Cisco Routers :: RVS4000 - VPN DynDNS Behind Firewall NAT
Aug 15, 2012
The local router is behind a fiber firewall/router; the rvs4000's ext ip is thus 192.168.1.2, not visible from the net. The firewall/router is a dyn ip, with a dyn dns name mapping to it. The remote (some NetGear thing) is also dyn dns, but it is not behind a firewall.
I want to cook a vpn from the local lan subnet to the remote lan subnet.
It worked fine when both ends were NetGear.
I think it would be ok if somehow I could thell the rvs4000 that the local Security Gateway Type be just FQDN; it can't be IP+FQDN because the remote end doesn't know anything about that kind of thing; it can do IP or FQDN or a couple other confusing things.
View 2 Replies
ADVERTISEMENT
Aug 14, 2011
How to successfully configure and connect to a DynDNS account with RVS4000? This was working fine for me until recently when I think I upgraded the firmware to 1.3.3.5.I am trying to connecting to DynDNS.org service. In the past, I used the following string for the Hostname which worked:'mysubdomain.domain.com&system=custom' (including small quotes)According to the RVS4000 documentation, all you should have to do is specify the host name with DynDNS but this clearly is not accurate.
View 2 Replies
View Related
Apr 24, 2012
I have a RVS4000 and I am going to configure vlan in the near future. Among all other configurations sent by the internet provider company is this one :
Firewall NAT :
from x.x.2.0/24 to 0.0.0.0/24 should be NAT
from x.x.2.0/24 to x.x.0.0/21 should not be NAT
From all the other configurations, this one is not clear to me. Can this configuration be done on a RVS4000 and where can it be done.
View 1 Replies
View Related
Sep 15, 2011
RVS4000 has default firewall rule from ANY WAN -> to ANY LAN with status Allowed. Should that be denied by default, like in RV042 or RVL200?
View 7 Replies
View Related
Feb 22, 2012
The firewall on my RVS4000 appears to hang when ever I use Netflix. If I disable the firewall and re-enable it it works for a while and then stops again. My IP address is in the Approved Client IP Addresses so it is excluded from the URL filtering and Web reputation rules.
View 5 Replies
View Related
Mar 12, 2012
I am trying to access a device behind my firewall that needs to use port 9000. I have completed the single port forwarding page with the exterior and internal port but I cannot access the device from outside the firewall. Yes I did check the "enabled" box
View 8 Replies
View Related
Apr 23, 2012
If I have the IP ACL firewall enabled in my RVS4000 I have trouble connecting to specific websites and also connecting to Apple's update servers. The problem appears to be that the firewall is blocking incoming data to the ephemeral ports even when they are allowed in the firewall rules. I've also tried port forwarding rules but the only thing that resolves the problem is to disable the firewall entirely, which is not the desired resolution. The firmware version is 2.0.27.
View 11 Replies
View Related
May 3, 2012
I have problem with RVS4000 fw 1.3.3.5. When you switch the status of IPS function (turn on or turn off), firewall rules don´t work from that moment until you restart the router!
View 2 Replies
View Related
Mar 29, 2011
I have a SR520 where WAN configured as PPPoE with Dyndns address. I have done all the configuration through the CCA, so far everything is working fine. But now i want to configure SSL VPN, but I have getting an error message : SSL VPN cannot be configured, please configure wan interface using a static IP address. Is there any way that I can configure the ssl vpn through a dyndns address?
View 5 Replies
View Related
Apr 11, 2013
I am using DynDNS in lieu of a static ip. My ISP changed my WAN ip last night as expected however the RV180W did not update the WAN ip, and so the router is now offline. Using a secondary internet connection I have logged into DynDNS.com and checked my hosts file and confirmed the ipa has not updated since March. I changed the update period from 360 to 2 so this never happens again, but I need to now change the WAN ipa in the RV180W to match the new one. I remember a screen that shows the current WAN ip address greyed out under the present one, but I dont recll where to go to get to that. I am at a loss as to where I go in the RV180W to change the WAN ip address.
View 1 Replies
View Related
Nov 30, 2011
I recently moved out of state and have been working remotely. I just got a new internet provider who will not let me connect to my office VPN without a small business account which is ridiculous. I've been reading up on how to work around this and haven't been able to figure anything out. I've signed up for a dynDNS account but the truth is I have zero experience with this and don't know what I'm doing - most of the stuff I'm reading is a foreign language to me. I can log into my router and change settings and I can get VPN info from my tech person and work so I just need to know what to do. I can't really work effectively without access to my network but I refuse to pay for a small business account
View 5 Replies
View Related
May 6, 2012
I am trying to have the RV220W router auto-update the dyndns registration. The dynamic domain that I use is .info -- note the .info domain.
When I manually update the dyndns information (username and password) the registration does go through and the entry is updated on the dyndns site.
However, the registration does not auto-update after that.
View 6 Replies
View Related
Sep 11, 2011
I have 2 internet connections in my office one via Verizon Fios and another one via the local cable company. On the fios connection I have an RV042 VPN router and on the Cable company connection I have an rvs4000 router, I would like to know if there is a way I can connect the 2 so I can share a printer I have on one of the 2 networks from the other network without using the VPN feature, like via an ethernet cable connected between the 2 and some kind of static route maybe?
View 6 Replies
View Related
Feb 14, 2013
I've got two RV082's connected. Each has a dynamic IP (changes typically every few weeks). I've configured the tunnels on both ends with a local and remote "Remote/Local Security Gateway Type" of "Dynamic IP + Domain Name(FQDN) Authentication".If I look at the VPN Summary tunnel status, it shows an IP address of "mydomain.dyndns.org 0.0.0.0" under the "Remote Gateway" column heading. The Tunnel Test "Connect" button is N/A.I can resolve both of the mydomain.dyndns.org entries on both sides of each VPN using the Diagnostic DNS lookup tool within each router. If I hardwire a fixed IP address for the Local and Remote Gateway everything works just fine. VPN is good.
I just can't seem to get the "mydomain.dyndns.org" function to work. It appears the router can't resolve the dynamic IP from the domain names on each of the routers.
View 2 Replies
View Related
Apr 8, 2012
I am a novice with networks but do have a fair understanding of networks. I have a small business network, utilizing a RVS4000 router (Firmware V2.0.27)I am attempting to set up firewall rules to block certain web sites at certain times.I have successfully set up rules using source and destination ranges, to deny service 24 hours a day everyday.
However and here is the problem when I attempt to edit any of the rules (I want to change the time to certain hours of the day) it allows me to edit the rule but when I attempt to save I get an error message up saying there are invalid characters and it will not save the changes?create the whole thing with the changes I want it works fine, is this a known bug?
View 1 Replies
View Related
Mar 18, 2011
I’ve been using a Cisco ASA 5505 Security Plus bundle for two years now without any problems. My previous Internet Service Provider was routing the external IP I was leasing directly through to my internal network without NAT which my ASA 5505 was working well with. Thus, I had configured my 5505 to provide NAT to my inside network which includes two subnets one for my workstations and internal "private" resources and a DMZ to provide access to my webserver, email server and two domain name servers; but restrict access to my internal; resources. i recently changed my ISP to Verizon FiOS (which is providing me with 25 Mb bandwidth at a fraction of the cost of my old T1) which is set up to provide 5 Static externally facing IP numbers for my email, webserver and name servers;. The problem is the Verizon router doesn’t support my use of the ASA Appliance (at least not the way it is currently configured. Verizon recommend I purchase a business class router and use it in place of the one they provided with my installation. With this in mind, I bought a Cisco RVS4000. I have configured it to use the primary external IP number and have internet access; however, the new router is providing NAT addressing which the ASA is in conflict with (they are both using the same NAT IP range). I'm assuming the ASA 5505 is expecting to have access to the external IP addressed (since that is what it was getting before) and NOT NAT address. How to configure the new router to either provide access to the five static external “real world” IP to my Cisco ASA Firewall. However, I just need to get my ASA 5505 back in the loop and would prefer to do this rather than go back to the Verizon router combined with a low end firewall. So, my questions are: Does the ASA 5505 expect real world External IP numbers? Or can it work with NAT addresses being fed to it from the router? And, if so, how do I configure the access rules and other items which are currently mapping to external numbers?
View 27 Replies
View Related
Apr 20, 2013
Ive set up a rvs4000 with two vlans, one as a bussiness network and the other as a guest network. Everything works fine and the networks can not see each other. I would like to add wifi and I would like to do so with keeping both networks separate. I have a used 1130AG access point and was wondering if I could use this single AP for both networks. If so, how would I go about doing so? Is there a better suited AP for my needs?
View 4 Replies
View Related
May 16, 2012
I have an RVS4000 running V2.0.2.7 firmware that gives me an "Invalid Character(s) Found" error message when I try to edit an existing ACL.
I'm trying to deploy 57 of these routers and would like to be able to use a pre-built config dropped onto each router.
I initially planned on editing the exported config with a find&replace for my local LAN addresses. Since that didn't work the next reasonable solution would be to edit the ACL list (much more tedious, but still better than hand-entering every ACL on all 57 devices).
when this bug will be addressed? Alternatively, if there is an offline configuration editing tool I would be one happy camper to have it!
View 2 Replies
View Related
Jun 3, 2013
I have an RVS4000, not installed. How can I tell from the unit or the packaging that it is a v1 or a v2, without installing and switching it on (which I don't want to do now) ? Are v1 branded Linsys and v2 Cisco ? Can you tell from the date on the package (mine says copyright 2011) ?
View 1 Replies
View Related
Sep 4, 2011
I don't know if my vendor mislead me, but I need to do this: There is a public subnet in my office, not a 192.168.x.x, but a real Public IP.The reason is that we do VOIP and those are only servers. I installed a RVS 4000 in that location, and assigned a PUBLIC Ip to BOTH the WAN and LAN, since when I connect from outside, using either QickVPN or another identical router, I need to be assigned one of the PUBLIC Ip's on the remote LAN. That is the whole idea of the project, to locate servers remotely and make them use our set of PUBLIC IP's. Well, so far I cannot connect either with the Quick VPN client, or using the VPN Wizard. It goes and creates the tunnel, without error, but when I click test, it fails.
View 2 Replies
View Related
Mar 15, 2012
We have backup and other traffic over our vpn which is affecting our ip phone service between two sites. Our consultant suggested implementing QOS over the VPN to give the phone traffic priority. Is this possible with the rvs4000. Is there any good source saying how to do it. Is the setup of the QOS on this router similar to another router where this has been discussed.
View 1 Replies
View Related
Mar 19, 2012
I have problem with bandwidth management on my RVS4000.
That is the way how i done it:
All traffic (TCP & UDP on all ports)
IP range 192.168.0.2 - 192.168.0.2 (My IP adress)
Guaranted download speed 1kbps
Maximum download speed 5000kbps
after saving setting and rebooting router I have maximum download speed on my PC 12000kbps, Why QOS doesnt work ?
View 3 Replies
View Related
Nov 11, 2012
I am getting ready to setup an RVS4000 so we can use the VPN functionality of it, but I am not quite sure of the correct way to integrate it into our network though. I do not need site to site, just the client portion of it for a few salesmen/off site people to use. I have never used or setup a VPN before, so I'm learning everything as I go along.
We are in the middle of switching our ISP and I am waiting to set this up until the new service is live so I can test it prior to moving the rest of the company to the new ISP.
We are switching to Comcast, and will have 5 static IP's available to use. Currently, the firewall does all our NAT and is the forward facing device on our network. I would like to leave the firewall in place (although I am setting up a new firewall for the new internet connection) and have th RVS 4000 sit behind it and receive VPN traffic from a WAN to LAN rule We currently have a 192.168.100.0/24 network.
Do I need to setup another /24 network for the VPN to function behind (and still have access to the 100.X network), or is there a way to allow everyone who connects to receive a 100.X ip address from our DHCP server. I'm not sure how to set everything up with the WAN/LAN connections on the RVS4000 to acheive this.
We are running a domain on a 2008R2 server. The clients will be using laptops that are already part of the domain, if that will make a difference.
View 2 Replies
View Related
Jun 15, 2011
I'm trying to setup a VPN tunnel between a Cisco RVS4000 on our side and a Cisco ASA5520, to connect a machine on our local network to a test server on the target side.
We have all the settings setup correctly and the tunnel is up and running, however, our local machine can't connect/ping to their server. I've tried a trace route both from the machine and from the RVS4000 itself, and they both get stuck after getting past 192.168.1.1. Is there any routing or NAT-ing that I need to do on our router? Or is there a problem somewhere else?
View 7 Replies
View Related
Aug 8, 2009
I'm having an issue with a Linksys RVS4000 which doesn't appear to be behaving as I think it should.I need to forward a port (Single Port Forwarding) through to an internal NAT host. However, I only want that host/port to be accessible from one host on the internet, for security reasons.
I have created the port forwarding entry and this works fine. I then created two rules in IP Based ACL - one to block all access to that port from the WAN interface and one to allow access from a single host.
However, it appears that when a port forwarding entry is added, it will completely bypass the ACL and allow all traffic for that port/host by default.Is this the correct behaviour?
Firmware version is v1.2.11
View 12 Replies
View Related
Sep 13, 2011
I'm currently dealing with a weird problem on a Cisco RVS4000. I'm trying to connect to a IPSEC VPN Gateway (NETASQ) located on the LAN side of the RVS4000. I'm using Green bow vpn client on the WAN side of the RVS4000. Basically I'm trying to get through the RVS.My VPN config is OK because i tested it on the LAN side of the RVS.
The RVS is configured like this: NO VPN configured.
Block WAN Request :OFF
FIREWALL,IPS,DDOS are OFF
NAT forwarding on for UDP 500 and 4500 directed from the wan to the ip of the VPN gateway. Seems right because iv managed to do this with other routers (different brands) on another site.I've wire sharked my vpn client and i keep getting ICMP destination unreachable (PORT UNREACHABLE) after my ISAKMP launching packet.Can the RVS nat these ports ?
View 3 Replies
View Related
Jan 11, 2012
I've been trying to disect this problem for a few months to no avail. The router allows me to connect to outside FTP only when IPS is enabled. The moment I disable the IPS functoin, the connection hangs and does not connect to a server. Reason I'd like to keep IPS disabled it is because it's eating up half of bandwith when enabled.RVS4000
View 2 Replies
View Related
Feb 8, 2012
I have a Cisco RVS4000 with Port 1 as a trunk connection to a Cisco SF300 switch. Port 1 on the router is configured 1untag,2tag,3tag,4ag. When connected directly to the router I can connect to the switches management IP. I would like to reach the switch remotely. I have set up DDNS and can access the router and I have have set a specific port to forward to port 80 on the switches management IP but this does not work. Should I not be able to Port Forward to the switch across VLAN 1?
View 3 Replies
View Related
Oct 23, 2011
I have an RVS4000 with FTP download issues. I have the latest v1.3.3.5 software and the latest ISP (1.5). Regardless of any settings changes, my FTP downloads always timeout. I have tried a new basic router and had no issues, so it is not the PC, FTP software, or the ISP. I have even put my PC into the DMZ and still no resolution.
View 1 Replies
View Related
May 1, 2013
Few months back I had purchased this Router. But I did not use it till last week. Since the time I have installed it, it does freeze often (between 5 to 30 hours).
I can connect to devices within the subnet, but not elswhere. I have to remove the power and plug it back for it to respond. I have updated the firmware to the latest one that was on the Cisco site.
View 2 Replies
View Related
Sep 17, 2010
Does the Cisco SB RVS4000 router support 802.1x authentication for the WAN port?
View 2 Replies
View Related
Dec 27, 2012
I have firmware version 2.0.2.7. I've down loaded the firmware upgrade utility ver 1.3, and do not see a read me or help file. I've disconnected the cables as directed, but recive a 'broadcast error' and a 'browse device error'
View 2 Replies
View Related
Mar 9, 2013
I am trying to configure my RVS4000 to create my church's small network. I want to connect my internet DSL router on the WAN port and also segment my network with VLANs on the 4 LAN ports. I have port 4 connected to a wireless access point which is in VLAN1 for an open wireless network for any church member to access the internet through. I have a church server, printer and second access point on ports 1-3 in VLAN 34. All ports are untagged. I want the devices on VLAN34 which need confidentiality to be secure from the devices connecting to the internet from VLAN1 for open access but both VLANs need access to the internet..
My open wireless AP in VLAN1 has access to the internet on the WAN port.
None of my devices in VLAN34 have access to the internet. I have tried using inter-VLAN routing but that made operation worse so I disabled it.
View 1 Replies
View Related
