Solved

Cannot Route Internet traffic over Linksys RV042 Site 2 Site VPN .

Posted on 2009-07-10
22
1,031 Views
Last Modified: 2012-05-07
Hi All,
I have a site to site VPN created between 2 x Linksys RV042 Routers.Site A and B. I am trying to route all site A internet traffic over the VPN so all internet comes from the public IP address of site B. I can ping all IP addresses on B from A and get on to the site B router browser over the VPN so the link is OK but I cannet route internet traffice from site A over the VPN to site B and out.
I have got this going on other routers before but don't seem to have the options on the RV042. Has anybody come acroos this before..
0
Comment
Question by:JoeMcGivern
  • 11
  • 9
  • 2
22 Comments
 
LVL 33

Expert Comment

by:MikeKane
ID: 24825973
In the routers, do you should have an option on the VPN tunnel setup to specify source and destination.    
From site A specify a source of Site A Subnet with a destination of 0.0.0.0 0.0.0.0  meaning anything.  

On Site B, use the source 0.0.0.0 with destination of Site A subnet.  

Then try to bring the tunnel back up.

0
 

Author Comment

by:JoeMcGivern
ID: 24829951
I think I do have that option. I can't access it now but will take a look later..
Will keep you posted..

Joe

0
 

Author Comment

by:JoeMcGivern
ID: 24838383
No Joy that does not work. What IP settings should have on the computers on Site ? Should the GW be 192.168.2.199
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 24839302
The gateways should be the linksys routers.  Since you didn't give any subnets I don't know the ips
0
 

Author Comment

by:JoeMcGivern
ID: 24839706
Hi Mike,
Thanks for you help on this I am infront of it now so here is more detail
Site A - 192.168.1.0 / 255.255.255.0 / GW - 192.168.1.100
Site B - 192.168.2.0 / 255.255.255.0 GW - 192.168.2.100
Site A the linksys is in router mode and Site B the linksys us in Gateway Mode.

I have switched the VPN setting back to origional state with local and remote 192.168.1.0 and 2,0 . Visa Versa. From the PC ( Site A)I can ping everything and browse the router on Site B but internet access. Also from the site A router diagnostics I can ping external IP address and resolved external DNS so the routing is working over the VPN but not with the PC.

Should I add a route on the PC?

0
 
LVL 33

Expert Comment

by:MikeKane
ID: 24839838
From the PC, try pinging 4.2.2.2 .     Do you get a reply?    If you do, then try pinging www.yahoo.com so see if you are having a dns issue perhaps.    


0
 

Author Comment

by:JoeMcGivern
ID: 24839949
Request times out..
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 24840144
If your default gateway for the SiteA PC is the SiteA router then no other route is needed.    Site A, should be sending everything across to siteB.    

0
 

Author Comment

by:JoeMcGivern
ID: 24840338
I am iou of ideas .
Tried linksys support but keep getting bounced over to Cisco where the RV042 is not recognised
Logging is very poor so difficult to tell what is going on
VPN UP = Connection OK
Ping other side = VPN OK
Can resolve external DNS and ping from linksys Router = Firewall and routing OK.

PC just will not work ?? What else can we try?
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 24840991
traceroute the packets from the PC, see where they are going.   What does your route table on the PC currently look like?
0
 

Author Comment

by:JoeMcGivern
ID: 24841137
Tracert goes as far as the 192.168.1.00 then times out .
Table below..

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 13 e8 16 52 69 ...... Intel(R) Wireless WiFi Link 4965AGN - Packet Sch
eduler Miniport
0x3 ...00 15 b7 c3 e5 67 ...... Intel(R) 82566MC Gigabit Network Connection - Pa
cket Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0    192.168.1.100   192.168.1.101       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      169.254.0.0      255.255.0.0    192.168.1.101   192.168.1.101       20
      192.168.1.0    255.255.255.0    192.168.1.101   192.168.1.101       20
    192.168.1.101  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.1.255  255.255.255.255    192.168.1.101   192.168.1.101       20
        224.0.0.0        240.0.0.0    192.168.1.101   192.168.1.101       20
  255.255.255.255  255.255.255.255    192.168.1.101   192.168.1.101       1
  255.255.255.255  255.255.255.255    192.168.1.101               2       1
Default Gateway:     192.168.1.100
===========================================================================
Persistent Routes:
  None

0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 33

Expert Comment

by:MikeKane
ID: 24841426
I know this is a typo, Tracert goes as far as the 192.168.1.00 then times ou

I assume its .100  

Can you traceroute to a PC at the far site?    What does the trace look like?

0
 

Author Comment

by:JoeMcGivern
ID: 24841546
Yes it is a typo..
I can't get on to the other site right now but I know it will go 192.168.2.100 and out via the various ROUTES
0
 
LVL 1

Expert Comment

by:wsenter
ID: 24841953
If this is the routing table for 192.168.1.0's  router as shown above..... Where is the route for the ISP?
If 169.254.0.0 with a class B mask that is most likely not going to work. Also, that destination address shows next hop of 192.168.1.0. It should 192.168.2.0 if that is where your WAN link is connected . IF you can, try adding a static route in 192.168.1.101 (appears to be the 1st routers address) to point to the ISP address via next hop of 192.168.1.102. Be sure to check the other routers routing table for a return path also and put a static route in that one also for the return.


Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0    192.168.1.100   192.168.1.101       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      169.254.0.0      255.255.0.0    192.168.1.101   192.168.1.101       20
      192.168.1.0    255.255.255.0    192.168.1.101   192.168.1.101       20
    192.168.1.101  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.1.255  255.255.255.255    192.168.1.101   192.168.1.101       20
        224.0.0.0        240.0.0.0    192.168.1.101   192.168.1.101       20
  255.255.255.255  255.255.255.255    192.168.1.101   192.168.1.101       1
  255.255.255.255  255.255.255.255    192.168.1.101               2       1
Default Gateway:     192.168.1.100
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 24841962
Its hard to know what the Linksys is doing....  logging is very poor, but do you have any logs available....  

Have you tested with another PC at site A?   Same result?  

0
 

Author Comment

by:JoeMcGivern
ID: 24843564
Hi Mike,

Yes I have tried it on another PC with no success..The logs give VPN sysnch erros unothorised login access but no traffic blocked due to plocy violation errors..They are useless..

Finaly managed to route out a customer support number, will give them a call in the morning see what happens.
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 24852531
Good luck.  
0
 

Author Comment

by:JoeMcGivern
ID: 24853142
After many many calls to Linksys , Cisco , Ciscobylinksys, Ciscosmall business ( I don't think they actualy know them selves who they are) I finaly got talking to a guy you reckoned that it should be working. He took a backup of the configs and was going to test it in Linksys.
I am awaiting a response..

 
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 24853424
Post back here if you can.  I'm very curious as to the fix.
0
 
LVL 1

Expert Comment

by:wsenter
ID: 24856217
I have tried working with tech support for Linksys before. The tech actually told me that they did not support routing. "A wireless router" .  Keyword "router". Duh. Unbelievable.

I do remember setting up two Linksys routers to talk to each other once and I had to specify the MAC address in the setup for each router. A step I overlooked. You may want to double check this.
0
 

Author Comment

by:JoeMcGivern
ID: 24857921
Will do
0
 

Accepted Solution

by:
JoeMcGivern earned 0 total points
ID: 25553817
Sorry for a very delayed respone to this.
I forgot I still had this topic open.
After a many emails back and forth with linksys it turns out that this is not possible.
They do not support routing internet traffic over the VPN.

Would not be in a hurry to purchase another linksys product..

Thanks for everybodys help on this..
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now