RV110w site to site Pix515e

[jefforamma]

Hey,

I have a remote user at home that currently has a WRV210. The site to site vpn works fine on that one. However, the router has seems to be flaking out and some ports do not work and the wireless either.

So I ordered him a RV110W. It has the latest firmware. I tried reseting to factory defaults and resetting up again but still no go.

If I configure the vpn on the RV110W, it either does not work, or works partially but keeps dropping.

I can ping his end and he can access the lan resouces. However his VIOP phone will not connect over the tunnel.

If i remote the 110 and put the 210 back in, everything works fine.

I have matched up all settings from the 210 to 110 as well as the rekey/other times.

Some of the errors I see are:

QM Fsm error (p2 struct errors after running for a short time fine on the 110

and

Received encrypted packet with no matching SA, dropping

If I then put the 210 back in the vpn works flawlessly until the unit flakes out.

I belive it is something to do with NAT Transveral as that is the only setting that is not available on the 110 (that i can find)

Any ideas if that is the problem or other solution?

[lariasqu]

Hi jefforamma, thank you for using our forum, my name is Luis I am part of the Small business Support community. In this case I could share to you the Admin guide, Configuring Basic VPN Settings (Site-to-Site VPN) in page 100, you will find some steps in order to guide your VPN configuration.

Please check this additional information:

Perfect forwarding Secrecy should be disabled.

Check is the connection is in main mode

However, you can get more feedback about your VPN configuration, if you move your post using the actions panel on the right. You can move it to the link below.

https://supportforums.cisco.com/community/netpro/security/vpn

I hope you find this answer useful

Greetings,

Luis Arias.

Cisco Network Support Engineer.

[jefforamma]

Luis,

I had already looked at the admin guide. It does not have much in it.

I disabled PFS on both sides (PFS on the WRV210 works fine) and the tunnel is more stable however his VIOP phone will still not work.

He can hear me on it but I hear nothing from his end.