Basic example for IPSec VPN for RV220W

aghiondea · ‎08-29-2011

Hi all

I have been reading about this and trying things for the last couple of days. With no luck.

I am trying to setup IPSec VPN on the router so that I can use the QuickVPN tool (horrible app btw) to connect my laptop to my network.

My question is this - what should I put instead of remote.com and local.com when setting up VPN using the Basic VPN setup page?!

The help page only describes the entry page - not explaining what I should put there.

If anyone can send me an example of how to set it up I would really appreciate it.

Note - I was able to setup PPTP VPN but now I want to try IPSec VPN.

Thanks,

Alex

linksysinfo · ‎08-29-2011

Personally, I'd use the SSL VPN feature rather than quickvpn.

Sent from Cisco Technical Support iPad App

Regards Simon

aghiondea · ‎08-29-2011

That would be another option indeed.

However, I am using dyndns.org for my dynamic DNS. And when I configure the portal, instead on using my .info address, the portal uses the .org address.

Furthermore, SSL VPN is not supported on Win7:

SSL VPN is not working for users whose computers are running Windows 7

64-bit.

Work Around: Use Windows XP 64-bit or Windows 7 32-bit.

How can a workaround of using Windows XP even be considered a workaround?!

I had different expectations when I bought this CISCO router.

Anyway - maybe someone can point me to a basic configuration for IPSec VPN.

Thanks,

Alex

PS> I appologize if I sound angry - I really appreciate your help and your reply!

linksysinfo · ‎08-30-2011

You can use SSL on Windows 64bit. just install Virtual PC or VMWare and run a 32bit OS.

Regards Simon

linksysinfo · ‎08-30-2011

As to setup of IPSec, i dont think you setup that part of it. You should only need to use the VPN Users part to setup accounts for QuickVPN.

just search the admin guide for the QUICKVPN setup here:

http://www.cisco.com/en/US/docs/routers/csbr/rv220w/administration/guide/rv220w_admin_v1.0.1.0.pdf

Regards Simon

Wirestress · ‎08-30-2011

Like Alexandru I also had different expectations when I selected this Cisco router. There seem to be many problems with the router and the documentation. For example, for the VPN Wizard the documenation specifies that the local wan address can be left blank, but in the interface it requires a value. It also says that the remote wan address will only be enable in gateway mode, but in client mode it is insisting on a value. How can you possibly anticipate what the remote wan address will be for a road warrior?

'Configuring IPSec Users' section it says that "QuickVPN client can access only default LAN hosts". What is the default LAN host? Where is that configured?

What about VPN access logging? I cannot find anything that shows successful and failed connection attempts.

linksysinfo · ‎08-30-2011

It means you can only access any host on the rv220w default LAN, and no other subnets.

Remember QuickVPN is not a full IPSec client. I don't know if you can use something like greenbow client but it should work.

Sent from Cisco Technical Support iPad App

Regards Simon

Wirestress · ‎08-30-2011

Hi Simon

Thanks for the info. When you say "Remember QuickVPN is not a full IPSec client" I think you are making an assumption that I know more than I do. :-) I am really a newbie as far as IPSec goes. Some of my questions may seem a bit stupid but that is because I am struggling to figure this stuff out.

Is there a simple guide somewhere that describes what QuickVPN is, what it can do, and how to set it up?

How about a tutorial for using IPSec with Cisco products?

How about a compatibility matrix that shows what clients work with Cisco routers (the Rv220W in particular)?

linksysinfo · ‎08-30-2011

Don't know of a full detailed guide but there is quiet a bit on QVPN over at my site

http://www.linksysinfo.org/index.php?forums/cisco-small-business-routers-and-vpn-solutions.49/

Sent from Cisco Technical Support iPad App

Regards Simon

aghiondea · ‎08-30-2011

Hi

I *think* I tried creatting a QuickVPN user account and connecting to it using QuickVPN and that it failed - but I will try again tonight.

But if that is the case, then what does that setup page do!?!

Thanks,

Alex

aghiondea · ‎08-30-2011

So I tried creating a QuickVPN user and connect and that did not work. I couldn't have been that simple, right?

So - did anybody who was able to set this up mind sharing their configuration?

Thanks,

Alex

linksysinfo · ‎08-31-2011

What does your QVPN Log.txt report? it usually resides here:

C:\Program Files\Cisco Small Business\QuickVPN Client\Log.txt

Regards Simon

aghiondea · ‎08-31-2011

Here is the contents of the file>

2011/08/31 20:00:21 [STATUS]OS Version: Windows Vista

2011/08/31 20:00:21 [STATUS]Windows Firewall Domain Profile Settings: ON

2011/08/31 20:00:21 [STATUS]Windows Firewall Private Profile Settings: ON

2011/08/31 20:00:23 [STATUS]One network interface detected with IP address

2011/08/31 20:00:23 [STATUS]Connecting...

2011/08/31 20:00:23 [DEBUG]Input VPN Server Address =

2011/08/31 20:00:24 [STATUS]Connecting to remote gateway with IP address:

2011/08/31 20:00:25 [STATUS]Remote gateway was reached by https ...

2011/08/31 20:00:25 [STATUS]Provisioning...

2011/08/31 20:00:40 [WARNING]Local IP address conflicts the subnet of remote VPN Server.

2011/08/31 20:00:40 [WARNING]Failed to connect.

2011/08/31 20:00:50 [WARNING]Remote gateway wasn't reached...

2011/08/31 20:00:50 [WARNING]Failed to connect.

2011/08/31 20:00:50 [WARNING]Failed to connect!

Stupid question - does my computer (the one that I am trying to VPN from) has to be outside of the local network of the router?

Alex

linksysinfo · ‎09-01-2011

Alexandru Ghiondea wrote:

2011/08/31 20:00:25 [STATUS]Remote gateway was reached by https ...

2011/08/31 20:00:25 [STATUS]Provisioning...

2011/08/31 20:00:40 [WARNING]Local IP address conflicts the subnet of remote VPN Server.

Stupid question - does my computer (the one that I am trying to VPN from) has to be outside of the local network of the router?

Alex

Looks like the your Remote LAN is the same Subnet as the Local LAN. one needs to change.

Regards Simon

mpyhala · ‎09-16-2011

Alex,

I was browsing this thread and noticed your question. The answer is yes, you need to be outside the network to connect. Also, make sure that the Windows Firewall is enabled on Windows Vista and 7. Turn off or uninstall any third party antivirus or firewall software. If you continue to have issues, please call Cisco Small Business Support. We are very good at troubleshooting and fixing QuickVPN issues and will be happy to assist. You can find a number here: www.cisco.com/go/sbsc