Cisco VPN :: RV042 - Connecting VPN Hub And Spokes
Sep 5, 2011
I have few router Cisco RV042, and VPN links between them with a hub and spokes topology. Every spoke VPN works, they succeed to connect to the hub. The hub can see every spokes VPN active. A computer under the hub can connect to a computer under any spoke. A computer under any spoke can connect to a computer under the hub. That works great. Now, what I really need is to connect computers under a spoke to connect to computers under an other spoke. I was wondering if the Cisco RV042 can be configure to allow that and HOW? If it can't be done, what other router should I use as the HUB? Does I need to change the spokes as well?
I have setup a hub and spoke VPN with communication between the spokes, the hub is also capable of receiving VPN clients connections using Cisco VPN client.
Is there a way to enable communication to the spokes using just the VPN Client connection to the hub?
Hub Static Ip / 10.0.0.1 DMVPN IP / 192.168.1.0 LAN Spoke 1 Dynamic Ip / 10.0.0.2 DMVPN IP / 192.168.5.0 LAN Spoke 2 Dynamic Ip / 10.0.0.3 DMVPN IP / 192.168.4.0 LAN Spoke 3 Dynamic Ip / 10.0.0.4 DMVPN IP/ 192.168.2.0 LAN
Tunnels are up and running with communication between the spokes.
I'm tryig to put a computer into the DMZ and then access it from computers on the LAN using a local IP address. My reason for doing this is that I'd like my DMZ computer to be a locked down web server (just ports 80 and 443 open to the outside), but I need to be able to have more access to it from inside my LAN (e.g. I want to be able to SSH into it from the LAN).
Thus far I've been able to get a computer set up in the DMZ and can access the Internet from the DMZ computer. And I can access the DMZ computer from the LAN computers using the public address for the DMZ computer. But I can't access the DMZ computer from the LAN computers using a private address for the DMZ computer. see the attached file for a diagram of our current settings. A few descriptions:
- Verizon provides us with a number of static IP addresses, i.e. 71.123.123.10-12 (note these aren't actually the addresses, but representative).
-- In the RV042, I have the following configurations made: - Setup > Network > LAN Setting - Device IP Address = 10.4.20.1
Small office, 2 RV042, 2 DSL connections. 1 is used striclty for the business side, and the other is for our CCTV network. They also have seperate DSL connections as we have 2 external IP address for clients to connect remotely. We don't want to take away our exisring setup, but would like to bridge both networks so a few of our internal clients can connect to our CCTV network and use some of the devices. Right now they come in on VPN but its not as fast.Is this doable without adding additional hardware? Both networks need DHCP enable as well.
Breakdown:
DSL 1 | RV042 | 192.168.20.X
|| Would like to somehow join the 2 networks together.|
I configured dmvpn at cisco router 2900. one hub router and 3 spokes. all of them are working normally but tomorrow i see one error at at one spoke router.
error: Maximum Tx Bandwidth limit of 85000 Kbps reached for Crypto functionality with securityk9 technology package license
Small office, 2 RV042, 2 DSL connections. 1 is used striclty for the business side, and the other is for our CCTV network. They also have seperate DSL connections as we have 2 external IP address for clients to connect remotely. We don't want to take away our exisring setup, but would like to bridge both networks so a few of our internal clients can connect to our CCTV network and use some of the devices. Right now they come in on VPN but its not as fast.Is this doable without adding additional hardware? Both networks need DHCP enable as well.
I bought a Cisco Linksys RV042 (Firmware Version: 1.3.12.19-tm) a month ago. I installed it with two Cable Modems (Webstar DPC2100R2) from the same internet provider and with the same individual bandwidths for the two of those. My setup is Dual Wan mode since I only bought this device for load balancing the traffic through the two WAN connections. I need to clone both WAN MAC addresses on the router ports in order to get connected to my ISPs provisioning server. The RV042 has no issues getting a connection on WAN1 when MAC cloning has been made on this port, however, when I clone (user define, different from WAN1) MAC address for WAN2, this port never gets a connection and stays on IP 0.0.0.0 all the time.
I’ve tried factory reset, reloading the latest firmware (which already came pre-installed), switch modems from WAN1 to WAN2 and vice versa, disabling Firewall, turning on and off the ports on Port Management tab, changing SmartLink to Load Balance mode, enabling and disabling Network Service Detection, DHCP vs. Static IP on WAN ports, manual setup, setup through the wizard.
Nothing seems to make WAN2 port function correctly with the User Defined MAC address. The only way to make it work is using the factory (default) MAC address on WAN2, then it gets the IP address from the modem. Again, WAN1 works correctly with a user defined MAC address same as with Default MAC address enabled.I have read endless customer’s posts having the same issue from several years ago in this Community Forum and all over the web, and none of them have had a definite solution to the problem from the manufacturer.
I've installed a RV042 and my terminals cant even ping each other. They have Internet, but they cannot ping each other, or open network shares. It is not a dns problem becouse it does not work with the IP.
I connect to my corporate network using Cisco AnyConnect Secure Mobility Client. Once connected I can no longer print to my LAN attached printer and other local resources. I use the Cisco/Lyncsys E4200 router on my LAN and can re-connect to the storage on the local LAN by setting up Port Forwarding of port 21 and MS Windows FTP folder sharing. However, I can't seem to connect to a Terminal Services client by forwarding port 3389. Is there a way to connect to the local LAN after logging into the VPN connection. I can connect to regular HTTP/HTTPS sites and most other type of connectiins, just not my own local resources.
I had an older Linksys RV042 working perfectly until it blew up on me after 5 years of faithful service. This new 'Cisco' with v4.0.0.07-tm firmware appears to be a dramatic step backwards - I'm tempted to call it a heap of junk!!!
1. The 'Smart Link Backup' is not working (our primary ISP failed today and it did *not* switch over to the backup ISP on WAN2 as advertised and more critically ..
2. It *will not* allow me to access the sbs-2003 R2 server using Remote Web Workplace.
From ouside the office I can connect to the server using a Remote Desktop Connection and my laptop clients can use the built-in sbs 'VPN' connections but not RWW.
I have duplicated all the port forwarding as per the old router, turned off the firewall and even tried forwarding 'all traffice to the servers external NIC all to no avail. I get 'error 404' when clicking past the customary 'continue to this website ..." certificate warning.
I administer another 2 installations that use different routers and work flawlessly
I connected the DSL (WAN1-Internet) port in and the Cisco RV042 was able to get an IP automatically. I tested the connection and it works just fine. Then I connect the Cable Modem-Comcast (WAN2-DMZ/Internet Port) in and I have the RV042 automatically optain IP address. But it just says 0.0.0.0. I've tried release/renew and that does nothing. Also, when I connect the 2nd Internet connection the Internet goes down. The only way it goes back up is when I disable under the PORT MANAGMENT setting.
All the settings have been kept to the default.How can I get the router to obtain an IP address from the Cable Modem-Comcast (WAN2 DMZ/Internet Port).
I recently purchased a RV042 device but when I tried to set my DDNS account I realized that the only two providers are dyndns.org and 3322.net. We already have an account in no-ip.com and several services using the [URL] host.
We have an Cisco RV042. We need to setup a VPN with a business partner who is already using our current IP scheme on another VPN with another client. They have asked us to NAT our IP's from 192.168.25.x to 192.168.245.x
I can't seem to figure this out on this router. I have done it on a Sonicwall and Watchguard, but can't seem to get it to work on the RV042.
I have setup the VPN and the One-To-One NAT. The tunnel will connect (using the 245.x IP as our local IP on the VPN setup), but no traffic will pass through.
i was planed to make a vpn over rv042 so i get the rv042 connected behind a thosmon 456(configured as a bridge) and 1 static ip ... and i configured the vpn and worked great ...but due to some circumstance i get a package of 6 ips insted of the old ip , so when i try to configure the router with the ISP they but the wan ip 10.232.x.x and told me that an internal ip from there lan ... and give me the 6 ip of 196.x.x.x to use as 1 for internal interface for the rv042 and 5 for the pc's,now the vpn not working anymore...notice: when try to configure the vpn tunnle in the local securty setting i mark the ip only and the ip that abear is the wan ip 10.232.x.x but i can't ping that ip beside i can ping the internal ip of the router 196.x.x.50does rv042 can support static and virtual ip inside the lan |! can i configure the thomson as pppoe and use one static ip from 196.x.x.x as wan ip for it ... and use anther 196.x.x.x ip for the rv042 to get access from outside and connect the lan to the rv042 with internal ip 192.168.x.x ...so i can access the vpn from outside .....and can connect the device i need to use static ip to the thomson ...
Firmware v4.0.4.02 has a nasty bug in the VPN section. If you switch to "IP by DNS Resolved" (yes, it says "Resolved" instead of "Resolution". Gotta love all the Engrish in the RV042!), it will automatically populate the field with "@yourdomain.com". This will cause the VPN to not lookup the proper IP address. Simply deleting the atmark after it populates will fix the problem.
Let's see what happens when we validate a Cisco RV042 webpage:
Errors found while checking this document as HTML 4.01 Transitional! Result: 353 Errors, 1 warning(s)
Don't even get me started on the horrible Javascript...
i am trying to make a simple Site to SiteVPN between two offices, one has Cisco ASA and one has RV042 router.when traffic initiated from ASA side, i keep getting this message in Debug and tunnel wont come up . [IKEv1]: Group = A.A.A.139, IP = A.A.A.139, Queuing KEY-ACQUIRE messages to be processed when P1 SA is complete.Apr 26 00:15:53 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
whereas if traffic initiated from RV042 side, i keep getting this message in debug and tunnel wont come up.
Apr 26 00:43:44 [IKEv1 DEBUG]: IP = RV.RV.RV.139, Oakley proposal is acceptableApr 26 00:43:44 [IKEv1 DEBUG]: IP = RV.RV.RV.139, IKE SA Proposal # 1, Transform # 0 acceptable Matches global IKE entry # 6Apr 26 00:43:44 [IKEv1]: IP = RV.RV.RV.139, Connection landed on tunnel_group RV.RV.RV.139Apr 26 00:43:45 [IKEv1]: IP = RV.RV.RV.139, Connection landed on tunnel_group RV.RV.RV.139Apr 26 00:43:45 [IKEv1]: Group = RV.RV.RV.139, IP = RV.RV.RV.139, Freeing previously allocated memory for authorization-dn-attributesApr 26 00:43:45 [IKEv1]: Group = RV.RV.RV.139, IP = RV.RV.RV.139, PHASE 1 COMPLETEDApr 26 00:43:45 [IKEv1]: IP =RV.RV.RV.139, Keep-alive type for this connection: DPDApr 26 00:43:45 [IKEv1 DEBUG]: Group =
Apparently one of my two ISPs,CenturyLink, supports 6rd connections to IPv6.
This is supported natively on my Q1000 ActionTec modem, however my modem is in "transparent bridging" mode, so that the RV042 v3 can be the only router.
how to configure the RV042 to operate in this manner.
Per the CenturyLink FAQ: the IPv6 address space is:
2602::0 /24
Most importantly, can I do this WITHOUT buying a new modem.
we are trying to establish VPN tunnel between ASA5550 and RV042. The tunnel is connected but I cannot access any resources that are behind ASA5550. I can ping the servers but that is about it.
I have a RV042 router (Ser#: NKS10462300, HW V3) running Firmware version v4.0.2.08-tm (Jan 14 2011 22:08:38) set up as a gateway. Right after it boots I am able to long into its web interface but shortly after that if I try to log into it I go through a very log time out while the web page is waiting the router to respond and then eventually IE comes back and says it 'cannot display the web [age'.
I have a Cisco RV042 VPN Router and I have added a group vpn, but when I am trying to connect I got an error that the remote vpn server isn't responding.
Here's my log:
2013/01/15 12:24:53 [STATUS]OS Version: Windows 7 2013/01/15 12:24:53 [STATUS]Windows Firewall Domain Profile Settings: ON 2013/01/15 12:24:53 [STATUS]Windows Firewall Private Profile Settings: OFF 2013/01/15 12:24:53 [STATUS]Windows Firewall Private Profile Settings: OFF 2013/01/15 12:24:53 [STATUS]One network interface detected with IP address MY HOME IP
[code]....
If I am trying to connect the status of the vpn user in the remote interface is "online".I have deactived my firewall at home and at the server for testing purposes.
I have a RV042 with a DSL (static IP) and a cable connection (Dynamic). How do I get the extra bandwidth from the cable and still keep the static IP of the DSL. When I have the router set on WAN1 (DSL), I get buffering. When I set the router on WAN2, I lose the static IP and therefore, the stream. When I have the router set on Load Balance, it switches the IP back and forth between the static DSL and the Dynamic cable.
I am looking to configure RV042 for VPN access to local machines and Win 2008 server. The story: Had issues with remote printers being created for clients logging into old Linksys RV042 with Linksys VPN software. First Tech exposed server without security, and it had to be removed as it was being attacked, but did not fix printing issue. 2nd tech could not get VPN to work after 1st tech. 3rd tech, 4hours, and I got that the router is a piece of ... So I'm out over 1000, and not able to have a simple router set up. The present situation. New RV042 with firmware V4.1.1.01, using Cisco VPN client 5.0.07.0410, most XP 32 bit machines coming into network, one 64 bit win 7. My clients have been unable to access their data for too long.
First of all i have gateway 2 gateway VPN configuration (both same RV042 with same firmware) + QVNP clients
The first one that i have those lines in my log "Ignoring Vendor ID payload" which doesn't allow clients to be connected from the first time they connect after several retries, or can't connect at all. I've doublechecked ports opened, and 500 is blocked by ISP. Also double checked, tried turning on and of Windows machine firewalls and etc - nothing worked. What would be the solution? should i manage to call my ISP and ask opening the port and it will solve my problem? HTTPS is enabled on router (this one i read in other topic)
The other problem is that one of my routers just stuck and i have manually to turn off, and then to turn on that it would start working as it was. Log files doesn't show anything. Router started to crash after the last Firmware upgrade.
I will attempt to make is simpler this time. I have a gateway to gateway VPN tunnel setup using two RV042 routers. I have been using this gateway for years without any issues. The computers on each side of the tunnel were Windows XP. I also use RealVNC Enterprise Edition on each computer for easy access to their desktops and applications. I have added two new Windows 7 Pro computers on each end of the tunnel.
The problem is with the two new Windows 7 computers. I am able to connect from a new Windows 7 computer to a Windows XP computer located on the opposite side of the tunnel fine with RealVNC. If I connect using the same Windows 7 computer to a new Windows 7 computer on the opposite end of the tunnel the connection will disconnect after a few seconds. I have disabled Symantec Endpoint Protection 11 and even upgraded it to version 11.0.6300. I also installed the most up to date driver for the Intel 82579V network adapter on the ASUS P8P67 Deluxe motherboard.
I attempted to install Cisco's Quick VPN for the RV042 with no luck on that. The certificates that the router uses do not work in the Trusted Root Certification AuthoritiesCertificates folder. So I gave up on that approach. All efforts to possibly by-pass the problem have failed. There is something with the two Windows 7 computers communicating through the tunnel that does to happen with the Windows XP computers.
I'm trying to set up 2 subnet with two RV042 routers. One router will act as a gateway and both WAN ports will be used by two different isp connection. The first router (gateway) LAN IP will be 192.168.0.1/24. I would also like to set up another router behind the gateway with with separate subnet 192.168.1.X/24. And I would like clients on the 192.168.1.x subnet to use the internet through the gateway router and clients on the 192.168.0.x subnet to access resources on the 192.168.1.x subnet. Am I able to do this with two RV042?
So far I have a complete phase 1, and an almost complete phase 2, but one thing I can't figure out. I see this in the debug. peer is not authenticated by xauth - drop connection.
The issue is when I am using PPTP the router seems to die, not every time but I would say about once a week now. I am the only PPTP user, simply using RDP. A few hours into an RDP session the PPTP connection drops and cannot be re-established, or quickvpn, nothing. Routing still works (somewhat, high latency) locally.
When I've checked the logs both times I see:
TimeEvent-TypeMessageSep 3 17:07:56 2012KernelOut of memory: Killed process 14354 (pppd). Sep 3 17:07:56 2012KernelOut of Memory: Kill process 14354 (pppd) score 177 and children. Sep 3 17:07:56 2012KernelOut of memory: Killed process 14367 (sh). Sep 3 17:07:56 2012KernelOut of Memory: Kill process 14354 (pppd) score 234 and children. Sep 3 16:46:41 2012KernelOut of memory: Killed process 14330 (pppd). Sep 3 16:46:41 2012KernelOut of Memory: Kill process 14329 (pptpctrl) score 134 and children. Sep 3 16:46:41 2012KernelOut of memory: Killed process 14324 (pppd). Sep 3 16:46:41 2012KernelOut of Memory: Kill process 14324 (pppd) score 177 and children. Sep 3 16:46:40 2012KernelOut of memory: Killed process 14328 (sh). Sep 3 16:46:40 2012KernelOut of Memory: Kill process 14324 (pppd) score 234 and children. Sep 3 15:36:15 2012KernelOut of memory: Killed process 14187 (pppd). Sep 3
I have an RV042 connected via VPN to the office (to a LinkSys DFL-700). Sometimes the VPN is dropped and never activates again. In this state, if I try to connect to the WEB interface, I can log in, but the router hangs at the login screen. I have to power recycle the router to make it work again.
Updated to latest firmware 4.2.1.02 for V3 hardware. The funny thing is that services from the WEB routed through to local IP adresses on the lan is still accessible. I have setup PPPT VPN on the router, and that also fails to work.
Is there, as a workaround, any possibility to access the routers reset page or access via TELNET to reset the router? This migth be useful, when I'm out. (I have a backup solution to access the local network at home).
I'm experiencing quite a slow vpn performance. I've tested different scenarios.
* Windows XP with built-ín pptp client and Shrew ipsec client * Linux built-in pptp * wireless and wired connections
I never managed to go above 1MBps neither with windows or linux. I managed to go up to 3MBps using the Shrew client.I've also checked mtu settings and everything seems to be fine.
Connecting the sip trunk provider modem and my network on the rv042 and connect my phone system on it so he can access both my sip trunk and internet connection.
I have 1 WAN modem from my sip trunk provider connected to the first WAN interface in the RV042.My network is connected to the second WAN interface programmed as a transparent bridge to link both lan segments together
however the link between the WAN2 interface and the network seems to go up and down and i cant ping my network gateway from a pc connected to the switchport of the RV042.
all i need is internet access to the phone system for email notification via a SMTP server.
I have just purchased the RV042 and while it is working great on WAN1 over Xfinity/Comcast broadband, I'm unable to get it working with my AT&T DSL for WAN2. I am planning on running this in failover mode - not load balancing.
The DSL modem it is connected to is a SpeedStream (hooking up laptop directly works etc. etc.). The SpeedStream is set to PPOE authentication passed in via the computer (in this case the RV042). On the RV042 side, I set it to use PPOE, using the credentials as given my AT&T DSL. The DNS servers are set to the ones recommended
