Link to home
Start Free TrialLog in
Avatar of Gareth McKee
Gareth McKeeFlag for Canada

asked on

cisco RV340W and RV180W VPN not connecting

Hi,

TIA

I have 2 cisco routers which I am having problems VPNing between.

RV340W, firmware 1.0.02.16
IPSec Profiles
keying mode auto
ike version 1

Phose 1
DH Group 2 - 1024 bit
Encryption 3DES
Auth SHA1
SA lifetime 28800

Phase 2
Protocol Selection ESP
Encryption 3DES
Auth SHA1
SA Lifetime 28800
PFS enabled
DH Group 2 - 1024 bit

Site to Site
Enabled
IPSec Profile - points to above settings
int WAN1
Remote endpoint Static IP
remote IP entered

Remote IKE Auth Method
Pre-shared key, complexity disabled, 14 digit key enterd

Local Group Setup
Local Intendifier type - Local WAN  IP
Local ID - Local IP Address
Local IP Type - Subnet
IP address - *.*.*.0 (local subnet)
Subnet mask - 25.255.255.0

Remote Group Setup
Remote ID TYpe - Remote WAN IP
Remote ID - remote IP address
Remote IP Type - subnet
IP Address - *.*.*.0 (remote subnet IP)
subnet mask 255.255.255.0


2nd routers

Cisco RV180W

IKE Policy
Direction/type - both
exchange mode - main

Local
ID Type - Local WAN IP

Remote
ID Type - Remote WAN IP

IKE SA Parameters
Encryption algorithm 3DES
Auth Algorithm SHA1
Auth method  Pre Shared key
Pre shared key entered
DH Group 2 1024 bit
SA Lifetime 28800
Dead Peer Detection enabled
det period 10
reconnect after 3

Extended auth
none



VPN Policy

Policy type - auto
remote endpoint - ip address
remote ip entered
NetBIOS enabled

Local Traffice selection
local ip subnet
start address - *.*.*.0 (local subnet)
subnet mask - 255.255.255.0

Remote traffic selection
remote ip - subnet
start address - *.*.*.0 (remote subnet)
subnet mask - 255.255.255.0

Auto Policy Parameters
SA-Lifetime 28800
Seconds
encryption algorithm 3DES
Integrity Algorightm SHA12
PFS Key Group Enabled - DH Group 2 1024 bit
IKE Policy  - above selected
auto initiate enabled

The VPN will not connect, what am I missing?

Thanks
Gareth
ASKER CERTIFIED SOLUTION
Avatar of John
John
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Gareth McKee

ASKER

One of two things

RV340W site-to-site - advanced - Keep alive was not enabled

or

RV340W did not like the Pre Shared Key - the log was complaining that it was invalid - it had a number of special characters eg !@#$, maybe the router doesn't like them?

Thanks as always.
Thanks for the update and I was pleased to assist you