VPN site to site RV340 to rv320

[jpbxpertis]

rvDear all maybe you can help me

My VPN connects perfecft but on day to another shows connected but without seen any PC/server from the other side

I have an rv320 firmware 1.5.1.13

VPN settingsvpn, rv340, rv320

NAME XXX2
XXX.XXX.XXX.XXX
WAN2
IPSEC aes128-sha1-modp1536-group 5
LOCAL GROUP (SUBNET)
192.168.1.0/24

REMOTE GROUP (SUBNET)
192.168.200.0/24
STATUS : UP

Aggressive Mode Enabled
Keep-Alive Enabled

The other one is a rv340 firmware 1.0.03.26

VPN SETTINGS

NAME XXX
XXX.XXX.XXX.XXX
WAN2
IPSEC aes128-sha1-modp1536-group 5
LOCAL GROUP (SUBNET)
192.168.200.0/24

REMOTE GROUP (SUBNET)
192.168.1.0/24
STATUS : UP

Aggressive Mode
Keep-Alive

----------------------

I hope that someone can help me. On bothe cisco "I dont have rules allowing or denying" anything like always. I can only seen on the RV320 this but not into the RV340.

2022-02-08, 08:24:05 VPN Log iptables -t nat -I vpn -s 192.168.1.0/24 -d 192.168.200.0/24 -j ACCEPT
2022-02-08, 08:24:05 VPN Log iptables -t nat -I vpn -s 192.168.200.0/24 -d 192.168.1.0/24 -j ACCEPT
2022-02-08, 08:24:05 VPN Log iptables -t nat -I vpn_postrouting -s 192.168.1.0/24 -d 192.168.200.0/24 -j ACCEPT
2022-02-08, 08:24:05 VPN Log iptables -t nat -I vpn_postrouting -o eth0 -s 192.168.200.0/24 -d 192.168.1.0/24 -j ACCEPT

Thanks to all, if you need anything else just askme.

regards,

Juan

[Georg Pauwen]

Hello,

tough one. If it used to work, and all of a sudden does not work anymore, you might want to start with just rebooting one, and then the other box.

[jpbxpertis]

Thanks for your reply. I rebooted both box several times. I dont understand why works everyday and now only connects but I can't do anything.

It is a firmware issue??

regards,

juan

[Georg Pauwen]

Hello,

it should obviously only malfunction if somebody has made a change somewhere. Are you the admin of both boxes ?

It could also be that the ISP has made some (security related) changes, it might be worth checking with them as well.

Are you running the latest firmware on both boxes ?

[jpbxpertis]

Thanks again, yes, I am the only admin. 

I have 2 intetnet providers and with both connect but I cant see de LAN from the other  side.. 

Yes, I have the lastest firmware in both sides too. 

regards,

juan

[Georg Pauwen]

Hello,

to be honest, these small business routers can act weird sometimes. My experience is that the fastest way to resolve this is to delete the entire VPN config, and then start from scratch. It only takes a few minutes anyway.

[jpbxpertis]

Yes! I do that 3 times. delete on bothe box and load again but no luck

[Georg Pauwen]

Hello,

what if you change aggressive mode to main mode ?

[jpbxpertis]

YEs I try both ways... I think that I dont have a solution...

[Georg Pauwen]

Hello,

not sure if that is easily achievable, since it is probably a production environment, but what about resetting both boxes to factory defaults ?

[jpbxpertis]

That is my last chance if I can't do anything these days, next tuesday I do a factory reset to the RV340 (I think that this is the one with problems)

Mean while I am going to try more stuff

[jpbxpertis]

I really can't understand why I can find anything about this issue... next week I will try reset it and I hope that works.

[jpbxpertis]

Hi, no news or info about similar issues? Maybe I am the only one? regards

[Georg Pauwen]

Hello,

it is difficult to pinpoint where the problem is, as the VPN apparently stopped to work, for no reason. Maybe something on the client (LAN) side changed ? Resetting the routers to factory defaults, and configuring everything again from scratch is your last option...