1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

About to give up on RV016

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by j__l, Jun 22, 2005.

  1. j__l

    j__l Network Guru Member

    ANY help appreciated.

    Got an RV016 few days ago to replace my little home cheapie compusa dsl routers - I had 2 of them. I'm developing in house so for now, I have a decent network and will move to colo at some point.

    I have 3 static IPs from my provider than come into my dsl 'modem'. From there I have the single ethernet plus going into a 8 port switch. From there I have 3 cables going into the RV016:

    1 into WAN1
    1 into port 13
    1 into port 12

    All my outbound network traffic is pumped thru the WAN1 ip and my internal network likes this. I also have that IP forwarded so I can ssh into an internal box from the outside. THIS part all works fine.

    For port 13 I have 1to1 nat turned on. And from there I'm letting in ports 80,443,22 via the firewall rules.

    For port 12, it's similar to 13, cept I'm also letting in ports 25 and 993 for email stuff.

    No where in the Linksys docs does it say if these physical port plugs are setup right. And this is confusing as the firewall rules allow you to specify a device based on: WAN1, WAN2, DMZ (which i don't use), LAN, ANY. Also, I've tried messing with all the VLAN stuff in the ports config with little success.

    I've called and did live tech support without any help and they usually just disconnet (nice). For the life of me I cannot get the RV016 working consistently. Every time I add in the 1to1 nat for the IPs I'm using on port 12, the other 1to1 nat goes down. My thinking for using ports 12 and 13 (since the docs say nothing about it in any deatail) is that I need to give the RV016 something physical to bind the 2 external IPs to. Hence, the two physical ports. However, I've never set up anything like this before, so I'm not sure if it's correct.

    When I just used 1 cable going from the dsl modem to the RV016 WAN1 port, I could not get either of the other 2 external IPs to work, even tho I had all the nat'ing entered along with firewall rules that let in everything for the internal IPs that the nat mapped to.

    I just pulled the RV016 out, hooked up my old 2 little routers and everything is fine. This is because each of those routers will accept a WAN ip that i can then use w/port forwarding. I've been doing this for the better part of a year without any probs. However, I'd like to consolidate and when I colo, have one piece to move the IP stuff over. But I just can't seem to solve the problems with the 1to1 nat'ing on the RV016. I have the 2.0.3 firmware and about at the end.

    Kinda sucks cuz it's a nice looking piece of hardware but, frankly, I'm boggled I'm having so many problems with this as I've been around networks for years and can hold my own. Anyone wanna help me save a $60 restocking fee? At this point, I'm pretty bummed about the whole thing and have nothing nice to say about the Linksys tech support.

    After reading this, a thought just occured to me. After looking at the access logs and thinking a little more, do I need to specify the external IP and internal IP in the firewall rules? I was just saying something like

    Allow all traffic from ANY source interface, ANY Source IP to Dest IP 192.168.1.10 (internal server). Does this seem right?

    Or would I want:

    Allow all traffic from ANY source interface, Source IP 10.12.5.20 to Dest IP 192.168.1.10? Where 10.12.5.20 is one of my static IPs.

    Thanks
     
  2. SpeedStreet

    SpeedStreet Network Guru Member

    You may attempt to bypass using a 1to1 config by going with a simple Port Forwarding. If you are concerned about a finite number of ports, I would assume that this is going to be the best bet.

    Also, I do believe that you will in fact have to set up firewall access rules to bind your internal IP to the protocols.

    Please let me know if this helps.
     

Share This Page