VPN Tunnel Stops Working Cisco RV130W

I have two networks connected with a VPN Site-to-Site Tunnel using two Cisco RV130W Routers. I have enabled NAT Traversal on both sides in order for communication across ports to work at all. (see previous post https://www.experts-exchange.com/questions/29011836/Bizarre-IP-Address-Port-Blocking-Windows-7.html) Now, the tunnel stops working all together after a few days. No pinging is successful at all. I disconnected and reconnected one side of the tunnel and it is back up and running now.

Any ideas on how to create a more stable connection??

Thank you
Robert WagstaffIT ConsultantAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Did you try updating firmware on the Cisco 130W routers. I am showing RV130X_FW_1.0.3.22 for a couple of these I have at clients.
0
Robert WagstaffIT ConsultantAuthor Commented:
I show both are running FW: 1.0.3.16  Am I correct to believe that these site-to-site VPN tunnels should work flawlessly for months on end? This is honestly my first VPN tunnel and it just seems so flaky and unstable.
0
JohnBusiness Consultant (Owner)Commented:
I have a Cisco 325 VPN router here and the tunnels are fine for long periods of time.

I did have a firmware issue with this Cisco 325 that affected tunnels. I went back a version to get stability and then forward two versions when a newer one came out.

So yes, I do suggest (carefully) upgrading firmware.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
The IT Degree for Career Advancement

Earn your B.S. in Network Operations and Security and become a network and IT security expert. This WGU degree program curriculum was designed with tech-savvy, self-motivated students in mind – allowing you to use your technical expertise, to address real-world business problems.

Robert WagstaffIT ConsultantAuthor Commented:
I will consider that however if firmware upgrade goes south I am 3 hours away so I will need to time it right.

Thank you for your help in this matter....again! =)
0
JohnBusiness Consultant (Owner)Commented:
I was happy to help and I will keep watching.  Thank you so much.
0
Craig BeckCommented:
Forgive me, but have you actually tried the firmware upgrade and confirmed that to be the solution?
0
Robert WagstaffIT ConsultantAuthor Commented:
I just spent an hour on the phone with Cisco. Instability remains. Actually turned OFF NAT Traversal as that is supposed to be used when you have a router in front of the Cisco router which I do not. Now even stranger behavior....I can access the port on the remote server but I cannot ping it. WTF!!!!!!!! I am afraid to do the firmware upgrades unless I am on site. I may be forced to however if the communication keeps dropping.

Very frustrated.
0
JohnBusiness Consultant (Owner)Commented:
I think Firmware should be updated if you can because it is behind a version or two.
0
Robert WagstaffIT ConsultantAuthor Commented:
Yah I assume that would be wise. I just can imagine Cisco releasing a product that is less than a year old with a bad firmware. It's not like VPN tunnels are a new thing.
0
JohnBusiness Consultant (Owner)Commented:
I know I had an issue (as noted above) that newer firmware fixed.

Also your tunnel stays up for a few days and that means the tunnel parameters are very likely (99%) correct.
0
Robert WagstaffIT ConsultantAuthor Commented:
But seriously why can't I ping 192.168.12.31 which is on the other side of the tunnel but yet telnet 192.168.12.31 80 works fine. Also, I can ping and telnet 192.168.12.34 without a problem. I had a constant ping going on .31 when all of a sudden it timed out. I am so confused.
0
JohnBusiness Consultant (Owner)Commented:
It is proper operation then none (as you describe above) that makes me think a problem inside the RV130W. I have several of these at another client not giving a lick of trouble.
0
Robert WagstaffIT ConsultantAuthor Commented:
I took your advice and upgraded the firmware on both routers to v1.0.3.22. The web interface seems much more responsive and the communication across the VPN tunnel is going strong right now. Need to see if it is stable over a week or so. Thank you
0
JohnBusiness Consultant (Owner)Commented:
Thank you for the update. Good news!
0
Craig BeckCommented:
There's lots of variables which can affect VPN traffic. See how the firmware goes but I'd expect it to be down to a network issue rather than firmware.
0
Robert WagstaffIT ConsultantAuthor Commented:
Ok here's the latest....The VPN Tunnel connection seemed to be running smoothly for a couple days as I was testing connecting to the port using "PORTQRY" and writing it to a log every 1 minute. Things went south however and traffic started to fail. I bounced the VPN tunnel and communication started up again with seemingly no problems. Not sure what to do other than bounce the connection daily. Any ideas???
0
JohnBusiness Consultant (Owner)Commented:
Two days of solid connection means that the Connection Parameters are good. The firmware you have is the newest and working on my units.

So then is there a hardware issue?  or an environment problem (power supply to the unit, or internet supply to the unit)?

Is the unit properly ventilated and not overheating?
0
Craig BeckCommented:
It will be a network issue.  Simply reloading the boxes or bouncing the interface does nothing for overheating, etc.

There's lots of issues that can affect IPSec tunnels... MTU, latency, clock issues, routing, etc.

I'd check the logs on the boxes to see if they reveal anything.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.