RV042 with BEFSX41 (VPN Tunnel)

jktlee1973 · ‎02-08-2011

Hi there everyone,

Been working on this for 2 night already and still getting nowhere. Here is the configure.

Site A

=======

Local IP Address ===> RV042 ==> ADSL Modem

192.168.50.x ==> 192.68.50.1 ==> WAN IP (A.A.A.) using DYNDNS.com (Dynamic IP)

Subnet : 255.255.255.0

Phase 1:

Site B

=====

Local IP Address ===> BEFSX41 ==> ADSL Modem

192.168.2.x ==> 192.68.2.1 ==> WAN IP (B.B.B.)

Subnet : 255.255.255.0

Note : There is a remote gateway when I click on the status at BEFSX41. Is this used anywhere ?

Current Status

============

From Site A, if I change the remote Gateway to IP Only, I was able to establish a tunnel because RV042 provide me with connect button in the [Tunnel Test] tab. Even when the Tunnel test is connected. I am still not able to ping 192.168.2.1 from Site A.

If I use Dynamic IP with Domain Name resolved, the connect button does not appear and it just show Waiting for connections.

Need help. Thank you.

Jeremy Lee

jktlee1973 · ‎02-08-2011

Hi everyone,

I manage to have VPN tunnel finally working!!! but only with Fixed IP on both sides. The test also failed

RV042 ===> Set Remote Gateway to dyanmic IP with domain name from DYNDNS.com (Failed)

BEFSX41==> Set Remote Security Gateway to FQDN with domain name from DYNDNS.com (Failed)

Anyone care to share to have least does that mean VPN tunnel only work with fixed IP. Anyone care to share their exprience?

Screen at RV042

============

No.	Name	Status	Phase2 Enc/Auth/Grp	Local Group	Remote Group	Remote Gateway	Tunnel Test	Config.
1	OFFICE2	Connected	3DES/SHA1/2	192.168.50.0 255.255.255.0	192.168.2.0 255.255.255.0	xxx.xxx.xxx.xx

VPN Log at BEFSX41

================

2011-02-08 20:56:08
2011-02-08 20:56:08 IKE[1] Tx >> AG_I1 : 124.13.48.70 SA, KE, Nonce, ID
2011-02-08 20:56:12
2011-02-08 20:56:12 IKE[1] Tx >> AG_I1 : 124.13.48.70 SA, KE, Nonce, ID
2011-02-08 20:56:22 IKE[1] Rx << AG_I1 : 124.13.48.70 SA, KE, NONCE, ID, VID
2011-02-08 20:56:22 IKE[1] ISAKMP SA CKI=[7249ad18 cf425d1c] CKR=[ff1ae587 52ae185a]
2011-02-08 20:56:22 IKE[1] ISAKMP SA 3DES / SHA / PreShared / MODP_1024
2011-02-08 20:56:22 IKE[1] Tx >> AG_R1 : 124.13.48.70 SA, KE, Nonce, ID, HASH
2011-02-08 20:56:23 IKE[1] Rx << AG_I2 : 124.13.48.70 HASH
2011-02-08 20:56:23 IKE[1] Rx << QM_I1 : 124.13.48.70 HASH, SA, NONCE, KE, ID, ID
2011-02-08 20:56:23 IKE[1] Tx >> QM_R1 : 124.13.48.70 HASH, SA, NONCE, KE, ID, ID
2011-02-08 20:56:24 IKE[1] Rx << QM_I2 : 124.13.48.70 HASH
2011-02-08 20:56:24 IKE[1] ESP_SA 3DES / SHA / 3600 sec / SPI=[7ddb8afa:788ff921]
2011-02-08 20:56:24 IKE[1] Set up ESP tunnel with 0.0.0.0 Success !
2011-02-08 20:56:24

Thank you.

Regards

Jeremy Lee