RV130W VPN Wizard - Problems with Connectivity

[ACETech]

I have two RV130Ws - one at the main office and one at a new warehouse.   The router and Wi-Fi are working well.

However, when I used the VPN Wizard, I still cannot get them to connect.

After further reading, I set the WAN Settings on the router for the 'static' and 'gateway' IP addresses.

After more reading, it says that under Routing, there needs to be some entries made.

Wouldn't the VPN Wizard make all the necessary entries for WAN Configuration Settings and Networking->Router Settings?

Also note, the cable company gave two IP addresses for each modem - a static IP and a gateway IP.  Cisco uses the word public.

Suggestions?

Thanks, Darryl

[Georg Pauwen]

Hello Darryl,

on page 99, Step 4 of the attached user guide, you need two IP addresses, the Remote WAN (Internet) IP Address, and the Local WAN (Internet) IP Address, this might be what they are referring to.

http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv130w/admin_guide/en/rv130w_admin_en.pdf

[ACETech]

I take the Local Wan would be the 192.168.x.x number and not the cable static IP assigned to the device via WAN Configuration settings?

[Georg Pauwen]

Hello Darryl,

indeed, two public IP addresses wouldn't make sense to be used in the same device, one (on the WAN side. Either way, can you post (the CLI version of) what you have configured ?

[Georg Pauwen]

Hello,

the document below has screenshots of the VPN Wizard. Were exactly do you get stuck ?

http://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=7b8a60ab795b4ec9ae8168d600792e35_Basic_VPN_Setup_on_RV130_and_RV130W.xml&pid=2&converted=0

[ACETech]

Thanks for the help.  When I click on IPSEC Connection Status under VPN - Advanced Settings - it states disconnected.  

Step 5. Here I entered the remote Gateway IP address

Step 6. Here I entered the local IP address range handed out by the router                           192.168.1.0 255.255.255.0

Step 7.  Here I entered the remote IP address range handed out by the router

192.168.2.0 255.255.255.0

I've included 3 pics

Image CiscoRV130w_1, End of VPN Wizard; note I did this on the office and warehouse router; the local and remotes are backward from each other

Image CiscoRV130w_2, WAN Configuration snapshot; I used the cable providers

Comcast Static IP = Cisco Internet IP Address

Comcast Gateway IP = Cisco Default Gateway

Image CiscoRV130w_3, screen used to "IPSEC Connection Status"; this comes back disconnected, no error message

Thanks.

[Georg Pauwen]

Hello,

can you ping the remote gateways ? One other thing, you have the option to change the MTU size, set it to 1400.

The screenshots look good actually, the first thing we need to verify is that there is basic connectivity between the public IP addresses on both ends.

[ACETech]

From the main office I can ping the warehouse gateway..

From the warehouse I can ping the main office gateway.

Note the cable provider verified they could see both IP addresses from the NOC (network operations center).

Remember also that 

- on the warehouse router I setup WAN configuration

- to set the static IP

- to set the gateway IP

- same on the main office gateway

Tomorrow (Monday 26th) I can have more detailed info, either in screenshots or downloads, for further study.

Thanks for your help.

[ACETech]

I can ping both gateway IP addresses after I initially setup the WAN configuration on the RV130W.

Today I was on the phone with tech support and they had me delete the VPN Wizard setup I did, and use the VPN Site-to-Site Setup using the default settings.  This still did not work.

Also note that under Diagnostics we were able to ping both gateway IP addresses however we were NOT able to ping the remote internal gateway (not sure what to call it) but it is the 192.168.2.1 router gateway address.  This we could not ping.

Does the attached image of the WAN Configuration look correct?   I'm not sure if the internal 192.168.1.1 address shouldnt' be here somewhere.

Thanks,

Darryl

Suggestions?

[Georg Pauwen]

Hello,

I Iooked around for an instructional video to set up the VPN for your RV130 and found the below. Forget about the second part about the RV325, if you configure both RV130s following the steps in the first part, you should be able to get it working.

The important part is Step 2: the Remote Endpoint is the public IP addess of the remote router. For each site, you need only 1 IP public IP address (96.x.x.x).

https://www.youtube.com/watch?v=YgKrGjK26Tk&t=20s

Let me know if you are making progress...

[ACETech]

Thank you.

I've actually watched this video a few times.  It is excellent.

I setup the VPN according to this video and the administration guides.

* i was not able to PING the gateways until I setup the WAN configuration in the RV130w.   the video doesn't mention this as I would think the VPN wizard would do this.

* the video doesn't mention routing;  a cisco tech mentioned that routing needed to be setup; again the video nor the VPN wizard mentions this; (and again I would think the wizard would make the necessary changes)

* the video also shows pinging the internal gateway IP (192.168.1.1 for instance) of the remote device; this I am unable to do

I will work on it this morning when if I can however it is a heavy work day for the staff and that warehouse crew after a long weekend

Thanks again for the great advice,

Darryl

[Georg Pauwen]

Hello Darryl,

annoying indeed. One would think that the wizard would take care of the routing, the NAT, and everything else...apparently not.

I am trying to find a way to configure the RV130 through the command line, which usually works much better. I will let you know...

[ACETech]

so having to make additional changes to the WAN config and routing after running the VPN Wizard is probably right?  The video that you linked in didn't show any of this.

thanks for your help on this.

also note I have a copy of the .cfg.  

Darryl

[Georg Pauwen]

Darryl,

exactly, the video doesn't show everything that is necessary.

Can you post the cfg ?

[ACETech]

cfg attached.  I renamed it to .txt but it is the .cfg

let me know what you find.