We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Cannot Route Internet traffic over Linksys RV042 Site 2 Site VPN .

JoeMcGivern
JoeMcGivern asked
on
Medium Priority
1,113 Views
Last Modified: 2012-05-07
Hi All,
I have a site to site VPN created between 2 x Linksys RV042 Routers.Site A and B. I am trying to route all site A internet traffic over the VPN so all internet comes from the public IP address of site B. I can ping all IP addresses on B from A and get on to the site B router browser over the VPN so the link is OK but I cannet route internet traffice from site A over the VPN to site B and out.
I have got this going on other routers before but don't seem to have the options on the RV042. Has anybody come acroos this before..
Comment
Watch Question

Top Expert 2010

Commented:
In the routers, do you should have an option on the VPN tunnel setup to specify source and destination.    
From site A specify a source of Site A Subnet with a destination of 0.0.0.0 0.0.0.0  meaning anything.  

On Site B, use the source 0.0.0.0 with destination of Site A subnet.  

Then try to bring the tunnel back up.

Author

Commented:
I think I do have that option. I can't access it now but will take a look later..
Will keep you posted..

Joe

Author

Commented:
No Joy that does not work. What IP settings should have on the computers on Site ? Should the GW be 192.168.2.199
Top Expert 2010

Commented:
The gateways should be the linksys routers.  Since you didn't give any subnets I don't know the ips

Author

Commented:
Hi Mike,
Thanks for you help on this I am infront of it now so here is more detail
Site A - 192.168.1.0 / 255.255.255.0 / GW - 192.168.1.100
Site B - 192.168.2.0 / 255.255.255.0 GW - 192.168.2.100
Site A the linksys is in router mode and Site B the linksys us in Gateway Mode.

I have switched the VPN setting back to origional state with local and remote 192.168.1.0 and 2,0 . Visa Versa. From the PC ( Site A)I can ping everything and browse the router on Site B but internet access. Also from the site A router diagnostics I can ping external IP address and resolved external DNS so the routing is working over the VPN but not with the PC.

Should I add a route on the PC?

Top Expert 2010

Commented:
From the PC, try pinging 4.2.2.2 .     Do you get a reply?    If you do, then try pinging www.yahoo.com so see if you are having a dns issue perhaps.    


Author

Commented:
Request times out..
Top Expert 2010

Commented:
If your default gateway for the SiteA PC is the SiteA router then no other route is needed.    Site A, should be sending everything across to siteB.    

Author

Commented:
I am iou of ideas .
Tried linksys support but keep getting bounced over to Cisco where the RV042 is not recognised
Logging is very poor so difficult to tell what is going on
VPN UP = Connection OK
Ping other side = VPN OK
Can resolve external DNS and ping from linksys Router = Firewall and routing OK.

PC just will not work ?? What else can we try?
Top Expert 2010

Commented:
traceroute the packets from the PC, see where they are going.   What does your route table on the PC currently look like?

Author

Commented:
Tracert goes as far as the 192.168.1.00 then times out .
Table below..

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 13 e8 16 52 69 ...... Intel(R) Wireless WiFi Link 4965AGN - Packet Sch
eduler Miniport
0x3 ...00 15 b7 c3 e5 67 ...... Intel(R) 82566MC Gigabit Network Connection - Pa
cket Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0    192.168.1.100   192.168.1.101       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      169.254.0.0      255.255.0.0    192.168.1.101   192.168.1.101       20
      192.168.1.0    255.255.255.0    192.168.1.101   192.168.1.101       20
    192.168.1.101  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.1.255  255.255.255.255    192.168.1.101   192.168.1.101       20
        224.0.0.0        240.0.0.0    192.168.1.101   192.168.1.101       20
  255.255.255.255  255.255.255.255    192.168.1.101   192.168.1.101       1
  255.255.255.255  255.255.255.255    192.168.1.101               2       1
Default Gateway:     192.168.1.100
===========================================================================
Persistent Routes:
  None

Top Expert 2010

Commented:
I know this is a typo, Tracert goes as far as the 192.168.1.00 then times ou

I assume its .100  

Can you traceroute to a PC at the far site?    What does the trace look like?

Author

Commented:
Yes it is a typo..
I can't get on to the other site right now but I know it will go 192.168.2.100 and out via the various ROUTES

Commented:
If this is the routing table for 192.168.1.0's  router as shown above..... Where is the route for the ISP?
If 169.254.0.0 with a class B mask that is most likely not going to work. Also, that destination address shows next hop of 192.168.1.0. It should 192.168.2.0 if that is where your WAN link is connected . IF you can, try adding a static route in 192.168.1.101 (appears to be the 1st routers address) to point to the ISP address via next hop of 192.168.1.102. Be sure to check the other routers routing table for a return path also and put a static route in that one also for the return.


Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0    192.168.1.100   192.168.1.101       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      169.254.0.0      255.255.0.0    192.168.1.101   192.168.1.101       20
      192.168.1.0    255.255.255.0    192.168.1.101   192.168.1.101       20
    192.168.1.101  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.1.255  255.255.255.255    192.168.1.101   192.168.1.101       20
        224.0.0.0        240.0.0.0    192.168.1.101   192.168.1.101       20
  255.255.255.255  255.255.255.255    192.168.1.101   192.168.1.101       1
  255.255.255.255  255.255.255.255    192.168.1.101               2       1
Default Gateway:     192.168.1.100
Top Expert 2010

Commented:
Its hard to know what the Linksys is doing....  logging is very poor, but do you have any logs available....  

Have you tested with another PC at site A?   Same result?  

Author

Commented:
Hi Mike,

Yes I have tried it on another PC with no success..The logs give VPN sysnch erros unothorised login access but no traffic blocked due to plocy violation errors..They are useless..

Finaly managed to route out a customer support number, will give them a call in the morning see what happens.
Top Expert 2010

Commented:
Good luck.  

Author

Commented:
After many many calls to Linksys , Cisco , Ciscobylinksys, Ciscosmall business ( I don't think they actualy know them selves who they are) I finaly got talking to a guy you reckoned that it should be working. He took a backup of the configs and was going to test it in Linksys.
I am awaiting a response..

 
Top Expert 2010

Commented:
Post back here if you can.  I'm very curious as to the fix.

Commented:
I have tried working with tech support for Linksys before. The tech actually told me that they did not support routing. "A wireless router" .  Keyword "router". Duh. Unbelievable.

I do remember setting up two Linksys routers to talk to each other once and I had to specify the MAC address in the setup for each router. A step I overlooked. You may want to double check this.

Author

Commented:
Will do
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.