Avatar of Gareth McKee
Gareth McKee
Flag for Canada asked on

cisco RV340W and RV180W VPN not connecting

Hi,

TIA

I have 2 cisco routers which I am having problems VPNing between.

RV340W, firmware 1.0.02.16
IPSec Profiles
keying mode auto
ike version 1

Phose 1
DH Group 2 - 1024 bit
Encryption 3DES
Auth SHA1
SA lifetime 28800

Phase 2
Protocol Selection ESP
Encryption 3DES
Auth SHA1
SA Lifetime 28800
PFS enabled
DH Group 2 - 1024 bit

Site to Site
Enabled
IPSec Profile - points to above settings
int WAN1
Remote endpoint Static IP
remote IP entered

Remote IKE Auth Method
Pre-shared key, complexity disabled, 14 digit key enterd

Local Group Setup
Local Intendifier type - Local WAN  IP
Local ID - Local IP Address
Local IP Type - Subnet
IP address - *.*.*.0 (local subnet)
Subnet mask - 25.255.255.0

Remote Group Setup
Remote ID TYpe - Remote WAN IP
Remote ID - remote IP address
Remote IP Type - subnet
IP Address - *.*.*.0 (remote subnet IP)
subnet mask 255.255.255.0


2nd routers

Cisco RV180W

IKE Policy
Direction/type - both
exchange mode - main

Local
ID Type - Local WAN IP

Remote
ID Type - Remote WAN IP

IKE SA Parameters
Encryption algorithm 3DES
Auth Algorithm SHA1
Auth method  Pre Shared key
Pre shared key entered
DH Group 2 1024 bit
SA Lifetime 28800
Dead Peer Detection enabled
det period 10
reconnect after 3

Extended auth
none



VPN Policy

Policy type - auto
remote endpoint - ip address
remote ip entered
NetBIOS enabled

Local Traffice selection
local ip subnet
start address - *.*.*.0 (local subnet)
subnet mask - 255.255.255.0

Remote traffic selection
remote ip - subnet
start address - *.*.*.0 (remote subnet)
subnet mask - 255.255.255.0

Auto Policy Parameters
SA-Lifetime 28800
Seconds
encryption algorithm 3DES
Integrity Algorightm SHA12
PFS Key Group Enabled - DH Group 2 1024 bit
IKE Policy  - above selected
auto initiate enabled

The VPN will not connect, what am I missing?

Thanks
Gareth
RoutersInternet Protocol SecurityCisco

Avatar of undefined
Last Comment
John

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
John

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Gareth McKee

ASKER
One of two things

RV340W site-to-site - advanced - Keep alive was not enabled

or

RV340W did not like the Pre Shared Key - the log was complaining that it was invalid - it had a number of special characters eg !@#$, maybe the router doesn't like them?

Thanks as always.
John

Thanks for the update and I was pleased to assist you
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck