RV082 - AD Authentication over Gateway-to-Gateway VPN

[bubarooni]

I've got a central location with a Cisco 2911 router (192.168.1.x /24).

I've got several remote locations that have the RV082's with their own subnets (192.168.x.x/24).  Each RV handles it's own DHCP.

Each RV082 has a gateway-to-gateway vpn back to the 2911.

The vpn's all connect just fine and I'm able to use resources back at the central location with no issues at all.

My problem is, I can't login to the domain that is hosted at the central location.

I can ping the DC's back at the central location by name and by ip.  The RV's just don't seem to be able to route the login info back to the central location to the DC's for authentication.

I can supply more info if needed, but here's to hoping someone responds back with something like 'Just tick the box that says ....' and that'll do the trick!

Thanks In Advance for any pointers!

[SamirD]

Can you see the resources by IP or by netbios name?  If you can't see it by netbios name, try ticking the box for Netbios in your site-to-site configuration.

Otherwise, this might be a restriction of some sort on the Cisco 2911 as I don't think the rv's are sophisticated enough to block a login, ping.

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

[bubarooni]

I had 'Netbios Broadcast' ticked on the VPN -> Gateway To Gateway page under the section titled 'Advanced' at the bottom of the page.

At the remote locations I can ping devices at the home location by IP and by name, including the DC's.

[SamirD]

Do you have IPComp (IP Compression) enabled?

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

[anjraj]

Here's an article about Gateway-to-Gateway configuration that might help with the issues you're having: Configuration of Gateway-to-Gateway on VPN RV016, RV042, RV042G, and RV082 VPN Routers.

Hope this helps,

Anjana

[bubarooni]

Hey Samir,

No, I do not have IPComp on. 

Hey Anjana,

I'm not having any issues with creating tunnels, that works like a charm.  It's authenticating to my AD servers at the central location that's killing me.  I'm looking for a way to make the router realize that the authentication requests need to be passed back to the central location's subnet where the domain controllers reside.

[SamirD]

Hmm...I think I didn't fully understand what you were trying to do.

How does the authentication work?  Do you specify an IP or DNS name for the authentication request to target?  Or would the router have to figure this out automatically?

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com