Cisco Routers :: RV220W Gateway-to-Gateway Inter VLAN Routing?
Jul 6, 2012
I picked up a pair of RV220W's and before I spent loads of time at a remote site, I figured I'd go through some VPN testing at home to make sure I could get it setup properly. What this means is I've plugged the Internet uplink into a switch, then from the switch into both routers & configured them (using unique static IP's for each) from there. For what its worth: While I have some IT experience, I don't have strong networking experience.
I setup several VLAN's on the local RV220W, and the end result is to make it so that an asset at the remote site with an IP in any of the ranges (192.168.121.0/24, 192.168.131.0/24, 192.168.141.0/24 and any future VLANs) can communicate with/access resouces at the local site. Likewise, an asset at the local site with an IP in any of the ranges (.121, .131, .141 + any future VLANs) should be able to reach the remote resources (currently just 192.168.181.0/24, but future VLANs as well).
This evening I tried to focus on the relevant VPN pages of the Administration Guide to get the VPN up. Leaving the defaults I got as far as establishing a link between both sites and it seems that things are working right: From the remote site (.181) I can access the local site (.121, .131, .141); and from the local site I can at least ping resources (a laptop) on the remote site. (Yay!)
However, when I physically connected an asset that had a 192.168.121.X, 192.168.131.X and 192.168.141.X IP addresses to the remote RV220W (which is 192.168.181.0/24), I couldn't see it from the remote or local sites.I assume this is expected. But I'm reaching out to the community to see what other possibilities might be available becuase networking is a weak area for me. I figured it might be something like a Static [or Dynamic] Route but I really am not 100% sure.
'TECHNICAL' SPECS
Local Router LAN/WAN Settings:
LAN IP: 192.168.121.1 on default VLAN (1)
VLAN 13 defined 192.168.131.1 with DHCP enabled; Reservations created outside of DHCP scope
VLAN 14 defined 192.168.141.1 with DHCP enabled, Reservations created outside of DHCP scope
Inter VLAN Routing enabled for all VLANs
[URL]
View 7 Replies
ADVERTISEMENT
Aug 30, 2012
I replace our aging rv082 routers with wireless rv220w routers. The gateway to gateway vpn works great, however I am no longer able to manage our print servers port 80 management page. I can ping any host with success, and I can manage hosts that have a port 10000 or 8000 web interface - but no port 80 ones... I had no issues when using the old rv082 routers...
View 0 Replies
View Related
Mar 31, 2012
I have six Cisco 300 Series switches in Layer 2 mode. They are all connected using ports in Trunk mode. These Trunks are tagged members of all VLANS.
I have one 300 series in layer 3 mode with IP address assigned to each VLAN.I would like to use one Internet gateway for multiple VLANS. This gateway has numerous IP ports that forward to internal ip addresses on various machines.
All i9nternal clients use their respective VLAN IP as their default gateway.The Layer 3 switch is connected to one of the Layer 2's using a Trunk that is a tagged member of all of the VLANS.
I understand how traffic routes from a client to its respective VLAN gateway. Where I am confused is how it routes from there to the Internet gateway? Internet gateway is 192.168.1.1.VLAN IP's are 192.168.2.1, 192.168.3.1, etc...
Should the Internet Gateway be patched into the Layer 3 switch or one of the Layer 2's using a separate "Internet" VLAN?
View 5 Replies
View Related
Mar 25, 2013
Currently, we have a plain network and we are planning to 'upgrade' it a little. We want to implement VLANs to separate wireless clients, workstations + servers and infrastructure devices form each other.As of now, we have no VLANs, and no managed Switches. We only have an RV016 that handles two ISPs and a 3rd party connection service to the office branches ( I belive they're using Frame Relay, but as far as we know, we are not concerned since we cannot touch their devices)
The reason behind the title, pointing towards the famous SGE2000P, is that my workplace is located in Argentina... and we don't have as many choices as some of you guys have ! In fact, I was unsuccessful trying to get a Cisco partner to contact me. We would like to replace the RV016 with a cisco 1941 (and a HWIC switch card).
So, back to business..! Assuming we will be using the SGE2000P switches, I was thinking about setting VLANs using 802.1Q through seven of these switches, along with a 1941 Cisco router. I'm expecting the 1941 to handle load balancing between both ISPs and the 3rd party link. Now, as for Inter VLAN routing, I would like to have gigabit traffic between VLANs.
Is it possible to use one SGE as Layer 3 mode to hande inter VLAN traffic (gigabit speeds) while using the 1941 as a end point device to reach internet (using PAT) ?Would you suggest me to use the 1941 for Inter VLAN routing, despite the 10/100 limitation(*) and use all SGE's in L2 mode? We need two ISPs, a third link for the FR connection, and finally the LAN interface. As far as I know, I'm limited to the gigabit builtin interfaces for WAN purposes, am I right?
View 5 Replies
View Related
May 9, 2011
I just received my rv220w and perhaps I haven't got enough experience with cisco routers. How can I restrict traffic between different VLANs?
For example: Hosts in one VLAN shall only be allowed to access a web server in another VLAN. All other traffic should be blocked. I've created two VLAN with Inter VLAN Routing enabled. But it seems there's no way to install a firewall rule between VLANs.
View 12 Replies
View Related
Oct 31, 2012
I have created a connection gateway-to-gateway between RV220W and RVL200, is doing without any problems.For example, I can ping the gateway on the other side. But when I connect trough RV220W QuickVPN (or PPTP) I can not reach the gateway (RVL200) or any host behind it.
View 4 Replies
View Related
Jun 25, 2012
I spoke with the Comcast gateway support team and they changed my SMC router to the straight gateway/bridge option. If I plug directly from my laptop to the SMC, I have internet connectivity. So I know that aspect is working. I have a Cisco RV220W router that I want to be between the internet/SMC gateway and my network. For the life of me, I cannot get the internet connectivity to pass through to the router. I've done the proper power on order numerous times. Tried variations just for the heck of it. And nothing. Am I missing a step? If I do the "wizard" on the router, it basically tells me it sees no gateway even available even though it is clearly there and plugged into the WAN port. I don't see any option in the router settings for me to specify like the DHCP server I should be reaching out (if there even is one). My understanding is I shouldn't need to as the router should just recognize it. Should I be using a static IP instead?
View 3 Replies
View Related
Aug 30, 2011
I've just set-up one of the RV220W VPN solutions. This worked fine for a while, but now it reports the remote gateway is not responding. Other clients can connect, but not the computer I'm using at home.
Log file reports:
2011/08/31 21:10:31 [STATUS]Success to connect.
2011/08/31 21:10:31 [STATUS]Tunnel is configured. Ping test is about to start.
2011/08/31 21:10:31 [STATUS]Verifying Network...
[code]...
I've tried the most common stuff. Enabling ICMP, checked that remote administration runs on port 443, changed MTU to 1400 manually, It allows fragmented packages too. Checked that IKE and IP Sec services are running. I've also tried both with windows firewall ON and OFF. A colleague of mine had the same problem in the same time frame as me, but after a while - he suddenly was able to connect. I still can't!!
Firmware Version: 1.0.2.4
Edit: IP is not real.
View 7 Replies
View Related
Feb 14, 2013
I've got two RV082's connected. Each has a dynamic IP (changes typically every few weeks). I've configured the tunnels on both ends with a local and remote "Remote/Local Security Gateway Type" of "Dynamic IP + Domain Name(FQDN) Authentication".If I look at the VPN Summary tunnel status, it shows an IP address of "mydomain.dyndns.org 0.0.0.0" under the "Remote Gateway" column heading. The Tunnel Test "Connect" button is N/A.I can resolve both of the mydomain.dyndns.org entries on both sides of each VPN using the Diagnostic DNS lookup tool within each router. If I hardwire a fixed IP address for the Local and Remote Gateway everything works just fine. VPN is good.
I just can't seem to get the "mydomain.dyndns.org" function to work. It appears the router can't resolve the dynamic IP from the domain names on each of the routers.
View 2 Replies
View Related
Oct 17, 2011
Can I have use a Gateway-to-Gateway IPSec tunnel whereby a user can surf the Internet using his local Internet connection and at the same time connect through the IPSec tunnel to a remote subnet using RVS4000 routers?
View 1 Replies
View Related
Apr 11, 2013
I have two Cisco RV042 Routers, they are being used to connect two offices, i have created a standard gateway to gateway connection, fixed public ip addresses on both sides and everything works fine, except when the tunnel gets disconnected, it does not connect back automatically, i have to log into either router console and click the connect button to get the tunnel working again, this is really annoying since it happens once or twice a day at least.
View 2 Replies
View Related
Mar 9, 2012
New hardware here, requesting a bit of your knowledge, We are tryingin to setup a simple gateway to gateway VPN
HomeA Has an RV016 with a public static IP
Local Group Security Gateway type is IP Only with the IP
Local Security Group Type is Subnet, with the local IP class 192.160.0.0
Remote Security Gateway Type: Dynamic + Email
Email address some@emailaddress.com
Remote Security Group Type: Subnet
IP Address 192.168.1.0
IPSec Setup as default with nice password.
HomeB has an RV082 with a dynamic ADSL link
Local Group Security Gateway type is DynamicIP +Email
Email address some@emailaddress.com
Local Security Group Type is Subnet, with the local IP class 192.160.1.0
Remote Security Gateway Type: IP Only
Remote Security Group Type: Subnet
IP Address 192.168.0.0
IPSec Setup as default with nice password.
The idea is for HomeB which has a dynamic IP, to reach HomeA, which has a static IP and connect. But they just wont. I have not clue what's wrong, I followed the instructions, maybe i miss interpreted something. I could share the VPN logs for both., Im getting a lot of errors there.
View 2 Replies
View Related
Feb 11, 2012
I have a pair of RV082 routers and I'd like to configure gateway to gateway VPN tunnel as described in a cookbook, "How to configure a VPN tunnel that routes all traffic to the Remote Gateway," (file name Small_business_router_tunnel_Branch_to_Main.doc). I followed this cookbook and found that my while the Main office has internet connectivity, the branch subnet doesn't have internet connectivity.
Routing does behave as advertised, where all traffic does go to the main office. However, the 192.168.1.0 subnet in the branch office does not get internet connectivity. I've read in other posts that the Main office router will only provide NAT for the local subnet, not the branch office subnet. Is there a way to configure the RV082 router to provide NAT for all subnets?
If not, which Cisco product will provide the VPN Tunnel connectivity as well as the NAT for all subnets? Can the RV082 be used as part of the final solution or are my RV082s a wasted expenditure?
Following is the configuration that I'd implemented, (real IP and IKE keys are bogus).
Gateway To Gateway
Remote Main Office
Add a New Tunnel
Tunnel No. 1 2
Tunnel Name : n1-2122012_n2-1282012 n1-2122012_n2-1282012
Interface : WAN1 WAN1
[code].....
View 2 Replies
View Related
Apr 8, 2012
I have two Cisco RV8082 Routers which I would like to setup a VPN Tunnel with Gateway to Gateway. One location is a static IP Address. The other location is a dynamic IP address.
View 2 Replies
View Related
Mar 19, 2013
I am trying to set up a gateway to gateway VPN connection between a RV042G (central site) and a RV110W (newest firmware) which is used for presentation purposes on various customer's sites. The RV042G has a static IP. The RV110W has different IPs, depending on where it is used.
Basic VPN settings are clear to me (we have another VPN between two RV042G with static IPs). I set up the VPN connection on the RV042G wth the following settings for "Remote Group Setup":
Remote Security Gateway Type : IP + Domain Name (FQDN) Authentication IP by DNS resolved: mydomain.no-ip.org Domain Name: router12345
The value "router12345" is what I have configured in the RV110W as "Host name" in the network settings.
This configuration does not work so I am obviously doing something wrong. Do I have to use "router12345.mydomain.local" instead if I configured "mydomain.local" as the domain name in the RV110Ws network settings? For my tests the RV110W has a WAN-IP of 192.168.178.100 because it is located behind a DSL-Router. The external IP of this DSL-router is 178.0.x.x. The resolved IP from mydomain.no-ip-org is 192.168.178.100 but when I look in the RV042G log I see the requests coming withg the external IP (178.0.x.x). Is this the problem? The last message I see in the log is "no connection has been authorized with policy=PSK".
Or can I use "IP + Email Address (USER FQDN) Authentication" instead (where can I enter this email address in the RV110W?). Or do I have to use "Dynamic IP"?
View 1 Replies
View Related
Dec 19, 2012
I exchanged a RV042 v1.2 (Firmware 1.3.13.02) by a new RV042G v3. (Firmware 4.2.1.02).
My problem is now the following: The old RV042 established the Gateway to gateway VPN connection as soon as an IP- address of the remote location was requested. The new RV042G stays on „Waiting for connection“ all the time and does nothing at all. The connection works by clicking „CONNECT“ or by ticking Keep-Alive in the advanced tunnel settings but NOT automatically as before. Is this a firmware issue or have I to configure something additional?
View 1 Replies
View Related
Dec 5, 2012
I'm trying to figure out how to (or if I can) setup the management interfaces (fa1) on a couple of new 4500X switches. My issue is that the 4500X's themselves are the gateway for my management VLAN (.1 HSRP virtual, .2 and .3 SVIs on the pair of switches).
I would like to assign addresses from the management VLAN to the router Fa1 management interfaces but the software configuration guide seems to note this is not supported (and indeed it doesn't seem to work).
Physically I have Fa1 from core-1 into a port on an adjacent switch. Fa1 from core-2 also goes into a port on that adjacent switch. Both are in my management VLAN, whose SVIs are on the cores themselves.
View 5 Replies
View Related
May 30, 2012
I have an ASA that houses 11 VLANs, and I am trying to add a 12th.One of the VLANs is for PCs that have internet only access.The new VLAN will be similar, but for multifunction printers only.VLAN 99 is for internet only and works fine, I can ping the gateway of 10.99.3.33 from any PC in that VLAN.I am creating VLAN 98, modeling it after VLAN 99, and I cannot get a PC in the vlan to ping the gateway of10.98.3.17.Both switch and ASA show the new VLAN 98 as UP, switchport is UP/UP.I have deleted and recreated VLAN 98 a few times, but I cannot get a PC VLAN 98 connectivity.Once it is working on the core switch, I will add it to the trunk to the IDS switches. VTP is not in use, everything is manual. [code]
View 4 Replies
View Related
Oct 15, 2012
I have created two vlans, vlan 1 data and vlan 200 voice. the issue is that when an on one vlan i cannot ping the default gateway of the othe vlan from my PC. An using sge 2010p switches.
below is my configuration
p route 0.0.0.0 0.0.0.0 192.168.0.1
ip dhcp relay address 192.168.0.100
ip dhcp relay enable
ip dhcp information option
interface vlan 1
ip dhcp relay enable(code )
View 3 Replies
View Related
Jul 25, 2012
I have a design hurdle that I cannot seem to cross. I have two sites and I need the same VLAN to span both sites. I have accomplished this using L2TP but my issue is that I can no longer assign a gateway for this VLAN on the router. The 2 routers are 2821's and are connected with a dedicated fiber run.
Ant recommendation for how this could be accomplished? It would be great if I could have the same gateway at both sites by leveraging some sort of bridged interface (BVI so I've heard) but I am at a loss as to where I should start with this. Also, this is not the only VLAN that needs to traverse the link.
View 2 Replies
View Related
Mar 6, 2012
Is there any way to granularly allow hosts from one vlan to be able to access another vlan with Inter-VLAN routing DISABLED?Can the use of an ACL override the setting?In general I don't want any traffic between VLAN's but there are 2 hosts on one VLAN that I would want to allow access to a server on another VLAN.
View 1 Replies
View Related
Apr 20, 2013
I have been banging at this now for two days and just cannot get Inter-VLAN routing working to work on this router.
Upgraded to latest Cisco firmware (1.0.1.9).Starting with factory default settings, I added 2 VLANS as follows: [code]
BUT....PC2 cannot ping PC3 - NOT WORKINGPC3 cannot ping PC2 - NOT WORKING [code]
View 8 Replies
View Related
Mar 7, 2012
I have an RVS4000 version 1 with firmware 1.3.3.5. I have two VLAN's setup:
VLAN1 - 192.168.1.0/255.255.255.0
VLAN10 - 192.168.10.0/255.255.255.0
Ports 1 through 3 are configured for VLAN1 and right now I have one PC connected directly to port 1 and nothing connected to ports 2 or 3. Port 4 is configured for VLAN10 with a managed switch (also configured on VLAN10) connected to it. There are 4 wireless access points connected to the switch.
On the Setup->Advanced Routing page of the RVS4000 I have the Inter-VLAN Routing option set to Disabled. Yet when I connect to one of the wireless access points and receive a 192.168.10.x address, I can ping the PC connected to port 1 which has a 192.168.1.x address.
Also, I would like VLAN10 to not have access to the Management GUI on the RVS4000.
View 4 Replies
View Related
Sep 13, 2012
config setup
protostack=netkey
klipsdebug=none
[Code]....
View 3 Replies
View Related
Jan 24, 2012
I recently swapped out an RV082 with a newer model (still RV082 but black and a different interface). I configured the Gateway to Gateway VPN exactly as it was before but none of the three other RV082's will connect. I have tried deleting the connections several times to no avail. I have aggressive mode disabled and have tried with the firewall on and off. Below are the settings (IP's have been X'd out) and the log.
Settings:
IP OnlyIP Address : X0X.X0X.20.31Local Security Group Type : IPSubnetIP RangeIP Address : Subnet Mask : Remote Group Setup
Remote Security Gateway Type : IP OnlyIP AddressIP by DNS Resolved : Remote Security Group Type : IPSubnetIP RangeIP Address : Subnet Mask : AES-192AES-256AES-128 AES-192AES-256 AES-128 IPSec Setup3DES Keying Mode : ManualIKE with Preshared keyPhase 1 DH Group : Group 1 - 768 bitGroup 2 - 1024 bitGroup 5 - 1536 bitPhase 1 Encryption : DES Phase 1 Authentication : MD5SHA1Phase 1 SA Life Time : secondsPerfect Forward Secrecy : Phase 2 DH Group : Group 1 - 768 bitGroup 2 - 1024 bitGroup 5 - 1536 bitPhase 2 Encryption : NULLDES3DES Phase 2 Authentication : NULLMD5SHA1Phase 2 SA Life Time : secondsPreshared Key : Minimum Preshared Key Complexity : EnableLOG:
[code].....
View 1 Replies
View Related
Jul 11, 2012
My two RV042 , one at home and the other one at my working site, constantly lost VPN connection after successfully connected.Both Firmware are identical. [code]
View 1 Replies
View Related
Feb 8, 2011
we do have 2 Rv042, one in my office and one in my house.. in the office we do have static ip and at home none.. question is can i connect the two RV042?
View 1 Replies
View Related
Mar 22, 2011
I have some problems in my network with Gateway to Gateway Vpn Connection using two Rv042 routers.
I cannot ping the computers with static ip configuration.
In local an remote computers who have DHCP ip configuration i can ping each other .
View 1 Replies
View Related
Jul 26, 2012
We have a VPN setup between two Cisco RV082 routers, the VPN status shows as connected however I can't ping the other network. I am unable to ping between routers, let alone ping computers behind those routers.
We have 2 branches, branch 1 is on a static IP and branch 2 is Dynamic. I am able to connect via QuickVPN from Branch 2 to Branch 1 and remote desktop to computers, however have yet to VPN/remote desktop in the opposite direction.
To me it seems like a firewall issue at branch 2, but what's causing this. Also they are currently running 2 differnet firmware version not sure if this would cause a problem.
View 1 Replies
View Related
Apr 6, 2013
i am trying to setup a vpn Gateway To Gateway when i setup the vpn i can ping the 2 rv042 i cant see any computer in the network places when there comect we need to see the computer in the network places so are pos will run?
View 1 Replies
View Related
Jan 29, 2012
Just bought 3 WRVS4400N, I wanted to setup gateway to gateway VPN. I followed the instructions on the WRVS4400N admin guide and VPN does not connect. I also downloaded the VPN setup wizard and that also did get the gateway connected. Everything seems to be correct. Do I have to enable anything else? Firewall setting?
Below is my config.
IPSec VPN Tunnel: Enabled
Tunnel Name: TUN01
Local Security gateway: IP only
WAN1 IP: 192.168.100.1
SUBNET: 255.255.255.0
Local Security type: subnet
LOCAL IP: 10.10.10.1
SUBNET: 255.255.255.0
[code]....
View 1 Replies
View Related
Mar 6, 2011
I have an RV082 and a RV042. I have been able to successfully establish a gateway to gateway vpn connection between them both, and I can remotely administer each router through the VPN connection, but I am unable to ping computers from one side of the connection to the other. For example, a computer in the 10.10.1.0 subnet can't see / ping / communicate with a computer in the 192.168.1.0 subnet.
Below are the configurations for each. Aside from the static IP configurations and the VPN configurations, no other changes were made to the routers. RV082 DHCP Enabled Tunnel Status: Connected Local Group Setup
IP Only: X.X.X.66Local Security Group Type: SubnetIP Address: 10.10.1.0Subnet Mask: 255.255.255.0Remote Group Setup
View 1 Replies
View Related
Jan 29, 2013
Can a router using OSPF propagate that he is a router with default-information originate... at the same time when he got an own gateway of last resort to an IP-adress? If so, how? I can't get it to work.
View 8 Replies
View Related
