Cisco Routers :: Set Up RV042 As VPN Gateway For Client
Aug 29, 2011
I set up an RV042 as a VPN gateway for a client a year ago. It is running firmware 1.3.12.19-tm (Feb 13 2009 13:03:21). I created a new certificate. When I download the client certificate, It comes as a .zip file. One the can not be opened by a zip utlity (windows, Winzip or 7 zip). It looks like I can just rename the file to a .pem file, but I want to make sure that is right. They were getting QuickVPN timeouts, but that looks like it was fixed in 1.3.13.
View 3 Replies
ADVERTISEMENT
Jun 9, 2012
I'm trying to set up a RV042 to do the following:
1) Block all WAN connections, except for:
2) Allow all port 80 connections, and forward to 10.4.20.60
3) Allow all port 443 connections, and forward to 10.4.20.60
4) Allow port 22 connections from specific IP addresses, and forward to 10.4.20.60
5) After a remote client has connected using Client to Gateway VPN, allow that remote client to access anything on the LAN
I'm able to do #1-4 above, but I can't get #5 to work. Or I can get #5 to work, but can't implement the restrictions I need in #1-4. Attached are some relevant screenshots. I think the problem is that I have Forwarding rules set up that require me to have a firewall rule to Deny All Traffic from WAN1 (unless I'm specifically allowing it). In the Access Rules screenshot, rule #6 is the problem. If I enable it (thereby denying all WAN1 traffic), then VPN clinents can't access anything on the LAN. However if disable this rule, VPN clinents can access anything on the LAN, but the firewall also opens up all outside connections to SSH, since that's set up in the Forwarding rules. I would have thought that once a remote client is connected using client to gateway VPN, then that client is considered to be on the LAN, as far as the firewall is concerned. Thus a firewall rule (like #6) that is specified for WAN1 shouldn't effect remote VPN clients.
View 1 Replies
View Related
Jan 27, 2012
I am setting up remote access using an RV042 router. Using quickvpn or a client-to gateway vpn and shrewsoft client, I can only access/ping the LAN side of the remote router and one machine on the remote network. The PPTP server and native Windows 7 connection provide access to all machines on the remote network.I have 2 possible reasons for this and would like to find the real reason:
1) The remote RV042 is behind another router, and that router restricts access other than the PPTP traffic.
2) The VPN tunnels other than PPTP only allow access to the remote LAN side of the router and remote machines that have the remote router defined as their gateway in the IP configuration.
View 2 Replies
View Related
Apr 11, 2013
I have two Cisco RV042 Routers, they are being used to connect two offices, i have created a standard gateway to gateway connection, fixed public ip addresses on both sides and everything works fine, except when the tunnel gets disconnected, it does not connect back automatically, i have to log into either router console and click the connect button to get the tunnel working again, this is really annoying since it happens once or twice a day at least.
View 2 Replies
View Related
Apr 12, 2011
We recently upgraded from a Linksys WRT54G router to a Cisco RV042 to gain "gateway-to-gateway" automated VPN access. However, we are unable to get "client to gateway" access working.
With the Linksys WRT54G we used a "username" "password" pair for remote client authenication. This worked for both Windows and Mac OS X users using the built-in PPTP client. We found we had to set "encryption" value to "none" on the client side.
I am confused by the setup screens on the RV042. It looks like I must setup a "tunnel" (VPN->Client to Gateway), there is (VPN->VPN Client Access) where I can enter a username/password, and also (VPN->PPTP Server) where another username/password pair can be entered. I have tried all sorts of combinations but "no love". I am particularly mystified by the (VPN->Client to Gateway) settings for "Remote Client Setup"; the client can be calling in from anywhere and there is an option for "Dynamic IP + Email Address" but I'm not sure how that maps onto the client (do they use the email address as their account name?). I have also looked at defining a "Group VPN" where I am given other options. But nothing works from the client.
I just need to come up with some setup that works, that I can document to both PC and Mac users at a miniumum.
View 1 Replies
View Related
Mar 31, 2013
I've got half a dozen RV042 routers in various locations. They are running v4.0.0.07. Seemingly randomly, I got the 502 Bad GatewayThe CGI was not CGI/1.1 compliant. error when attempting to log into the web interface with google chrome (same with IE too). This happens from the LAN side. I actually didn't notice it until my Opsview monitoring software threw up a critical when it didn't get an http response. The router is otherwise actually working just fine.Since the first occurrence, more of my routers have developed the same error.
I've tried different browsers, clearing caches, though I'm not surprised those efforts were fruitless, as there is clearly a problem even when no browser is involved (nagios). The nagios http check also returns a 502 Bad Gateway.
View 7 Replies
View Related
Apr 11, 2012
I have RV042 on my remote network, i have problems with VPN connection , user can connect to RV042 but only inside IPs that can ping from vpn user.Is it any way to make the traffic from Rv042 will back to RV042 . maybe with nat.. in example below 192.168.5.100 is my lan IP from my DSL dhcp, and 172.27.0.20 ip on remote, traffic not back to my pc/vpn client, what i want is to translate 192.168.5.100 to RV042 LAN ip address
1485: ICMP echo request (len 32 id 256 seq 29) 192.168.5.100 > 172.27.0.20
1486: ICMP echo reply (len 32 id 256 seq 29) 172.27.0.9 > 192.168.5.100
1487: ICMP echo request (len 32 id 256 seq 30) 192.168.5.100 > 172.27.0.20
1488: ICMP echo reply (len 32 id 256 seq 30) 172.27.0.9 > 192.168.5.100
[code]....
View 3 Replies
View Related
Jun 28, 2011
I have router Linksys RV042 v1.2 with latest firmware Version: 1.3.13.02-tm. And I'm using QuickVPN v 1.4.1.2. I've setup VPN connection with values, below: But every time I'm trying to connect to router by VPN it always popup a window "Remote Gateway not responding".It occurs when I'm trying to connect to VPN behind other router, when I'm connected directly to Internet the connection is established.But I'm connecting to other networks using VPN and it's working properly (behind the same router), so I think it's problem with RV042 configuration but I don't now weher.
View 5 Replies
View Related
Apr 7, 2013
I am trying to setup the following. We have an RV042 Router and are using it as our gateway at the office. In the office we are using a Windows Domain abc.lan with DHCP of 10.0.0 - 10.0.0.254. The Router/Gateway is setup with a Static IP of 10.0.0.100.A couple of our office employees would like to work from home via VPN using their laptops. With the many options available for this router, I am not clear as to which options and what settings I should set.
View 2 Replies
View Related
Aug 8, 2011
I am setting up a dual WAN network in our small business office and I am confussed on the set up of the RV042.
On WAN1 I have a satellite modem connected
On WAN2 I have a cradlepoint CTR35 Router with a verizon aircard
The satellite has lag issues and will drop out during poor weather but has a 17GB dowload limit. The verizon aircard has only 5GB download limit but normally works in poor weather. Code...
Do I select obtain DNS automatically on both WAN1 and 2? Do I set this up as a gateway or a router?
View 3 Replies
View Related
Feb 18, 2013
Comcast installed a new fiber 10M EDI internet connection in our facility the other day and found out it is our responsibility to provide a layer 3 gateway to map the internet connection to the 14 public IP addresses they assigned to us. We are using RV042 for our existing networks with a T1 we had.
Will the RV042 provide the gateway function to route the single IP address comcast provided to the 15 public IP addresses? If so , can you provide the configuration example on this process?
Comcast EDI Connection ---> ???????? ----> 14 Static External Addresses
Interconnect Block 51.235.227.60 / 255.255.255.252.Comcast Gateway is 51.235.227.61Clear Layer 3 device WAN interface: 51.235.227.62
Usable IP Block 51.235.227.96/28Mask: 255.255.255.240Usable Addresses: 51.235.227.97 - 51.235.227.110
View 2 Replies
View Related
Nov 8, 2011
I have a RV042 and I am trying to setup a Client to Gateway VPN for about 12 to 15 remote users. These users travel a lot and need to connect to the server. I have never setup a vpn and have looked at the manual and set it up like it says to. I installed the Quick VPN client on the remote computer and copied the certificate to the remote computer.
I am having two problems.
1. When I run the client on the remote computer and try to connect it tells me the cert is not installed on the local computer. (it is copied to the root program directory C:Program Files Cisco Small Business and the sub directory, C:Program Files Cisco Small Business Quick VPN Client.
2. I can continue and it acts like it's connecting but it does not. If I look at the router VPN summary it shows that I connected for only a brief time.
View 1 Replies
View Related
Oct 3, 2012
I have a RV042 router. The problem that I am having with it is that the DHCP is giving out the wrong Default Gateway and DNS Server. There is no option to change the DHCP server IP on any of the settings pages on the router. I am begining to think that there might not be a way to do it. I see that there is an option for the DNS under the DHCP page but the Public IP that is being handed out is not the one on that page. I also have 2 WAN connections hooked up as well a DSL link and a Cable link (the cable link is the primary one).
The following information is provided in an effort to resolve this issue:
IP of Router 10.0.0.2
IP of DHCP Server (the one that is being handed out):10.0.0.1
IP of DNS (the one that is being handed out): 10.0.0.11
What I want to it be.
IP of Router: 10.0.0.2
IP of DHCP 10.0.0.2
IP of DNS 10.0.0.2
View 3 Replies
View Related
Apr 7, 2012
PID VID : RV042 V03
LAN IPv4/ Subnet mask : 192.168.0.7/255.255.255.0
Working Mode : Router
[code]...
PPTP working fine but not with Quick VPN .. test on some computer and internet access still can not get connect to router.
View 79 Replies
View Related
Aug 22, 2011
Very recently, we had implemented Site-to-Site VPN tunnel between two Linksys RV042 4-port VPN routers. Everybody in our remote site is accessing and sharing the data through this tunnel and it is working fine.
Now, we have a plan to implement the same for our mobile clients also. For this, we had followed all the basic configuration procedures and user got connected to Quick VPN tunnel. Here is a problem we had observed. The mobile client user is connected to the tunnel, but unable to access the office LAN from the PC.
View 1 Replies
View Related
Nov 15, 2011
I have a RV042 router setup with Client to gateway VPN access, and am connecting with a W7 PC running QuickVPN. We have many PC's that already have the standard CiscoVPN client on them, is it possible to configure the RV042 to allow these clients to conenct? I'm not sure how to get the Mutual authentication to work, or how to import the PEM certificiate into that client. It seems to allow it to import, but I can never select it.
View 2 Replies
View Related
Mar 14, 2012
I have a RV042 and have set it up for VPN Client access using the QuickVPN client to connect my remote users. I discovered today that I cannot have two users connect in at the same time. Both users are in the same remote office. They can connect individually with no problem but if one is connected and the other tries connect also the second user gets a message the gateway is not responding. They are both running Win XP PRo SP3.
View 1 Replies
View Related
Jun 15, 2012
Will the RV042 work with theAnyConnect Secure Mobility Client app? If so, is there and app note available? If not, which routers wil work with this app?
View 5 Replies
View Related
Nov 11, 2010
Any working configuration to connect the iPad VPN-client (IPSEC) to the RV042?
View 16 Replies
View Related
Mar 15, 2012
I have a RV042 and have set it up for VPN Client access using the QuickVPN client to connect my remote users. I discovered today that I cannot have two users connect in at the same time. Both users are in the same remote office. They can connect individually with no problem but if one is connected and the other tries connect also the second user gets a message the gateway is not responding. They are both running WinXPPRo SP3.
View 4 Replies
View Related
Jun 1, 2013
I'm trying to setup an rv180w to connect as a client to an remote vpn gateway and route all the lan traffic behind it direct to the remote vpn gateway. [code]
View 3 Replies
View Related
Sep 13, 2012
config setup
protostack=netkey
klipsdebug=none
[Code]....
View 3 Replies
View Related
Jul 11, 2012
My two RV042 , one at home and the other one at my working site, constantly lost VPN connection after successfully connected.Both Firmware are identical. [code]
View 1 Replies
View Related
Feb 8, 2011
we do have 2 Rv042, one in my office and one in my house.. in the office we do have static ip and at home none.. question is can i connect the two RV042?
View 1 Replies
View Related
Mar 22, 2011
I have some problems in my network with Gateway to Gateway Vpn Connection using two Rv042 routers.
I cannot ping the computers with static ip configuration.
In local an remote computers who have DHCP ip configuration i can ping each other .
View 1 Replies
View Related
Apr 6, 2013
i am trying to setup a vpn Gateway To Gateway when i setup the vpn i can ping the 2 rv042 i cant see any computer in the network places when there comect we need to see the computer in the network places so are pos will run?
View 1 Replies
View Related
Feb 14, 2013
I've got two RV082's connected. Each has a dynamic IP (changes typically every few weeks). I've configured the tunnels on both ends with a local and remote "Remote/Local Security Gateway Type" of "Dynamic IP + Domain Name(FQDN) Authentication".If I look at the VPN Summary tunnel status, it shows an IP address of "mydomain.dyndns.org 0.0.0.0" under the "Remote Gateway" column heading. The Tunnel Test "Connect" button is N/A.I can resolve both of the mydomain.dyndns.org entries on both sides of each VPN using the Diagnostic DNS lookup tool within each router. If I hardwire a fixed IP address for the Local and Remote Gateway everything works just fine. VPN is good.
I just can't seem to get the "mydomain.dyndns.org" function to work. It appears the router can't resolve the dynamic IP from the domain names on each of the routers.
View 2 Replies
View Related
Aug 30, 2012
I replace our aging rv082 routers with wireless rv220w routers. The gateway to gateway vpn works great, however I am no longer able to manage our print servers port 80 management page. I can ping any host with success, and I can manage hosts that have a port 10000 or 8000 web interface - but no port 80 ones... I had no issues when using the old rv082 routers...
View 0 Replies
View Related
Jul 6, 2012
I picked up a pair of RV220W's and before I spent loads of time at a remote site, I figured I'd go through some VPN testing at home to make sure I could get it setup properly. What this means is I've plugged the Internet uplink into a switch, then from the switch into both routers & configured them (using unique static IP's for each) from there. For what its worth: While I have some IT experience, I don't have strong networking experience.
I setup several VLAN's on the local RV220W, and the end result is to make it so that an asset at the remote site with an IP in any of the ranges (192.168.121.0/24, 192.168.131.0/24, 192.168.141.0/24 and any future VLANs) can communicate with/access resouces at the local site. Likewise, an asset at the local site with an IP in any of the ranges (.121, .131, .141 + any future VLANs) should be able to reach the remote resources (currently just 192.168.181.0/24, but future VLANs as well).
This evening I tried to focus on the relevant VPN pages of the Administration Guide to get the VPN up. Leaving the defaults I got as far as establishing a link between both sites and it seems that things are working right: From the remote site (.181) I can access the local site (.121, .131, .141); and from the local site I can at least ping resources (a laptop) on the remote site. (Yay!)
However, when I physically connected an asset that had a 192.168.121.X, 192.168.131.X and 192.168.141.X IP addresses to the remote RV220W (which is 192.168.181.0/24), I couldn't see it from the remote or local sites.I assume this is expected. But I'm reaching out to the community to see what other possibilities might be available becuase networking is a weak area for me. I figured it might be something like a Static [or Dynamic] Route but I really am not 100% sure.
'TECHNICAL' SPECS
Local Router LAN/WAN Settings:
LAN IP: 192.168.121.1 on default VLAN (1)
VLAN 13 defined 192.168.131.1 with DHCP enabled; Reservations created outside of DHCP scope
VLAN 14 defined 192.168.141.1 with DHCP enabled, Reservations created outside of DHCP scope
Inter VLAN Routing enabled for all VLANs
[URL]
View 7 Replies
View Related
Oct 28, 2011
I'm running Cisco QuickVPN on a clients laptop (Windows 7). Windows firewall is disabled because McAfee SaaS is running.I sometimes have the issue that the initial connection attempt comes back with "Gateway not respoding" during the network verification process. You close the program, you open it again and it works. Sometimes it takes 2 or 3 tries. Today I have the issue that my client tried it like 20 times including several reboots and it's just not working. I tried it from my own computer and it connected fine on the 2nd try.I'm thinking that it might be time-out thing, that the VPN client doesn't receive a response fast enough? I know my clients home internet is darn slow.
View 1 Replies
View Related
May 31, 2012
I have successfully connected two RV042s to establish a VPN gateway to VPN gateway connection. I have the follow questions:
1. I would like to keep the VPN tunnel connection time indefinite. Is it sufficient by checking the "Keep-Alive" box on the VPN -> Gateway To Gateway -> Advance page? Or, I have to ping the RV042 periodically?
2. Do the "Phase 1/Phase 2 SA Life Time" (on VPN -> Gateway To Gateway page) settings have any impact on keeping the VPN connection time indefinite? What are the optimal values for them?
3. Is there an API, command, or script to replace a manual clicking on the "CONNECT" button to establish the VPN tunnel from the VPN -> Summary page? Or, is there a way to accomplish this at power up?
4. Is there a way to establish a VPN tunnel without going through login and clicking the "CONNECT" button? (Auto connect at power up?)
View 3 Replies
View Related
Oct 17, 2011
Can I have use a Gateway-to-Gateway IPSec tunnel whereby a user can surf the Internet using his local Internet connection and at the same time connect through the IPSec tunnel to a remote subnet using RVS4000 routers?
View 1 Replies
View Related
Mar 9, 2012
New hardware here, requesting a bit of your knowledge, We are tryingin to setup a simple gateway to gateway VPN
HomeA Has an RV016 with a public static IP
Local Group Security Gateway type is IP Only with the IP
Local Security Group Type is Subnet, with the local IP class 192.160.0.0
Remote Security Gateway Type: Dynamic + Email
Email address some@emailaddress.com
Remote Security Group Type: Subnet
IP Address 192.168.1.0
IPSec Setup as default with nice password.
HomeB has an RV082 with a dynamic ADSL link
Local Group Security Gateway type is DynamicIP +Email
Email address some@emailaddress.com
Local Security Group Type is Subnet, with the local IP class 192.160.1.0
Remote Security Gateway Type: IP Only
Remote Security Group Type: Subnet
IP Address 192.168.0.0
IPSec Setup as default with nice password.
The idea is for HomeB which has a dynamic IP, to reach HomeA, which has a static IP and connect. But they just wont. I have not clue what's wrong, I followed the instructions, maybe i miss interpreted something. I could share the VPN logs for both., Im getting a lot of errors there.
View 2 Replies
View Related
