How to configure a RV220W in normal routing mode (No NAT)

Hi,
I have been very busy the last few days in trying to configure this router in normal routing mode. I do not want to have double NAT in my network. This is my setup:
C class IP network connected to the internet via a Fritzbox router. I need this router becasue of the VOIP services it provides. I want to use the RV220W to isolate certain users from the rest of the network. When I configure the router in WAN (NAT) it partially works, e.g. I can browse, send email but cant make a connection to a apple fileserver which is on the base network. When I try to operate in normal routing mode I cant get it to work. I am sure I am doing something wrong with the static routes.
Setup:
Internet <-> Fritzbox (192.168.12.0/24) network <-> RV220W <-> LAN 1 (192.168.1.0/24) users to be isolated.
On the 192.168.12..0/24 network the printer, fileserver and PBX are connected.
Please help me in configuring this.
The firmware is the latest 1.0.5.8.
Thanks in advance!
Peter

Hello Peter,
Sorry for the late reply, but I figured I would post anyone in case anyone else has this question.
You can put the router in what is called router mode by logging into the admin page and going to Networking >> Routing >> Routing Mode and selecting Router.
I am only looking at an emulator, but I believe this will cause a reboot. Once in router mode NAT and the firewall are disabled, however access rules do still work.
You will still need a static route from your Fritzbox to the 192.168.1.0/24 network on the RV220W, and the RV220W should have the Fritzbox as it's default gateway on it's WAN interface. You may also need to create an ACL to allow traffic from the Fritzbox network through the RV's WAN port.
Some Apple devices depend on the Bonjour protocol to work properly, which doesn't always traverse subnets well, so if after all of that it still doesn't work you may have an issue with Apple.
Thank you for choosing Cisco,
Christopher Ebert
Network Support Engineer - Cisco Small Business Support Center

Similar Messages

How to configure GlobeSurfer II umts modem router to act as just a modem

Sorry if this has been asked before but after three days of searching I haven't been able to find an answer.
I'd like to know how to configure a GlobeSurfer II umts modem router to act as just a modem allowing my TC to provide all the remaining wireless services.
I know the combination can easily be made to work with the TC as in bridge mode but doing that loses features of the TC that I'd like retain.
I've found a fairly comprehensive manual on line but it doesn't address my specific needs and I'm not techie enough to interpret the information that's provided into a work around.
Thanks

Hi Bob,
many thanks for answering. GlobeSurfer suggested the following
"the easiest is to use the Ethernet to connect the GlobeSurfer to your Capsule. Make sure that you have the 2 routers having difference IP address ranges and they don't overlap each other."
That pretty much contradicted everthing I've read in discussions so I've asked for information on how to
1. stop the GlobeSurfer from acting as DHCP and stop it providing IP addresses
2. make the GlobeSurfer a client of the Time Capsule
I was already using an e cable between the two but in the mean time I did the rest of what they sggested. The only warning I got on the TC was a "Double Nat" for which I clicked "ignore".
As a result I have the two networks that I wanted, (one protected with private HDDs and printer attached and one guest), I can connect to the internet through both, I've been able to extend the main using an Extreme in bridge mode and there's no sign of a third network being produced by the GSII. I'm delighted and I'm stunned to say that it worked.
It'll be interesting to hear what they come back with.
Thanks again

How to configure users for internal mail routing only in exchange 2013

Hi Guys!
I have a scenario here that i have three (3) group of users, one group is able to have an inbound and outbound mail, meaning they can send and recieved emails from internal and external.The second group of users should have inbound mail(local mail) only
(cannot send and recieved mails from internet), and the third (3) user is they can recieved an outbound mail but they are not allowed to send mail directly to the client,(Ex.
[email protected],[email protected],[email protected]) instead they will use the
[email protected] as the reply to the client. Please let me know how to configure group user 2 and 3.
Thank you.
regards,
Paul

Hi Paul,
Great advice from Maganti, just elaborating steps:
Prevent Group 2 send e-mail to internet by transport rule:
1. Login EAC with administrator, Mail Flow---> Rule, click “Create a new rule, then give a name “Group2 - No Internet Mail”.
2. Conditions: select "From a member of a distribution list" & select group "Group2"
3. Select another condition "Sent to users inside or outside the organization" & Select Outside.
4. Actions: select "send bounce message to sender with enhanced status code" & write your custom message like “You are not authorized to send mails to internet”.
Prevent Group 3 directly send e-mail to internet, however it can send message as group:
We also can create a transport rule which is same with Group2, then open Active Directory Users and Computers to add send as permission with another group (contain same users as group3).
Best Regards,
Allen Wang

How to configure users for internal mail routing only

Hi Guys!
I have a scenario here that i have three (3) group of users, one group is able to have an inbound and outbound mail, meaning they can send and recieved emails from internal and external.The second group of users should have inbound mail(local mail) only (cannot send and recieved mails from internet), and the third (3) user is they can recieved an outbound mail but they are not allowed to send mail directly to the client,(Ex. [email protected],[email protected],[email protected]) instead they will use the [email protected] as the reply to the client. Please let me know how to configure group user 2 and 3.
Thank you.
regards,
LRMCP

Hi LRMCP,
Procedure is perfect which is given by Benoit, just elaborating steps.
Prevent form Sending Mails:
Create a transport rule on Hub Transport Server:
Organization Configuration -> Hub Transport -> Transport Rules -> New Transport Rule -> Give Name “Group2 - No Internet Mail”
Conditions: select "From a member of a distribution list" & select group "Group2"
Select another condition "Sent to users inside or outside the organization" & Select Outside.
Actions: select "send bounce message to sender with enhanced status code" & write your custom message like “You are not authorized to send mails to internet”
Prevent from Receiving Mails:
New User: You can select “require that senders are authenticated” while creating new users which will stop receiving mails from internet.
User -> properties -> Mail Flow Settings -> Message Delivery Restrictions -> Properties -> set Sender Authentication.
For Existing Users:
You have already a group named "Group2" so set sender authentication for all members with this single command.
Get-DistributionGroup "Group2" | Set-Mailbox -RequireSenderAuthenticationEnabled $true
Same procedure mentioned for group2 can be followed for Group3 to prevent from sending mails.
Amit Tank || MVP - Exchange || MCITP - Exchange 2007 || http://ExchangeShare.WordPress.com

Help. How to configure ASA5515 as 'one armed router' for access to DHCP server on a different VLAN

Hi,
My setup
     router > ASA5515(ver8.6) > 4 SGE2010p switches
I want to put the guest WiFi users on a separate network. I have layer 2 switches and want to configure the ASA5515 as a 'router on a stick' setup for the guest vlan to have access to the DHCP server on the native vlan.
I have
1. created a sub-interface for the inside interface and enabled intra-interface traffic.
2. A static route on the ASA point the guest network to the switch.
What else do I need to configure on the ASA for inter-vlan routing?
ASA related config:
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 10.15.xx.1 255.255.252.0 standby 10.15.xx.2
interface GigabitEthernet0/1.2
vlan 100
no nameif
no security-level
ip address 10.100.xx.1 255.255.255.0
C    10.15.xx.0 255.255.252.0 is directly connected, inside
S    10.100.xx.0 255.255.255.0 [1/0] via 10.100.xx.2, inside

Thanks for the quick response Reza.
Actually that command is already there. Didn't include it in my post.
So I am guessing my ASA config is correct.
I am having trouble setting up the trunk ports on the layer2 SGE2010P switch for trunk port.
I am used to command line layer3 switches (CLI is wasy) but not familiar with these switches GUI. I am going through the config guide right now.
Could you help me with that too?
Not to bother you with a completely different issue though.
Thanks again!

Example Config ACE routed mode with NAT

Hi all,
i have a two-arm loadbalancer (routed mode).
client ->vlan100->[VIP]Loadbalancer[NAT] ->vlan200-> serverfarm
But i have my problems to configure the NAT. Can anybody show me a example configuration of a two-arm loadbalancer with NAT?
Especially the access-list, class-map, policy-map and on which interface the NAT-Policy must be added.
BR
Dominik

Hi Dominik,
Something like this:
access-list ANYONE line 10 extended permit ip any any
rserver host SERVER_01
ip address 10.198.16.2
inservice
rserver host SERVER_02
ip address 10.198.16.3
inservice
rserver host SERVER_03
ip address 10.198.16.4
inservice
serverfarm host REAL_SERVERS
rserver SERVER_01
    inservice
rserver SERVER_02
    inservice
rserver SERVER_03
    inservice
class-map match-all VIP-30
2 match virtual-address 192.168.1.30 tcp eq www
class-map type management match-any REMOTE_ACCESS
description remote-access-traffic-match
2 match protocol telnet any
3 match protocol ssh any
4 match protocol icmp any
policy-map type management first-match REMOTE_MGT
class REMOTE_ACCESS
    permit
policy-map type loadbalance first-match SLB_LOGIC
class class-default
    serverfarm REAL_SERVERS
policy-map multi-match CLIENT_VIPS
class VIP-30
    loadbalance vip inservice
    loadbalance policy SLB_LOGIC
    loadbalance vip icmp-reply active
    nat dynamic 1 vlan 452
interface vlan 451
    ip address 192.168.1.2 255.255.255.0
access-group input ANYONE
service-policy input CLIENT_VIPS
no shutdown
interface vlan 452
description Servers vlan
ip address 10.198.16.1 255.255.255.0
access-group input ANYONE
nat-pool 1 10.198.16.5 10.198.16.5 netmask 255.255.255.0 pat
no shutdown
ip route 0.0.0.0 0.0.0.0 192.168.1.1
Cesar R
ANS Team

How to configure listener across firewall and router

I am trying a test to see if the following scenario will work and I am looking for insight because I am not getting anywhere fast....
I have a computer on an internal network running oracle 9iR2. This computer has a web server exposed through a router/firewall with port 80 open. I want to open port 1521 and make the oracle listenser available to someone outside my network. The client only has internet access through their ISP. Basically it would be like hitting the web server over the internet. I am not sure if it is possible to use SQL*Plus to connect to a database server using the name of the router (www.company.com) and have the Oracle database available.

I have serious doubts that this will work.This sould working definitely. But this question is more related to networking than DBA.
So this action (and aalso analysis) must be done by somebody who are responsible for (and unsterstand) routing and firewall administration.
This "networking person" (credited as somebody before) must prevent unauthorized access to your DB and also prevent sniffing (for example your 3rd parties will be connected via IPSEC connection).

How to configure router in bridge mode

Hi
I have 2 cisco 2621 series routers to be configured in bridge mode.
i'll be connecting this 2 routers using serial connection 128 lease line.
the problem is im not sure how to configure this 2 routers in bridge mode.
as far as i know, i need to issue the command no ip routing.
is there anything else i need to do?
can anyone guide me on how to configure
the router in bridge mode? is there any support page for this is cisco website?
thanks
Jega

Please check the link to the configuration guide below. It describes how to configure transparent bridging.
http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_configuration_guide_chapter09186a00800ca65a.html
Regards,
Leo

RV220W - in routing mode changes external Ip with router IP

Good day.
I just installed one RV220W in my network, in routing mode (not NAT) using on WAN port public Ip 193.111.184.xxx and on LAN side on IP from my company public C class (212.100.143.0). It's working, but main ang huge problem is than Router is changing any IP coming from intenet with it's own 212.100.143.xxx IP, which mess up everything (logs, counters, etc).
It was using 1.0.1.0 firmware, I switched to 1.0.0.26 but nothing changed.
Also I have a VPN - gate to gate with another location (RV042), and all computers from other side of tunnel reports same router IP 212.100.143.xxx when accesing servers from my side, which also is bad.
Previously I user an RV082 for this joB and everything was great, except 100 Mb WAN/LAN ports of RV082, which I will use until get Rv220W working right.
Any idea is apreciated.
Thank you,
Catalin Burla

I have changed this weekend from a DSL using a Linksys by Cisco WAG54G2 to a Cisco RV220W Small Business Router and just found out the same problem. This is serious for me, for one, it completely destroys SPAM blocking with DNS blacklists.
This is how it looked when using the linksys:
Apr 9 03:18:17 vanroodewierda postfix/smtpd[49507]: connect from 189-041-10-204.xd-dynamic.ctbcnetsuper.com.br[189.41.10.204]
Apr 9 03:18:18 vanroodewierda postfix/smtpd[49507]: NOQUEUE: reject: RCPT from 189-041-10-204.xd-dynamic.ctbcnetsuper.com.br[189.41.10.204]: 554 5.7.1 Service unavailable; Client host [189.41.10.204] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=189.41.10.204; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<189-041-10-204.xd-dynamic.ctbcnetsuper.com.br>
This is how it looks when using the RV220W:
Apr 10 18:34:29 vanroodewierda postfix/smtpd[31608]: connect from ciscorouter.rna.nl[192.168.2.254]
And thus DNSBL is not possible. My RV220W uses One-to-One NAT to route one of the 5 outside WAN IP addresses I to the mail server on the LAN. Because I do not get the external IP address passed on to the inside, postfix has nothing to go on. I tried instead to use the normal port forwarding in the IPv4 rules on my main WAN IP address, but that doesn't help.
How and where can I report this and how long will it take Cisco to fix something like this? Because this is very important for me (and my users) and I'll have to return the router and buy another brand if it takes too long.

How to configure FXO and FXS port?

hi,
can anyone help me on how to configure FXO port on 2820 router and FXS port on 2810.
What are the things i need to configure to make a voip network that connect to PSTN network and PBX?

hi
do refer this link which can provide you fair idea to get started with your configs.
http://www.cisco.com/en/US/partner/tech/tk1077/tech_configuration_examples_list.html
regds

ACE Routed mode - cannot see serverside network

Hi all,
I'm having a problem with the first context I've set up in pure routed mode without NAT. Taking advice from this forum I've defined the interface for the serverside VLAN only in the ACE context. Trouble is this doesn't seem to have propagted into the routing table.
The ACE can see the servers - they are in the ARP cache and can be PINGed from the context.
A show IP route on the 6500 doesn't find the serverside subnet in the routing table.
Am I missing something obvious. I've attached the config if that helps.
Thank you
Cathy

I am not sure what your question is
Are you not seeing the VIPs in 6500 routing table? If its about vip the RHI (Route health injection (loadbalance vip advertise) should take care of it.
Or you want to see the Server vlan in the routing table of 6500?.
If thats the case then that is not going to happen. You will have to add static routes and redistribute them in the network (on upstream router).
Syed Iftekhar Ahmed

How to configure router with static IP

Hi,
I have requested a static IP from ISP provider.
Now I would like to give static IP addresses to all my internal PC's using my Mac Extreme router.
my ISP requires the Airport extreme to be configured in 'DHCP' (internet connection).
If I use 'static' then the ISP router does not see my Extreme router.
However my mac router does not allow me to use internet connection 'DHCP' when using router mode 'DHCP only'
Can anybody give me a some tips?
Thanks in advance

You are talking about two completely different Static IP questions here.
If your ISP has issued a Static IP address to you for the AirPort Extreme, this is the IP Address that you must use in order for your AirPort Extreme to connect to the Internet.
Open AirPort Utility, click on the AirPort Extreme icon and then click Edit
Then click on the Internet tab a the top of the screen.
The setting for Connect Using must be set to Static, and you will need to enter in the IP address, DNS servers, etc information that your ISP has provided for you to be able to connect to the Internet. In the screenshot example below, you would enter the Static IP address that your ISP provided to you in the IPv4 box.
For now, click the Network tab at the top of the screen and insure that the setting for Router Mode is set to DHCP and NAT.
We first need to make sure that your AirPort Extreme can connect to the Internet using the Static IP address that you have been assigned.
Then, we will tell you how to set up Static or Reserved IP addressed for each of your devices on your local network if this is what you want to do. Normally, this would not be needed, but it can be done if you wish.

I want to set up the Time Machine and I would love to use the Time Capsule but since I already have a wireless router I need suggestions on what other external disks Apple could recommend to use with the Time Machine and how to configure that disk

I want to set up the Time Machine and I would love to use the Time
Capsule but since I already have a wireless router I need suggestions on
what other
external disks Apple could recommend to use with the Time Machine and
how to configure that disk.
A complication that I need to resolve is the fact that I am using Vmware
Fusion to be able to use Windows on my Mac. Now it seems that Time
Machine is not backing up my files
on that virtual Windows without additional configuration and my question
is whether you can advise me here or whether this is only a matter for
the Fusion virtual machine.

If you want to use Time Capsule you can.. you simply bridge it and plug it into the existing router.. wireless can be either turned off or used to reinforce the existing wireless.. eg use 5ghz in the TC which is much faster than your 2.4ghz.
You can also use a NAS.. many brands available but the top brands are synology, qnap and netgear readynas series. These will all do Time Machine backups although how well always depends on Apple sticking to a standard. There are cheaper ones.. I bought a single disk zyxel which was rebadged and sold through my local supermarket. It actually works very well for TM at least on Snow Leopard. Major changes were made in Lion and again ML so do not instantly think it will work on later versions. I haven't tried it yet with those versions.
Any external drive can be plugged into the mac. Use the one with the fastest connection or cheapest price according to your budget. USB2 drives are cheap and plentiful. But no where near as fast as USB3 or FW800. So just pick whichever suits the ports on your Mac. Interesting Apple finally moved to USB3 on their latest computers.
TM should exclude the VM partition file.. it is useless backing it up from Mac OS side.. and will slow TM as it needs to backup that partition everyday for no purpose.. TM cannot see the files inside it to backup just the changes.
You need to backup windows from windows. Use MSbackup to external drive.. if you have pro or ultimate versions you can backup to network drive. But MSbackup is a dog.. at least until the latest version it cannot restore the partition without first loading windows. There are about a zillion backup software versions for windows.. look up reviews and buy one which works for you. I use a free one Macrium Reflect which does full disk backups and is easy to restore.. to do incremental backups though you have to pay for it.

How to configure one dsl connection and one public ip in cisco router and map to one interface for using exchange server

how to configure one dsl connection and one public ip in cisco router and map to one interface for using exchange server

Hi ,
Have you got any additional public IP Address from your service provider , If yes on router you can have static route for those additional IP Address pointing to your ASA outside interface .
Accordingly you can configure NAT
HTH
Sandy .

How to configure WRT350N as a router in a network wih a DSL modem/router

Hi,
I'll really appreciate if somebody please could give me some help.
The problem is that I have a Dlink DSL-2640B modem/router AND a Linksys WRT350N router, what I want to do is how to configure them so they both are in the same network, and the WRT350N has access to internet and the computers connected to the DSL-2640B.
Is that possible?....OR...the other option I was thinking was leave the DSL-2640B as a modem only, and have the WRT350 make all the routing wired and wireless.
I'll really appreciate your comments.
Regards.

As per my knowledge it is better to use the wireless router to provide connection to wired & wireless computers. Leave the DSL2640B as a modem, connected to internet port on wireless router.

How to configure a RV220W in normal routing mode (No NAT)

Similar Messages

Maybe you are looking for