Open Ports for VPN on Cisco RV325

[davidgershon]

Looking to access my RV325 via the Cisco VPN client and not able to connect.  I am seeing that UDP port 500 and 4500 are closed when trying to access them outside the network.  How do I enable these ports on this device and are there other ports necessary to establish the connection?

[Eric Moyers]

What you are probably facing is the ISP is blocking those ports. Normally on our devices (Cisco Small Business) Unless there is an ACL specifically blocking the ports there are no ports blocked.

Depending on your ISP some are notorious for blocking VPN ports for Residential Installations. I would take  a screenshot of your test proving that the ports are blocked and contact them.

If you like you can also call in and one of our engineers would be glad to help double check and gather information. 

Eric Moyers
.:|:.:|:. CISCO | Cisco Presales Technical Support | Wireless Subject Matter Expert

[davidgershon]

Thanks Eric.  I am using Verizon Fios service and they said today they do not block any ports.  I assume that for the VPN client these ports would already be opened on the RV325.  Running the latest firmware.   Here is my log when I attempt the connection:

Cisco Systems VPN Client Version 5.0.07.0440
Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.2.9200
Config file directory: C:\Program Files (x86)\Cisco Systems\VPN Client\

1      12:36:49.456  08/25/15  Sev=Info/6    GUI/0x63B00011
Reloaded the Certificates in all Certificate Stores successfully.

2      12:56:58.318  08/25/15  Sev=Info/4    CM/0x63100002
Begin connection process

3      12:56:58.332  08/25/15  Sev=Info/4    CM/0x63100004
Establish secure connection

4      12:56:58.333  08/25/15  Sev=Info/4    CM/0x63100024
Attempt connection with server "***.**.**.**"

5      12:56:59.129  08/25/15  Sev=Info/6    IKE/0x6300003B
Attempting to establish a connection with ***.**.**.**.

6      12:56:59.131  08/25/15  Sev=Info/4    IKE/0x63000001
Starting IKE Phase 1 Negotiation

7      12:56:59.136  08/25/15  Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to ***.**.**.**

8      12:56:59.145  08/25/15  Sev=Info/4    IPSEC/0x63700008
IPSec driver successfully started

9      12:56:59.145  08/25/15  Sev=Info/4    IPSEC/0x63700014
Deleted all keys

10     12:57:04.535  08/25/15  Sev=Info/4    IKE/0x63000021
Retransmitting last packet!

11     12:57:04.535  08/25/15  Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to ***.**.**.**

12     12:57:10.033  08/25/15  Sev=Info/4    IKE/0x63000021
Retransmitting last packet!

13     12:57:10.033  08/25/15  Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to ***.**.**.**

14     12:57:15.033  08/25/15  Sev=Info/4    IKE/0x63000021
Retransmitting last packet!

15     12:57:15.033  08/25/15  Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to ***.**.**.**

16     12:57:20.035  08/25/15  Sev=Info/4    IKE/0x63000017
Marking IKE SA for deletion  (I_Cookie=D3DC2E3916AC536F R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING

17     12:57:21.036  08/25/15  Sev=Info/4    IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=D3DC2E3916AC536F R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING

18     12:57:21.036  08/25/15  Sev=Info/4    CM/0x63100014
Unable to establish Phase 1 SA with server "***.**.**.**" because of "DEL_REASON_PEER_NOT_RESPONDING"

19     12:57:21.036  08/25/15  Sev=Info/5    CM/0x63100025
Initializing CVPNDrv

20     12:57:21.049  08/25/15  Sev=Info/6    CM/0x63100046
Set tunnel established flag in registry to 0.

21     12:57:21.049  08/25/15  Sev=Info/4    IKE/0x63000001
IKE received signal to terminate VPN connection

22     12:57:22.052  08/25/15  Sev=Info/4    IPSEC/0x63700014
Deleted all keys

23     12:57:22.052  08/25/15  Sev=Info/4    IPSEC/0x63700014
Deleted all keys

24     12:57:22.052  08/25/15  Sev=Info/4    IPSEC/0x63700014
Deleted all keys

25     12:57:22.052  08/25/15  Sev=Info/4    IPSEC/0x6370000A
IPSec driver successfully stopped

[gimbus109]

IMHO nothing concerned with ISP.

Try to reboot RV325 with power switch after creating/changing VPN configuration.

Restart trough the web interface doesn't reload the VPN config! (or not always ???)

Hope this helps

Gimbus