Solved

VPN into Linksys RV016 through Fortigate 50b

Posted on 2011-03-02
9
857 Views
Last Modified: 2012-05-11
I have a contractor who has setup a Linksys RV016 firewall behind my network firewall.  He is protecting and running a 192.x.x.x network for some PLC's that he can program remotely for one of our departments.  We don't want the PLC's on our network, he just wants to VPN to the RV016 through my firewall.  I have assigned the RV016 an IP address on my network, opened all the correct ports, and setup a rule to allow the proper traffic to forward.  Still not able to create a VPN from that device to his PLC's.  Any advice is appreciated.  
0
Comment
Question by:bgold0568
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 95

Expert Comment

by:John Hurst
ID: 35022918
>>>  he just wants to VPN to the RV016
>>> not able to create a VPN from that device to his PLC's.

Which way is the contractor going? ... Thinkpads_User
0
 

Author Comment

by:bgold0568
ID: 35023396
From the outside (public ip) through the firewall and to his device.  
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 35023432
Thank you. So is the outside device another RV016? (Gateway <--> Gateway), or is it a PC? (Client to Gateway). If the latter, what operating system and VPN application is being used?

... Thinkpads_User
0
Space-Age Communications Transitions to DevOps

ViaSat, a global provider of satellite and wireless communications, securely connects businesses, governments, and organizations to the Internet. Learn how ViaSat’s Network Solutions Engineer, drove the transition from a traditional network support to a DevOps-centric model.

 

Author Comment

by:bgold0568
ID: 35023553
No, my firewall is the outside device.  Fortigate 50b.  The RV016 is inside my network behind my firewall.   It has a statically assigned IP address (10.10.x.x)
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 35023568
Yes, I understand that. The question is: What is the remote device (outside your Fortigate) that is trying to talk to the RV016?  So far you have described only a one-ended VPN.

To be clear, when I said outside device, I was talking about a remote device outside your Fortigate. And what capabilities does this remote device have for VPN tunneling?

... Thinkpads_User
0
 

Author Comment

by:bgold0568
ID: 35023856
From what I understand he is using a VPN connection that is setup through a Windows PC at their office to VPN to the RV016 to control some PLC systems.  I am not sure if he is using the QuickVPN application to establish the connection.  I hope that helps.  
0
 
LVL 95

Accepted Solution

by:
John Hurst earned 500 total points
ID: 35023878
Thanks. If he is using QuickVPN, he needs to get a certificate from the RV016 for it to work. Also, working through the Fortigate, you/he may need to set (enable) NAT Traversal in the advanced setting of the RV016.

You might ask the contractor to remove the RV016 to his own premise and set it up exclusive of the Fortigate and then troubleshoot the Fortigate connection. Otherwise, it is a wee bit difficult at this point.

... Thinkpads_User
0
 

Author Comment

by:bgold0568
ID: 35023985
Will do .  Going to work on this tomorrow.  
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 35075027
Thank you. I was happy to assist you. ... Thinkpads_User
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question