Connecting 3 RVS 4000 with VPN

[hanspetermeyer]

Hello,

i want to connect in a triangle 3 RVS 4000 Router with VPN

i have configured 3 routers, which are able to connect to the Internet. Each of them are configured as a gateway.

i have created 2 tunnel on each router. But the vpn connection can't be established,

here is the configuration of  router1 the other are configured in the same way, only the remote group setup is different

Do i have to open also some ports for the VPN , if yes which one and were

Thanks fpr your help and response

HP.Meyer

[mpyhala · Accepted solution]

Hi hanspetermeyer,

Thank you for posting. You do not need to open any ports for VPN. I noticed that your screenshot shows that the two routers have a common LAN subnet of 192.168.100.x. You will need to have a different local subnet for each router:

1. Router 1: 192.168.1.1
2. Router 2: 192.168.2.1
3. Router 3: 192.168.3.1

I think that you will find that once you change the LAN IP of the routers so that they are on different subnets the tunnels will connect. Please let us know if that works.

[hanspetermeyer]

Hello,

this was right answer, thanks for the quick help

HP

[hanspetermeyer]

Good morning or afternoon

i have another problem witt the VPN connection, i can't reach the local Networks behind the 3 Routers

Configuration of each Router is

R1 LAN IP = 192.168.100.1

R2 LAN IP = 192.168.101.1

R3 LAN IP = 192.168.102.1

on each Router DHCP is off. i can ping from a PC which is connected to R1 the LAN IP from R2 and R3, but can't reach any other device in R2 and R3 LAN enviroment

Any idea ?

Thanks

HP

[mpyhala]

Hello,

Are you trying to ping the IP address of the clients behind the routers or the computer name? You will need to use the IP addresses only unless you add the names to the LMHOSTS file in your PCs. Also, if there is any antivirus or third party firewall software running on those clients it will block the PC from replying to pings from an untrusted subnet. For example you ping from R1 with 192.168.100.1 to a PC behind R2 that has 192.168.101.x. Because the antivirus or firewall software on the PC sees that the ping request is coming from a different subnet it will block the response. You will need to either disable any security software or add the untrusted subnet to the trusted list in that software. Sometimes it is best to test by pinging something that does not have any software, such as a printer or print server.

Please keep us updated.

[hanspetermeyer]

Hello,

i have tryed to ping from R2 192.168.101.1 to a Fritzbox which have the IP adress 192.168.100.110

this should work normally

HP