RV016 VPN Gateway to Gateway problem to add remote vlan

Hi to all i have a little problem with RV016.I have one site to site vlan ipsec and i would like to add a remote vlan to the tunneling but RV has only three options
-IP
-Subnet
-IP Range
Now the remote lan for vpn is 192.168.10.0/24 and i would like to add 10.1.1.0/24
Can someone help me ?

Hi Ckioroglou,
I'm need more information regarding the VPN on both site but from I understand I can suggest the following
we can have three solution
- Create a second Tunnel and use the local remote as Subnet and configure the Vlan Subnet (10.1.1.0/24)
Or
- If it's possible to change th Vlan to 192.168.x.x and we can have only one Tunnel with remote subnet class B (/16)
Or
- We can use only one IPsec VPN tunnel where the Remote Local is setup to 0.0.0.0 and mask 0.0.0.0 and other site the local network 0.0.0.0 and mask 0.0.0.0 BUT
In this situation we will have full tunnel IPsec Site to Site it mean's all the traffic include Internet traffic will pass through the VPN
Please rate the post or mark as answered to help other Cisco Customer
Best regards
Mehdi

Similar Messages

RV016 / Windos Server 2012 - Gateway to Gateway Vpn.

We have two sites and have on one site (main one) windows 2012 server as the DC on the network and it is also a gateway through which employees connect to the company network. On our other site we do not have servers set up and e had purchased RV016 hoping we could set up a continious gateway to gateway vpn connection. We had so far no luck on getting it to work, which begs the question - is it possible? Thank you.

tekliu,
I actually found and tried this solution last night, but below is how my routing table looks on my RV042. When I do a tracert to www.google.com or whatever I can see that the traffic basically hits my router then out through the Comcast modem. If I do anything on the main office subnet 172.16.1.0 then I can see it hit both routers.
Should I maybe reset the router to default and do this from the start? As you can see below all 0.0.0.0 traffic is set to go out through the Comcast gateway 74.94.253.10.
Routing Table Entry List
Destination IP Address
Subnet Mask
Default Gateway
Hop Count
Interface
74.94.253.8
255.255.255.252
40
ixp1
74.94.253.8
255.255.255.252
45
ipsec0
192.168.3.0
255.255.255.0
50
ixp0
192.168.2.0
255.255.255.0
74.94.253.10
10
ipsec0
192.168.2.0
255.255.255.0
50
ixp0
172.16.1.0
255.255.255.0
50
ixp0
default
0.0.0.0
74.94.253.10
40
ixp1
I can send you all of my config data when if you need it.
Thanks!

RV016 Gateway to Gateway VPN Internet Traffic

I have a RV016 router in place that has numerous Gateway to Gateway VPNs connected to various sites over Comcast Cable. I would like to funnel all traffic through the RV016, but I am only seeing the tunnel traffic going between each.
I think I saw some posts eluding to the fact that since the RV016 only deals with layer 3 that this is impossible. What if I added a route to each of my workstations that router all 0.0.0.0 traffic through the RV016 router. Would this work even if it's really ugly?
What I am trying to avoid is having an open Internet connection at all of my sites. I would rather be able to control it here at the main office's RV016.
Thanks in advance!

tekliu,
I actually found and tried this solution last night, but below is how my routing table looks on my RV042. When I do a tracert to www.google.com or whatever I can see that the traffic basically hits my router then out through the Comcast modem. If I do anything on the main office subnet 172.16.1.0 then I can see it hit both routers.
Should I maybe reset the router to default and do this from the start? As you can see below all 0.0.0.0 traffic is set to go out through the Comcast gateway 74.94.253.10.
Routing Table Entry List
Destination IP Address
Subnet Mask
Default Gateway
Hop Count
Interface
74.94.253.8
255.255.255.252
40
ixp1
74.94.253.8
255.255.255.252
45
ipsec0
192.168.3.0
255.255.255.0
50
ixp0
192.168.2.0
255.255.255.0
74.94.253.10
10
ipsec0
192.168.2.0
255.255.255.0
50
ixp0
172.16.1.0
255.255.255.0
50
ixp0
default
0.0.0.0
74.94.253.10
40
ixp1
I can send you all of my config data when if you need it.
Thanks!

RV016 gateway to gateway rv082 won't connect

Dear Gurus
New hardware here, requesting a bit of your knowledge
We are tryingin to setup a simple gateway to gateway VPN
HomeA Has an RV016 with a public static IP
Local Group Security Gateway type is IP Only with the IP
Local Security Group Type is Subnet, with the local IP class 192.160.0.0
Remote Security Gateway Type: Dynamic + Email
Email address [email protected]
Remote Security Group Type: Subnet
IP Address 192.168.1.0
IPSec Setup as default with nice password.
HomeB has an RV082 with a dynamic ADSL link
Local Group Security Gateway type is DynamicIP +Email
Email address [email protected]
Local Security Group Type is Subnet, with the local IP class 192.160.1.0
Remote Security Gateway Type: IP Only
Remote Security Group Type: Subnet
IP Address 192.168.0.0
IPSec Setup as default with nice password.
The idea is for HomeB which has a dynamic IP, to reach HomeA, which has a static IP and connect.
But they just wont. I have not clue what's wrong, I followed the instructions, maybe i miss interpreted something.
I could share the VPN logs for both., Im getting a lot of errors there.
All pointers or suggestions are appreciated.
Im pasting here a snap of the receiving end HomeA, when i press connect on HomeB
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: responding to Quick Mode
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: [Tunnel Negotiation Info] Inbound SPI value = 3b08f98f
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: [Tunnel Negotiation Info] Inbound SPI value = 3b08f98f
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: [Tunnel Negotiation Info] Outbound SPI value = fdb78f39
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: [Tunnel Negotiation Info] Outbound SPI value = fdb78f39
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: [Tunnel Negotiation Info] >>> Responder send Quick Mode 2nd packet
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: [Tunnel Negotiation Info] >>> Responder send Quick Mode 2nd packet
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:51:41 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:51:51 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: discarding duplicate packet; already STATE_QUICK_R1
Mar 10 11:51:51 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: discarding duplicate packet; already STATE_QUICK_R1
Mar 10 11:51:51 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:51:51 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2562: max number of retransmissions (2) reached STATE_QUICK_R1
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2562: max number of retransmissions (2) reached STATE_QUICK_R1
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: [Tunnel Negotiation Info] <<< Responder Received Quick Mode 1st packet
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: [Tunnel Negotiation Info] <<< Responder Received Quick Mode 1st packet
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: esp_ealg_id=2-2,esp_ealg_keylen=0, key_len=64,esp_aalg_id=1-1.
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: esp_ealg_id=2-2,esp_ealg_keylen=0, key_len=64,esp_aalg_id=1-1.
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: You should NOT use insecure ESP algorithms [ESP_DES (64)]!
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: You should NOT use insecure ESP algorithms [ESP_DES (64)]!
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: responding to Quick Mode
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: [Tunnel Negotiation Info] Inbound SPI value = 88cbdfad
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: [Tunnel Negotiation Info] Inbound SPI value = 88cbdfad
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: [Tunnel Negotiation Info] Outbound SPI value = bdcdfc69
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: [Tunnel Negotiation Info] Outbound SPI value = bdcdfc69
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: [Tunnel Negotiation Info] >>> Responder send Quick Mode 2nd packet
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: [Tunnel Negotiation Info] >>> Responder send Quick Mode 2nd packet
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:51:56 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:52:06 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: discarding duplicate packet; already STATE_QUICK_R1
Mar 10 11:52:06 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2564: discarding duplicate packet; already STATE_QUICK_R1
Mar 10 11:52:06 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:52:06 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
Mar 10 11:52:11 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: discarding duplicate packet; already STATE_QUICK_R1
Mar 10 11:52:11 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2563: discarding duplicate packet; already STATE_QUICK_R1
Mar 10 11:52:11 2012
VPN Log
(g2gips0)[1] 187.179.136.229 #2558: ignoring informational payload, type PAYLOAD_MALFORMED
thanks

Alejandro,
Any chance you could share your solution? I am having the exact same problem on a tunnel between two RV082s.

Gateway Assistant causing problems

I have 3 Macs internally, Gateway Server, File Server and Internal Client, which are all G4 PPC's and connected by firewire. I also have a PB G4 running firewire as a VPN. I setup this LAN/VPN network using Gateway Server Assistant which changed my Gateway Server address from 192.168.1.1 to 192.168.2.1. This has caused two problems 1) I can no longer access the internet which is a Linksys 4 Port Wireless router with DHCP turned off and the router address of 192.168.1.1 and 2)even though I followed directions to setup the Gateway Assistant I cannot find the default Webpage address of each internal client when I test the firewire connections. Here is the pertinent information:
The DHCP subnets are set to
1: (fw) and set from 192.168.2.2 -192.168.2.127 and Router set to 192.168.2.1 and
2: (en) and set from 192.168.2.128 -192.168.2.254 and the Router set to 192.168.2.1
VPN is MS-Chapv2
Any and all help is greatly appreciated.
Clyde Sommers

Thank you

RV220W, problem with Gateway-to-Gateway and tunneling

I have created a connection gateway-to-gateway between RV220W and RVL200, is doing without any problems.
For example, I can ping the gateway on the other side. But when I connect trough RV220W QuickVPN (or PPTP) I can not reach the gateway (RVL200) or any host behind it.
[192.168.0.1] RV220W <----- G2G -----> RVL200 [192.168.8.1]
                          |
                          |
                 [192.168.0.10]
[192.168.0.1] RV220W <----- G2G --x--> RVL200 [192.168.8.1] <no connection>
                          |
                          |
         tunnel (QuickVPN or PPTP)
                 [192.168.3.10]

Te-Kai Liu - How would you propose creating this site-to-site tunnel for the PPTP client? Can you share specific setup for this router with this scenario in mind? Thanks for your help on this...I'm having this issue as well.
Thomas - Did you ever find a solution to your issue with the VPN Clients connecting through the tunnel?

RV042 Gateway to Gateway VPN Losing network connection

I have an branch office RV042 version 1 connected via ADSL with less that 5 workstations (Vista - Win7 - Outlook) and VOIP/SIP to our main office RV042 version 4 via Charter Cable Modem...Tunnel is Gateway to gateway. We are experience random disconnects to our Windows servers in main office through the tunnel. We have isolated it down to the VPN tunnel. Our internet connections have tested out good. Our main server is a SBS 2008. Is there any issue with the Tunnel between two RV042's on different versions...

Hello MP:
Thanks for the reply. I did doublecheck both routers and all the netmask are 255.255.255.0. On the insides of both LAN's, I can ping devices. On the routers, I can ping each other, but not any devices inside the Remote LAN.
Most of the devices on each LAN are "digital radios" so they don't have any antivirus or firewall software. In addition to the radios, there are 2 computers on each LAN, each with the firewalls off and we disabled the AV software.
Both RV042's are running version 4.0.0.07-tm that was dated Aug 19 2010.
These were bought from the radio vendor and their tech support says the current config should work.
Definately a head scratcher.
...DOUG
KD4MOJ

H.323 Security: Gateway to Gateway

Friends,
In voip setup i want to secure my h323 traffic between gateway to gateway
without using ipsec tunnel (site-to-site vpn). I study about h235 security
but that is between gateway and gatekeeper. Please suggest me any technique
you know.
Thanks and Regards

Friend,
Thank you for the link. I am already using SRTP for streaming As you know CRTP does not with IPSec. Now I have the same issue my h323 session is not secure. I have 25 sites and all have gateways so according to that document, i have to configure all 25 sites for IPSec tunnel. if a user A of site 1 will call user of site2, a tunnel will be establish for a single call and then same time mores of site1 call to users of other sites, it means ipsec tunnel will be establish per call. This will not eat all my router's resources. My all sites connected with each other like partial mesh.
Please suggest me what to do in this situation.
Regards

Linksys RV42 Gateway to gatewaye tunnel

I have 2 RV42 routers ,one in the main office and the other in branch office ,my WAN connection is ADSL 1M in bothes ,i create VPN tunnnel gateway to gateway using DDNS and the connection is done stuts connected , but after litewhile the connection loste but when i disconnect the tunnel it come bakc again and so on pleas help me

Check to make sure that you have the Keep Alive and Dead Peer Detection options enabled under the Advanced section of
the tunnel setup. This keeps the connection stable after a long period of time being connected.
THANKS
Rick Roe
Cisco Small Business SUpport Center

Can't add files filmed in 1080/60i to Premiere Elements 12. I have no problem to add files filmed in 1080/30p. My camera is a Nikon aw1

Can't add files filmed in 1080/60i to Premiere Elements 12. I have no problem to add files filmed in 1080/30p. My camera is a Nikon aw1

lurkfan
What computer operating system is your Premiere Elements 12 running on? Have you updated 12 to 12.1 Update using an opened project's Help Menu/Update?
If not, please do so.
Please clarify "Can't add files filmed in 1080/60i to Premiere Elements 12."
Are you importing the 1080 60i into the project using (Expert workspace) Add Media/Files and Folders/Project Assets?
If so, are you getting an error message inside of the video appearing in Project Assets?
Are you setting the project preset manually or letting the program do that task automatically?
What is the project preset?
(See Edit Menu/Project Settings/General).
The project preset should be, for your 1080i...
NTSC
AVCHD
Full HD1080i30
What is the project preset for the 1080p footage?
(Also see Edit Menu/Project Settings/General.)
The project preset should be, for your 1080p
NTSC
DSLR
1080p
DLSR 1080p30 or DLSR [email protected]
Since your camera appears to be producing AVCHD.mov files, do you have the latest version
of QuickTime installed on your computer with Premiere Elements 12/12.1?
The answers will be in the details. Please review and then let us know the details and results
based on the above.
Thank you.
ATR

Facing problem to add component in a panel dynamically

I face serious problem to add component dynamically on a jpanel. can any one help me?
I have one panel inside a frame. And I have another 3 or 4 panel. dynamically i want to change the panel inside the frame with the other panel.
can anybody help me with source code?
Your earliest response is highly appreciated.

remove is reflected immediately without calling
validate() but it does not work for adding. please
give me some code.Post a small demo code that is generally compilable, runnable and could reproduce your problem. See: http://homepage1.nifty.com/algafield/sscce.html and http://www.yoda.arachsys.com/java/newsgroups.html

Adobe Reader 9.3.3-CPSID_83708 is causing problems but ADD/DELEATE will not allow me to deleate. Why

Adobe Reader 9.3.3-CPSID_83708 is causing problems but ADD/DELEATE will not allow me to deleate. Why

Do you have admin rights on your system? Can you uninstall other programs?
If yes and you still think you have downloaded wrong update, use windows cleanup utility to remove this installation. You can find cleanup utility at several websites eg.
http://majorgeeks.com/Windows_Installer_CleanUp_Utility_d4459.html
Then reinstall 9.3 Reader from adobe website and update it to 9.3.3 using Help>Check for updates.

Unable to add allowed VLANs to TenGig trunk port

Hi,
I've got a ten gig interface on a 6509 running 12.2(33) configured as a trunk, but I've not been able to add any allowed VLANs as I've done before on other ten gig ports on different 6509 chassis. Am I missing something obvious?
I'm assuming that the reason I'm unable to set the encapsulation to dot1q is because the new hardware doens't support ISL, hence no need. The command to add the VLANs however doesn't get rejected, it just doesn't appear to do anything.
I've tried adding single VLANs and multiples, but no joy. Any ideas?
Here's what I've done:
SWITCH_1631(config)#default int t4/1
Interface TenGigabitEthernet4/1 set to default configuration
SWITCH_1631#sh ru int t4/12
Building configuration...
Current configuration : 65 bytes
interface TenGigabitEthernet4/12
no ip address
shutdown
end
SWITCH_1631(config)#int t4/1
SWITCH_1631(config-if)#switchport
SWITCH_1631(config-if)#switchport mode trunk
SWITCH_1631(config-if)#switchport trunk allowed vlan ?
WORD VLAN IDs of the allowed VLANs when this port is in trunking mode
add add VLANs to the current list
all all VLANs
except all VLANs except the following
none no VLANs
remove remove VLANs from the current list
SWITCH_1631(config-if)#switchport trunk allowed vlan add 700
SWITCH_1631(config-if)#
SWITCH_1631#sh vlan id 700
VLAN Name Status Ports
700 VLAN_NAME active <snip>
SWITCH_1631#sh ru int t4/1
Building configuration...
Current configuration : 74 bytes
interface TenGigabitEthernet4/1
switchport
switchport mode trunk
end

Steve,
Thanks for getting back to me. You're right that it is by default a dot1q trunk allowing all VLANs, therefore it should work for what I want to do.
Port Mode Encapsulation Status Native vlan
Gi3/39 on 802.1q trunking 1
Te4/1 on 802.1q trunking 1
Po1 on 802.1q trunking 50
Po2 on 802.1q trunking 50
Po3 on 802.1q trunking 50
Po4 on 802.1q trunking 50
Po5 on 802.1q trunking 50
Port Vlans allowed on trunk
Gi3/39 15-16,20-23,30,401,608
Te4/1 1-4094
Po1 10,13,20-21,25,30,50,52,61,70,600,700-701,950
Po2 10,20,30,50,52,61,70,600,700-701,950
Po3 10,20,30,50,61,70,600,700-701,950
Po4 10,20,30,50,61,70,600,700-701,950
Po5 2-3,10-23,25-26,30,35-36,40,50-53,56,58,61,65,70,77,101-102,145-146,155-158,401-402,600-602,608,700-701,800,950
The problem was that I've always been advised that best practise is to only allow the VLANs that are actually required on a trunk to avoid broadcasting traffic unnecessarily. I worked out what the issue was though, and it was a pretty simple one!
Once I saw that 1-4094 was allowed I tried "switchport trunk allowed vlan remove 700" which worked and left me with 1-699,701-4094.
Then I realised what the problem was trying to use the "add" command when all possible VLANs had already been added. As soon as I got rid of it and used "switchport trunk allowed vlan 700" followed by "switchport trunk allowed vlan add 701" I was back in business.
So it was a very simple issue, but thank you Steve for pointing me in the right direction and confirming that all the VLANs were already allowed!

Apple TV doesn't see iphone add remote greyed out

Hi There
Wife just got a new iphone, I have it synced/paired to her PC's itunes and also paired to my imac itunes which has our music collection (not syncing just have music set to manage manually). Have downloaded the remote app and it connects wonderfully to my itunes and hers but I cannot add remote on our apple tv the option is greyed out on apple tv.......I have checked the wifi network is the same on all, checked the fire wall settings are correct and pretty much everything else. On the apple tv screen it says to start by downloading the remote app which just in case I have done to my imac as well.....I am wondering if my issue is because the itunes library that is streamed to the apple tv is different to the one that the iphone is synced to (ie her PC)........one thing I have noticed is that apple tv doesn't appear on the devices list on her PC.......not sure why this isn't working but its driving me nuts have looked all through the discussions and can't find a solution

I'm not really sure what criteria is necessary for the remote option to show up on the tv, I'm surmising it's simply a fault (which I was hoping could be addressed by a restart). Another option would be a need for the tv to actually detect a wifi network before it enables this option, although mine works on an tv which is connected by ethernet and although that ethernet network is connected to a wifi network, I'm not sure the tv could know that.
The problems you now seem to be experiencing seem to be network related, and I wonder if you are now experiencing interference. You could try changing your wifi broadcast channel to see if that helps.

Problem in run remote client with appclient

I am having problems to execute remote clients (remote machines) using script of client conteiner: appclient. Local it functions perfectly, however when executed in a remote machine, the application not run wheel.
Thanks!

Have you looked at the Developer's Guide?
http://docs.sun.com/app/docs?q=clients&p=doc%2F819-0079
Specifically the section on creating clients with and without the app client container?
http://docs.sun.com/source/819-0079/dgacc.html

RV016 VPN Gateway to Gateway problem to add remote vlan

Similar Messages

Maybe you are looking for