1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Is this even possible?

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by Xtos, Jun 5, 2007.

  1. Xtos

    Xtos LI Guru Member

    First off I'm sorry if this has been asked but i couldn't find it on the forums so I'm starting a new thread...
    I have 2 offices in different cities that I wanted to be connected over a VPN. So I bought 2 WRV54G routers. This worked perfect. I set up the tunnel between the 2 and I have no issues. But now I want to connect from home to one of the routers and see both networks. Is that even possible? I've tried using quickVPN and I get the dreaded "verifying network/gateway not responding". I'm not tied to the idea of only using quickVPN. I'll use whatever will work. I'm just a little lost at this point. Any help would be great.
     
  2. TazUk

    TazUk Network Guru Member

    Nope, you'll only be able to access the network of the router you've connected to.
     
  3. Xtos

    Xtos LI Guru Member

    Thanks TazUk.
    Ok well does anyone have any suggestions on how something like this would be possible?
     
  4. Xtos

    Xtos LI Guru Member

    Ok what about this question... Is it possible to get quickVPN to connect to one of the 2 routers if they are tunneled together? I'm about ready to go postal on both the bloody routers!
     
  5. TazUk

    TazUk Network Guru Member

    Yes as long as your on a different network to either end.
     
  6. Xtos

    Xtos LI Guru Member

    ok well then i must be missing something... I can't seem to get past "Verifying Network" on quick VPN. It just kinda sticks on that. So I went thru the guide and everything is set the way it says to. While quickVPN is "Verifying Network" i try to ping the router and i get "Negotiating IP Security".
    I have the firewall that i'm trying to connect from off as well as the firewall I'm trying to connect too off for testing.
    I uninstalled all other VPN software on my laptop as well as disabled my wireless nic so it just going thru my wired NIC.
    What am I missing?
     
  7. TazUk

    TazUk Network Guru Member

    What version of QuickVPN and router firmware are you using?

    Does anything helpful show up in the logs?
     
  8. Xtos

    Xtos LI Guru Member

    Ok so I figured out what the problem with QuickVPN was. I didn't have IPSECCMD.EXE installed on my remote computer. Anyway now i have another question...
    Lets say the router i'm VPN'ing into has the WAN IP of 70.x.x.x. Is there anyway to make it look like my remote laptop is connecting from that WAN IP to everyone else? The reason i need this is because the company i remote into only lets one WAN IP thru its firewall. Any suggestions would be really great. Thanks!
     
  9. DocLarge

    DocLarge Super Moderator Staff Member Member

    Unfortunately,

    when using quickvpn, it does not have an ip address from the local LAN re-assigned to it like you would see if you were connecting with a microsoft PPTP/L2TP client. This has been a minor inconvenience of quickvpn since its release :(

    Jay
     
  10. Xtos

    Xtos LI Guru Member

    Can i use another VPN client like Mircosoft's VPN or OpenVPN to make this happen? If so what do i have to do to my router?
     
  11. TazUk

    TazUk Network Guru Member

    The WRV54G doesn't support NAT-T which prevents the use of third party VPN clients when the remote client is behind a NAT enabled router :rolleyes:
     
  12. Xtos

    Xtos LI Guru Member

    Joy of joy. Ok what about if I upgrade too the WRVS4400N? The guy I talked to at linksys said all my problem will be fixed if I upgrade to that. What do you guys think?
     
  13. TazUk

    TazUk Network Guru Member

    The WRVS4400N has issues of it's own as you'll see from the posts here :sheesh: The WRV200 might be a better solution, Linksys have been quite active in fixing problems on that model :clap2:
     
  14. Xtos

    Xtos LI Guru Member

    Ok so my company ended up buying the wrvs4400n. So now i'm trying to figure out the same issue. I want to vpn into the router and use its WAN IP address. I know i can't use Quick VPN to do this. Are there other options to make this work with this model?
     
  15. ifican

    ifican Network Guru Member

    Back to your original question, you can connect all home/offices together by making a messed config (making a tunnel from both offices to home). Unfortunately you are wasting your money trying to do this with this type of equipment. At this level you do not get the software functionality that you will get with a more robust router. Unfortunately linksys has yet to and as far as i know no plans at this point to offer such functionality in their products. You can however get that very functionality out of there brother (cisco).
     
  16. Xtos

    Xtos LI Guru Member

    Ok lets just say One office to home, but.... i want to be able to get the WAN IP on my home laptop so my clients will let me thru there firewall.
     
  17. ifican

    ifican Network Guru Member

    This one im a little confused at, when you create a tunnel from home to office your are on the office network. If you are at the office and you create one to home, you are on the home network. If they are ipsec its seemless, if its ssl then depending on the program its going to have its quirks.
     
  18. Xtos

    Xtos LI Guru Member

    Hmm... I'm sorry. I'm not explaining myself well.
    Heres what i need...
    I need to be able to connect from anywhere to my office, and get the outside IP from there(i.e 70.x.x.x), so that my laptop will look like its coming from that IP address to my clients.
    Does that make sense?
     
  19. ifican

    ifican Network Guru Member

    Yes that does, generally this is not possible with this level of equipment. The only way that i have not tried is via pptp. I know for instance you can make this work if you setup a pptp server on your network, pptp to it and tell it to allow outbound traffic (windows server 2003 does this well). However i do not know if the RV series is capable of this, there are however several RV series users that should beable to answer that. Other then that, what you want to do is an advanced feature set normally found on alot more expensive routers.
     
  20. Sfor

    Sfor Network Guru Member

    I think, it would be logical to move to IPSec VPN, as it is possible to create multiple VPN tunnels that way.

    3 IPSec gateways (as WRV200 or other IPSec capable routers) can form one virtual network connecting all 3 locations. All the VPN job would be done by gateways, so there is no need for additional software, as the QuickVPN is.

    Yet, there could be some downsides, depending on what the VPN connection is used for.
     
  21. Xtos

    Xtos LI Guru Member

    Ok how do i set up windows VPN to work with this router? Its says i can do it but i'm not sure how to configure it.
     
  22. Xtos

    Xtos LI Guru Member

    Well ok here is my next question... Has anyone used DrayTEC smart VPN client with their linksys routers? If so i would love to hear how they did it. It seems to be a free IPSEC client. It looks like it should work. But I can't seem to make it work. Any ideas?
     
  23. DocLarge

    DocLarge Super Moderator Staff Member Member

    In my opinion, the "easy way" around your issues would be to use "PPTP" vpn depending upon the confidentiality of your information. The WRVS4400n supports "GRE" passthru (Protocol 47) because I use it all the time for my MS 2003 vpn server configuration. Attached is a link that you can follow to set up RRAS to allow PPTP vpn on your 2003 server (if you have one at your office:

    http://www.dslreports.com/forum/remark,15190829

    I through this tutorial together last year (I believe) and it's still on point for a quick and dirty PPTP vpn server setup :)

    All you need is "one" NIC; two are only required if your computer is going to route traffic from the internet also (thus making it a "multi-homed server"). Since you have a WRVS4400N, it will pass GRE; just make sure you forward 1723 (on your internal and external port) to the ip address of your vpn server.

    The next thing after that would be as SFOR suggested, which would require each of your locations to have a GRE enabled vpn router (the WRV200 would be a cheaper cost). If all of your people aren't able to run their own vpn routers, that's no issue; the vpn server will service 128 connections (PPTP/L2TP). The only thing required by your folks is having them create MS vpn clients.

    Shout back if you have any problems...

    Jay
     
  24. Xtos

    Xtos LI Guru Member

    Yeah PPTP is a easy solution. But I really didn't want to put any more on my server. Its pretty taxed as is. I wanted to force my router to do this for me. I guess what i dont understand is why this doesn't work. IPSEC should be fairly simple. When i use the Draytec client it looks like it makes connection but when i try to ping i get "Negotiating IP Security". It seems like it shouldn't be this hard! I'm so done with this. I'm about to tell my boss its not possible and throw the damn router out the window.
     

Share This Page