2816 managed switch.
Is there a benefit to setting up the switch with 2 VLANs over just letting everything pass through the switch in un managed mode?
My only security concern is this: 1 sub net has access to the internet while the other does not. Does setting up 2 VLANs provide additional security by preventing 1 subnet from accessing the other? In other words, if a computer with internet access gets hacked will it being on one side of a VLAN prevent the hacker from accessing the other subnet?
View 1 Replies
View Related
Dec 23, 2012
Is there any way to manage the RV180 from the WAN side via https and/or ssh?Also, is ssh from LAN even available?
View 3 Replies
View Related
Oct 18, 2012
I have an RV180 VPN router.I try to enable the VPN users with PPTP or QuickVPN but is not working.For PPTP sometimes my windows 7 connects to the router, sometimes doesn't connect with a random error message.When it connects, the windows 7 from outside the lan can see the computers from inside the lan but the computers from inside the lan cannot see the windows7 one. This is random also. When i succed to connect, from that computer, the internet is not working anymore.I tried to set the VPN in the same subnet as lan, i tried with different subnet. Is not working.I updated the last firmware. The same.Restore factory settings couple of times, the same.
View 6 Replies
View Related
Jun 17, 2012
I noticed if you add more than 10 access rules to the Access Rule table, you are unable to reorder past the first 10.Steps to reproduce:Create 11 rules of the same stream direction, outbound or inbound (...I found the bug with outbound, did not test inbound).try to reorder one of the first 10 rules to the end of the list, either by entering "11" manually, or by pressing the down arrow.System responds that "11" is an invalid number, or that the rule cannot be moved.This issue is not reported in the "Known Issues" section of the release notes for 1.0.1.9.
View 2 Replies
View Related
Mar 2, 2013
Which vpn client to use on os x ? (the one included in os x or another?) Which VPN configuration to use on RV180 ? and Which ports to open on RV180 Firewall ? (or any other parameters)
View 1 Replies
View Related
May 20, 2013
I had set up QOS for an IP Range and noticed the logs filling up with Warnings - hundreds within less than an hour.
I finally reset the router to factory and then step by step re-built my configuration - it was the QOS that started generating these warnings like:
Tue May 21 13:18:39 2013(GMT-0500) [rv180][Kernel][KERNEL] [87073.550000] IN=bdg1 OUT= DST MAC=d8:67:d9:c3:a0:2e SRC MAC=00:0e:58:58:57:7a PAYLOAD TYPE=08:00 SRC=192.168.1.193 DST=208.85.44.22 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=19313 DF PROTO=TCP SPT=1768 DPT=80 WINDOW=2534 RES=0x00 ACK URGP=0 MAR
[Code].....
In both cases above, after I started to suspect QOS, I entered a narrow IP range to test and then a MAC to test. Using a VLAN seems to work fine and generate no errors - even a VLAN for the same associated host(s).
I have a support case open about this - didn't get too far yet, but now with a better repro, maybe they will.
View 1 Replies
View Related
Oct 30, 2012
I currently have an RV180 in a small business set-up and curently being accessed remotely by laptops (Quick VPN) and Ipads/Android ICS tablets (PPTP). All is working well but I've become concerned about the security risks of PPTP and would like to shift the tablets to IPSec.
1) For a small business are the PPTP risks real?
2) What are the alternatives for Android ICS? I can't find a Quick VPN client for Android.
3) I can't get the core IPSec VPN in Android to connect to the RV180? Is this possible?
View 1 Replies
View Related
May 7, 2013
I have RV180 configured with two VLANs. First VLAN is untagged and second VLAN is tagged. The purpose is two have two subnets, with the second subnet used for guest access. Both VLANs have DHCP server enabled. First VLAN is 192.168.1.0/24 and the second VLAN is 192.168.2.0/24, When I connect a computer with untagged Ethernet interface, it gets an IP address from DHCP server on the first subnet i.e. 192.168.1.100 and it can successfully access Internet. When I connect a computer with tagged Ethernet interface (I am using VLAN ID 10), it gets an IP address from DHCP server on the second VLAN i.e. 192.168.2.100. So far so good. I can successfully ping hosts on the Internet i.e. ping www.google.com. But I cannot access Internet from the web browser. I captured Wireshark trace and here is what I see...
1. TCP SYN. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10)
2. TCP SYN ACK. Source IP A.B.C.D, destination IP 192.168.2.100. Ethernet frame has VLAN tag (VLAN ID 10)
3. TCP ACK. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10)
4. TCP Data. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10)
5. TCP Data. Source IP A.B.C.D, destination IP 192.168.2.100. Frame is untagged
The problem is at #5. Packet came back from the Web Server. RV180 properly NATed it to the local IP address. But it did not add VLAN tag.
View 8 Replies
View Related
Mar 13, 2013
I just recieved a new RV180 yesterday and it will not connect to my switch. Router was updated to the newest firmware, reset to factory settings. I did change the ip and ip range. Router works fine with one computer attached direct. As soon as I connect my sf300-24P to it, the WAN and LAN lights all light up and then go out. Only the WAN will light back up. I have no connectivity to the router. I plug the laptop to the router directly and no LAN lights come on and can not see the router with arp -a.
View 6 Replies
View Related
Mar 9, 2013
I'm trying to telnet into the my RV180 router. How do I go about it.
I created 3 VLANS
1 at 192.168.1.1
20 at 192.168.20.1
30 at 192.168.30.1
Here is the Multiple VLAN Subnet Table:
1 192.168.1.1 255.255.255.0DHCP ServerEnabled 10192.168.10.1255.255.255.0DHCP Server Enabled 20 192.168.20.1 255.255.255.0 DHCP ServerEnabled
I can ping the router at all 3 IP addresses.How do I enable the telnet service on the router?
View 1 Replies
View Related
May 22, 2012
Does RV180 router support client VPN connections using regular Cisco VPN client? Datasheet says it works with Quick VPN client.
If regular non-Quick client is not supported, can both clients coexist (= be installed simultaneously) on the same PC?
Does Quick VPN client support split tunneling?
View 2 Replies
View Related
May 10, 2012
I'm considering upgrading a small business to the newly released RV180 or RV180W.Does the RV180 series support 6rd (IPv6 rapid deployment?).I see 6rd documented in the other small business routers (e.g. RV110), but I can't find it in the RV180 documentation.
View 1 Replies
View Related
Aug 6, 2012
I'm having issues getting QuickVPN to connect. I think it's an issue pinging the gateway but I'm not 100% sure. We are using Comcast Business, I have placed the RV180 in the DMZ. The setup looks like this: Internet -> Comcast router -> RV180 (DHCP) -> rest of network.
View 5 Replies
View Related
Apr 3, 2013
Is there a guide to setup a VPN connection using this router? I've follow the setup guide provided by cisco but I'm having issues. When attempting to connect using the quick vpn client, I get error messages.
View 1 Replies
View Related
Apr 26, 2013
Any news on a new firmware for the RV180? I have the most recent version but it still has lots of bugs. IPSec needs polishing. In addition the Logging functions don't work well. I can't send to a syslog and when I try to email the logs I get a email saying there is no data even though several pages of enteries are visible in the web GUI. I've checked the profiles and they are correct. I even tried using just the 'default' profile but no luck.
View 2 Replies
View Related
May 15, 2013
I have a Cisco Small Business RV180 and I have several VPN users configured. IPsec between my home router (also an RV180) and work router (router in question) is working fine, several PPTP users working fine and 1 QVPN user that works as well. I set up another qvpn user and it didn't work. I went back into the router to check and make sure I hadn't goofed something up and saw that I had 8 lines, 1 and 2 were the QVPN users and 6 other PPTP users, however, the "pages" footer (for lack of a better word) only displays 1 -5 of 5 instead of the 1-8 of 8 I would expect it to show.I dumped the cfg file and opened it up, all 8 user configurations show up. One was my user account which showed negative numbers for the logon time, something like -1day -hours -minutes -sec, so I thought that that might be locking up the router or something so I deleted my PPTP account but it didn't allow the new user access. I deleted all PPTP accounts and no luck there either.I'm running firmware 1.0.2.6.
View 4 Replies
View Related
May 16, 2012
I am contemplating replacing my Juniper Netscreen 5GT with this new RV180.
serial number 161303LB
RVC180 V01
However, it will not connect to my ISP (DSLExtreme) using the same settings I have been using for multiple years. DSLExtreme is using AT&T DSLAMS, as you likely know, and I am unaware of anything unique about how they serve DHCP?
The Cisco wizard sits on the WAN configuration check forever, and never connects. I have rebooted it and allowed it to sit for fifteen minutes trying. I think that is enough.
The 5GT WAN interface is configured for "DCHP Client" and that is how the RV180 is configured.
It is a standard 6MB DSL line, I have tried both the existing cable, as well as the provided one to connect to the D-Link 2320B modem/bridge, which, as I indicated, syncs almost instantly with the Netscreen. No difference when the cables are swapped.
View 3 Replies
View Related
Jan 30, 2013
My brand new RV180 seems not to be able to exceed 1.1 MB/s WAN download speed. Using a simple Linksys WRT-320N I used to have 5-6 times this speed. Value is with default settings, various sources (HTTP/NEWS downloads). Trying to improve this wit QoS-settings dows not improve this in any way.
View 2 Replies
View Related
Mar 17, 2013
The RV180W would not connect to an AT&T DSL connection using PPPoE (modem in bridge mode), or behind the DSL Modem/router with the DSL modem/router providing a dynamic IP to the RV180W or a cable modem (TimeWarner Roadrunner dynamic IP). I upgraded the firmware yesterday and now the RV180W will connect to a dynamic WAN IP, but it still will not connect using PPPoE.
I have also noticed the admin interface is only accessible about 75% of the time. When going to 192.168.1.1 the login prompts either don't come up or if they do, after logging in, the screen never fully loads after that. I have to reboot the router to get it to work.
Also, the router has not yet pulled DNS from either the DSL or the cable modem. I had to manually enter those addresses.
View 1 Replies
View Related
Feb 27, 2013
I've been trying to connect L2L between RV180 and ASA5505 but no succeed.I can do RV180 to RV180 l2l with one of it on Aggresive mode. working configuration sample of RV180 L2L ASA5505?
View 1 Replies
View Related
Oct 15, 2012
My RV180 does not route properly between LAN and WAN through my PPPoE account. I am able to ping public IPs directly from the RV180 (through the diagnose section) but can not do it from any PC on LAN. The exact same configuration works perfectly well with a Linksys WTR610N. I upgraded formware from 1.0.0.30 to 1.0.1.9 but that did not make any difference.
The only time the RV180 will route is right after I reset to factory defaults and re-enter PPPoE account name and password. If I then reset my modem or the RV180, the RV180 does not route anymore between WAN and LAN even after several minutes and even though I can ping public IPs from the RV180.
View 18 Replies
View Related
Sep 17, 2012
My work laptop uses a Cisco AnyConnect VPN Client (Software Version 2.5.2006). The connection protocol is DTLS.I recently upgraded to a Cisco RV180 at home at it is running the latest software version (1.0.1.9).
Since the RV180 went into service the work laptop will connect intermittantly. Usually email works but web browsing and and other services do not. It is slight strange behaviour- and seems to defy what a VPN should do......
The behaviour is very repeatable. For example from the customers office the laptop connects perfectly via VPN and if I swap back to an older inferior make of router at home VPN also works normal without changes to the laptop configuration.
I work for a large company (70,000+ employees) and we use "standard" builds so altering the laptop configuration is not really an option.
It seems to me that the RV180 doesn't support the DLTS VPN connection (indeed DLTS passthrough isn't an option in the VPN passthrough list) and is possibly blocking some incoming packets on the WAN interface.
I haven't yet tried a firewall rule to allow a DLTS (or UDP perhaps?) connection back in from the WAN side (obviously from just the IPs at my work end) but this is the only option I can think of to make this machine connect "correctly".
View 3 Replies
View Related
