topic Hello Darryl, in Routing and SD-WAN

RV130W VPN Wizard - Problems with Connectivity

ACETech — Tue, 05 Mar 2019 15:44:05 GMT

I have two RV130Ws - one at the main office and one at a new warehouse. The router and Wi-Fi are working well.

However, when I used the VPN Wizard, I still cannot get them to connect.

After further reading, I set the WAN Settings on the router for the 'static' and 'gateway' IP addresses.

After more reading, it says that under Routing, there needs to be some entries made.

Wouldn't the VPN Wizard make all the necessary entries for WAN Configuration Settings and Networking->Router Settings?

Also note, the cable company gave two IP addresses for each modem - a static IP and a gateway IP. Cisco uses the word public.

Suggestions?

Thanks, Darryl

Hello Darryl,

Georg Pauwen — Sat, 24 Dec 2016 21:09:04 GMT

Hello Darryl,

on page 99, Step 4 of the attached user guide, you need two IP addresses, the Remote WAN (Internet) IP Address, and the Local WAN (Internet) IP Address, this might be what they are referring to.

http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv130w/admin_guide/en/rv130w_admin_en.pdf

I take the Local Wan would be

ACETech — Sat, 24 Dec 2016 21:48:06 GMT

I take the Local Wan would be the 192.168.x.x number and not the cable static IP assigned to the device via WAN Configuration settings?

Hello Darryl,

Georg Pauwen — Sat, 24 Dec 2016 22:19:00 GMT

Hello Darryl,

indeed, two public IP addresses wouldn't make sense to be used in the same device, one (on the WAN side. Either way, can you post (the CLI version of) what you have configured ?

Hello,

Georg Pauwen — Sun, 25 Dec 2016 09:45:13 GMT

Hello,

the document below has screenshots of the VPN Wizard. Were exactly do you get stuck ?

http://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=7b8a60ab795b4ec9ae8168d600792e35_Basic_VPN_Setup_on_RV130_and_RV130W.xml&pid=2&converted=0

Thanks for the help. When I

ACETech — Sun, 25 Dec 2016 22:48:28 GMT

Thanks for the help. When I click on IPSEC Connection Status under VPN - Advanced Settings - it states disconnected.

Step 5. Here I entered the remote Gateway IP address

Step 6. Here I entered the local IP address range handed out by the router 192.168.1.0 255.255.255.0

Step 7. Here I entered the remote IP address range handed out by the router

192.168.2.0 255.255.255.0

I've included 3 pics

Image CiscoRV130w_1, End of VPN Wizard; note I did this on the office and warehouse router; the local and remotes are backward from each other

Image CiscoRV130w_2, WAN Configuration snapshot; I used the cable providers

Comcast Static IP = Cisco Internet IP Address

Comcast Gateway IP = Cisco Default Gateway

Image CiscoRV130w_3, screen used to "IPSEC Connection Status"; this comes back disconnected, no error message

Thanks.

Hello,

Georg Pauwen — Sun, 25 Dec 2016 23:08:29 GMT

Hello,

can you ping the remote gateways ? One other thing, you have the option to change the MTU size, set it to 1400.

The screenshots look good actually, the first thing we need to verify is that there is basic connectivity between the public IP addresses on both ends.

From the main office I can

ACETech — Sun, 25 Dec 2016 23:58:32 GMT

From the main office I can ping the warehouse gateway..

From the warehouse I can ping the main office gateway.

Note the cable provider verified they could see both IP addresses from the NOC (network operations center).

Remember also that

- on the warehouse router I setup WAN configuration

- to set the static IP

- to set the gateway IP

- same on the main office gateway

Tomorrow (Monday 26th) I can have more detailed info, either in screenshots or downloads, for further study.

Thanks for your help.

i noticed you used the term

ACETech — Mon, 26 Dec 2016 14:47:44 GMT

i noticed you used the term 'public ip'; Comcast gave us a gateway IP and a static IP for each modem; from reading i gather that the Cisco public IP is the same as the Comcast public gateway. not sure that I'm right.

Hello,

Georg Pauwen — Mon, 26 Dec 2016 15:08:28 GMT

Hello,

I am not really sure why they would give you two IP addresses, as you need only one. Either way, 'Cisco public IP' and 'Comcast public gateway' probably mean the same thing. Are the two addresses you got from Comcast both public IP addresses ?

I can ping both gateway IP

ACETech — Mon, 26 Dec 2016 22:50:32 GMT

I can ping both gateway IP addresses after I initially setup the WAN configuration on the RV130W.

Today I was on the phone with tech support and they had me delete the VPN Wizard setup I did, and use the VPN Site-to-Site Setup using the default settings. This still did not work.

Also note that under Diagnostics we were able to ping both gateway IP addresses however we were NOT able to ping the remote internal gateway (not sure what to call it) but it is the 192.168.2.1 router gateway address. This we could not ping.

Does the attached image of the WAN Configuration look correct? I'm not sure if the internal 192.168.1.1 address shouldnt' be here somewhere.

Thanks,

Darryl

Suggestions?

Hello,

Georg Pauwen — Tue, 27 Dec 2016 09:06:25 GMT

Hello,

I Iooked around for an instructional video to set up the VPN for your RV130 and found the below. Forget about the second part about the RV325, if you configure both RV130s following the steps in the first part, you should be able to get it working.

The important part is Step 2: the Remote Endpoint is the public IP addess of the remote router. For each site, you need only 1 IP public IP address (96.x.x.x).

https://www.youtube.com/watch?v=YgKrGjK26Tk&t=20s

Let me know if you are making progress...

Thank you.

ACETech — Tue, 27 Dec 2016 11:23:36 GMT

Thank you.

I've actually watched this video a few times. It is excellent.

I setup the VPN according to this video and the administration guides.

* i was not able to PING the gateways until I setup the WAN configuration in the RV130w. the video doesn't mention this as I would think the VPN wizard would do this.

* the video doesn't mention routing; a cisco tech mentioned that routing needed to be setup; again the video nor the VPN wizard mentions this; (and again I would think the wizard would make the necessary changes)

* the video also shows pinging the internal gateway IP (192.168.1.1 for instance) of the remote device; this I am unable to do

I will work on it this morning when if I can however it is a heavy work day for the staff and that warehouse crew after a long weekend

Thanks again for the great advice,

Darryl

Hello Darryl,

Georg Pauwen — Tue, 27 Dec 2016 12:04:54 GMT

Hello Darryl,

annoying indeed. One would think that the wizard would take care of the routing, the NAT, and everything else...apparently not.

I am trying to find a way to configure the RV130 through the command line, which usually works much better. I will let you know...

so having to make additional

ACETech — Tue, 27 Dec 2016 17:16:25 GMT

so having to make additional changes to the WAN config and routing after running the VPN Wizard is probably right? The video that you linked in didn't show any of this.

thanks for your help on this.

also note I have a copy of the .cfg.

Darryl

Darryl,

Georg Pauwen — Tue, 27 Dec 2016 17:31:40 GMT

Darryl,

exactly, the video doesn't show everything that is necessary.

Can you post the cfg ?

cfg attached. I renamed it

ACETech — Tue, 27 Dec 2016 17:47:22 GMT

cfg attached. I renamed it to .txt but it is the .cfg

let me know what you find.

Hello,

Georg Pauwen — Tue, 27 Dec 2016 20:29:59 GMT

Hello,

I am currently chatting with a Cisco rep about this...

By the way, can you check if your RV is running the latest firmware ? There is an option in the web menu to upgrade to the latest release...

Firmware update applied

ACETech — Tue, 27 Dec 2016 22:39:22 GMT

Firmware update applied before installation. Version: 1.0.3.22

I've also chatted with a Cisco tech. Have a case opened. Couldn't' work on this today due to busted water pipe.

Tomorrow I may reset to default settings and start fresh with the manual setup (Basic VPN Setup). But actually I've done this also after the VPN Wizard didn't work.

What one tech mentioned that Networking->Routing must be defined. This I have not seen how to setup.

Very interested in what your Cisco rep has to say.

Thanks again. Darryl

Darryl,

Georg Pauwen — Tue, 27 Dec 2016 22:53:59 GMT

Darryl,

unfortunately the rep only referred me to documents that I had already seen...

Page 39 of the user guide has the section on routing. I would try and enable RIP version 2 on both routers.

http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv130w/admin_guide/en/rv130w_admin_en.pdf