Need Help Setup Cisco RV042 vpn

good day everyone, a month ago my boss purchase 4 pcs cisco rv042 vpn to be used in our small office and to our satelite office, with expectations of simple file sharing and remote troubleshooting and for better and safe data transfer. since the task is given to me as an IT staff it is difficult to me to setup this vpn router since i have a little idea and many question are on my mind that need to be answered, i read the manual test the vpn router but still no good answered found. i know it is dufficult but with proper guide and step by step on how to use this one i can make it work. please anyone help me i need answers to this questions.
i am using windows 7 pro sp1 64bit for my test unit, how can i make a vpn server? a client?
in the past i connect the internet connection in the internet connection port in the back of the router, then another cable from vpn port 1-4 i select #4 port to connect to my pc, since the vpn give the ip on my pc i can easily connect to the firmware of the vpn using the deafault username and password. when i go to the firmware i dont know where to start, and i dont even have the internet connection for my pc.
i feel sorry for myself beacuse i have no idea in this kind of thing, CISCO people and others out there i am calling for your help.
thank you in advance
mel

Dear Emilio,
Thank you for reaching Cisco Small Business Support Community.
If you’d like to setup a Site to Site VPN on your RV042 here is a good step by step guide;
http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=304
If you are looking into a remote access VPN, QuickVPN, here is the step by step procedure;
http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=452
Just in case here is also a document with Windows operating systems tips;
http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2922
Finally here is a link with the Admin Guide where starting on page 122 you can find everything related to VPN setup on this particular device model, beside info in how to setup your internal network (I suggest you to go through this admin guide so you know everything about the router);
http://www.cisco.com/en/US/docs/routers/csbr/rv0xx/administration/guide/rv0xx_AG_78-19576.pdf
Please let me know if there is any further assistance we may assist you with.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.

Similar Messages

Need help for CISCO RV042

We have four internet line. Two are dial up using with PPPOE 5 mbps each. And two more of 5 and 2.5 mbps respectively coming out from BSNL modem and can directly connect to LAN port. Now we would like to connect all lines with RV 042 load balancing router to have optimum speed. Pl. guide how to do it?

Stoyan,
Post limit more specific questions so we can assist. This router is really straight forward if you get stuck at a point please post a question. Forwarding rules are under setup tab, if you plan on using one to one nat its right beside forwarding and for DHCP/DNS for lan. The next tab over. If you are going to be using dual wan load balancing then you want to set up protocol binding/outbound for HTTP and HTTPS.
Thanks
Jasbryan
Cisco Support Engineer
.:|:.:|:.

Cisco RV042 VPN unable to connect to Netgear PS FVS318

Hello,
We recently replaced one of two Netgear ProSafe VPN FVS318 with a Cisco RV042 VPN. Both Netgear were configured site-site and was working fine until one of them failed. We copied as much configuration settings from the failed Netgear PS to the RV042 but were unsuccessful in establishing a connection between the two sites.
The logs on the Cisco router shows this:
VPN Log packet from 1.1.1.1:500: received Vendor ID payload [RFC 3947]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
VPN Log packet from 1.1.1.1:500: [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet
VPN Log packet from 1.1.1.1:500: [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet
VPN Log packet from 1.1.1.1:500: initial Main Mode message received on 2.2.2.2:500 but no connection has been authorized with policy=PSK
Each time we select a tunnel test connect, that last message appears with "but no connection has been authorized with policy=PSK"
*replaced actual IP with sample IP.
Any ideas why this is happening?
Thank you!

Hello,
It looks as RV042 receive phase 1 configuration from Netgear, but due to mismatch with it's phase 1 settings does not reply back.
I can't be more specific as this could be anything in phase 1 - aggressive/main mode; the WAN IP addresses, encryption or SA lifetime. As well if any of the devices is behind NAT, the option NAT traversal should be checked.
Regards,
Kremena

Need help with setting up VPN on a Cisco EPC3925 Modem

Hi everyone,
I need help setting VPN on Cisco EPC3925 modem (I tried using Help and I have read the entire section in the manual but the manual is not the same as the window I get in my settings. For example in the manual they say I can choose "all" under Remote Secure Gateway but there is no option like that).
When I go to the VPN section this is what I get:
1. Does this mean that I can connect to my modem via VPN from some other location? I would like to be able to connect to this modem when I am not at home from some remote location from my computer in order to be able to use NAS-Storage.
2. If the answer on the first question is yes, what settings I need to enter for the:
Local Secure Group
Remote Secure Group
Remote Secure Gateway
My ISP is using dynamic IP but I have DDNS.
My router local IP is 192.168.0.1
Subnet: 255.255.255.0
Starting IP Address: 192.168.0.10
Here is how the advanced settings looks like:
Thanks in advance for your help!

My problem similar too this. I create a tunnel between two epc3925 but impossible to send data between them.
The status is connected. What can I do? UPC tell me this router has only vpn client so i will doesn't work.

Help with Cisco RV180 VPN

I have installed the Cisco RV180 VPN at a customer location.
Because this customer makes credit card transactions over the Internet, their merchant account requires a third-party to perform a security scan on the gateway. When scanning, the third-party states they are not in compliance with this report:
THREAT REFERENCE
Summary:
TLS Protocol Session Renegotiation Security Vulnerability
Risk: High (3)
Port: 443
Protocol: TCP
Threat ID: misc_opensslrenegotiation
Details: Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
06/11/12
CVE 2009-3555
Multiple vendors TLS protocol implementations are prone to a security vulnerability related to the session-renegotiation process which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context.
Information From Target:
Service: 443:TCP
Session Renegotiation succeeded on 443:TCP
They are using the QuickVPN Client to connect and must be able to connect from anywhere in the world. From my understanding, port 443 must be opened for the QuickVPN Client to function. How do I block port 443 from everyone except the QuickVPN Client? Or how do I configure the RV180 to satisfy the above threat?
Thanks in advance for any information you can provide.

Hi,
following config is for cisco VPN client access with dynamic allocation and split-tunnel.
Hope this helps, please rate post if it does!
aaa new-model
aaa authentication login userauthen local
aaa authorization network groupauthor local
username vpnc password 0 userpass
crypto isakmp client configuration group vpncg
key grouppass
dns 4.2.2.1
wins 10.59.2.10
domain domain.com
pool ip-pool
acl 108
crypto ipsec transform-set myset esp-aes esp-sha-hmac
crypto dynamic-map dynmap 10
set transform-set myset
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
interface FastEthernet0/0
ip nat outside
crypto map clientmap
interface vlan1
ip address 10.59.2.1 255.255.255.0
ip nat inside
ip local pool ip-pool 10.0.230.1 10.0.230.20
access-list 108 remark VPN client split tunnel
access-list 108 permit ip 10.59.2.0 0.0.0.255 10.0.230.0 0.0.0.255

I need help with Cisco IFS

All,
Background Information:
I am a network engineer and I manage a small business network. The network consists of a couple of 3750G access switches and 2 6503-E switches (one of these also serves as an access layer switch). I am looking to upgrade my IOS on my external facing switch so that I can use a 16 port 10Gbe ethernet module. In this switch, I have a SUP-720 3B in slot 1, a 16 fiber port 10Gbe ethernet moduld in slot 2 (not online yet), and a 48 copper port 1Gbe ethernet module. In the SUP-720, I have one CompactFlash card in disk0.
This is where I need help:
Like I said, I'm trying to upgrade my IOS software in order to support my new ethernet line card. I know that the images are stored in flash memory. However the IFS on my switch seems to be confusing. He is a print out of the cd ? command:
bootflash:
cns:
const_nvram:
dfc#3-bootflash:
disk0:
disk1:
flexwan-fpd:
null:
nvram:
sup-bootdisk:
sup-bootflash:
sup-image:
sup-microcode:
syslog:
system:
tar:
tmpsys:
<cr>
Can someone please tell me what all of these directories are used for???? I'm not sure where to store the IOS image. When I change directories to sup-bootflash: it looks like it has the same contents as sup-bootdisk. Also, when I list the contents in disk0:, sup-bootflash shows up in there. Is this just a soft link to that directory? I'm really confused and would like to know what all of these directories are used for. Does anyone know of a good white paper that explains the function of these directories?
Thanks,
Manny

Manny
I am not prepared to try to explain all the directories, which is a pretty good question. But I can answer the most important of your questions. Put the new image into sup-bootflash.
HTH
Rick

Need help configuring Cisco/Linksys wireless router to extend wi-fi signal to living room

My U-verse wireless gateway is in the back of our house. We live in an old 1920's home with solid wood walls. For our macbooks, we get a pretty decent signal, but my wife's iPad 2 get's poor wi-fi speeds. I bought a Cisco/Linksys WRT160N wireless N broadband router. I have a wired connection in my living room (going to a 4 port switch) then connected to my DVR. I tried hooking up the new router but ended up getting no signal on the iPad. In fact, it caused other issues. I ended up disconnecting it and re-booting my gateway. All came back fine. This wireless router replaces a similar unit that went out in after a power failure, so I know this can be done, but I forget exactly how I confiured the old one. I would like it to "extend" my signal to the living room, but I am also willing to create a new network (different SSID). Do I need to turn of DHCP? Are there any web sites that can assist me in configuring the router? I wish I didn't have to deal with this. The signal from the RG is great when you are in the back room (20+ down). But my wife gets about 3 down on her iPad in the living room. Thanks in advance.

Hi ,
I was doing some research on how this can be done. It does not appear there is an option in the Cisco router to set it up as an access point, but there are several options you can do to extend your network.
The first thing you can do is just set it up as a router behind router setup, and you will just have two separate networks. Make sure the DHCP pool does not conflict with the U-verse's gateway of 192.168.1.x.
The second thing you can do is connect the Ethernet cable to one of the LAN ports on your Cisco router instead of using the internet port. This should make it work like a smart switch.
With both setups, you want to probably change the SSID, network key, and wireless security settings to the same thing for wireless roaming abilities. That way, anyone that configures their wireless connection will be connected to both networks. Just make sure the wireless channels are not the same, and I would suggest having them at least 5 apart.
Hope this helps.
-ATTU-verseCare

Need Help on Cisco Wireless Solution!

Hello Netpros!
I have some issues that probably most of wireless implementers faced after implementing a wireless solution. This is an actual feedback from the customer and These issues can be broken down to the following:
1. The wireless Network is slow! (wireless performance)
The customer has Airtight in placed and airtight reports that users are mostly connected to the wireless network on 2 mbps speed. Users also says that their network experience using wireless are slow compared to wired network.
My question is what reports or guides that cisco wireless cotroller system or WLC can shows that proves the network is working as it is intended. Any guides on how to improve the user experience? Any guide from Cisco IT?
During these slowness, what reports from WCS or WLC that can best shows the problems and helps us implementers to mitigate the problem?
2. Baseline Wireless Performance.
When asked about a baseline performance of wireless network, what reports from the WCS or WLC that can show this and what is the acceptable or baseline values?
3. Is there a general guideline on how to use WCS or WLC reporting tools to troubleshoot a wireless performance issue? What reports to see? and how to translate that to say to the customer that the wireless network is under performing?
The main reasons i am asking these questions is because i cannot find any useful documents in cisco that guides the wireless implementers on how to use the reports generated by WCS or WLC when it concerns the performance of the wireless.
Most of the reports WCS generate that relates to the performance normally rounds up the AP performance, channel, noise, but how to translate that to user concerns is another matter.
Perhaps these issues are partly due to user expectations or maybe the wireless setup need to be tweaked or even might requires a spectrum analyzer to pinpoint interferences.
In either cases, I hope netpros can help direct me to good documentation albeit from cisco or other sources that can best outline wireless performance reporting using cisco wcs and wlc.
Background information:
The wireless network setup has one WCS, one location appliance, 4 WLCs and around 150 to 200 APs, most running Local and some running HREAP. Most of the issues concerns the local type APs.
Thanking all in advance!
maldin

Yup,
thats what we told the customer and even showed them the wlc/wcs reports.
Unfortunately, these customers are lacking in wireless knowledge and they want a streamlined, documented steps to generate the reports and also to help them understand in laymen terms.
At the moment we are formulating a holistic approach to the customer to get them understand wireless first, get them to have a policy and enforce and then drill down to management, reporting and troubleshooting.
The thing is, the wireless is always working fine, but sometimes so it happens some bigshots unable to connect to the wireless network in meeting rooms or somewhere and the become jumpy and pointing fingers.
So the IT manager wants to reduces the finger pointing by having the WLC/WCS to produce reports to them.

Newbie Needs Help Please - VoIP and VPN

Hello,
I have a question about some voip/vpn configuration. I've got two sites that have 1760 routers with fxo/fxs cards that are going to be tieing the two phone systems together with a couple of voip trunks. These are secondary devices on the network with no data traffic or real LAN even, but addressed with a 2nd wan ip on the fa 0/0 port. The only traffic going through these routers is voice/voip.
My question is about this voip setup with vpn. First off, should I or shouldn't I, or even can I? If I configure a site-to-site vpn connection, will the voip traffic pass over that? How would I set up a VPN tunnel for only the fxo/fxs cards with no "LAN" behind it? Is there a need to have a vpn? Any benefits to sending the voip data across vpn, other than the obvious encryption of the "call"?
The thing is, I've only setup a VPN with Cisco a few couple of times, and once was from a pre-configured script I found and the other was from some software called SDM. I've only known about setting up VPN's for connecting the LAN behind router A to the LAN behind router B. This setup has NO LAN. The only interfaces are the fa 0/0 (getting static wan ip), and the fxo and fxs cards handling the voice. I have no clue on how to configure a site-to-site VPN for this, or if I even can, or if I should.
The next two replies will have my voip configuration as it sits on the bench in testing; I have both fa 0/0 interfaces connected to the local LAN just for a connection and testing, but each will later be getting it's own static WAN IP on the fa 0/0 interfaces:

SITE 1:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname SITE 1
boot-start-marker
boot-end-marker
enable secret XXX
no aaa new-model
voice-card 2
voice-card 3
ip cef
interface FastEthernet0/0
ip address 192.168.254.30 255.255.255.0
speed auto
no shutdown
no ip http server
no ip http secure-server
control-plane
voice-port 2/0
connection plar opx 290
voice-port 2/1
connection plar opx 291
voice-port 2/2
voice-port 2/3
voice-port 3/0
connection plar 190
voice-port 3/1
connection plar 191
voice-port 3/2
voice-port 3/3
dial-peer voice 180 pots
destination-pattern 180
port 2/0
dial-peer voice 181 pots
destination-pattern 181
port 2/1
dial-peer voice 190 voip
destination-pattern 19
session target ipv4:192.168.254.40
line con 0
logging synchronous
line aux 0
line vty 0 4
password xxx
logging synchronous
login
transport input telnet
end

Need Help to configure RV042

Hi
Recently i bought RV042 for speed up my Internet connection. I have two ADSL Internet connection both have 1.5 mbps bandwidth speed and both have dynamic ip address. I want to setup connection in windows 2003 server, in server there is two network interface one is for LAN and second one is empty so i want to use this for RV042, this server act in my LAN as Microsoft exchange, proxy and DHCP.I try to connect this router to this server but server not get the ip address from RV042 and not able to access the router but when i connect it to my laptop it get the ip address and i am able to access the router, i am layman and need step by step help.
For better understanding my words i am attaching my network topology drawing and sorry for my poor english
Thanks

You may need static routes on the server to let the subnet on one card know how to get to the subnet on the other.

Need help regarding Cisco 1841 Router

hello everyone , i am need of help regarding configuring of FE 0/1 port. our company have a cisco 1841 router. The serial 0/0/0 is connected with VSAT for internet. The FE 0/0 is connected to switch(LAN) through which net connectivity is provided to all users. Recently a new VSAT has been installed at our site,with different IP series. So every time we want to switch between the two net connectivity we need to change the entire IP configuration of all users, which in turn prohibits the users from accessing the printers,data servers etc which are been set to our existing IP series. So, my idea was to configure the FE 0/1, so that just by changing the DNS will help us providing internet along with all other devices without changing the entire IP series. The new VSAT modem has a lan cable which can be connected to FE 0/1. Can any one help out in solving the problem. Our existing IP series is 192.168.3.1..... and the new VSAT series is 10.205.74.1......

Bao
Do I understand correctly that you will have 20 remote users who will telnet to the 2511 and from the 2511 will use reverse telnet to access the console of router1, router2, router3, etc which have their console ports connected to async ports of the 2511? If that understanding is correct then the firewall only needs to open TCP port 23 for telnet. The other ports (2001, 2002, etc) are between the 2511 and router1, router2, etc and will not be seen by the firewall. If my understanding is not correct then please clarify.
I do not believe that you will find an image for the 2500 that supports SSH.
HTH
Rick

Need Help reactivating cisco valet plus after 2 yrs

I had previously installed the cisco wireless at my old apartment. I've moved since and now I'm having difficulty setting it up at my new place. The old network I created pops up but seems locked. But when I click connect using the easy set up I keep getting an error message saying that there is no internet connection. I refuse to pay to $39.99 for troublshooting support after already spending so much on the device. I tried to reset it to the factory setting but that didn't seem to work.
If anyone can help me I'd really appreciate it.
Thanks!

To set up a Linksys router, you need to perform four (4) steps using the computer that is registered with the ISP:
i. Verifying Internet connection
ii. Connecting devices together
iii. Checking the router’s LEDs
iv. Configuring a Linksys router for DSL Internet connection
QUICK TIPS:
The router’s power adapter needs to be plugged to your router and into an available power outlet.
If using a wired connection, the first Ethernet cable needs to be plugged to the computer’s LAN port into any of the router’s blue numbered Ethernet ports.
The second Ethernet cable should be plugged to the modem’s Internet port and the other end into the router’s yellow Internet port.
Ensure that you have no firewall enabled that may prevent the router from being detected.
Here is the link for setting up your Linksys Wireless Valet router for the first time using Cisco Connect: http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=e30f926604334d538668529cb50ad174_21463.xml&pid=80&...
If you still encounter problems installing the router using the Cisco Connect program, you may configure the router manually according to the type of Internet service you have. Follow the instructions below for your specific Internet service type:
To learn how to set up your router with Cable Internet service, here is the link: http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=0ff4c94586a345d082828ec2161aaecf_3686.xml&pid=80&r....
To learn how to set up your router with DSL Internet service, here is the link: http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=20ee1457387f40178cd5f41d4b585db4_3687.xml&pid=80&r... .

Help with cisco 837 VPN firewall configuration

Hi guys,
I attempted to configure remote access VPN using cisco 837.IPSEC and firewall features were added already.However, the VPN client keeps saying "remote peer no longer responding".
Upon removing firewall and ACLs, VPN client works. Therefore, I believe these two parts went wrong. Could you please take a look on my config below and see what is going on. On the other hand, when i issue the same config to cisco 827, it does not work. My question is whether cisco 827 IOS 12.1(3)support IPSEC.
Any help would be highly appreciated.

This document demonstrates how to configure a connection between a router and the Cisco VPN Client 4.x using Remote Authentication Dial-In User Service (RADIUS) for user authentication. Cisco IOS? Software Releases 12.2(8)T and later support connections from Cisco VPN Client 3.x. The VPN Clients 3.x and 4.x use Diffie Hellman (DH) group 2 policy. The isakmp policy # group 2 command enables the VPN Clients to connect.
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800946b7.shtml

Need help with cisco 881 configuration.

Hi, I have cisco 881 wireless router, and I need to configure this as a switch, I have dhcp server in network 192.168.12.254, and I need that cisco wifi and lan clients get IP addresses from existing dhcp server.
I connect wire from network (with dhcp server) to FastEthernet0, create vlan interface (192.168.12.10 255.255.255.0), described vlan on other FastEthernet interfaces, so LAN clients get IP addresses from my dhcp server without problems, but how to do the same with wifi clients?

Follow this support doc because you need to trunk the AP to the router and specify the vlan the wireelss clients will be on.
https://supportforums.cisco.com/docs/DOC-16145
Here is a doc that guides you through multiple vlans/subnets on access points:
https://supportforums.cisco.com/docs/DOC-14496
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Need help - setup network in solaris

Hello! Today I install Solaris 10 for learning in my laptop and have some trouble. Please help me
1. Set up network interface for wi-fi card iwi0
(a. ifconfig iwi0 plumb
b. wificonfig iwi0 connect airJet
c. ifconfig iwi0 dhcp)
2. Set up default route (route add default 192.168.100.2 (its my access point with dhcp server))
Ping -s 192.168.100.2 -> done
But when I trying in Firefox open any url - recieve error "host not found"
okay. in terminal i put
ping google.com
and recieve answer
host not found
What is my problem?
Thanks for u answers.

Try changing hosts line in /etc/nsswitch.conf to:
hosts dns files
so that hostnames will be resolved via your dns servers. You also need to enter dns server info in /etc/resolv.conf.
Here's a tutorial: [Configuring Networking|http://solaris-x86.org/documents/tutorials/network.mhtml ] (kind of dated, but most of the info is still relevant)
john

Need Help Setup Cisco RV042 vpn

Similar Messages

Maybe you are looking for