Error with  VPN on CISCO RV016 Router

Jose Bredariol
Jose Bredariol used Ask the Experts™
on
I have one RV016 Cisco router.  I´m configuring VPN. I created the user and export the client certificate.
On my notebook I installed QuickVPN client and copy client certificade on his folder.
But i´m not conneting, I´ve got warning : Server´s certificate doesn´t exists on your computer..... Even if I continue I got another error : Connection failure.
What I´m doing wrong ?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
Your RV016 should have a Client <> Gateway setup (I am using an RV325 myself).

What are the settings in the router for the VPN client to connect to?

Author

Commented:
TunnelGroup VPN
Tunnel No.       2
Tunnel Name :       
tunnel2
Interface :       
Enable :       

Local Group Setup
Local Security Gateway Type :       
IP Address :       186.228.xxx.xxx
Local Security Group Type :       
IP Address :       
192.168.0.0
Subnet Mask :       
255.255.255.0

Remote Client Setup
Remote Security Gateway Type :       
Email Address :       
jbredariol
 @
yahoo.com

IPSec Setup
Keying Mode :       
Phase 1 DH Group :       IKE + pre shared key
Phase 1 Encryption :       Group2
Phase 1 Authentication :       Sha1
Phase 1 SA Life Time :       28800
seconds

Perfect Forward Secrecy :       MARKED
Phase 2 DH Group :       2
Phase 2 Encryption : 3DES      
Phase 2 Authentication : Sha1      
Phase 2 SA Life Time :       3600 seconds

Preshared Key :       xyzxyzxyz

Minimum Preshared Key Complexity :       Enable

Advanced
aggresive, compress, keep-alive, dead-peer interval 10sec all marked
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
For DH Group 2, try turning PFS OFF.  I always disable Perfect Forward Secrecy.

You should also set up 3DES encryption in Phase 1 as well. I do that.

I have this basic setup as well and connect into the RV325 using NCP Secure Entry.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
I´cant disable PFS. I unmark it, but the page reloads with PFS marked.
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
That may be a function of Quick Connect and so you may need to try a different VPN client. It has been a few years now (RV016 is old) and Quick Connect never worked.

Author

Commented:
I unmark PFS but nothing.

Author

Commented:
What VPN client do you recommend ?
Business Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018
Commented:
I use NCP Secure Entry exclusively. Excellent software.  www.ncp-e.com

Author

Commented:
Thanks
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
You are very welcome and I was happy to help.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial