×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Gateway to Gateway VPN tunnel on RV042

Unanswered Question
Sep 4th, 2013
User Badges:

Hello,


We have two sites with a few users on each, which we need to interconnect using VPN tunnel using two RV042 routers. Sites connected to each other via Ethernet, so we can use Static IPs on both sites. A simple diagram is like this:



                                                                           PC1                                               PC4

                                                                            |                                                      |

                                                                            |                                                      |

                                                       PC2 ----------RV042 <---------------------------------------> RV042 ------- PC5

                                                                            |                                                      |

                                                                            |                                                      |

                                                                          PC3                                                PC6


I have used this example and the similar to configure VPN tunnel between the routers, but no success. Only when I use "Keying Mode" as Manual, sites connect immediately, even on another router IKE with Preshared key is set. I used all IPSec settings by default, I also tried another authenticating and encryption settings, but again without success.


Both routers have the latest firmware v4.2.2.08.


Please anyone help me.

Thanks!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jeffrrod Fri, 09/06/2013 - 09:25
User Badges:
  • Bronze, 100 points or more

Dear Farhad,


Thank you for reaching the Small Business Support Community.


Please check on the below document to double check on the VPN gateway to gateway configuration settings;


http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=304


If everything is correctly configured on both sides and still unable to establish the VPN connection, I would then suggest you to uncheck some of the 'Advanced" VPN settings; starting with "Dead Peer Detection", if still nothing then uncheck the "keep-alive" and then "Aggressive mode" if still no success.


Please try this out and let me know if there is any further assistance I may help you with.


Kind regards,



Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer


*Please rate the Post so other will know when an answer has been found.

Farhad Mustafayev Fri, 09/06/2013 - 11:27
User Badges:

Dear Jeffrey,


All made in accordance with suggested instruction. No result.

On the next week I`ll try reach the site and made corrections  with VPN settings, but I remember that I tried enabling and disabling advanced settings as well.


Anyway, thank you very much, I'll try it again.

tie0000011 Mon, 02/15/2016 - 21:29
User Badges:

If you are connecting  via ethernet,  why  bother  with  VPN ?  Why not  just  use  routing  rules  to  connect  them  with a  smart  switch ?


hammalhi Fri, 09/06/2013 - 10:17
User Badges:

If you choose VPN Gateway to Gateway


  1. add a new tunnel
  2. give the tunnel a name like "business name city name"
  3. chose the LAN port to use WAN1
  4. next is local group setup.
  5. I use IP Only
  6. the router WAN ip address is there and greyed out. take note         of this IP
  7. Local Security Group Type SUBNET
  8. enter your internal IP segmant. (if you are using 192.168.1.1         then enter 192.168.1.0
  9. enter subnet 255.255.255.0
  10. Remote group setup is next.
  11. again IP only
  12. enter Her WAN IP address
  13. Choose Subnet
  14. then enter her internal IP segmant. note it has to be         different then yours. (if you are using 192.168.2.1 enter         192.168.2.0)
  15. Ike with preshared
  16. Group 1
  17. DES
  18. MD5
  19. 28800 and so on
  20. Enter the pre shared key and take not of it




Look at page 36    http://www.cisco.com/en/US/docs/routers/csbr/rv042/admin/guide/RV042_V10_UG_C-WEB.pdf




Now do the same thing on the other router just revers the local       and remote security groups. it is important that the two router       are on different Ip segments.


if you have any question just ask.


Thanks

lutlai Fri, 09/06/2013 - 10:47
User Badges:

Hey Farhad,


Could you possible upload pictures of your configurations so we can further troubleshoot your problem?


Thanks,

Lutz Lai

asanchezll Tue, 02/09/2016 - 15:37
User Badges:

                         PC1                                               PC4

                                                                         |                                                      |

                                                                         |                                                      |

   PC7------ Router01---------PC2 ----------RV042 <---------------------------------------> RV042 ------- PC5

                                                                         |                                                      |

                                                                         |                                                      |

                                                                        PC3                                                PC6

Does RV042 support this?


Actions

This Discussion

Related Content