Cisco Routers :: RV180 - Settings For Group Of Port Services
May 27, 2012
I have two servers behind the RV180 and a list of ports I would like to open to the public (80, 443, 21, 3389).In that case, I have to setup 8 Access Rules. I am OK in the first time setting up.But later on, if I would like to change the external IP <-> internal IP mapping, I have to change the Access Rules one by one for all related ports.
Does it has a setting for grouping the ports together so that I can set the Access Rules by one time only ?BTW, the summary view of the Access Rules in RV180 is not very clear, I can't differentiate the Rules for different Destination NATs ... I have to click into the details one by one ...
I have an RV180W router and I am trying to use the Windows 2011 SBS. It seems like I setup everything properly in order to use the remote access, but when I try to log on from home, I don't have any luck. According to Window's instructions, here's what I have setup on the router side:, I turned on UPnP. (they say to either do port forwarding, or UPnP, but I found on the Windows SBS that I had to do both in order for it to say it was working).
I just purchased and installed the RV180 at my office. One of my clients requires that I use Cisco VPN Client to connect to their systems. Before I installed the RV180, everything worked just fine. After I installed the RV180, the VPN client disconnects after 5 to 15 minutes, every time.
What firewall settings on the RV180 do I need to enable/disable so that the VPN Client can work w/o disconnecting?
The RV180 is the router at my office. The VPN Client is on my computer, and I'm connecting to a client's system w/the VPN Client.
I have 2 RV180's connected via Gateway to Gateway. It works fine when I have the Windows Firewall turned off on both PC's. Obviously this means that I need to have an exception rule in the Windows Firewall in order to use the Windows Firewall. What exception (inbound/outbound) rules that I need to set in order to use the Gateway to Gateway?
I picked up this RV180 router because it has one of the fastest thru speeds of all the routers tested that I viewed on smallnetbuilder. That and it has the cisco name. I grew tired of purchasing wireless home routers every year after they fail. So far the thing is nice with one exception.
I have one device that is essential on my network called an airave. It is a small device similar to a wireless access point that works on springs voice network. The thing essentially makes a small cell tower inside your house and connects to the sprint network through an Ipsec vpn. I have not ability to change ipsec settings on the device on my end. The device works fine connected to the cable modem or to the old slow dlink. When I first connect the thing it works fine for about 5-10 minutes on the cisco. Then the thing loses connection and I lose my cell phone service. Just to test any port conflicts I made this the the DMZ with no luck.
I have also tried a firmware upgrade. I have not messed with any of the firewall settings or port forwarding since DMZ should in theory fix that. I have assigned the thing a fixed IP address but that does not seem to make a difference. It did not on my old router and is mostly just for my sanity and to facilitate the DMZ.
Today i installed an RV180 VPN router as replacement for a netscreen ns-5GT.Exactly the same configuration, everything works, except port forwarding from WAN to a host inside NAT.My ports are open (online port-scanner sees the ports as open), the hosts are accepting connections, but a connection can't be made.Probably a bug in the firmware.
I just installed an RV180 at home. I can not get port forwarding to work - after reading in several forums I realize that I need a firmware 1.0.2.2 that currently is in a beta stage.
My Dell laptop on my home network was connecting fine until I tried to figure out why it was booting and running so slowly and tinkered with the settings (per a web site with recommendations). Now it says no connections are available (there are, and other devices are fine). I tried all the simple solutions and have made any programs automatic that even vaguely look internet related and I still can't connect. The wireless adapter is enabled. I need to know what settings in the administrative tools/services should be enabled. The laptop is running Win 7 pro.
if I can use the encrypted port as unencrypted ethernet ports? url.. Each individual port on the Cisco Nexus 5010 switch is numbered, and groups of ports are numbered based on their function. The ports are numbered top to bottom and left to right.There are 20 to 28 ports on the Cisco Nexus 5010 switch, depending on which GEM is installed.
The 20 fixed ports form group 1 and are named 1/port_number. Ports 1 through 16 are unencrypted Ethernet ports. Of these, ports 1 through 8 are 10-Gigabit Ethernet and 1-Gigabit Ethernet-capable ports. Ports 17 through 20 are encryption-capable Ethernet ports.
We need to change the Channel-group settings in 3750 switch from Mode ON to Mode Active. We have tried once by removing the physical interfaces from the port-channel group but we lost the connectivity to the secondary switch. Any step by step procedure without losing the connectivity between switches.
We are in a planning phase of adding another service to our DMZ. The DMZ has a singe publicly accessible IP. We are running Citrix inside our network externally accessible via w121eb https (443). Another service will be added to the DMZ (Exchange/O365) requiring ADFS & and ADFS proxy also using port 443 as well. Both services (the Citrix secure gateway & ADFS) will have separate subdomains but directed to that same IP, each with its own cert.
Now, I guess the question is: How (if possible) can we forward the public requests to the two services that hit our network on the same port (can't change the port on either), to two separate appliances with their own internal IP's internally?Our current appliance on the DMZ is an ASA 5505. Also could use a PIX
I have bought an RV180 Firewall/VPN and try to use the Backup Software Crashplan. As per the supplier it needs Port 443 and 4242 open. Port 443 is fine and allows me to use the service to backup to the Cloud. However when I want to allow other users to backup to my computer this traffic is blocked. I tried to open port 4242 on the firewall and forward the traffic to the computer that hosts the service but it does not work. I have tried to Telnet this port from the WAN but I don't get a response. When I check the Open Ports this port is not listed as a LISTEN port either.
I have an RV180 VPN router.I try to enable the VPN users with PPTP or QuickVPN but is not working.For PPTP sometimes my windows 7 connects to the router, sometimes doesn't connect with a random error message.When it connects, the windows 7 from outside the lan can see the computers from inside the lan but the computers from inside the lan cannot see the windows7 one. This is random also. When i succed to connect, from that computer, the internet is not working anymore.I tried to set the VPN in the same subnet as lan, i tried with different subnet. Is not working.I updated the last firmware. The same.Restore factory settings couple of times, the same.
I noticed if you add more than 10 access rules to the Access Rule table, you are unable to reorder past the first 10.Steps to reproduce:Create 11 rules of the same stream direction, outbound or inbound (...I found the bug with outbound, did not test inbound).try to reorder one of the first 10 rules to the end of the list, either by entering "11" manually, or by pressing the down arrow.System responds that "11" is an invalid number, or that the rule cannot be moved.This issue is not reported in the "Known Issues" section of the release notes for 1.0.1.9.
Which vpn client to use on os x ? (the one included in os x or another?) Which VPN configuration to use on RV180 ? and Which ports to open on RV180 Firewall ? (or any other parameters)
In both cases above, after I started to suspect QOS, I entered a narrow IP range to test and then a MAC to test. Using a VLAN seems to work fine and generate no errors - even a VLAN for the same associated host(s).
I have a support case open about this - didn't get too far yet, but now with a better repro, maybe they will.
I currently have an RV180 in a small business set-up and curently being accessed remotely by laptops (Quick VPN) and Ipads/Android ICS tablets (PPTP). All is working well but I've become concerned about the security risks of PPTP and would like to shift the tablets to IPSec.
1) For a small business are the PPTP risks real?
2) What are the alternatives for Android ICS? I can't find a Quick VPN client for Android.
3) I can't get the core IPSec VPN in Android to connect to the RV180? Is this possible?
I have RV180 configured with two VLANs. First VLAN is untagged and second VLAN is tagged. The purpose is two have two subnets, with the second subnet used for guest access. Both VLANs have DHCP server enabled. First VLAN is 192.168.1.0/24 and the second VLAN is 192.168.2.0/24, When I connect a computer with untagged Ethernet interface, it gets an IP address from DHCP server on the first subnet i.e. 192.168.1.100 and it can successfully access Internet. When I connect a computer with tagged Ethernet interface (I am using VLAN ID 10), it gets an IP address from DHCP server on the second VLAN i.e. 192.168.2.100. So far so good. I can successfully ping hosts on the Internet i.e. ping www.google.com. But I cannot access Internet from the web browser. I captured Wireshark trace and here is what I see...
1. TCP SYN. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10) 2. TCP SYN ACK. Source IP A.B.C.D, destination IP 192.168.2.100. Ethernet frame has VLAN tag (VLAN ID 10) 3. TCP ACK. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10) 4. TCP Data. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10) 5. TCP Data. Source IP A.B.C.D, destination IP 192.168.2.100. Frame is untagged
The problem is at #5. Packet came back from the Web Server. RV180 properly NATed it to the local IP address. But it did not add VLAN tag.
I just recieved a new RV180 yesterday and it will not connect to my switch. Router was updated to the newest firmware, reset to factory settings. I did change the ip and ip range. Router works fine with one computer attached direct. As soon as I connect my sf300-24P to it, the WAN and LAN lights all light up and then go out. Only the WAN will light back up. I have no connectivity to the router. I plug the laptop to the router directly and no LAN lights come on and can not see the router with arp -a.
I'm considering upgrading a small business to the newly released RV180 or RV180W.Does the RV180 series support 6rd (IPv6 rapid deployment?).I see 6rd documented in the other small business routers (e.g. RV110), but I can't find it in the RV180 documentation.
I'm having issues getting QuickVPN to connect. I think it's an issue pinging the gateway but I'm not 100% sure. We are using Comcast Business, I have placed the RV180 in the DMZ. The setup looks like this: Internet -> Comcast router -> RV180 (DHCP) -> rest of network.
Is there a guide to setup a VPN connection using this router? I've follow the setup guide provided by cisco but I'm having issues. When attempting to connect using the quick vpn client, I get error messages.
Any news on a new firmware for the RV180? I have the most recent version but it still has lots of bugs. IPSec needs polishing. In addition the Logging functions don't work well. I can't send to a syslog and when I try to email the logs I get a email saying there is no data even though several pages of enteries are visible in the web GUI. I've checked the profiles and they are correct. I even tried using just the 'default' profile but no luck.
I have a Cisco Small Business RV180 and I have several VPN users configured. IPsec between my home router (also an RV180) and work router (router in question) is working fine, several PPTP users working fine and 1 QVPN user that works as well. I set up another qvpn user and it didn't work. I went back into the router to check and make sure I hadn't goofed something up and saw that I had 8 lines, 1 and 2 were the QVPN users and 6 other PPTP users, however, the "pages" footer (for lack of a better word) only displays 1 -5 of 5 instead of the 1-8 of 8 I would expect it to show.I dumped the cfg file and opened it up, all 8 user configurations show up. One was my user account which showed negative numbers for the logon time, something like -1day -hours -minutes -sec, so I thought that that might be locking up the router or something so I deleted my PPTP account but it didn't allow the new user access. I deleted all PPTP accounts and no luck there either.I'm running firmware 1.0.2.6.
I am contemplating replacing my Juniper Netscreen 5GT with this new RV180.
serial number 161303LB RVC180 V01
However, it will not connect to my ISP (DSLExtreme) using the same settings I have been using for multiple years. DSLExtreme is using AT&T DSLAMS, as you likely know, and I am unaware of anything unique about how they serve DHCP?
The Cisco wizard sits on the WAN configuration check forever, and never connects. I have rebooted it and allowed it to sit for fifteen minutes trying. I think that is enough.
The 5GT WAN interface is configured for "DCHP Client" and that is how the RV180 is configured.
It is a standard 6MB DSL line, I have tried both the existing cable, as well as the provided one to connect to the D-Link 2320B modem/bridge, which, as I indicated, syncs almost instantly with the Netscreen. No difference when the cables are swapped.
My brand new RV180 seems not to be able to exceed 1.1 MB/s WAN download speed. Using a simple Linksys WRT-320N I used to have 5-6 times this speed. Value is with default settings, various sources (HTTP/NEWS downloads). Trying to improve this wit QoS-settings dows not improve this in any way.
The RV180W would not connect to an AT&T DSL connection using PPPoE (modem in bridge mode), or behind the DSL Modem/router with the DSL modem/router providing a dynamic IP to the RV180W or a cable modem (TimeWarner Roadrunner dynamic IP). I upgraded the firmware yesterday and now the RV180W will connect to a dynamic WAN IP, but it still will not connect using PPPoE.
I have also noticed the admin interface is only accessible about 75% of the time. When going to 192.168.1.1 the login prompts either don't come up or if they do, after logging in, the screen never fully loads after that. I have to reboot the router to get it to work.
Also, the router has not yet pulled DNS from either the DSL or the cable modem. I had to manually enter those addresses.
I've been trying to connect L2L between RV180 and ASA5505 but no succeed.I can do RV180 to RV180 l2l with one of it on Aggresive mode. working configuration sample of RV180 L2L ASA5505?
My RV180 does not route properly between LAN and WAN through my PPPoE account. I am able to ping public IPs directly from the RV180 (through the diagnose section) but can not do it from any PC on LAN. The exact same configuration works perfectly well with a Linksys WTR610N. I upgraded formware from 1.0.0.30 to 1.0.1.9 but that did not make any difference.
The only time the RV180 will route is right after I reset to factory defaults and re-enter PPPoE account name and password. If I then reset my modem or the RV180, the RV180 does not route anymore between WAN and LAN even after several minutes and even though I can ping public IPs from the RV180.
