RVS4000 as VPN only device

Hello, first time Cisco user here.
I just purchased an RVS4000 and would like to know (if I can and how to setup) this as a VPN device solely, or do I have to put it in front of my existing router/gateway (with proper port forwarding, of course). I'm looking to be able to VPN in to my home network from the road, but keep my existing 2wire router intact.
If I have to, I can set the 2Wire to DMZ to the RVS. Just looking for alternative connections.
Thanks.

The RVS4000 would need to be the main router. In order for the VPN to work the router has to have a Public IP address
assigned to it for the WAN. Then you could create a Client Account under the VPN section of the router. Then you would have to download the QVPN software for the client machine.
THANKS
Rick Roe
Cisco Small Business Support Center

Similar Messages

Financial Reports Client - 11.1.2.1 - Won't connect via VPN only?

When I try and connect via VPN only. I get: You are not authorized to use this functionality. Contact your administrator.
Here's the log from client. We have ensured the client version matches the server version exactly. Funny as when I'm directly on their network I can connect just fine. Hoping this log will point to solution.
Log:
[2012-06-01T10:31:45.196-04:00] [EPMFR] [ERROR] [] [oracle.EPMFR.core] [tid: main] [ecid: 0000JUcTOpZD4io5KVt1ie1FmD9H000000,0] [SRC_CLASS: com.hyperion.reporting.registry.FRSystem] [SRC_METHOD: lookupHsServer] [[
com.hyperion.reporting.util.HyperionReportException: Could not connect to the server.
Please make sure that the server is running as specified in the logon dialog (including port number if not default).
     at com.hyperion.reporting.registry.FRSystem.lookupHsServer(Unknown Source)
     at com.hyperion.reporting.javacom.HsServer.getServer(Unknown Source)
     at com.hyperion.reporting.javacom.HsHelper.getServer(Unknown Source)
[2012-06-01T10:31:45.273-04:00] [EPMFR] [ERROR] [] [oracle.EPMFR.core] [tid: main] [ecid: 0000JUcTOpZD4io5KVt1ie1FmD9H000000,0] [SRC_CLASS: com.hyperion.reporting.javacom.HsServer] [SRC_METHOD: getServer] [[
java.lang.NullPointerException
     at com.hyperion.reporting.javacom.HsServer.getServer(Unknown Source)
     at com.hyperion.reporting.javacom.HsHelper.getServer(Unknown Source)
]]

I think you have already posted this problem on another post, I said it is possible it could be a ports issue.
Have a look at the following http://www.oracle.com/technetwork/middleware/bi-foundation/epm-component-communications-11121-354680.xls
Select FR studio as the client and it should give indication to the ports that need to be opened.
Cheers
John
http://john-goodwin.blogspot.com/

Using NI488.2, is it possible to configure the Interface card as a 'Listen-only' device

At one time,the older gpib.dll supported the ability to change an interface card register in order to allow the card to function as a Talk-Only or Listen-Only device. I want to do that with version 1.7 of NI488.2. How would I do that? If I switched to VISA, would I be allowed to do this?

Hi..
We use a number of different NI Gpib cards here at work in conjunction with some RF test equipment in a development environment. Most of this equipment will only work in a Talker-Only mode and are meant to dump data to a Pen Plotter. My objective is to write a universal application that will allow the PC to emulate a plotter in a 'listen-only' mode. Some of our PCs are older ISA versions (Win98,etc) where others are PCI (Win2000,XP). I want to write the software so that any of these platforms could be used.
Any suggestions would be appreciated..
Jim

WRT54G - Is there anyway to add a separate VPN/Firewall device to complement this product

I have a WRT54G v.2 device and I hate to throw it out. My dilemma is that I'm in need of a VPN/Firewall device as well. So I would like to know if there is a device that I can purchase from Linksys that will provide the VPN/Firewall features as a complement to my existing WRT54G? I'd appreciate any info someone might be able to provide.
Regards.

Hi,
you have options between the RV series of VPN routers and the BEFSX41 and the BEFVP41.however you will have to change your network a bit.Your main router will have to be either of the VPN routers.The DHCP of the wrt will have to be disabled and you will also need to change the ip of the wrt from 192.168.1.1 to 1962.168.1.2
The connection will be.modem to internet port of the VPN router and then from port 1 of the VPN router to port 1 on the wrt.Do not use the internet ports of the wrt.

Filtering/Dropping IPv6 on IPv4-only Devices?

Hi All -
Got an interesting requirement that (for something seemingly simple) has been remarkably challenging to locate a solution for...
Having a problem with random IPv6 traffic showing up on the enterprise LAN from time to time and freaking out certain network-connected devices that don't know how to process it (CPU 100%, etc.). So I'm looking for a way to filter/drop that IPv6 traffic at the network edge. I can certainly set the core 6500's not route (or even ignore) IPv6, but that still doesn't stop it from running around WITHIN a VLAN.
Is there a way that a IPv4-only device can identify IPv6 traffic (by a protocol type code or something along that line) so that it can be filtered/dropped before it even makes it onto the backbone?
Thanks in advance!
Mike

Mike-
Good question! The first thing I thought of was VACL's, but VACLs w/IPv6 are not supported on the 6000 series switch.
http://www.cisco.com/en/US/tech/tk389/tk814/technologies_configuration_example09186a00808122ac.shtml#vacl
Are the 6500's your access layer? Are they your L3 gateway? Is it possible for you to find the device(s) running IPv6 and correct them?

My MacBook was wiped of all my music and everything else, and now my iTouch is the only device with my entire music database. My iTouch is old. (Version 6.1.6, Model number: MC547LL/A) Is there any way I can put all the music on my iTouch onto my Mac

My MacBook was wiped of all my music and everything else, and now my iTouch is the only device with my entire music database. My iTouch is old. (Version 6.1.6, Model number: MC547LL/A) Is there any way I can put all the music on my iTouch back onto my MacBook? I hate that I could lose my entire music library by dropping my iTouch in the toilet.
I've tried to plug in my iTouch into my MacBook, but I can't seem to give the music-transfusion without subscribing to iTunes Match or just completely wiping my iTouch.
PLEASE HELP MEEEEE

Your i-device was not designed for unique storage of your media. It is not a backup device and media transfer was planned with you maintaining a master copy of your media on a computer which is itself independently backed up against loss. To use a device with a different setup you transfer the old library from a computer or a backup directly to the new setup, not the device to the library. Media syncing is one way, computer to device, updating the device content to the content on the computer, not updating or restoring content on a computer. The exception is iTunes Store purchases which can be transferred to a computer.
iTunes Store: Transferring purchases from your iOS device or iPod to a computer - http://support.apple.com/kb/HT1848 - only purchases from iTunes Store
For transferring other items from an i-device to a computer you will have to use third party commercial software. See this document by turingtest2: Recovering your iTunes library from your iPod or iOS device - https://discussions.apple.com/docs/DOC-3991

Using iMessage on Wi-fi only device

How can I use old iPhone 4S iMessage over Wi-fi only...
I am borrowing a friend's old iPhone 4S to use as a Camera and Wi-fi only device in Italy for two weeks. After much ado, I set up a new Apple ID, erased hers from the iPhone 4S, added mine and logged into my email. Email now works - to and from the Wi-fi only iPhone 4S.
However, I cannot get iMessage to work under my new Apple ID. It used to work with my friend's Apple iD, but all of my messages show up on her new iPhone 6. The iPhone 4S still registers her phone number and says the carrier is Verizon, although it is not connected to Verizon. Her phone number is active with her new iPhone 6 on Verizon Wireless.
I want to use iMessage from this Wi-fi only iPhone 4. Help! iMessage is frozen at "Waiting for activation". I should be able to use iMessage from this old iPhone 4S over Wi-fi, right?. I have an iPad Mini at home (Wi-fi only) that I can iMessage to and from quite easily.
Any insights? I would love to use this in Europe for two weeks.
Version 8.2
Model MD277LL/A
Daphne

Maybe this can help: Using FaceTime behind a firewall

Want to use Droid X2 as a wi-fi only device with no data plan

Hello,
How would I go about using my Droid X2 as a Wi-Fi only device? I want to downgrade to a 'dumb phone' but yet I would still like to keep the Droid X2 to play games, browse the Internet, etc. all over a Wi-Fi connection - essentially use it as a tablet.
Thanks in advance for any replies!

Just activate the basic phone on your line. This will automatically de-activate the Droid X2. You should still be able to use it as a wi-fi only device.
Be sure to log into your MyVerizon account to confirm that you no longer have a data plan associated with the line. It should be cancelled when you activate the basic phone, but you should check just to be sure.

GPIB as listen only device = pseudo analyzer?

Ok, I get the impression from "Configuring an IEEE 488 Interface Board for Listen-Only or Talk-Only Operations Using NI-488.2" article that, if one is ingenious enough, he can make his own "SPY" program that can function to watch other GPIB devices on the IEEE bus talk...thus creating a poor man's analyzer. I realize there is GPIB+ hardware that you can buy that does this but I'm interested in leveraging my existing equipment. If this can be done, are there any cons? I.E, if you are able to watch, would you be able to discern traffice between different devices appropriately?
Maybe someone already has an app. that does this.
Thnx for any info.

Another potential problem is that if your system does serial polls, the response will be prepended to the subsequent data read. This is because most serial polls do not have EOI asserted. The listen-only device will receive the one byte, which is not a complete message. The next received message will be appended to the serial poll byte.
This may also not be a problemm if you are trying to spy on a very simple controller<>device application, but is one additional caveat.

If I buy a second hand ipad with a wireless service, can I use it as a wifi only device?

For instance, let's say I find a great deal n a used ipad, but it's attached to AT&T, but I have no interest in getting an AT&T plan. Can it be used as a wifi only device?

Yes.

Is an apple device the only device I can download music to?

Is an apple device the only device I can download music to?

Yes, you are right. iTunes only works with Apple Devices.

Can I setup lrt214 to enforce vpn only inbound to machines?

I have both the 214 and 224 and yesterday setup 214 in our office with WAN port to TWC modem, and LAN side to dhcp one internal network of 10 people. The owners of company want to access computers and files from homee so I enabled pptp VPN and it works fine. The owner is using TeamViewer Free Edition to access his desktop from home today, and he said he did not have to activate the VPN. Is there a way to enforce VPN only inbound access, even with software like teamviewer which I believe is using port 80 for communication? Thanks. Dan

Hi, you can add a access rule to achieve it.

Router to PC VPN with device authen only via RSA Sig

Problem establishing a vpn between a cisco router and a PC based Cisco VPN Client
using version 4.6 (had problems with 4.8 & 5.0). Only trying to accomplish
device authenication with digital certificates without any interest in user
authenication/authorization, so I've eliminated the Xauth from IKE and login
stuff from the client config.
I've got to take about half a dozen users into production asap...
I am thinking the access list may be the problem since the pc client is
expecting to have encrypted communications, but the cisco router is
still doing all it's checks and balances with IKE/ISAKMP to finish device
authenication with one certificate on each. Error message seem straight
forward, but I'm new to the vpn config's and have tested pki for
about 6 months wo/ going into production. Attached are logs with recommended
debug turned on for crypto ike/ipsec/pki/etc.

Thank you for your response!
After further investigation, I'm more concerned about Cisco's IOS 12.4 "Certificate Server" being able to consistently build certificates. Do I need to depend upon a certain Test release like 12.4T because 12.4 isn't ready ....? It's in the 12.4 documentation as though it's ready and I couldn't find any comments in the caveats...
I have tried to build a "request for a certificate" with both with the Cisco VPN Client 4.8/5.0, and Mozilla's add-on to firefox called Key Manager, but both failed.
Just loading base64 instream directly into the IOS crypto cmd to enroll via the terminal fails regularly, besides trying to use SCEP (Cisco's simple certificate enrollment protocol).
I don't care how it gets done, because I like Cisco's architecture so much, but it's got to be reliable.
I don't mind getting involved with Cisco's testing and I believe I can replicate the errors.
Attached is an error of the IOS 12.4 failing...

S2S VPN only works in one direction

I'm very new to cisco devices but we recently acquired a catalyst 2911 device for our co-lo cabinet and I am trying to get a site-to-site vpn connection working between the facility and my offices network as well as a remote access VPN for me to use in case I have to fix something while outside of the office.
The office's gateway is 66.119.163.2 and the device is a TZ210 with it's LAN network being 192.168.1.0 /24
The co-los gateway is 204.244.50.254 and the device is an ASR 2911 with it's LAN network being 10.0.10.0 /24
The S2S VPN connection is up between the two locations and the 2911 device and the servers within it's LAN can ping and RDP to the office's machines. The office network can only ping the LAN interface IP on the 2911 which is 10.0.10.1 but not the servers in the network. the site-to-site VPN was set up with the CCP wizard.
How can I allow the 192.168.1.0/24 network to see the 10.0.10.1/24 network and why do I only currently see the gateway?
If need be I can post my running-config file with the preshare keys redacted.

I would suggest that you change your vpn client pool to be in a totally unique subnet.
For example:
10.20.20.0/24
ip local pool SDM_POOL_1 10.20.20.200 10.20.20.250
Then a few ACLs to be modified:
access-list 101 permit ip 10.10.10.0 0.0.0.255 any
access-list 105 permit ip 10.20.20.0 0.0.0.255 10.0.10.0 0.0.0.255
access-list 105 permit ip 10.20.20.0 0.0.0.255 10.10.10.0 0.0.0.255
ip access-list extended 106
5 deny ip 10.0.10.0 0.0.0.255 10.20.20.0 0.0.0.255
ip access-list extended 107
5 deny ip 10.0.10.0 0.0.0.255 10.20.20.0 0.0.0.255

Cisco ASA 5510 site to site VPN only

Hi,
Need some expert help. I will be deploying the CISCO ASA 5510 in VPN site to site scenario only. One interface will be for the WAN and the other LAN interface is connected to another firewall appliance. The main purpose of the ASA is for branch site VPN connection only. My default gateway is pointing to the Internet router on my WAN inteface. Should NAT be enabled on my WAN inteface? The only expected traffic to go thru my ASA is VPN traffic to the other site. I have already defined static routes and have gone thru the wizard for site to site VPN and added my local and remote networks. Also how do I approach my access policies, the default deny any any is in place. Should I allow anything on it? The firewall connected to my LAN interface is expected to do the filtering, like I said the ASA's purpose is just to do VPN site to site. Thanks all

Thanks Jon. That is what I want to clarify as well, running the VPN site to site wizard, will automatically create the 'cryptomap' access rules, will the existing deny all rule apply to the VPN traffic? I think there was an option that VPN traffic will bypass access rules.
So having NAT enabled for anything that goes out on My WAN inteface would not matter at all, even if the VPN traffic will go out of that interface right? Hope I don't sound confusing.
As per your second question, I know it sounds weird and is not good network design, but customer just renewed maintenance contract for the other firewall box that is why he does not want to get rid of it yet. Although ISA can perform the function as well. Thanks.

RVS4000 as VPN only device

Similar Messages

Maybe you are looking for