×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

RV220W vpn question

Unanswered Question
Jun 25th, 2012
User Badges:

Hi i have my RV220 running 5 vpn site-site tunnels.


192.168.1.0 --> 192.168.2.0  

192.168.1.0 --> 192.168.3.0

192.168.1.0 --> 192.168.4.0

192.168.1.0 --> 192.168.5.0


I connect to my 192.168.1.0 network with SSL VPN and PPTP VPN from my ipad so far so good.

But i am not avalible to use any network resources on any of the other networks. I would like to be able to access the other networks 192.168.2 / 5 when i have vpn in to my 192.168.1.0 netowork. Is this possible?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 1 (1 ratings)
Loading.
Davidwagman1 Mon, 06/25/2012 - 07:29
User Badges:
  • Gold, 750 points or more

Hi Alexander:


Under VPN -> SSL VPN -> SSL VPN policies create a policy to allow ssl vpn traffic to those networks.


For detailed instructions, see the manual p. 121 (printed page #, not PDF page #).


Best,

David


Please rate helpful posts.

onlyalex1984 Tue, 06/26/2012 - 23:23
User Badges:

Hi David thanks for taking the time to help.


I have tried to create different kind of policy's but that does not work


I added an policy to Resource, IP Adress, IP Network and All IP Addresses and used the remote 192.168.2.0 network but that does not work.


By default when i sslvpn into my main site 192.168.1.0 everthing is open. I want to belive the SSL VPN Policy is to restrict or open to my main site but has no effect over the site-to-site ipsec tunnel to another site.


If im incorrect and this is indead possible please advice what i need to add to make it work.My network is setup like this:


SSL VPN --> WAN --> [Site1 192.168.1.0] --[WAN site-to-site vpn---> [Site2 192.168.2.0]

Davidwagman1 Wed, 06/27/2012 - 05:29
User Badges:
  • Gold, 750 points or more

Try configuring client routes, under VPN->SSL VPN Client -> Configured client routes. Add in the destination network of the site to site vpn (ip addr, subnet).


Please also make sure that split tunnel support is checked (VPN -> SSL: VPN Client -> SSL VPN Client)


Are you testing with pptp or ssl vpn? Please try with SSL, I believe that for pptp you're going to have to add in an IKE policy for the pptp connection under the site to site vpns.


Best,

David

onlyalex1984 Fri, 06/29/2012 - 06:22
User Badges:

Hi i try adding the following


192.168.2.0

255.255.255.0


Split tunnel is selected and im trying to connect with the ssl vpn client but that does not work.

Is this my units that does not work or maby this is not even possible with this device ?

Te-Kai Liu Wed, 07/04/2012 - 09:44
User Badges:
  • Gold, 750 points or more

Instead of the Split Tunnel mode, why not trying the Full Tunnel mode, which will force all traffic from the client to go into the tunnel. 

simonslater Sat, 06/30/2012 - 03:01
User Badges:
  • Silver, 250 points or more

Are the different subnets on the same VLAN or seperate ones? if they have separate ones are the VLANs set for

"Inter VLAN Routing" ?


Regards Simon
http://www.linksysinfo.org