RV320 - vlan on Wan Port

Here in Brazil VIVO (from the spanish Telefonica group) is recently providing fiber links.
Their fiber link is being splitted into 2 vlans: one for their IPTV (vlan id 20) and another for internet (vlan id 10).
So, when they install on your house or company, they install 2 boxes: 1 ONT (Optical Network Terminal) and 1 router (which connects to the ONT and does the PPPoE auth on VLAN 10 and creates the internal VLAN for the IPTV - id20).
So, is it possible to replace their router with the RV320 and create tagged / untagged VLAns on Wan Ports and assigning ip address on each vlan (PPPoE for internet, DHCP for iptv)?
The topology is basically like this:
[Fiber Cable]
ONT
[Ethernet Gigabit]
Router
[Ethernet / Coaxial]
Network Devices
TVs (coaxial connection provided by 2. Router)
PCs (wireless /ethernet connection provided by 2.Router)

Hello,
Thank you for sharing the information about the DD-WRT firmware on other devices.Unfortunately the RV320 is not capable of such a feature, it is just not designed to do that.
On the other hand we do have one unit that is capable of such configuration, it is the RV315W router.
Here is a link to the emulator for the unit so that you have an idea of its capabilities.
http://www.cisco.com/assets/sol/sb/RV315W_Emulators/RV315W_Emulator_v1.01.03/index.asp.htm
The feature you are looking for can be configured by going to Port settings, WAN, Wan interface settings, then you can configure the desired VLANs.
I'm not sure that this device is available in Brazil. If it is not available then you may have to consider using enterprise units or other devices.
Please let us know if this is helpful.

Similar Messages

VLAN on WAN port

I am using an LRT224 which does include VLAN support for LAN ports. This might be usefull, but i would alos suggest to support VLAN on WAN ports.
Why? A lot of users are now using cable or fiber optique connexions. This connexions always come with a fiber or cable modem and ususally a box as a routeur and multimedia server. However a lot of people would like to replace the ISP's box with a router like my LRT224.
But this will not work especially here in france but possibly also in some other countries, because the WAN connexion also includes a telephone and a TV connexion. In fact the ISP's are using vlan's for each of those functions, for example ORANGE is using VLAN 835 for data. As long as the vlan is not supported i have to go thourgh their box using DMZ because of the luck of vlan support on the WAN connexion, or i have to use a smart switch with vlan support, that's what i am doing, but that is not very elegant.
If anybody has any suggestion, would be nice.
If something works don't fix it.

That is a good idea.
I read the product datasheet and I agree with you , it seems that it does not support VLAN on WAN.

RV320 - using one WAN port

What is the correct configuration for using one WAN port so that the router doesn't crash several times a day?
Should WAN2 be left as address from IP ?
Shoudl WAN2 be configured as static IP ?
Should WAN2 interface be disabled?
Should WAN2 be configured as DMZ and left as default 192.168.1.0?
Should WAN2 be configured as DMZ and then disabled?
It's definitely the router which is at fault, power cycling the fibre to copper converter dosen't fix the issue.
Nor does swapping the FTC for a brand new one.
Only a power cycle on the RV320, or a remote web interface reset if I'm unside the LAN, makes it work.
Temporarily, then it crashes next day.

I have the same settings, and the same up-to-date firmware.
I see in the logs that the router incorrectly reports WAN2 as Up, then can't sync rate with it.
Most of the time that failure is around the same time as the users report failure.
But nothing is logged for WAN1 so it doesn't seem to be a physical failure in cabling, or the FTC converter feeding the router.
2015-04-27, 10:33:35
Kernel
kernel: WAN [2] UP
2015-04-27, 10:33:35
Kernel
kernel: [eth0] lanip=192.168.1.1, mask=255.255.255.0
2015-04-27, 10:33:35
Kernel
kernel: ip[xxx.xxx.xx.xxx] mask[0.0.0.0]
2015-04-27, 10:33:35
Kernel
kernel: ip[0.0.0.0] mask[0.0.0.0]
2015-04-27, 10:33:36
Kernel
kernel: WAN [2] DOWN
2015-04-27, 10:42:10
Kernel
kernel: WARNING: cant get external phy status
2015-04-27, 10:42:11
Kernel
kernel: WARNING: no highest common denominator or auto-negotiation not complete
2015-04-27, 10:42:11
Kernel
kernel: WARNING: no highest common denominator or auto-negotiation not complete
2015-04-27, 10:58:01
Kernel
kernel: WARNING: no highest common denominator or auto-negotiation not complete
2015-04-27, 10:58:02
Kernel
last message repeated 2 times
2015-04-27, 10:58:02
Kernel
kernel: nk_bcm53115_sync_speeds_phy_to_mac(): sport[5], speed[0], duplex[0]
2015-04-27, 10:58:03
Kernel
kernel: nk_bcm53115_sync_speeds_phy_to_mac(): sport[5], speed[1], duplex[2]

Can the AEBS untag a VLAN (802.1q) on the WAN port?

My modem (actually a fibre optical network terminal) provides a DHCP ethernet port. I would like to use my airport extreme for routing and wireless. Normally this would be a very simple setup, except the the modem requires all traffic to go over a specific VLAN (802.1q tagged). So, for this to work I would need the Airport to be able to untag/tag a specific VLAN on its WAN port. Is this possible?

I'll probably try to find the most minimal device that I can get to do transparent untagging of VLAN traffic. Not really sure where I might find that, but will start researching. I'd like to avoid using the current buggy router supplied by my ISP if at all possible!
I would suggest that you look at the various products provided by Cisco. FWIW I use a Cisco RVS4000 as my "main" router and have set up a number of VLANs for my home network with it.

UC560 Wan port VLAN

Hi, is there a way to change the VLAN port on the WAN port of the UC560?
I'm trying to use VLAN50 on WAN port and I'd like to have that setup in the network configuration o the UC560. Is there a way to do this?
Thanks in advance!
Jason

Do you know how I can download the CLI and what is the instructions on setup the VLAN50 on WAN port?
I'd like to give that a try and get it working.
Let me know
Thanks
Jason

RV320 WAN port drops connection

I have an RV320 connected to a cable modem on the WAN port. every once in a while, less than a day but more than a few hours, the WAN port stops sending traffic. I tried Static and DHCP (im supposed to use DHCP but for testing I used static as well) for my ip address. when the issue occurs, I can fully access the router via the lan side and manage it. when I view the interface stats, its up, with an ip address. no traffic passes through it though, verified this many times and using different methods. when I renew the ip, it just hangs. when I release and renew it hangs and never gets a new ip. I have to down the interface or reboot and then it gets an ip and works fine. I've also tried autonegotiate and hard setting the port speed. the logs are no help, not indicating anything. previously I had an apple airport express hooked up to the connection and it worked fine for years. so I know the connection and cabling, etc is good. any ideas? im running the latest code. I have not tried the wan2 port to see if that works. thanks!

I wondered that too. primary reason I left that reasoning was that my old firewall, an apple airport express, worked fine. never lost connection, ever (that I was aware of). this does it multiple times a day. I did check anyway and didn't see anything obvious. I ran a packet capture and was a bit surprised how clean it was (for the internet). my modem is in bridge modem so I see everything at the wan port. ill attach a snippet below. thank you!
9:34:15.000 AM
Mar 13 09:34:15 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
9:09:45.000 AM
Mar 13 09:09:45 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
9:01:34.000 AM
Mar 13 09:01:34 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
7:38:51.000 AM
Mar 13 07:38:51 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
7:22:24.000 AM
Mar 13 07:22:24 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
6:08:02.000 AM
Mar 13 06:08:02 firewall. kernel: WAN [2] DOWN
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
6:08:01.000 AM
Mar 13 06:08:01 firewall. kernel: ip[0.0.0.0] mask[0.0.0.0]
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
6:08:01.000 AM
Mar 13 06:08:01 firewall. kernel: ip[74.141.x.xmask[0.0.0.0]
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
6:08:01.000 AM
Mar 13 06:08:01 firewall. kernel: [eth0] lanip=192.168.0.1, mask=255.255.255.0
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
6:08:01.000 AM
Mar 13 06:08:01 firewall. kernel: WAN [2] UP
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
5:59:44.000 AM
Mar 13 05:59:44 firewall. kernel: WAN [2] DOWN
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
5:59:42.000 AM
Mar 13 05:59:42 firewall. kernel: ip[0.0.0.0] mask[0.0.0.0]
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
5:59:42.000 AM
Mar 13 05:59:42 firewall. kernel: ip[74.141.x.xmask[0.0.0.0]
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
5:59:42.000 AM
Mar 13 05:59:42 firewall. kernel: [eth0] lanip=192.168.0.1, mask=255.255.255.0
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
5:59:42.000 AM
Mar 13 05:59:42 firewall. kernel: WAN [2] UP
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
5:09:54.000 AM
Mar 13 05:09:54 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:47:44.000 AM
Mar 13 03:47:44 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:47:41.000 AM
Mar 13 03:47:41 firewall. kernel: WAN [2] DOWN
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:47:39.000 AM
Mar 13 03:47:39 firewall. kernel: ip[0.0.0.0] mask[0.0.0.0]
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:47:39.000 AM
Mar 13 03:47:39 firewall. kernel: ip[74.141.x.xmask[0.0.0.0]
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:47:39.000 AM
Mar 13 03:47:39 firewall. kernel: [eth0] lanip=192.168.0.1, mask=255.255.255.0
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:47:39.000 AM
Mar 13 03:47:39 firewall. kernel: WAN [2] UP
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:47:38.000 AM
Mar 13 03:47:38 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
3:31:07.000 AM
Mar 13 03:31:07 firewall. kernel: WARNING: cant get external phy status
•host = firewall.
•source = udp:514
•sourcetype = syslog
3/13/15
2:54:38.000 AM

RV320, specific traffic through specific wan port

Hello all,
I love the RV320, one of the best routers i've bought in years and it works like a charm with our Fiber connection on WAN1 and Coax Cable on WAN2.
The only question I have right now, i know it is possible to sent specific traffic (DNS,HTTP etc) through specific WAN ports.
But would it also be possible in some way to say *.website.com traffic will go through WAN port x only?
Specific apps we use are only available through an IP coming from the provider we use on WAN2 (cable coax), so it would be handy if we could say that if app this or that and/or website is being called, auto serve it through WAN port x.
Is this possible and if not, something cisco could add?

Dear Michiel,
Thank you for reaching Small Business Support Community.
Besides the service management options available I do not see a particular feature to accomplish your needs. I work on this community forum as an analyst and I am going to mark this post as a business opportunity for improvement of the device.
Thank you for your comment and please do not hesitate to reach me back if there is anything I may assist you with in the meantime.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.

RV Support VLAN Tagging on WAN Port?

Hi,
I'd like to know if RV Series Router can support VLAN tagging on the WAN port itself? I need this cause my ISP using such method to connect to end user modem/router.
Thank you.
Regards,
Danny

Anything available other than this RV315W? That model is only 10/100 on the LAN. VLAN on the WAN is fairly standard for fibre installs and should be a feature across all SMB routers.

ISA500 tagged WAN port

Hello,
I'm currently evaluating an ISA570W firewall.
The use case is to deploy it as an entry level firewall on FTTH internet access lines.
The ISP provides a CPE that requires internet trafic to be tagged on a specific VLAN.
I was a bit suprise when, after trying this configuration, finding out that the WAN port on the ISA500 can only be put in access mode.
Which effectively makes this device unusable.
Is there another way to set one of the ethernet interface in trunk mode and put it in the WAN zone with DHCP client enabled?
Thanks,

so I digged a bit further and found a document from Cisco's knowledgebase that describes steps by steps instructions for the WAN port: http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=3719
searching for vlan tag showed me a screen that allowed the setting of a tagged vlan on the WAN port but only available for PPPoE IP address assignement.
the VLAN tag option is not available with "DHCP Client" IP address assignement.
Is this something we could see in a future firmware release?
From what I've seen tagged vlan on the WAN port is a typical configuration requirement for FTTH services here in Switzerland.
Thanks,

RV320 - How to forward ports from WAN2

Hello,
I have 2 IP's on two different wan-ports. No i want to expose one machine from my LAN to the internet, on port 80 to do everything else with a reverse proxy. The other ip however must forward traffic from port 80 to a different machine:
<91.x.x.100>:80 -> forward to 192.168.0.20
<91.x.x.120>:80 -> forward to 192.168.0.110
I tried for two days now, and can't get it to work, here is what i tried so far:
One-To-One NAT from public ip to local machine - didnt work, i cant enter a wan ip address as public ip
Port Forwarding bound to a specific interface - Doesnt work, an interface is not selectable, although its stated in the docs
DMZ - Didnt work. Entered the local machines ip into the DMZ-Host field, set up the wan2 as DMZ with a correct ip, added access rules to the ACL, still no luck, all it did was, requesting both ips from outside, landed on the same machine.
I hope i didnt miss required information in this post, and hope that someone can give me an advice how to solve this.
Greetings
Nick

Was there any verification of this? I have an RV320 that we are attempting to use in the same fashion.
Our ISP is not capable of providing us with multiple addresses on the same network. So essentially we are stuck with 2 "isp's"
I know this issue could be resolved if we used another router, then set gateways on servers on the same network but I would prefer not to.
Wan1 - 198.xxx.xxx.205 - Forward to - Exchange 80/443/25/110
Wan2 - 198.xxx.xxx.146 - Forward to - Internal web app 80/443
Thanks for any help in advance!

VLANs On WAN Side

I'm looking for a security device that can handle VLANs on the WAN side.
Like virtual WAN interfaces; one for each VLAN
I'm hoping something like the SA540 can do it.
Any suggestions?

Hi,
SA500 today supports only vlan on LAN ports. vlan/sub-interfaces over WAN is not supported.
You may want to check out Cisco IOS 800 router or ASA that should support what you are looking for.
On the other hand, I am interested in understanding what you are trying to accomplish with subinterface support over WAN?
i.e. sub-interface based application service provided by local ISP? or? Feel free to send me through private message if preferred.
Regards,
Richard

UC560 WAN PORT support for dot1q?

Hi,
should be a fairly simple question but does UC560 WAN port support dot1q trunking back to switch? Can't see any doc on this.
Aim is to run 3 VLAN's back to switch one for data,voice,SSL VPN for remote teleworker.
Thanks,
Joseph

I believe the WAN port is a L3 interface. You will have to use subinterfaces to do specific vlan communication between a switch.
You may look at this document. By the way, this is not possible via CCA and can only be done via CLI.
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intrface.html#wp1044006

RV320 VOIP in DMZ-port

Hi all
I have set my WAN2-port as a DMZ-port and want to put my voip-adapter SPA112 in the DMZ-port
How do i configure my RV320 so the voip traffic goes from WAN1 to the DMZ port?

From the RV320 admin guide.
DMZ Enable
A DMZ is a subnetwork that is open to the public but behind the firewall. A DMZ
allows you to redirect packets coming into your WAN port to a specific IP address
in your LAN. You can configure firewall rules to allow access to specific services
and ports in the DMZ from both the LAN or WAN. In the event of an attack on any of
the DMZ nodes, the LAN is not necessarily vulnerable. We recommended that you
place hosts that must be exposed to the WAN (such as web or e-mail servers) in
the DMZ network.
To configure DMZ:
STEP 1 Choose Setup > Network and check Enable DMZ. A message appears.
STEP 2 Click Yes to accept the change.
STEP 3 Select the DMZ interface in the DMZ Settings table and click Edit. The Edit DMZ
Connection window appears.
STEP 4 Select Subnet to identify a subnetwork for DMZ services and enter the DMZ IP
Address and Subnet Mask. Or select Range to reserve a group of IP addresses
on the same subnetwork for DMZ services and enter the IP address range.
STEP 5 Click Save.

WRVS4400n v1.1 VLAN on WAN interface

Hi,
Been trying to figure out howto create VLAN's on the WAN interface of the WRVS4400n. Is this even possible with the factory firmware?

Dear Steve,
Thank you for your reply.
The router already has the lastest firmware, 1.1.13
The situation is as follows. Our office gets several services over fiber which is switched to coper over an end node (not protocol just light <-> electric) so essentially we are connected to the internet over ethernet.
Anyway, our provider is rather mysterious over how their services work and preffer that everybody uses the equipment provided by them. The equipment is rather cheap and limited in functionality, also we're having a few problems because the equipment doesn't allow us to switch certain functions off.
We get 3 services from our provider.
1. Internet (VLAN tagged 12)
2. VPN like closed connection between locations (VLAN's tagged 123 and tagged 124)
3. SIP (VLAN untagged 13)
So I did A little investigation and came up with the following.
* For internet services they're using a PPPoE tunnel, this tunnel is established over a tagged VLAN 12.
* VLAN's 123 and 124 are for ourselves, so just connection between our offices. I don't know what the infrastructure/setup is behind this service but it somehow magically works.
* Then finally there's the SIP services which is done over VLAN 13 untagged.
So what I need todo is create a PPPoE tunnel over VLAN 12 (for internet access) and also setup VLAN's 13, 123 an 124 to be forwarded to specific ports on the the router.
/edit:
When I look at the settings in the web interface I only get the VLAN settings for ports 1 to 4 and WLAN (no port 0). I'm pretty sure this router does support it and I could set it if I had a shell on the device but I don't and I'm not seeing it in the webinterface either.

RV320 / 325 Dual WAN Question

I am trying to setup these routers to basically take voice traffic and have it use one of the two WAN connections as it's primary and all other traffic use the other connection. I would like it so that if either connection fails they also failover between each other. I can figure out how to split the traffic but can't seem to find a way to do the fail over as well... Is this possible with either of these routers?
Thanks,
Rod

Hello Rod,
Your assumption is correct. When you go in to setup the protocol binding simply select all traffic, with the source from VLAN 1, and specify the WAN you would like it to use, and do the same thing for the other VLAN to the other WAN.
Your rule would look something like this:
Service should be all traffic, source IP would be a range covering one VLAN, destination would be 0.0.0.0 to 0.0.0.0 and then select the WAN you want to use.
Then just setup another rule doing the same thing for the second VLAN and pointing out the other WAN port.
That way VLAN 1 would always use WAN1, unless it failed, and VLAN 2 would always use WAN2, unless that failed. This allows you to utilize your links how you would like and still have failover.
Another thing to keep in mind with protocol binding is that most secure traffic (HTTPS, SSH, etc) usually needs to be bound to one WAN, however since you are setting up a binding for all traffic on the entire VLAN, that shouldn't be necessary for you.
Christopher Ebert
Senior Network Support Engineer - Cisco Small Business Support Center

RV320 - vlan on Wan Port

Similar Messages

Maybe you are looking for