RV340 IPSEC Site2Site VPN Issues

[JayJenkins35869]

I have two RV340 routers that are configured for a VPN IPsec Site2 Site tunnel. the tunnel shows to be up on both routers but i cannot ping any device behind the routers (switches, cameras, ect.)

i was able to configured the routers so i can remotely manage them but i need to remotely manage other equipment at the sites also.

i am a self taught networker so please keep responses easy to follow. firewalls totally confuse me... i get the idea but the terminology eludes me.

[balaji.bandi]

Did you allow those subnet IP address part of the Tunnel to access ? (is ping allowed also )

check below config : Local and remote group to add for reference :

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb5513-configure-a-site-to-site-virtual-private-network-vpn-connect.html

[Sujoy Paria · Accepted solution]

Hi,

You may check the following things…

• Please make sure both the routers having different LAN IP subnet, IP subnet should not overlap each other. Example, site A LAN IP subnet 192.168.1.1/24 and site B LAN IP subnet 192.168.2.1/24.
• Please disable the ‘Block WAN request’ once under Firewall Basic Settings and check the status.
• Please check the Access Rules on both the Routers, whether any existing access rules denying the ICMP (Ping) traffic.
• Whether the devices behind the routers (switches, cameras etc.) are configured with the gateway IP address as the respective router LAN IP address (For the IP subnet advertised in VPN tunnel).
• From inside the router at each side, whether you are able to ping the devices (switches, cameras etc.) behind that router.

[JayJenkins35869]

i got it working. the VPN has some weird flaw that will not allow "any" setting to be selected on both ends as the local setting. 

I had to set both VPNs at each end with "Subnet" settings in the local and remote portions. it started working great.

[Sujoy Paria]

Hi,

Thanks for your reply. Glad to know that VPN is working now.

Regarding the “Any” settings under the VPN, please try to use ‘Remote IP Type’ as “Any” at local site and check the status, if that works.