Cisco Routers :: WRVS4400N - VPN Blocking Windows Services
May 15, 2012
I need to access a shared folder over a VPN connection. Very simple host network: no Microsoft server, no AD. Just a WRVS4400N router and a peer-to-peer network.
Purchased a second WRVS4400N router to create VPN from SOHO and configured via VPN Setup Wizard.
When at the office, I can map a drive letter to a share on the other computer, as follows
net use f: \192.168.1.111MyShare /User:MYSELF mypass
However, when try same command over VPN, I receive the response:
System error 53 has occurred. The network path was not found.
I also cannot net view the other computer -- same error. However, I can successfully ping 192.168.1.111.
More info:
Routers have latest firmware.
Over VPN I cannot browse network via Windows Explorer (Win7 Network Neighborhood shows only my own PC. In the office I can see the other computer and the NAS appliance "NAS01").
I also cannot connect by entering \192.168.1.111MyShare into Windows Explorer's address bar (although I can do that successfully when at the office), or by choosing Map Network Drive from "Computer".
However, over VPN, I can get into NAS administration via https://192.168.1.3 and I can print to the office TCPIP printer (192.168.1.222)
Recently I'm having issues with accessing local services via external IP. Short description of configuration:
- sub.mydomain.com pointing to my external IP.
- few web services running on my local server with reverse proxy on Apache 2
- firewall on router enabled
- ips on router disabled
- single port forwarding: WAN 80->Lan 443, WAN 443->LAN 443
- accessing my services via sub.mydomain.com/service1, sub.mydomain.com/service2, etc
- I had to create a new rule in internet access policy allowing LAN, any, any to
Basicaly if I go no matter if I type http or https I will be redirected on 443. That configuration has beed working without any issues for a month. Recently I have increased the amount of DHCP users and suddenly it's not working any more. I can still access my services from outside but not from LAN.Restarting router does the trick for a while,sometimes for few minutes, sometimes longer.Enabling IPS is the way to go but then I'm limited to around 22Mbit/s. I have no idea what happend.What I can't understand that it was working, suddenly it's stopped and there are two solutions, either to enable IPS or to restart router?
After updating the firmware of my WRVS4400N from V 2.0.1.3 to 2.0.2.1 all traffic was blocked for all machines, even some not included in the list of PCs. As the log was showing that all traffic was blocked by access policies, I disabled the only rule I had (blocking access to some sites to some MAC address list) and everything worked fine.I tried creating a new, simpler rule but after activation it blocked again all traffic for all the LAN.After many trials, I decided to roll back to the previous V2.0.1.3 which solved this problem.
Looking for a working Cisco VPN client for Windows 7. There seems to be an availabel download for a ver 5, but you have to be a reseller etc.. Where do I download the Windows 7 supported VPN client to access my WRVS4400N router? If none, should I use 3rd party - IF yes to 3rd party, which one would you suggest?
I put just got a wrvs 4400N and when I replaced my old linksys router I can't access my network computers anymore. I'm I missing something or do I need to do some kind of setup?
I use RDP extensively on my LAN to use and manage 4 PCs running Win XP or Win7. My consumer-grade Cisco Linksys WRT610n crapped out after less than 2 years, so I thought I'd try the Cisco WRVS4400N to gain extra features like VPN. I have not enabled anything new on the router except for adding a second wireless SSID for guest use, although no bandwidth management or VLANs have been set up yet. Firmware version is 2.0.0.8.Since installing this router I have been unable to use Windows RDP on ANY of my computers on the LAN, whether I use the machine name or the IP address. I can ping every device on my network - print servers, NAS boxes, PCs, but no RDP. WHAT'S GOING ON?
I cannot connect via VPN PPTP (normal setup in windows xp), I have managed to connect over VPN direct connected to internet, through the router (WRVS4400n) if I turn off the firewall. But I cannot connect with the firewall enabled,One more thing, the device is on and I have enabled the passthrough (and 'Multicast Passthrough' in firewall basic settings) for all available options where one of the options is PPTP.
I installed LMS 4.0.1 and every module works from the local server. Http login from a remote system, topology services does not start, complains about java version. I followed the link to install the java version, it then complains about some Ansiserver stuff.
the client os is win7 64 bits, eplorer version is 7.
The organization that I worked for purchased large number of Cisco Secure Services Client Licenses for Windows XP. Now they have plans to move to Windows 7. Reading different discussions, I know that SSC ver 5.1 does not work with Windows 7. My questions are:
1) Will there be a new SSC for Windows 7? Will we be able to configure the pre-package for installation with the new SSC?
2) Can we use the existing SSC ver 5 licenses with the new SSC for Win 7?
a workstation on our domain running windows 7 64 bit downloaded updates from microsoft. There was about a hundred of them. Since they installed the machine won't connect to the network shares. It can access the internet easily enough. The Workstation Service won't start. It comes up with an error 1068: The dependancy service or group failed to start. I used System restore to go back before the updates and everything worked again. Installed the updates and the problem re-appears. I have 2 wireless network adaptors so I disabled one.
WDS allows you to capture and deploy images on a network to client pcs. I Was wondering how many images wds allows you to capture and deploy and if there were any work a-rounds that would allow you to deploy more.
I recently got a new laptop with Windows 7 running 64bit OS. Setup the laptop with no firewall and no Antivirus programs. After installing the Any connect 2.5 VPN application I was able to successful connect to our ASA. I noticed if my laptop went into standby mode or if I rebooted the laptop the "Cisco Anyconnect Agent" is not running under service even though it is set to Automatic.
I have uninstalled and reinstall with no success and have even tried the new version 3.x with the same result. If I go into services and start the anyconnect agent I can launch the application and connect to my company with no problems. I was able to replicate this issue on a co-workers new laptop running Win7 64 that has no applications on it.
i'm using some catalysts 3560 with 10 VLANs and inter vlan routing. we use a windows deployment services server to install our workstations. the pxe boot works fine. the image is loading, and when the windows 7 PE is booting, the dhcp request failes. when i use a small not manageable switch between the computers and the catalysts, it works fine.all other things work fine.
My ISP sends various services through VLAN. Internet, TV and Telephone.Now I wonder, is it possible to use this router to distribute these VLANs through the wan port to eg my IPTV box?
I have some questions regarding the addition of custom services and their use in QoS for RV routers (I use the RV220W). Suppose I create a custom service as: Name: My Service Port: TCP 60000
1. Does this port number refer to the port number used by my LAN computer or the port number on the other side e.g. some computer on Internet I am using this service to connect to? Some services use the same port number on the side that initiates the service and the receiving end but there are services that use different ports for the initiating and receiving end. So, what is the meaning of the port number when creating a custom service?
LAN Computer : (port TCP 60000) <----> Internet computer : (some TCP port, not necessarily 60000) - or - LAN Computer : (some TCP port, not necessarily 60000) <----> Internet computer : (TCP port 60000) ?
2. Suppose I create a QOS profile binding configuration with respect to this custom service for a specific IP address on my LAN. QOS is applied to the outgoing network traffic only. How is this profile going to work?
A. Applied to traffic originating from my LAN device with the specified IP address and port TCP 60000 - or - B. Applied to traffic originating from my LAN device with the specified IP address to another computer's port TCP 60000 ?
We have recently implemented Windows Deployment Services on our local network, but everytime we do a multicast image deployment the network get flooded to point of total saturation.
We have Netgear switches and a Cisco 2800 series router. IGMP Snooping has been enabled on all Switches, however, we are unsure on how to implement multicasting on the router.
The whole network is flat - no VLANs over than the default VLAN1. We only want multicasting to work within our local network and does not need to go out the other side of the router as that is the connection to the internet.
How to get the Cisco router configured properly to enable multicasting to not flood the network. It seems that even if we were to image 4 PCs using multicast this is enough to completely get the network flooded.
Also, am I right in thinking that IGMP needs to be enabled on all of the Switches?
I have two servers behind the RV180 and a list of ports I would like to open to the public (80, 443, 21, 3389).In that case, I have to setup 8 Access Rules. I am OK in the first time setting up.But later on, if I would like to change the external IP <-> internal IP mapping, I have to change the Access Rules one by one for all related ports.
Does it has a setting for grouping the ports together so that I can set the Access Rules by one time only ?BTW, the summary view of the Access Rules in RV180 is not very clear, I can't differentiate the Rules for different Destination NATs ... I have to click into the details one by one ...
We recently moved to a new office and currently have three ISPs(DSL, SAT, 4G) because we are unable to get Cable nor Fiber services. We have anywhere between 7-20 Remote Desktop connections(with lot of file transfers) and 8 VOIP lines. Basically, we need to bind certain services to specific WAN links in order to make everything work somewhat decent because of the limited bandwidth and/or latency of each ISP.
I would like to double check if the bindings are working for the specific services, and it has been difficult to verify if the settings in the RV016 are working. I believe it's not working 100%, and I need a way to check and make sure that my settings are being followed.
What would be the best way to check the current connections to see if the service is being routed via the WAN link specified in my setting? My RV016 is HW ver 3, but not the latest firmware. Purchased about 2 months ago.
Today I had to reset the router completely to factory default, if I was adding services to the forwarding or UpNp service management, suddenly it stopped adding the new ones.Now after starting all over it's having the same behaviour, see below my services, normally you can have 30 rules in this list but I cannot add new ones now.
Now I want to insert a new service IMAPS for port 993 so I go to service management.Then press "add to list" see below for result.It is there, then press OK and the screen closes, now if I choose a service from the list, it is not there !!
I have a WRVS4400N router & am using Quick VPN to connect to the Router. I can able connect through Window XP Machine, but not able to connect through Window Vista & 7. Whenever I try to connect through Window 7, I got this message: The remote gateway is not responding. Right now the Cisco router is behind DSL modem and I can't change the DSL modem to bridge mode as my ISP told me that we can't change DSL modem to bridge mode. what I have to do to connect to the router through Windows 7 & Vista.
I just bought a Cisco WRVS 4400N router so that I can connect to my home network via VPN from my laptop when I am on the road. I have Windows 7 on my laptop.
I have 25 of these routers installed behind various providers and transport (DSL, Cable, UVerse). At sites where I have static IP, I can't reach any service inside, and in fact can't even reach the router for Remote Management. At all times the users indoes can do whtever they like, the have Internet access.
At sites where we draw a dynamic IP or use PPPoE, I can reach services and manage the router until a known issue stops the inbound traffic.
We've got 5 remote offices with cisco 881 routers, Win Clients behind them and all routers connected via vpn site-to-site to central software router.
Mostly all clients recieve ip addresses from routers in their subnets 192.168.x.024 We have Win DHCP Server in subnet 192.168.181.024
The problem is that some of clients,physically sutuated in 192.168.10.024 subnet, recieve ip addresses from Win DHCP server from 192.168.181.024 subnet.
Here's part of cisco cfg:
interface FastEthernet0 no ip address ! interface FastEthernet1
Since upgrading some of computers in my LAN to Windows 7 they all experience upload issues. I have narrowed it down to CBAC inspection on my Cisco 1711 router, I am running IOS 12.3 I have a simple CBAC inspection set for TCP/UDP only without any application-specific inspects. Download works fine however upload does not seem to work atl all- unless I disable the ip inspection. It is all working fine for any Windows XP but not for Windows 7 machines. Is this a known issue, I am not sure how I can go about this - I don't want to build ACLs now for outside interface and disable stateful inspection mechanisms because CBAC has been working fine for me until recently.
the 2nd one is for all guests and it's isolated from the lan+trusted(1st one) with a vlan feature.
the 1st one is for all trusted devices over wifi. the wifi channel is setup to allow mac addresses of the two asante security cameras. the cameras upload videos to an ftp on my server. the two will connect to the router at first, I can ping them or see them in 'my network'. give it a little time and they disappear. then I have to power off/on the router or the cameras to make them work for a few minutes. the process repeats.
the cameras make lots of connections to the ftp server. I'm suspecting they're flooding the router and it blocks them. occasionaly they will come back for a minute or two and disappear again as if blocked/unblocked.
I added their mac addresses in hopes of making them 'trusted' devices. I've tried them on both ssids. I checked and unchecked firewall/security checks and icsa settings. all other devices I tried, multiple phones and laptops work without problems on both ssids and they don't get blocked.
I have a fibre connection on the dedicated WAN which was working perfect until someone somewhere cut through the line. The SA520 fell over to the Optional WAN port which is basic ADSL line which is connected. Logmein client is online too.
But it refuses to browse webpages, appears to be a dns issue or firewall or both.
I have added the ISP dns addresses into the forwarders on my server.
I have an RV082 (running 2.0.0.19-tm) set up as the gateway to the Internet on my home LAN, and connect to it through several switches / hubs around my house. Randomly, and from various connections around the house (which are all plugged in to different ports of the RV082), a Web request will fail to load, giving a "Server not found" error in the browser. When I look at the log in the RV082, it says, "Connection Refused: Policy Violation".
It seems to be just blocking the DNS requests - everything else appears to go through normally. For example, I get the message "Looking up domain name.com" in the bottom corner of the browser and the request fails, displaying the Mozilla "Server not found" error page. When I click the "Try Again" button the page, it goes through just fine and everything works.
I don't have any services running behind the firewall, and do not use the VPN settings. Here are my current firewall settings:
Right out of the box, the WRVS4400N [firmware v2.0.1.3] I just purchased says the WAN interface is DOWN; and it simply will not obtain an IP address from the Arris TM602G cable modem it is attached to. Internet still runs great on the old WRT54G. Is this WRVS4400 DOA? Or is there some arcane setting the quickstart guide overlooks? OR?
I'll just use the 4400n to provide DHCP to my two VLANs and then a new problem cropped up. I am unable to add a default route to the 4400n's DHCP server. It uses the 4400n's vlan IP as the default route. What I'm trying to ultimately achieve is to configure the 4400n as an access point for our "private" network on vlan1 and also "guest" access to the internet on vlan2.
I'm having problems trying to establish a IP Sec tunnel from the office to home. All of our machines are Macs so I have been using the directions described in "How to create an IP Sec tunnel for MAC Clients, A QVPN alternative" but I still can't get it to work. My setup is as follows:
The office is connected to the outside world through a MODEM (Sagemcom 2864 Connection Hub). This MODEM is also a wireless router. It's DHCP server provides addresses 192.168.2.x.The WRVS4400N's WAN port is connected to one of the LAN ports on the MODEM. It's IP address from the MODEM is 192.168.2.x. The WRVS4400N provides addresses 192.168.21.x to devices connected to it.We have a DynDNS account and are using the DDNS client on the WRVS4400N router to connect to it.At home, we have a DIR-655 router with IP Sec Passthru enabled. The router provides IP addresses 192.168.1.x for all devices connected to it. I am fairly sure there are no issues with the router setup at home since I am able to VPN into the office of my full-time job without any problems. I have tried just about everything I can think of but have not been able to get this to work. setting up the Local and Remote Group Settings on the WRVS4400N and the IP address settings in IP Securitas?
