VPN Site to Site RV220(Main Site) & RV110 (Remote) Connection Issues

Greg · ‎08-25-2015

I had a Site to Site VPN working perfectly with 2 RV220W's at both ends. We lost a Router and I replaced it with a RV110 and now we can not get the connection established between the locations. I previously had both RV220's setup with FQDN using dyndns.org, but the RV110 does not offer FQDN as the local, so we are just using the local IP that has been already populated. Not sure what I am missing here - any help would be appreciated!!

RV110

Remote Endpoint FQDN, xxx.dyndns.org with Local IP Address as xxx.xxx.xxx.xxx

Secure Connection Remote Accessibility - Remote 192.168.1.0 / 255.255.255.0 and Local 192.168.2.0 / 255.255.255.0

IKE SA Policy

Exchange Mode = Main, Encryption AES-128, Authentication SHA-1, Pre-Shared Key 0987654321, DH Group - 768Bit, SA Lifetime 3600, Dead Peer Detection Enabled, DPD Delay 10, DPD Timeout 30

RV220

Remote Endpoint FQDN, xxx.dyndns.org with Local FQDN as xx2.dyndns.org

Secure Connection Remote Accessibility - Remote 192.168.2.0 / 255.255.255.0 and Local 192.168.1.0 / 255.255.255.0

IKE SA Policy

Exchange Mode = Main, Encryption AES-128, Authentication SHA-1, Pre-Shared Key 0987654321, DH Group - 768Bit, SA Lifetime 28800, Dead Peer Detection Enabled, DPD Delay 10, DPD Timeout 3 and XAuth Type is None

Matthias Brauchle · ‎08-27-2015

Hi,

perhaps it helps, when you configure the local IP-Address of the RV130 on the RV220 as the remote Endpoint.

Kind regards,

DrMxxxxx

Greg · ‎08-28-2015

DrMxxxx,

Thank you for the reply. I did as you suggested, add the IP Addres into the RV220 VPN Policy Table as the Remote Endpoint - still does not connect the RV110 and RV220 together. Any other suggestions would be very much appreciated.

Thanks

G

Matthias Brauchle · ‎08-31-2015

Good Morning,

do you have some Paket traces from the interfaces, which connecting to the VPN-Tunnel / Internet? Perhaps you can see in these logs some helpful information.

Are the Routers able to ping each other? E.g. the one, which is using dyndns should be pingable by his name.

Kind regards,

DrMxxxxx