SRP527W & Remote teleworking SPA508g

Similar Questions

• Have a problem teleworker configuration

  Hello

  I have a problem with the configuration of the teleworker. After I installed ISA570w at Headquarters, I installed also ISA570w to the factory.

  The configuration seems correct. ISA at the factory can make the tunnel with ISA VPN at the main office.

  I try to test on the side of the factory of ping to the server at the main office but ping failed

  I don't know what I have to to allow ACL LAN - VPN and VPN - LAN side or not?

  Ronald salute, please use our forum, my name is Luis I'm part of the community of support to small businesses. You can try to configure an ACL allowing your WAN (factory) remote access to your local network (server), this configuration must be defined in your desktop device.

  Let me know if it works for you,

  I hope you find this answer useful

  Greetings,

  Luis Arias.

  Support of Cisco network engineer.

• SRP527W setting DHCP address and source firewall rules

  In my quest to find a decent ADSL router for VoIP, I found the SRP527W and so far it has been the best performer of a range of boxes from netgear, thomson, and zyxel.  However, I have two questions:

  (1) how to troubleshoot DHCP leases on the LAN address

  (2) how to specify source ip in the firewall rule

  Note:

  I currently have 1 computer on the LAN, VLAN1 interface

  * 192.168.15.100

  and

  2 IP phones on the LAN, VLAN100 interface

  * 192.168.100.100

  * 192.168.100.101

  Address three assigned by the DHCP server lease times with approximately 20 days.

  I would like to repair the three devices DHCP leases, for example if some port forwarding rules can be made with confidence that the rules will not point to another device in the future.

  from PVC0-> 192.168.15.100, Port 3389 for remote desktop

  of PVC0-> 192.168.100.100 ex.port 5881 to int.port 80 for voip phone web-gui

  from PVC0-> 192.168.100.101 ex.port 5882 to int.port 80 for voip phone web-gui

  Ideally, I would like the rules to act like that, limiting myself only to access these ports (from my remote site)

  PVC0 interface where the source is ip 12.34.56.78-> 192.168.15.100, Port 3389 for remote desktop

  PVC0 interface where the source is ip 12.34.56.78-> 192.168.100.100 ex.port 5881 to int.port 80 for voip phone web-gui

  PVC0 interface where the source is ip 12.34.56.78-> 192.168.100.101 ex.port 5882 to int.port 80 for voip phone web-gui

  I hope that makes sense, I appreicate any help you can give.

  Kind regards

  Paul

  Hi Paul,.

  Thank you for using the Cisco support community.

  With regard to two questions:

  1. Yes - it is possible to configure static DHCP assignments.  Use the DHCP Server rule configuration page and click the 'Show DHCP booking' button to assign.

  2. Unfortunately, it is not possible to configure rules to address source for the SRP520 list.  (This is possible on the SRP540 for further reading).

  Kind regards

  Andy

• VPN - SRP527W <>Cisco 857 established but no tx fraffic side SRP

  I have now established between SRP527w and cisco 857 ACE, but if I ping from a multitude of Cisco to a host on the side of the PRS I get only rx traffic in the tunnel, the stats keep tx 0 and ping is not answered.

  My tunnel is to send a voice call in IPSEC tunnel keeping DSCP bits, it communicates vlan voice SRP with Cisco lan.

  I have the SRP 2 VLAN:

  1 vlan for data on ports 1, 2, and 4

  1 voice vlan ports 1,2,3,4.

  I connect a netbook to port 3 and I can connect to the internet, but I can't reach by ping across the tunnel

  Perhaps the traffic of the vlan is voice natted with the ip address of data vlan?

  I need all traffic must go through the tunnel without being natted on the cisco side I have a policy to avoid the nat but don't know if SRP have no problem about it too.

  All gateways are ok

  Any idea greatly appreciated, thank you very much

  Hi, manual,.

  The RPS not NAT via the tunnel, which shouldn't be a problem.

  You try to ping a client in the remote subnet, or IP address to the VLAN RPS at the other end of the tunnel?  (Could you try both please?)

  See you soon

  Andy

• Problem creating a VPN IPSec with SRP527W

  Hello.

  I have a Setup like this:

  192.168.15.0/24 SRP527W <->internet <->ROUTER [172.16.16.1] <1:1 nat="">pfSense (raccoon vpn server) [172.16.16.2] 192.168.55.0/24

  I set up a VPN between the SRP and pfsense connection but the connection is not established because that timeout of the phase 1. According to racoon on the remote side does not.

  Before that, I've properly established a VPN between the SRP and another box of pfsense, but with a public IP address. The same host, I have an another vpn to the pfsense box (172.16.16.1) works correctly.

  These parameters of the PRS:

  IKE policy:

  Exchange mode: aggressive

  Permit ID: manual

  Remote ID: 172.16.16.2

  Encryption: 3DES

  Authentication: MD5

  DH: Group 2

  PSK: mysharedkey

  DPD: disabled

  IPSec policy:

  Policy type: police car

  Remote end point: IP ADDRESS

  IP: 172.16.16.2

  Life expectancy: 7800

  Set local subnet and remote according to the above (192.168.x.x) Network Setup.

  How can I check what is the problem? I struggled for several hours now and have failed to go out again! Any help really welcome!

  Thank you

  Lorenzo,

  The router to 172.16.16.1 allows all traffic to the pfsense VPN server when specific NAT is enabled or you have create access rules? My guess is that the router is blocking the traffic.

  -Marty

• [Solved] RV082 - SRP527W site-to-site VPN - routing table?

  Hello

  I am trying to create a VPN IPSEC link between 2 offices. The VPN connection is created, and I can connect but only one way.

  Customers in the Office B seems to have a routing problem. Can you help me?

  Details :

  Office:

  -Router SRP527W.

  -Network client: 192.168.0.0 / 24

  -Internal address: 192.168.0.254 / 24

  B office:

  -RV082 router (behind another router)

  -Network client: 192.168.6.0 / 24

  -Internal address: 192.168.6.253 / 24

  -Internal address that goes to the Router 1: 192.168.5.253

  internal address of the Router - 1: 192.168.5.254

  Page layout:

  Office---> SRP527W---> INTERNET<----- global="" router=""><------ rv082="">< office="">

  192.168.0.254 192.168.5.254 5,253 6.254

  Details VPN:

  Office:

  -remote type SUBNET = 192.168.6.0 group / 24

  -local group = SUBNET 192.168.0.0/24

  -Address ID = 82.127.XXX.XXX

  B office:

  -remote type = SUBNET 192.168.0.0/24 Group

  -local group = SUBNET 192.168.6.0 / 24

  -IP address = 192.168.5.253 (accessed from the Internet through the 1st router with the IP 37.1.XXX.XXX)

  Facts:

  A desktop, I can ping everything in 6.0 addresses.

  Office B, I cannot ping anything in 0.0 subnet addresses. The router itself with the diagnostic page, works of ping 192.168.0.1? But no other ping. Curious...

  The desktop computer B routing table shows the following:

  Active routes:

  Destination network mask network Adr. Gateway Adr. interface metric

  0.0.0.0 0.0.0.0 192.168.6.253 192.168.6.10 10

  127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1

  192.168.6.0 255.255.255.0 192.168.6.10 192.168.6.10 10

  192.168.6.10 255.255.255.255 127.0.0.1 127.0.0.1 10

  192.168.6.255 255.255.255.255 192.168.6.10 192.168.6.10 10

  224.0.0.0 240.0.0.0 192.168.6.10 192.168.6.10 10

  255.255.255.255 255.255.255.255 192.168.6.10 192.168.6.10 1

  255.255.255.255 255.255.255.255 192.168.6.10 3 1

  255.255.255.255 255.255.255.255 192.168.6.10 1 40005

  Default gateway: 192.168.6.253

  ===========================================================================

  Persistent routes:

  None

  Tracert from computers to Office B shows that the packages have arrived at 192.168.6.253, and then it never achieved anything.

  The problem is related to the architecture of Office B?

  See the files attached to a layout of Office B and the routing of the router table to Office B.

  Thank you.

  Enable NAT - T on the RPS and configure the remote ID as 192.168.5.253 in the IKE policy.

  Not sure about the RV and if supporting NAT - T.  It can automatically detect the NAT - T, or need to be configured (in this case, you configure the local identification)

  Andy.

• SRP527W with Split Tunnel

  Hi guys,.

  I just sent a SRP527W that I had lying around for a while.

  Everything about the unit works as well as can be expected, however I have an obligation to perform split tunneling for VPN users.

  Currently, the only way that receives the VPN client is a default route. I noticed that on site-to-site VPN and tunnels GRE, you can specify safe routes, but I can't find anything that relates to remote VPN users. This can be done on IOS without problem, but would be good for the RPS.

  I'm under the latest firmware 1.01.26, so if I have not forgotten anything it would be probably for a future version?

  See you soon.

  Bryce

  Hi Bryce,.

  Nothing is overlooked, it is not possible to set up split tunneling for the VPN of the RPS server.

  Kind regards

  Andy

• Hello SRP527W and multicast

  Hello

  We have recently installed a SRP527W on our House (and [10 computers - 6 of which are Apple] Home Office) network and have updated to the latest firmware:

  Model:	SRP527W, ADSL2 + annexed, 802.11n ETSI, 2FXS/1FXO
  Version ID:	V01
  Hardware version:	4.0.0
  Version of boot:	1.1.17 (January 4, 2010 - 21:15:46)
  Firmware version:	1.01.11 (004) June 22, 2010

  It seems that we are now (there was no problem with the Siemens router we used previously) problems with a Hello related applications (Please note I guess that I am not mistaken, that the symptoms point to a problem with Hello, but feel free to correct me if I'm wrong):

  • Hi printers are not detected (Apple OSX Server running Hello print server).
  • Remote iTunes on iPhone is slow to find iTunes servers (two {mini mac} media centers we have running), and that is if he can find them at all - sometimes it is there, saying looking for the just library and does nothing;
  • Remote speakers connected through several different Airport express (AirTunes / AirPlay) speakers stall Dungeon and having failed to reconnect - they then, of course, disappear from the iTunes GUI as well as the Remote GUI iTunes on the iPhone.

  Installation program:

  • Mac OS x server with Hello Print Server running (among other services) - connected by ethernet to RPS
  • 12 wireless clients are all on the same SSID - x 6 Mac incl. 2 x machines mac mini media center, 3 units express airport with remote speakers connected, others are PCs.
  • V.2 IGMP enabled with proxy and leave immediately activated.
  • InterVLAN routing active
  • RIP disabled

  Yet I found no solution to the problem of the printer.

  Regarding speakers and remote control go, the wireless (Airport) bicycle off the coast and back to on, appears to allow iTunes to discover (Discover) Airport Express intervene again and a remote application on iPhones to iTunes on computer media that comes with having the airport turned off center and turn it back on.

  Problem is that this happens every hour or so... and it became boring. I have read many other forums where people have similar problems, but it seems always to come to a multicast broadcast... that is the problem - how to set up the RPS for Hello mulitcast?

  I note Andrew Hickman precise in another previous discussion on the SRP527W series, that Hello was not substantiated - that was back in June of this year (2010). He also said that he was on the road map for a future version of the firmware SRP5XX (the version of the firmware in this discussion was 1.01.01 (006) January 22, 2010, that we are now up to 1.01.11...can, I guess that Hello is now supported?)

  My questions:

  1 are still Hello and multicast supported?

  (a) if so, do, he needed to set it up for Hello?
  AA) from my reading, I think I am experiencing is due to a problem with the way which multicast is managed on the routers of PRS... is that correct?

  (b) if there is not yet any load Hello, when will it support? Networking features of Apple products depend so much on Hello, and there are SO many Apple devices, this problem seems crazy!

  Everything / all help is very appreciated! If you want additional information about the Setup program, please let me know... I just want to make this work I've been hitting my head on a brick wall for the last 4/5 days... reading the forums, try everything... with no luck yet.

  See you soon,.

  Vaughn.

  Hi all

  We just fixed a problem related to this problem.  Could you please try MR3 (v1.1.19) and let us know if that fixes things for you?

  This version is posted to cisco.com in the next day or so.  If you need a copy sooner, please send an email to [email protected] / * / provide your cisco.com user ID.  MR3 is now available on cisco.com.

  Kind regards

  Andy

  Post edited by: Andy Hickman

• [SRP527w] Recovery and VPN failover

  Hello

  Our company is using DSL routers to connect remote sites to our headquarters.
  We buid VPN through ADSL, between a Zyxel USG 200 Firewall/VPN device and remote routers.

  We decided to add a 3G backup connection, and we chose to test the SRP527w for this purpose.
  Thanks to Andrew Hickman, who answered my questions, we build successfully an IPSEC VPN via the 3 G connection, and it works really well.

  There is a problem with the failover/recovery of the VPN tunnel:

  1)
  We start the router
  The SRP527w set up ADSL and build the VPN.
  Fails to ADSL (we remove the power cord)
  3 G starts very fast, and the WAN connection is OK (our vpn device if the internet ping)

  But the VPN tunnel never comes back!

  If I manually, click on 'Connect' menu VPN, it connect any!
  If I look at the newspaper on my VPN device, I don't see any attempt to build the VPN.
  If I re - connect ADSL, VPN connects again ADSL!

  2)
  WITH EXACTLY THE SAME SETUP AND THE SAME CONFIGURATION OF VPN ON BOTH SIDES:
  We start the router with ADSL cable disconnected.
  The SRP527w set up the 3G and build the VPN!
  We re - connect the ADSL and ADSL connects with success (our vpn Internet device ping)

  But the VPN tunnel never comes back!

  If I manually, click on 'Connect' menu VPN, it connect any!
  If I look at the newspaper on my VPN device, I don't see any attempt to build the VPN.
  If I unplug the ADSL, the VPN will connect again through 3 G!

  My configuration:

  Failover and restore enabled, with delay set to 60 sec.
  ADSL first, then 3 g 1 PVC enabled on ADSL.
  1 IPSEC policy and 1 IKE policy, two correspondents with 1 tunnel on my VPN device (configured in "Dynamic Peer" because there is no static IP address on the 3G connection).

  Version ID: V01
  Hardware version: 4.0.0
  Version of the boot: 1.1.17
  Firmware version: 1.01.19

  It's as if once the VPN is configured on the first WAN interface, it cannot be setup on the second if the first fails. Andrew, are you familiar with this issue? I'm doing it wrong somewhere?

  Thank you very much for your answer.

  Hello

  Thanks for the comments - it is a known issue.  We will work on a possible fix as it is possible.

  Kind regards

  Andy

• Disorder of SRP527W forming the VPN with 1841

  I'm currently trying to set up a site to site VPN between a SRP527W and a Cisco 1841 but am not negotiate a connection at level 1.  The isakmp seems fails with the formidable MM_NO_STATE message in the debug output on the 1841 crypto isakmp.  No matter what are the parameters to be set on the SRP527W it seems to me, I can't negotiate a connection when the parameters of mirroring on the 1841.  The only variable I can think of that 'may' be different between the two (PSK, group Diffie-Hellman encryption type) is the association of life related to the isakmp parameter.  While you can set on the 1841 isakmp policy, there nowhere on the GUI of SRP527W it can be defined; at least as far as I can tell.  I have tried to change the types of AES encryption, THE and 3DES variations (corresponding to both ends) but continue to get errors MM_NO_STATE as by the isakmp debug output below:

  6 Dec 14:40:20 AEDT: ISAKMP: ke received message (1/1)

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): THE application profile is (NULL)

  6 Dec 14:40:20 AEDT: ISAKMP: created a struct to peer, peer port 500

  6 Dec 14:40:20 AEDT: ISAKMP: new position created post = 0x635C57B0 peer_handle = 0x8000003E

  6 Dec 14:40:20 AEDT: ISAKMP: lock struct 0x635C57B0, refcount IKE peer 1 for isakmp_initiator

  6 Dec 14:40:20 AEDT: ISAKMP: 500 local port, remote port 500

  6 Dec 14:40:20 AEDT: ISAKMP: set new node 0 to QM_IDLE

  6 Dec 14:40:20 AEDT: ISAKMP: find a dup her to the tree during the isadb_insert his 62EB7888 = call BVA

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): cannot start aggressive mode, try the main mode.

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): pair found pre-shared key matching 203.217.8.56

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): built the seller-07 ID NAT - t

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): built of NAT - T of the seller-03 ID

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): built the seller-02 ID NAT - t

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): former State = new State IKE_READY = IKE_I_MM1

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): early changes of Main Mode

  6 Dec 14:40:20 AEDT: ISAKMP: (0:0:N / A:0): package my_port 500 peer_port 500 (I) sending MM_NO_STATE

  6 Dec 14:40:30 AEDT: ISAKMP: (0:0:N / A:0): retransmission phase 1 MM_NO_STATE...

  6 Dec 14:40:30 AEDT: ISAKMP (0:0): increment the count of errors on his, try 1 5: retransmit the phase 1

  6 Dec 14:40:30 AEDT: ISAKMP: (0:0:N / A:0): retransmission phase 1 MM_NO_STATE

  Is there something that I am on here or are there compatibility problems with certain types of encryption / settings of config trying to implement a VPN site to site with a 1841?  Incidentally, here is the 1841 configuration excerpt, I'm trying to use:

  crypto ISAKMP policy 10

  BA 3des! have also tried aes at both ends too

  preshared authentication

  Group 2! have you tried the Group 1 on both ends too

  life 43200! have also tried to remove this

  ISAKMP crypto key address

  !

  Crypto ipsec transform-set esp-3des esp-sha-hmac RMCG-RFC! have tried many variations here too

  !

  11 RMCG-RFC ipsec-isakmp crypto map

  defined by peers

  security-association kilobytes 2000000 of life value

  Set security-association second life 7800! matches at the end of config IPSEC SRP527W

  game of transformation-RMCG-RFC

  the pfs group2 value! have also tried disabling PFS at both ends

  match address VPN

  QoS before filing

  !

  list of IP - VPN access scope

  ip licensing 10.0.1.0 0.0.0.255 192.15.0 0.0.0.255

  !

  int dialer1

  card crypto RMCG-RFC

  I am at a loss here and if someone could offer suggestions, I would be very grateful.

  Sorry for the comment to end here.

  You can collect a configuration readable the PRS in XML, by collecting the following: http://192.168.15.1/admin/config.xml&xuser=admin&xpassword=.  The backup file is a binary image that is really intended for the recovery of the aircraft.

  Where you can make any progress by opening a case of pension?

  I just tried a configuration similar to the following:

  SRP521W (1.01.19)-> IPSec / IKE-> Cisco870 (15.1 (1) T)

  Who works with the config you list above.

  What version of firmware you are using with the RPS?  If you need a copy of 1.1.19 before it is displayed in a few weeks, please let me know.

  For reference, here's the IOS configuration I used:

  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  lifetime 28800
  KEY SECRET key crypto isakmp 192.168.200.162 address
  !
  Crypto ipsec transform-set esp-3des esp-sha-hmac SETNAME
  !
  crypto map CISCO ipsec-isakmp 1
  defined by peer 192.168.200.162
  game of transformation-SETNAME
  PFS group2 Set
  match address 110
  !
  interface FastEthernet4
  IP 192.168.200.146
  CISCO crypto card
  !
  interface Vlan1
  IP 192.168.9.1 255.255.255.0
  !
  access-list 110 permit ip 192.168.9.0 0.0.0.255 192.168.15.0 0.0.0.255

  SRP Configs are:

  

  

  Hope that helps.

  Andy

• Problem installing SRP527W

  I have a SRP527W Pro small business (Firmware 1.01.9) that I connect to ADSL service.  I can get this working using the Quick Setup links, reserving IP addresses for my servers and configuration of port forwading, but there seems not to be a link to change the default password.  Whenever I log in I'm greeted by the Platform Configuration Wizard.  If I run this wizard the router stop, that I can no longer access my websites, FTP site, or remote desktop (they are still displayed in the list of ports to the front and always shown as it is enabled).

  Anyone have any ideas?  How to change the default password without using the wizard or how to turn off the Assistant.

  Thank you

  Brian.

  Hi Brian,.

  We probably hit myself a similar problem.

  A previous post https://supportforums.cisco.com/message/3113918#3113918 advise to login as admin/admin and this allows access to the feature that you are missing, but also a little more.

  HTH

• How to purge incorrect DNS names in Apple Remote Desktop Version 3.8 (A 380, 95)

  Environment: Community College, Microsoft DHCP 2012/DDNS network

  Question:

  I've got ~ 140 iMacs with 13% to appear in my Apple Remote Desktop (ARD) scans as having correspondence name vs DNS name of the network.

  I suspect this affects refusal to license for our products Adobe CC. How can I clear the fields name DNS ARD again be filled properly?

  Hi gwanupnorth,

  After checking with file-> Refresh in ARD Admin and there are still agents machine correct without DNS:

  -Check in the list of the scanners of ARD Admin, if the machines of 18 or more are detected it with the correct DNS name.

  -If Yes, click on each one and update the username: password: and it should update the corresponding entry in all computers.

  HTH,

  Cheers, dwbrecovery

• Mac OS stops light remote drives on my network

  I share a DVD player on an old Mac and the hard drive of an another MacBook on my LAN without problem until I upgraded my MacBook to Sierra of MacOS. Now, when I click on "Remote Disc" on my MacBook, he finds nothing. Sharing on my other Macs parameters have not changed. The only change was the upgrade to Sierra at the other end of the action.

  Can someone help me to identify what is the problem?

  Thank you.

  Hi LaiPod,

  Thank you for using communities Support from Apple. Sorry to hear that you experience this problem with your MacBook Pro after the recent upgrade. If you have any questions (both with the remote CD/DVD drive and hard disk) of sharing, you can check in the settings described in the following article the three computers, as well to see if everything is correct and to check if all the other sharing features are working.
  

  How to connect with the file sharing on your Mac - Apple Support

  Kind regards.

• My Apple TV remote 3rd generation A1294 doesn't aluminum A1394 does not work properly, the battery is and I have tried all the resets including factory reset.

  My Apple TV remote 3rd generation A1294 aluminium does not work properly, battery is good, and I tried all the resets including factory reset. the battery compartment is clean.

  You don't say what you mean by not working not properly, however...

  Your Apple TV can become affiliated with another remote control. Hold the remote control close to and pointed on the Apple TV, press and hold the menu and rewind buttons together for 6 seconds or until you see an icon of the chain broken on screen.

• Scam of Remoting. What they see?

  So I fell for the scam of tech support, but my mom ended the call when they wanted $100. I just followed the instructions that the guy on the phone told me after I called them when I saw a pop up alert. I allowed the guy remotely to MacBook Air from my mother, who has her iCloud connected to it. A day after the remote access, my mother went to his notes on his iPhone and I saw that she had only three left instead of eighteen she had of the scam. I wanted to know if they were able to access his notes that are on her iCloud without knowing me. She has credit card information notes. Also, is it possible for them to continue access to distance even after closing of logmein?

  Read advice needed! Pirate took control of my macbook pro