Cisco VPN :: VPN Connection Between Concentrator 3000 And RV220W
Jun 27, 2011is it generally possible to configure a site to site VPN connection between Cisco VPN Concentrator 3000 and Cisco RV220W / RV120W?
View 2 Replies
ADVERTISEMENT
Cisco :: How To Setup LAN-to-LAN VPN Via 3000 Concentrator
May 28, 2011I have been trying to setup a LAN-to-LAN VPN between two sites that are using a 3000 series CISCO Concentrator. After following the basic setups from the CISCO site, I am still unable to create a tunnel. At the moment I'm starting to believe it is how I have physically setup the network. Site 1 is using a Billion BiPAC 7404VNPX ADSL2+ Modem, Site 2 is using a Netgear DGN2000 ADSL2+ Modem, The VPN Concentrators are setup behind these devices with each firewall setup to allow the needed ports forwarded.
View 5 Replies View RelatedCisco VPN :: VPN Concentrator 3000 Login
Apr 14, 2011Our VPN 3000 concentrator's admin password was changed by somebody so i reset the password by using straight through serial cable, now the problem is it allows me to login with admin through console but not through admin web interface or telnet. I have enabled telnet and http access but still no success. Concentrator is using internal database so no AAA server is configured.
View 1 Replies View RelatedCisco VPN :: VPN 3000 Concentrator And AnyConnect?
Aug 14, 2011I have a client who saw there was a android version of the AnyConnect client and want me to go through and get their VPN 3000 Concentrator confingured to be able to connect in with it.
The Conncentrator is currently setup several groups of users and the base group is set up to all other products to connec tin via a pre shared key. It took alot research to get it configured to this point and all the searches i pull up are for a ASA.
Cisco :: VPN Concentrator 3000 DES-56 LAN To LAN Stopped Tx
Apr 4, 2012I have a VPN Concentrator 3000 with LAN-to-LAN DES-56 connections connected to it (Cisco PIX 506). Everything was working fine and then over the night something messed up on it. No settings were changed or anything.
First issue was anything using DHCP (getting IPs from the sites local PIX) couldn't be pinged or reach out through the Concentrator. It was only Thin Clients that didn't work. I could still ping the PIX, printers and desktop computers that were static set IPs. But this was happening at every site going through this Concentrator. The sites going through out MPLS network are fine.
I tried setting the Thin Clients to a static IP but still couldn't ping them.
I then decided to reboot the Concentrator, when it came back up all sites reconnected back to the Concentrator but now couldn't ping anything at the sites, not even the LAN IP of the PIX (or printers and desktops now). I power cycled a few of the sites PIXs but they still were not pingable even though the Concentrator showed they were connected.
I then decided to physical power cycle the Concentrator, it's back up and all sites are connected but none of the devices on the LAN side are reachable.
The Concentrator can ping the sites WAN IP but nothing on the LAN side going through and out the Concentrator. It can ping the LAN through the private interface (going back towards my LAN) just not going through the public interface (over the WAN).
The sessions show that Bytes are Rxing but no Bytes are Txing.
Cisco VPN :: 3000 Concentrator Manager Access
Aug 8, 2011I have 3000 concentrator in 192.168.1.x/24 network (concentrator has static IP of 192.168.1.4/24 assigned to its private int). I can manage it thru HTTP from any PC in the same subnet, but connection failes while trying to connect from PC on different subnet (i.e. 10.1.1.x/24). Is there ACL in concentrator config which needs to be modified to allow management from different subnet?
View 2 Replies View RelatedCisco VPN :: VPN Concentrator 3000 To View Log History
Nov 21, 2010Our enterprise uses a VPN Concentrator 3000 for our VPN access. Is there a way to view a log history of what user connected to VPN and what IP address they were assigned? It would be for 2 days ago which was over the weekend.
View 3 Replies View RelatedCisco VPN :: VPN Concentrator 3000 Setup With Client
Mar 27, 2011I've the following scenario VPN Concentrator is connected to a router which is connected to a router and at the edge Cisco 515E PIX is connected to the internet. The problem is that the normal VPN Dial-up connection (a utility of windows) are getting connected but Cisco VPN Client throws error 412. Here's what I've tried (Initially groups and user were created):
(1) Allowed port 10000 on PIX ( access-list from-outside-coming-in permit tcp any host <public ip> eq 10000) and checked IPSec over UDP on VPN Conc. under Mode Config tab. Also checked IPSec over TCP tab under tunneling panel at port 10000. Tried connecting through VPN Client but it threw error 412
(2) In the reference guide, I read that IPSec over NAT is allowed on ports ranging from 4000 something to 40000 something.
I tried 33333, both on PIX and VPN Conc. under Mode Config tab but still no use. Same error 412.
Cisco VPN :: Old VPN 3000 Concentrator Password Reset?
Jul 8, 2012I have an old VPN 3000 Concentrator that I do not have any idea what is running on it. The previous network admin didn't leave a password for it, so I tried to reset the password. I was successful in doing so, but when I try to access it with the default of admin/admin via web browser, I still cannot access it. I am loathe to remove or power off this device without knowing what is on it.
View 6 Replies View RelatedCisco Security :: 3000 Vpn Concentrator Load Balancing
May 19, 2012We have two 3000 vpn concentrators. Under both of their load balancing fields, Configuration - Load balancing , the checkbox for loadbalancing is enabled.However both have different priorities, one with 10 and other with 1. Does this mean both are actually loadbalancing. What does the priorities indicate here?If we replace the concentrators with ASA , how will this load balancing need to be configured on ASA & how will it work.
View 5 Replies View RelatedCisco VPN :: 3000 Concentrator Intermittent Login Failures
May 11, 2011I manage a VPN 300 concentrator which has been happily working for several years without any problems. All users are part of the same group and authenticate to an RSA server. We recently moved from RSA authentication manager 6.1 to RSA authentication manager 7.1. Everthing continued working fine for several weeks, then at the beginning of this week we started getting users intermittently failing to connect to the VPN. I'm not sure if this problem relates to our new RSA server, but we have other network devices which authenticate to it with no problem so I guess the problem is with the VPN concentrator itself.
When users fail they just get a generic "Reason 427 connection terminated by peer" error message. The live event log shows "group = vpn, status = Not-in-service" when their connection fails. Other times they connect normally and no error messages are displayed. There seems to be no real pattern, sometimes your connection fails but if you keep trying you will eventually get in [however it can take many attempts over an hour or two before you succeed, or you may get in straight away with no problem].
I dont believe its a network problem, as I have run continuous pings to the concentrator and the RSA server whilst users are experiencing these problems and there are no drops.
The RSA servers authentication monitor always shows that the user has successfully authenticated, whether the users connection actually succeeds or not. I am tempted to just reboot the concentrator, but we have site-to-site VPN tunnels connected off it and I'm a little concerned that if it is faulty it may not come back up at all.
Cisco VPN :: Private-to-Public IP NAT Through IPSEC VPN On 3000 Concentrator
Jul 27, 2011We have to setup an IPSEC tunnel for a client that does not what to exchange private IP address information for security and overlapping address space reasons. We will both be natting our source private ip address space as public IP address space and send those packets through the established tunnel. Im using a Cisco 3000 concentrator.
View 1 Replies View RelatedCisco VPN :: ASA5520 / Concentrator 3000 Open TCP Ports?
Sep 21, 2011We recently had a Port Scan done on our external IP Addresses. One of those IP Addresses scanned was our Concentrator 3000. The report came back with the following TCP ports being open on the Concentrator 3000 - 80, 443, 1723, 10000, 10001, 10002, 10003, 10004, and 10009. I am unsure if it is necessary to have any or all of these open. The Concentrator 3000 is in front of our ASA5520.
View 1 Replies View RelatedCisco VPN :: Configure VPN 3000 Concentrator To Work With AnyConnect?
Oct 10, 2011is it possible to use cisco AnyConnect client to connect users with Cisco VPN 3000 appliance?If so how to configure VPN 3000 concentrator to work with AnyConnect?
View 1 Replies View RelatedCisco VPN :: Site-to-Site VPN Between ASA 5510 And Concentrator 3000?
Jan 23, 2013Is it possible to configure a site-to-site VPN between an ASA 5510 running 8.2(1) and an old Cisco VPN Concentrator 3000? I've only been able to find an old 3000 to PIX guide on Cisco's site, and I cannot figure out how the two device's VPN options match up.
These are the options from the 3000:
IKE Proposal
Authentication:
Encryption options:
On the 5510's Site-to-Site Connection Profile, all the options are clumped into two boxes under Encrption Algorithms:
IKE Proposal: Encryption, Hash, DH Group, Authentication
IPsec Proposal: ESP Encryption, ESP Authentication
We have a pre-shared key configured, but I cannot find a set of options on the 5510 to match the 3000; I always get this error:
3Jan 24 201310:10:09713902Group = 63.192.x.x, IP = 63.x.x.191, Removing peer from correlator table failed, no match!1Jan 24 201310:10:11713900Group = 63.x.x.191, IP = 63.x.x.191, construct_ipsec_delete(): No SPI to identify Phase 2 SA!
Cisco VPN :: ASA 5505 VPN Concentrator To Maintain Connection With Remote Sites
Jul 11, 2011I have been working with my ASA 5505 VPN Concentrator to maintain a connection with one of my remote sites. I have several tunnels that work fine and dont have any issues at all, but one tunnel with outside IP ending in 146 and inside LAN 192.168.3.0 goes down every 24 hours. Attached is the config from the concentrator. I changed around the Security Association Lifetime Settings and the tunnel would drop after that amount of time expired. If I set it to 24 hours, the tunnel would drop every 24 hours. If I set it to 8 hours it would go down every 8 hours.
I have swapped the router a few times, double and triple checked my key settings, disabled keep alives on both ends, and this problem just started happening a few weeks ago after working fine for years. I also get the following e-mail error every time it goes down:
<161>Jul 10 2011 16:19:47: %ASA-1-713900: Group = xxx.xxx.xxx.146, IP = xxx.xxx.xxx.146, construct_ipsec_delete(): No SPI to identify Phase 2 SA!
Cisco VPN :: 3000 / Detect Connection Status For AnyConnect VPN Client?
Aug 9, 2011I need to write a small piece of code in C++ to detect whether the AnyConnect VPN client (v2.5 and above) has established the connection. I recall in Cisco 3000 VPN client when the connection gets established there is a registry value (TunnelEstablished) being set to 1. But with AnyConnect I don't see any changes in the registry. how to detect this in C++?
View 4 Replies View RelatedWireless Connection Fault Dell Vostro 3000?
Jul 23, 2011I am running my laptop on Windows 7 Proffesional 32 bit and it won't let me search for a wireless connection on the Control Panel I think it might be a problem with the wireless switch at the bottom as it doesn't show the wireless sign on the laptop. I have also tried running the laptop on Ultimate 64 bit but the problem continued to persist.
View 12 Replies View RelatedLAN Connection Had Decent Speeds But Was Unreliable And At Times Very Slow (3000 Vent Ping)?
Apr 9, 2011I have a gaming machine i ran for some time on a wireless connection. This connection had decent speeds but was unreliable and at times very slow (3000 vent ping). So me and my father fished some cat5e cable through some wall from our router to my room. We used some old external jacks verizon gave us and some 6 foot patch cables to connect the computer and router to the jacks. My problem is that once it wall all connected the lan speed has been terribly slow (several times slower than the wireless). Previously I used an ASUS pce-n13 wireless adapter and now the lan is running of the nvidia nforce on my Asus P5n-d motherboard. I am clueless to the problem and I have called Verizon and gotten nowhere.
View 3 Replies View RelatedCisco Routers :: RV220W - Very Slow Wi-Fi Connection?
Aug 5, 2011I'm an IT professional with more than 10 years experience. I have spent last 5 days trying to figure out why the wifi connection to this router is so slow, but still no luck. I'm getting only 13Mbps even if my laptop is next to the router! (wired connection worked ok)
I have tried all sort of setting combinations, 2.4GHz/5GHz; N only/ G,N Mixed; Auto/20MHz bandwidth; different channels; WPA2 encrypted vs open; disable firewall; wmm enabled/disabled; 1.0.0.26/1.0.1.0 firmware... no matter what I try, I always get only 10 - 15Mbps speed.
Once I replace this router with my old router, it worked perfectly --- getting 70 - 80Mbps with exactly the same testing environment and configuration.
I really expect this router to offer much faster wireless speed according to this review: [URL]
Cisco Routers :: RV220W - Setup An IPv6 Connection
Jan 25, 2012My ISP provides IPv6 connectivity in the form of dual stack IPv4/IPv6 with DHCPv6 Prefix Delegation. Using a Cisco IOS-based router I managed to make such a connection by using as a template the Cisco IOS configuration file that my ISP has posted as an example in the following link:
[URL]
The main point on this configuration is a PPPoE connection with:
interface Dialer46
ipv6 address autoconfig default
ipv6 enable
[Code].....
configure this router according the Cisco IOS configuration file I linked on the top in order to have a working IPv6 connection?
Cisco Routers :: Setting Up IPSec Connection On RV220W?
Aug 26, 2012We bought a RV220W in order to get a VPN in our Small Business. The RV220W will only be used to let clients connect to it and not a tunnel between another VPN box.We could use QuickVPN, but it won't be working in our case, because in order to use QuickVPN, the router wants to change its IP 10.x.y.1. Because we have multiple servers/services that are using a static IP, it would be quite painful to change the subnet. Therefore, we would like to stay on the same subnet and change it in worst case scenario only. This is why QuickVPN is not an option here.We could use SSL VPN, but most of our clients who will connect to the VPN are using Windows 7 x64. I have tried the Windows 7 x64 fix told in the latest firmware release notes, but I can't get it to work on my computer, which is a Win7 x64. It might still be broken. Many of them are not very tech-savyy, so I can't tell them to use a virtual machine to connect.We want a secure connection, therefore IPSec is better than PPTP. I've been trying to setup IPSec for the past hours but I can't get it working. At first, I wanted to use an SSL certificate, but having no luck with this, I switched to a Pre-shared Key (PSK) in order to get things simpler. Eventually I would like to use an SSL certificate, however I would like to get PSK working first to confirm that the IPSec connection is working.
I have attached with this post, screenshots of the IKE and VPN Policies. I have used the VPN Wizard in order to complete these fields. The local identifier is the WAN DynDNS FQDN. However, as for the remote FQDN, there should be none really, because clients are connecting to it, so the RV220W won't know in advance who's connecting and from where. I have read that when using the Responder type, the remote settings should not matter. Also, the PSK is 25 caracters long.After setting the RV220W up, I have set up a L2TP/IPSec VPN connection on my Windows 7. I have set up the connection to connect to the DynDNS address and set up the PSK in the Advanced settings. After I typed my IPSec username and password to connect (which was created in the IPSec users section), Windows tries to connect and times out :
Error 789 : The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer.
At the same time on the RV220W, this error shows up in the logs :
2012-08-26 23:45:24: [rv220w][IKE] ERROR: Could not find configuration for 24.54.xx.xx[500]
I can't figure out what I am doing wrong. I've read the Administration manual quite a few times and it seems that I have followed everything by the book.I have tried to enable/disable my Windows firewall, but did not get any luck. The RV220W is located at a remote office, to make sure that I can connect from the outside, before you think that I'm trying to connect to the outside, from the inside I have changed few settings in the IKE policy to try to make it work. Settings such as the Exchange Mode, because I've read that the Aggressive mode had issues. At this moment, the settings are back to default, once the wizard has been run. I'm thinking about setting a PPTP to confirm that this works, then move up to IPSec PSK, then to IPSec SSL Certificate.
Cisco Routers :: RV220W Connection Drops Intermittently?
Jul 12, 2011I installed the RV220W Router in my office about 2 weeks ago and everything works perfectly for 3-4 days but then my connection drops out and the router must be restarted to restore connectivity. When I say the connection drops basically the internet connection drops out and my network connections drop shortly thereafter. Usually the wireless connections lose connectivity followed within a few minutes by the wired connections.
Is there something in my firewall settings that could cause this issue? I have checked with my ISP to verify there are no problems on their end.
Cisco Routers :: RV220W WAN Connection Drops Frequently?
Apr 14, 2011I'm on firmware 1.0.0.26 and I'm seeing frequent drops in the WAN connection. Most network clients don't notice the drop because it reconnects, but the X11 windows server running over a VPN drops the session and I have to re-establish it. Also, at the same time I experience a 15-20 second silence gap on my VoIP phone connected to vonage (not over VPN). Never happened on my Linksys router, but it happens many times a day on the rv220w. When the drop happens I get the errors listed below in the router log:
Fri Apr 15 09:53:21 2011(EDT) [rv220w][System][PLATFORM] platformHandleDBUpdate:dot11STA op=18 row=1Fri Apr 15 09:53:21 2011(EDT) [rv220w][System][PLATFORM] /pfrm2.0/bin/bwLimitConfig /tmp/system.db 18 dot11STA 1 failed. status=-1Fri Apr 15 09:53:21 2011(EDT) [rv220w][System][EVTDSPTCH] umiIoctl (18, UMI_CMD_DB_UPDATE(4)) failed. table=dot11STA row=1Fri Apr 15 09:53:23 2011(EDT) [rv220w][Kernel][KERNEL] ERROR:endChantRecv: protocol PNAC returned !OKFri Apr 15 09:53:23 2011(EDT) [rv220w][Kernel][KERNEL] ERROR:endChantRecv: protocol PNAC returned !OKFri Apr 15 09:53:34 2011(EDT) [rv220w][System][PLATFORM] platformHandleDBUpdate:dot11STA op=9 row=1Fri Apr 15 09:53:35 2011(EDT) [rv220w][System][PLATFORM] /pfrm2.0/bin/bwLimitConfig /tmp/system.db 9 dot11STA 1 failed. status=-1Fri Apr 15 09:53:35 2011(EDT) [rv220w][System][EVTDSPTCH] umiIoctl (18, UMI_CMD_DB_UPDATE(4)) failed. table=dot11STA row=1
Cisco Routers :: RV220W - How To Configure SSL VPN Users Connection
Jun 25, 2012how can i configure the SSL VPN users connexion to connecte from my remote PC (Windosws 7 32 & Internet Explorer
View 1 Replies View RelatedCisco Routers :: PPTP Connection To RV220W Fails?
Jun 4, 2012I've got trouble using PPTP connections with the RV220W small business router.When trying to connect to the router of a branch office with the Windows PPTP client (i.e. on Windows 7) from outside the companies network first everything seems to be in working order (user name and password are checked, the device is registered in the remote subnet) but then a window pops up saying there has been an error connecting.
Here is some information on my setup:RV220W with firmware 1.0.3.5It connects to the Internet using PPPoE dialindyndns account configured and workingAnother router working in "Act as a DSL modem" mode is used as a modem (AVM FRITZ!Box 7170)The RV220W is maintaining a IPSec tunnel to a main office, which is working finethere are 2 local VLANs (one with access to VPN tunnel, one without), each with a own subnet (192.168.201.0/24 and 192.168.202.0/24)PPTP users are on a seperate subnet (192.168.203.101 - 192.168.203.111) My first guess was, that the intermediate router acting as the modem could be a problem, but i verified all settings on that router and it should not filter anything. After all port forwardings, the IPSec tunnel and so on are working.
Cisco Routers :: RV220W Cannot Establish PTPP VPN Connection Over WAN
Sep 22, 2011I am not able to establish a PTPP connection with my iPhone over WAN. When I am in my local Wireless LAN it works nice using the external FQDN of the RV220W. But when I test the VPN access over 3G (meaning I am coming in over the WAN port) I get and error message that the connection to the PPP server could not be established.
Some more Info
- Running latest firmware
- Port 1723 is open to the Internet
- ISP doesn't filter anything
- No Firewall settings blocking anything at the moment
- Nothing in the logs indicating what the problem is
So what needs to be done here to get it running over the WAN port and not only over the LAN ports?
Cisco Routers :: RV220W Won't Recognise Internet Connection
Sep 11, 2011My RV220W is sitting behind a Dynalink RTA1046VW ADSL Modem.
Can't get the RV220W to detect an internet connection through the WAN port. Have got the PPPoE profile set up etc. Have tried the Dynalink in bridging mode, but to no success. Tried the setup wizard.
Firmware is current: v1.0.2.4. The connection is picked up ok through the ethernet ports.
Cisco Routers :: RV220W WAN Connection Drops Every Hour
Aug 24, 2011Lately (after upgrading to 1.0.2.1 and 1.0.2.4) I have been seeing these particular errors in my syslog server:
10.0.0.1 01/02/11 17:54:47 08/24/11 12:54:58 kernel Warning rv220w "KERNEL [Kernel] ERROR:endChantRecv: protocol PNAC returned !OK"
10.0.0.1 01/02/11 17:54:47 08/24/11 12:54:58 kernel Warning rv220w "KERNEL [Kernel]
[Code].....
Cisco Routers :: RV220W SSL Connection Via Open VPN Client
Sep 27, 2011I'm wondering if it's possible to setup SSL VPN connection via OPEN VPN client?I'm a Mac OS 1.7 user with Tunnelblick.
I tried to use "built-in" SSL VPN Tunnel client but unfortunately it's not working - during installation Java exception appears saying that either I don't have admin privileges or there is not enough space.. Of course I'm admin and there is plenty of space...
Cisco Routers :: RV220W - How To Make Successful VPN Connection
Jan 16, 2012I'd like to enable client to router VPN connections. I have a question how to make any sucessful VPN connection to RV220W. From all the tests I made only SSL VPN on Windows XP x86 client machine was working.
For IPSec VPN I always receive this message: [rv220w][IKE] ERROR: Could not find configuration for XXX.XXX.XXX.XXX[500]. I tried with windows and shrewsoft vpn client.
Can't make SSL VPN to work in Windows 7 x64 client because the drivers are not digitally signed. It only works in Windows XP x86 but this is not acceptable. I need universal solution for win clients.
I also need working solution for Android Phone? Router firmware 1.0.3.5. I also tried this step by step guide. No go.
Cisco Routers :: RV220W Remote PPTP VPN Connection Fails?
Jan 23, 2012i'm having problems connecting to my RV220W using PPTP. The first time I set up PPTP on the box, everything worked just fine. Now, however, PPTP just won't work. No matter how I try to tweak various settings on the router, the connection fails. I have tried connecting with Windows 7, Android and OSX with no success.The router came with version 1.0.1.0, and I have tried downgrading to 1.0.0.26 and upgrading to 1.0.3.5, but alas, I can't seem to make PPTP work again.
View 1 Replies View RelatedCisco Routers :: Make IPSec VPN Connection From IPhone To RV220W
Aug 22, 2011i have try to make a IPSec VPN Connection from my iPhone to my RV220W.
On the iPhone i get the message "The VPN Server was not found".
It is possible to make a IPSec Connection or only a PPTP ?
