network/vpn issue

I have a client with 2 networks in the same building.  They want to be able to communicate between the networks. The option to combine into 1 network is not an option.  Current the topology is this

                                                                                      Gateway
                                                                         |                                  |
                                                         Static ip cisco RV082                static ip cisco RVS4000
                                                                     

I attempted to setup a vpn between the 2 routers but it will not connect, any ideas?  
cnesupportAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ipajonesCommented:
Why do you need a VPN ?

Can you not just segregate the LANs with different subnets and then route the appropriate traffic between them using ACLs if required.

Generally the purpose of a VPN IS to join 2 networks over an insecure medium such as the Internet.

Can you be more specific about the requirements and objectives ?

--IJ
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
First, make sure the subnets on each end are different. They might be the same.

Make sure on the RV082 that you are using Gateway to Gateway VPN and not Gateway to Client. Check the similar setting on the RVS4000. Check that the VPN settings including Phase 1 and Phase 2 are identical on both routers. Then check in the VPN Advanced Settings (RV082) for Aggressive Mode. I have it unchecked but check both routers for this setting. Also check NAT Traversal. You may need it set on at one end. Check both settings.

... Thinkpads_User
0
cnesupportAuthor Commented:
currently the rv082 is 192.168.0.251  the rvs4000 is 10.3.0.1  

basically the boss want to be able to walk around and no matter which network he is at he can get to the data on either side.  

Yes Thinkpads user it is gateway to gateway and all the phases on the same
0
Hey MSSPs! What's your total cost of ownership?

WEBINAR: Managed security service providers often deploy & manage products from a variety of solution vendors. But is this really the best approach when it comes to saving time AND money? Join us on Aug. 15th to learn how you can improve your total cost of ownership today!

JohnBusiness Consultant (Owner)Commented:
So now check in the Advanced Settings. I had to enable NAT Traversal a couple of times to get a connect. It depends on the situation, but do check NAT and Agressive Mode.

.... Thinkpads_User
0
cnesupportAuthor Commented:
tried that same result
0
JohnBusiness Consultant (Owner)Commented:
There are logs in both RV boxes. Turn on logging and see what it tells you.

 ... Thinkpads_User
0
cnesupportAuthor Commented:
log from the rv082

ct 17 05:28:31 2011           VPN Log          [Tunnel Negotiation Info] >>> Initiator Send Aggressive Mode 1st packet
Oct 17 05:28:31 2011           VPN Log          initiating Aggressive Mode #37, connection "ips0"
Oct 17 05:28:31 2011           VPN Log          STATE_AGGR_I1: initiate
Oct 17 05:28:34 2011           VPN Log          [Tunnel Negotiation Info] >>> Initiator Send Aggressive Mode 1st packet
Oct 17 05:28:34 2011           VPN Log          initiating Aggressive Mode #38, connection "ips0"
Oct 17 05:28:34 2011           VPN Log          STATE_AGGR_I1: initiate
Oct 17 05:29:44 2011           VPN Log          [Tunnel Negotiation Info] >>> Initiator Send Aggressive Mode 1st packet
Oct 17 05:29:44 2011           VPN Log          initiating Aggressive Mode #39 to replace #38, connection "ips0"
Oct 17 05:29:44 2011           VPN Log          STATE_AGGR_I1: initiate
Oct 17 05:30:54 2011           VPN Log          [Tunnel Negotiation Info] >>> Initiator Send Aggressive Mode 1st packet
Oct 17 05:30:54 2011           VPN Log          initiating Aggressive Mode #40 to replace #39, connection "ips0"
Oct 17 05:30:54 2011           VPN Log          STATE_AGGR_I1: initiate
Oct 17 06:45:31 2011           VPN Log          [Tunnel Negotiation Info] >>> Initiator Send Aggressive Mode 1st packet
Oct 17 06:45:31 2011           VPN Log          initiating Aggressive Mode #41, connection "ips0"
Oct 17 06:45:31 2011           VPN Log          STATE_AGGR_I1: initiate
Oct 17 06:46:41 2011           VPN Log          [Tunnel Negotiation Info] >>> Initiator Send Aggressive Mode 1st packet
Oct 17 06:46:41 2011           VPN Log          initiating Aggressive Mode #42 to replace #41, connection "ips0"
Oct 17 06:46:41 2011           VPN Log          STATE_AGGR_I1: initiate
0
cnesupportAuthor Commented:
rvs4000 log

Oct 17 06:45:22 - [VPN Log]: "trend" #2: initiating Aggressive Mode #2, connection "trend"
Oct 17 06:46:32 - [VPN Log]: "trend" #2: max number of retransmissions (2) reached STATE_AGGR_I1
Oct 17 06:47:57 - [VPN Log]: "trend" #3: initiating Aggressive Mode #3, connection "trend"
Oct 17 06:49:07 - [VPN Log]: "trend" #3: max number of retransmissions (2) reached STATE_AGGR_I1
0
JohnBusiness Consultant (Owner)Commented:
Check through your main settings and check the use of Agressive Mode at each end. The logs suggest you are not getting to first base at all. I don't see any phase 1 packets.  ... Thinkpads_Use
r
0
cnesupportAuthor Commented:
They are both set to use agressive mode, I know it seems like they can't see each other at all.  I am wondering if there is some kind of block on the gateway or since they both use the same gateway if there is a problem with that as well.
0
JohnBusiness Consultant (Owner)Commented:
You might need some local networking assistance with your network. As noted by ipajones earlier, VPN normally expects Internet to be in the middle, and I have not connected a VPN without an external IP.  

... Thinkpads_User
0
cnesupportAuthor Commented:
that is what I am think as well, but not being able to find anything useful online yet.
0
cnesupportAuthor Commented:
thanks for the help, turned out the isp had the routing all messed up on the gateway.  vpn is up and running normally now.
0
JohnBusiness Consultant (Owner)Commented:
Thanks for the update and I am glad you got it up and running. ... Thinkpads_User
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.