RV042 v3 & RV082 v3: WAN Failover + restore VPN

Similar Questions

• Tunnel VPN RV-042 for Dual WAN Failover backup function

  We have customers with dual WAN failover scenarios with site-to-site VPN tunnels.

  In the past, the VPN tunnel backup feature has been available in the RV-082.

  One of the new RV-042 firmware versions have the function of backup Tunnel VPN available?

  The feature is supported on the RV042 V3 hardware.

• Failover with VPN concentrator

  Hi all

  We have unique VPN concentrator which is the single point of failure, so need your help to mitigate the same

  The topology diagram is attached

  Site A and Site B.

  Site B has internet gateways where we have existing VPN.

  The intention to introduce the site A & Concentrator VPN gateway VPN is set as well

  Our design is provided for in

  Connectivity between the two locations & other office is managed by BGP.

  Default route is pointing at the Internet gateway.

  Info by the Internet Segment.

  ·         We have the SP independent IP range

  ·         Switching between 2 SP to site B is obtained by using the iBGP and eBGP

  Challenge: VPN concentrator single Point of failure (the Cisco VPN concentrator 3000)

  Here are the design goals

  ·         Implement internet gateways to the Site - A which will have redundancy level of Portal Site

  ·         Place on the VPN concentrator, which will act as a switch between site

  o If the concentrator vpn site B is out of box A VPN site must support all traffic.

  Concentrator VPN active o replica of Site B

  Is it possible to achieve the objectives of design.

  Please help about the VPN concentrator... How I can set VPN concentrator in failover mode... Just as we do firewalls?

  Help, please

  Hi yogesh,

  Concentrator VPN supports failover through VRRP. Please find the following for your reference document:

  http://www.Cisco.com/en/us/products/HW/vpndevc/ps2284/products_tech_note09186a0080094490.shtml

  As for the addition of failover for VPN concentrator, you happen to have a spare hub VPN to run VRRP?

  Don't know if you know, however, VPN concentrator comes end of life and the last delivery date was November 2007, as a result, you will not be able to buy VPN concentrator more.

  Here's the EOL notificatin for your reference:

  http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5743/ps5749/ps2284/prod_end-of-life_notice0900aecd805cd5a0.html

• RV082, Dual Wan, VPN + protocol bindings

  Hi all

  I have this kind of Setup and I can't figure out how to think this router.

  My Installer uses Dual Wan load balancing mode. I only need one VPN tunnel. High availability is my concern.

  Site 1 has fiber and Cable

  Site 2A cable and FTTN

  Each ISP provides a static IP

  VPN works very well in the event of failure. I am always disappointed that it works in the case where a single primary WAN breaks, but is not operational if primary WAN on Site 1 stops at the same time secondary Site WAN 2 stops. It is very rare but can happen.

  In any case, my problems are where I need binding protocol to ensure secure WEB (https, banking, portal provider) sessions.

  I bind, at the least, port 443 to my primary WAN. In this way, I can access the Web sites and keep me logged.

  So, if I browse a HTTPS across the VPN server, binding protocol always attempts to pass port 443 by the WAN1. He will not even consider the VPN as a valid route first.

  (Maybe) can problem I reduce Hop Count for Site 2 less than 35?     P.S. I replaced the addresses I don't think they are relevant.

  Destination IP Subnet mask Default gateway Number of hops Interface

  ADDR network WAN2 255.255.255.252 * 0 eth2 WAN1 network addr 255.255.255.248 * 0 eth1 Site 2 255.255.255.0 Site 1 fiber Gateway 35 eth1 Site 1 255.255.255.0 * 0 eth0 by default 0.0.0.0 Site 1 fiber WAN1 15 eth1 by default 0.0.0.0 Site 1 cable WAN2 40 eth2 by default 0.0.0.0 Site 1 fiber WAN1 40 eth1

  Thank you all,

  Bruno

  I would like to conclude this is a bug and requires further investigation. I wouldn't call it a limitation if it was my decision (not that I have so much importance in this regard)

  -Tom
  Please mark replied messages useful

• SonicWALL VPN WAN failover

  Hello guys. I need to do it quickly for a customer. They have the following topology. Not real Ip addresses but it's their configuration.

  http://i.imgur.com/lFSTBeV.jpg?1

  Basically, they have this race. So what I have to do?

  Well now if the MPLS link fails. They need to change it manually to the VPN. So I need to find a solution to the socket on the MPLS VPN after a failure.

  I read this Sonicwall KB.

  https://support.software.Dell.com/kb/sw8445

  I think is what I need. However I do not understand something. In this step you create a traffic from track to track static to the target of the probe. (Network > routing). I don't see where they create the VPN static route. They create the road MPLS but where is the 'static route Floating' they missed a step? Part weirdst in this article, is that the backup VPN is a policy based. I can't change the metric in this type of VPN. I missed something?

  My other idea was to OSPF configuration, but let me know which is the best solution?

  Thank you

  OK, placing the tunnel VPN site to site "tunnel interface" mode will allow you to create a route for the VPN traffic.

  This will give you 2 routes created manually, one for MPLS one for the VPN.

  You can then use probes to disable MPLS route when the probe fails causing the VPN route to support until the SPLM is back.

  Kevin

• ISA570 Weighted Dual Wan & Failover

  So, we had a few problems here while we were both WITH link failover detection two ISPs for balancing.  Our problems seemed if go away once we have disabled the link failover.  What is happening is a wan link out randomly, it was not a particular wan link.  We could have one out one day and another on another day. I thought I would post to see if anyone knows or had problems with doing a 50-50 balanced weighted load scenario with the failover link light.  Now, with the recovery of disabled link, it seems that if a wan link goes down, computers are always sent on this bad wan link.

  I did a combination of the two in deployments. Most of them is connections of failover with low cost connection primary and secondary connections of 4 G of type variable cost. I have not had any problems with load balancing and failover work together, but I can not also think all instances where he arrived so I can't be certain that he would not fail. ;-) If please try DNS and let me know if you experience the same results. If If, I would open a TAC case if Cisco can try to locate the bug, assuming that there is one at this time. Please keep me dated with your results. Thank you.

  Sent by Cisco Support technique iPad App

• Replication failover PIX VPN (CEP) certificate

  Hello

  Had a pair of PIX 525 on 6.3 (4) version running in active/failover mode, I recently configured VPN authenticated by certificates, which involved the use of PRACTICE in order to get the certificate to the PIX. Certificates have been imported for the PIX from a snap-in with the software component CEP Protocol Windows CA server by following the instructions described here: http://www.ciscosystems.com/en/US/docs/security/pix/pix63/configuration/guide/sit2site.html#wp1007263 .

  It all works very well, the configuration has been saved, certificates registered cases using "ca save all", everything works well except the certificates that have been imported have not been replicated for the PIX failover - the command 'Show the ca certificate', shows not all certs.

  Private keys show 'sh ca mypubkey rsa' are the same on both devices.

  I'm not able to find any documentation about how certificates must be replicated on the PIX failover, and it is not possible to write certificates again on the PIX failover using the commands they were initially imported by:

  PIX - fw # conf t
  WARNING *.
  Configuration of replication is NOT performed the unit from standby to Active unit.
  Configurations are no longer synchronized.

  PIX - FW (config) auth ca ca
  WARNING *.
  Configuration of replication is NOT performed the unit from standby to Active unit.
  Configurations are no longer synchronized.

  Everyone knows a similar issue or how to get the PIX failover with the new ca certificates?

  Kind regards

  Sarunas

  Hello Sarunas

  PIX 6 indeed do not synchronize keys and certificates automatically.

  However, you should be able to do this first, forcing a failover (i.e. secondary image make it active), then register (now active) high school with the certification authority.

  HTH

  Herbert

• [Solved] RV082 - SRP527W site-to-site VPN - routing table?

  Hello

  I am trying to create a VPN IPSEC link between 2 offices. The VPN connection is created, and I can connect but only one way.

  Customers in the Office B seems to have a routing problem. Can you help me?

  Details :

  Office:

  -Router SRP527W.

  -Network client: 192.168.0.0 / 24

  -Internal address: 192.168.0.254 / 24

  B office:

  -RV082 router (behind another router)

  -Network client: 192.168.6.0 / 24

  -Internal address: 192.168.6.253 / 24

  -Internal address that goes to the Router 1: 192.168.5.253

  internal address of the Router - 1: 192.168.5.254

  Page layout:

  Office---> SRP527W---> INTERNET<----- global="" router=""><------ rv082="">< office="">

  192.168.0.254 192.168.5.254 5,253 6.254

  Details VPN:

  Office:

  -remote type SUBNET = 192.168.6.0 group / 24

  -local group = SUBNET 192.168.0.0/24

  -Address ID = 82.127.XXX.XXX

  B office:

  -remote type = SUBNET 192.168.0.0/24 Group

  -local group = SUBNET 192.168.6.0 / 24

  -IP address = 192.168.5.253 (accessed from the Internet through the 1st router with the IP 37.1.XXX.XXX)

  Facts:

  A desktop, I can ping everything in 6.0 addresses.

  Office B, I cannot ping anything in 0.0 subnet addresses. The router itself with the diagnostic page, works of ping 192.168.0.1? But no other ping. Curious...

  The desktop computer B routing table shows the following:

  Active routes:

  Destination network mask network Adr. Gateway Adr. interface metric

  0.0.0.0 0.0.0.0 192.168.6.253 192.168.6.10 10

  127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1

  192.168.6.0 255.255.255.0 192.168.6.10 192.168.6.10 10

  192.168.6.10 255.255.255.255 127.0.0.1 127.0.0.1 10

  192.168.6.255 255.255.255.255 192.168.6.10 192.168.6.10 10

  224.0.0.0 240.0.0.0 192.168.6.10 192.168.6.10 10

  255.255.255.255 255.255.255.255 192.168.6.10 192.168.6.10 1

  255.255.255.255 255.255.255.255 192.168.6.10 3 1

  255.255.255.255 255.255.255.255 192.168.6.10 1 40005

  Default gateway: 192.168.6.253

  ===========================================================================

  Persistent routes:

  None

  Tracert from computers to Office B shows that the packages have arrived at 192.168.6.253, and then it never achieved anything.

  The problem is related to the architecture of Office B?

  See the files attached to a layout of Office B and the routing of the router table to Office B.

  Thank you.

  Enable NAT - T on the RPS and configure the remote ID as 192.168.5.253 in the IKE policy.

  Not sure about the RV and if supporting NAT - T.  It can automatically detect the NAT - T, or need to be configured (in this case, you configure the local identification)

  Andy.

• Failover of VPN for data/VoIP through ASA 5520 or 7204 VXR

  I would like to install a VPN failover for my remote sites using broadband 3dn/1up.  They are mainly 2800 routers.    I like options for end hub a pair of Cisco ASA active / standby and a 7204 VXR.  Voice and data will travel down the VPN failover and I intend to have QOS/Traffic shaping in place to better meet the needs for VoIP as possible.  I need to do it on about 150 sites. My questions are:

  1. What is the best why the ASA or the 7204

  2 Will VoIP packets pass through the two in the same way

  3 as far as redistributing routes can I use GRE on an ASA or should I keep all static. NH on the SAA is an L3 switch.

  4. an ASA with 100 mg of bandwithd through metro E supports 150 tunnels making VoIP and data. 1 to 3 calls per site max.

  Thank you

  J R

  To answer your questions: -.

  1. who is better for this, the ASA or the 7204 - ASA, is what is designed to do.

  2 packages VoIP Will cross both the same way - Yes

  3 as far as redistributing routes can I use GRE on an ASA or should I keep all static. NH on the SAA is an L3 switch. -l'ASA does not support GRE tunnels.

  4. an ASA with 100 mg of bandwithd through metro E supports 150 tunnels making VoIP and data. 1 to 3 calls per site max. -It depends on the model of the SAA, see the below matrix for thru-put http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

  HTH >

• Failover of VPN client for remote access with the .pcf file

  Hi all

  It is possible to give 2 remote peer ip address to connect customer VPN cisco in FCP file, is possible to achieve failover.

  I have my firewall HO and DR configured for VPN remoteaccess. I need to specify two firewall ips in FCP file in PC client, incase HO firewall is not a customer VPN avialable will automatically connect to the firewall DR. I tried like below his does not work I think

  appreicaite any help...

  [main]

  Description =

  Host = 172.18.4.22

  Host = 172.18.4.10

  AuthType = 1

  GroupName = xxxxxx

  GroupPwd =

  enc_GroupPwd = DDBC400B7B3D1AEA1A5E6DEB5874CC057F759A6EED78B281F28D68F6A65380506D7E6CBA173B854C6ADC53FC49C1595B

  EnableISPConnect = 0

  ISPConnectType = 0 [main]
  Description =
  Host = 172.18.4.22
  Host = 172.18.4.10
  AuthType = 1
  GroupName = xxxxxx
  GroupPwd =
  enc_GroupPwd = DDBC400B7B3D1AEA1A5E6DEB5874CC057F759A6EED78B281F28D68F6A65380506D7E6CBA173B854C6ADC53FC49C1595B
  EnableISPConnect = 0
  ISPConnectType = 0

  Thanks in advance

  Mikael

  You must configure the server "backup":
  http://www.Cisco.com/en/us/docs/security/vpn_client/cisco_vpn_client/VPN...

  The easiest way is to do it with the GUI.

  Sent by Cisco Support technique iPad App

• RV082 WAN speed limit

  Hi all

  I worked for years with RV042 and RV082 routers will detect any problem.

  Now, I have implemented a RV082 connected to a router (cisco) of my ISP (fiber) which provides 30 MB. I cannot download more than 10 MB/s. I can almost Download 30 MB/s.

  If I connect my Airport Express directly to the Cisco router I can reach close to 30 MB/s download and download without problems.

  I played with MTU (auto, 1500, 1492,...) without success. I used Load balancing, backup or just a Wan connection cable but no result.

  Can someone help me?

  Thank you very much!

  Alberto

  OOOOO, I remembered where I saw this kind of problem before!

  Check the setting of the ethernet in the WAN port and make sure that it is set manually to match the speed of the port on cisco routers.  For example, if Cisco is 100 MB half-duplex, be sure that the rv082 is set to the same.  I saw the same thing on a router, I had who had only 1 mb down and 11 MB upwards.  The duplex setting was wrong.

  I hope that this solves the problem!

  First car of Huntsville and bike e-magazine: www.huntsvillecarscene.com

• Rv042 VPN Customer

  Hello

  I'm trying to configure the VPN but get no success, to my seat, I have a cisco-3825 Cisco-5515-x, at the office, I have 1 rv042.

  My site to site VPN configuration works very well. But what I want now all the internet traffic of my branch should move from my seat, with the seat only, IP as little of our app only works with our Office IP.

  For VPN Site to Site, I use 3825 and rv042, my 5515-x does not get used for this VPN, I use it for other purposes. Mode routed to the case where if it takes I can configure for VPN too.

  Any help or ideas will be appreciated.

  Thank you

  If you need to make the field of encryption .

  On the 3825 to the default route inside the ASA.  Then add static routes for the public IP addresses remote VPN concentrators on the external interface of the 3825.

  This could also be done using VRF if you hate a 'Data' or "AppX" license on your 3825.

• RV042 &amp; RV082 SIP aware

  Are the RV042 and routers RV082 SIP aware?

  I had no luck find documentation indicating such.

  Thank you.

  RV042 and RV082 are unaware of SIP.

  If you have VoIP phones in the LAN of RV042 or RV082, you will need to use Port Forwarding to transfer the SIP traffic.

• RV042, amount of memory RV082?

  Hello

  I would get the new router.

  the router RV042 and RV082, how much memory DRAM or Flash is adopted?

  Anyone found this in docs is there?

  If found, please share to me.

  Thank you

  Hello Chunghee Lee,

  Here's what I found looking through some documents:

  RV042 128 MB

  RV082 256 MB

  Found afterwards, respectively:

  http://www.Cisco.com/en/us/partner/prod/collateral/routers/ps9923/rv042w_howtosell_aag.PDF

  http://www.Cisco.com/en/us/partner/prod/collateral/routers/ps9923/rv082w_howtosell_aag.PDF

• RV042 and VPN IPSEC (Witopia)

  Hi guys,.

  I recently bought the RV042 using WITOPIA - a VPN provider.  I'm a little lost with the config.  On the side of VPN, I have a server name, login and password as well as a pre-shared IPSEC connectivity.  If I run the client on my PC, it works fine but if I try to configure it on the router it does not connect.  I don't see anywhere to store a password in the interface.  I can configure the preshared key, the server name and the username very well but there is nowhere a password.

  Any advice from people more experienced than me would be appreciated.

  Thanks in advance.

  RV042 does not support xAuth for IPsec VPN, so you have to disable the option of password on Witopia and use only the pre-shared for IPsec authentication.