RV110W IPSec - Unable to set Local Endpoint to FQDN

[paulroddick]

I am trying to connect my RV110W from my home office to our office IPSec router.  I have a dynamic IP address and am using DDNS, therefore the RV110W local endpoint needs to be configured with my FQDN, not the IP address as this will change.

On page 100 the manual states

Step 4 -

• Local WAN (Internet) IP Address—Enter the public IP address or domain

name of the local endpoint (Cisco RV110W).

This option is not available in my router - I am running firmware 1.2.0.9

Is this a bug or am I missing something?

[jonatrod]

Good morning

Thanks for using our forum

Hi Paul, my name is Johnnatan and I am part of the Small business Support community. In order to resolve your problem Paul, you can try using  a different browser such Chrome, i.e. (9.0), or mozilla, also try in a different computer.

I hope you find this answer useful,

*Please mark the question as Answered or rate it so other users can benefit from it"

Greetings.

Johnnatan Rodriguez Miranda.

Cisco network support engineer.

[frankois85]

Hi Paul,

I have exactly the same problem: I have a Cisco RV110W behind an Internet box (Orange Livebox Pro v2, French ISP). The RV110W gets its WAN IP by the Internet box DHCP (in my case 10.2.0.2). Thus, to configure an IPSEC tunnel, I can't modify the local endpoint, it's the WAN IP. As a result, I get a "malformed payload" when I tried to establish the tunnel.

Did you solve your problem, or did you get another way to make it work?

@Jonathan : i tried different browsers (Firefox, Chrome) on dfferent PCs (Win7, Ubuntu) and menus are exactly the same.

I'm not used to write in English anymore, feel free to ask me for more information.

Greetings.

[Mehdi Boukraa]

Hi Francois,

In your case you have RV110W behind a NAT the WAN interface of RV110W are configured with private IP you need to have option NAT-T (Nat traversal) but RV110W doesn't support this option but order to resolve this you can have the LiveBox on bridge mode in this case the public IP should be on WAN interface of RV110W and you can establish your VPN Site to Site

For more details you can see Data sheet for RV110W 

http://www.cisco.com/en/US/partner/prod/collateral/routers/ps10907/ps9923/data_sheet_c78-660141_ps9923_Products_Data_Sheet.html

Please rate the post to help other customers

Thanks

Mehdi

[frankois85]

Hi,

Unfortunately, my internet box cannot be set on bridge mode (I read a lot of docs and forum on the subject, but nothing possible).

I have to try the RV110W as a modem, or at least find a modem with bridge mode.

I'm not fan of my last suggestions, so any advice would be appreciated.

Greetings.

François.

[SamirD]

If your modem has a dmz mode, you can enable that and put the rv110w behind it.  Then it is still getting the external IP address and may work.

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

[SamirD]

I can't read French, but I found some help pages on orange.fr site and it's amazing how much networking is just a universal language. 

From what I can tell on this page, you actually have a site-to-site VPN capability built-in, so you don't even need the rv110w:

http://assistance.orange.fr/configurer-un-vpn-entre-deux-livebox-pro-v2-en-mode-expert-4563.php

And there's also DMZ if you still want to use the rv110w.  The orange router can do almost everything the rv110w can do.

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

[Mehdi Boukraa · Accepted solution]

Hi Paul,

Order to have DDNS working on the VPN tunnel you need to configure DDNS under networking menu and on the local endpoint you should see your public IP address which is resolved by DDNS and on the remote endpoint if you have also Dynamic IP and you use DDNS you can change on the remote endpoint to FQDN

So the local endpoint is automaticlly using DDNS to resolve IP address of course if you have DDNS configured on the router

Thanks

Mehdi

[frankois85]

Good evening,

I set up a ddns under networking menu, and it uploaded local ip (10.2.0.2).

On the local endpoint, menu is still the same, a deactivated text field with 10.2.0.2. No other choice. I checked the firmware version, it's the most recent one (1.2.0.9).

I may try to use the RV110W as a modem (pppOE), instead of the livebox (internet box) but note sure if it's possible.

Anyway, thanks for the answers.

[SamirD]

The only way this will work is if your Orange connection coming in is also Ethernet.  Here in the US, the connection is usually a phone line, which will not work as you still need the modem to convert the DSL signal to Ethernet.

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

[paulroddick]

Thanks to everyone who replied for your help.

I decided to return the router to Amazon during the returns window and got a more comprehensive VPN router (not Cisco) second hand on ebay.