VPn verbinding gateway to gateway Linksys RV042

[Verwijderd]

Allen,

Ik probeer een gatway to gateway verbinding op te zetten met 2x Linksys RV042.
1 fixed Ip
1 X dynamisch. (met een dyndns account)
Echter bevinden beide linksys vpn routers nogeens achter een Router met alle porten geforward.


Is deze opzet mogelijk? Of zijn er hier problemen mee?

Bedankt

[Uberprutser]

Als ze achter een router zitten die met NAT werken (dus je krijgt een intern IP adres) dan gaat dat niet goed werken is mijn ervaring met die dozen.

p.s. Het zou fijn zijn als je het iets duidelijker kan neerzetten want met deze sumiere informatie kunnen we je niet echt helpen. Ook fijn om te lezen wat je wel al geprobeerd hebt en hoe de huidige configuratie eruit ziet.

[Verwijderd]

Hoi,

Bedankt voor uw snel antwoord.
De huidige configuratie is als volgt:
PRIMARY LOCATION:
FIXED IP BBOX (belgacom) --- Speedtouch router (belgacom niet toegankelijk) 192.168.2.1 alle ports geforward naar 192.168.2.254 WAN (Linksys RV042) LAN 192.168.3.1 255.255.255.0 zonder DHCP (deze verzorgt door SBS).

Via extern netwerk werkt de quickVPN functie al wel.

Extern netwerk:
DYNAMISCH IP BBOX (belgacom) --- Speedtouch router (belgacom niet toegankelijk) 192.168.254.1 alle ports geforward naar 192.168.254.2 WAN (Linksys RV042) LAN 192.168.4.1 255.255.255.0 met DHCP.
En Dyndns voor ip lookup.

[Uberprutser]

Wat lukt er niet? Zie je wel een verbinding of kan deze niet opgezet worden? Zover ik weet hebben die dozen een (helaas wat beperkte) logging. Wat zie je hier in?

[Verwijderd]

De logging zegt inderdaad niet veel...
Ik vroeg me af of dit zelf al mogelijk was... ik bekijk straks even de logging nogmaals en laat iets weten

[Verwijderd]

Dit is de log file:


System Log
Current Time: Tue Sep 21 18:08:28 2010 ALL System Log Access Log Firewall Log VPN Log

Time
Event-Type Message
Sep 21 18:08:02 2010 Connection Accepted UDP 192.168.1.9:12681->195.238.2.21:53 on ixp1
Sep 21 18:08:02 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:02 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:03 2010 Connection Accepted UDP 192.168.1.9:12649->195.238.2.21:53 on ixp1
Sep 21 18:08:03 2010 Connection Accepted UDP 192.168.1.9:12649->195.238.2.21:53 on ixp1
Sep 21 18:08:04 2010 Connection Accepted UDP 192.168.1.9:11471->195.238.2.21:53 on ixp1
Sep 21 18:08:04 2010 Connection Accepted UDP 192.168.1.9:11471->195.238.2.21:53 on ixp1
Sep 21 18:08:05 2010 Connection Accepted UDP 192.168.1.9:15538->195.238.2.21:53 on ixp1
Sep 21 18:08:05 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:05 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:06 2010 Connection Accepted UDP 192.168.1.9:15700->195.238.2.21:53 on ixp1
Sep 21 18:08:06 2010 Connection Accepted UDP 192.168.1.9:15700->195.238.2.21:53 on ixp1
Sep 21 18:08:07 2010 Connection Accepted UDP 192.168.1.9:19993->195.238.2.21:53 on ixp1
Sep 21 18:08:07 2010 Connection Accepted UDP 192.168.1.9:19993->195.238.2.21:53 on ixp1
Sep 21 18:08:08 2010 Connection Accepted TCP 192.168.4.2:50657->213.239.154.34:80 on ixp1
Sep 21 18:08:08 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:08 2010 VPN Log Initiating Main Mode
Sep 21 18:08:08 2010 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 1st packet
Sep 21 18:08:08 2010 VPN Log Received Vendor ID payload Type = [Dead Peer Detection]
Sep 21 18:08:08 2010 VPN Log [Tunnel Negotiation Info] <<< Initiator Received Main Mode 2nd packet
Sep 21 18:08:08 2010 VPN Log [Tunnel Negotiation Info] >>> Initiator send Main Mode 3rd packet
Sep 21 18:08:08 2010 VPN Log [Tunnel Negotiation Info] <<< Initiator Received Main Mode 4th packet
Sep 21 18:08:08 2010 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 5th packet
Sep 21 18:08:08 2010 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 5th packet
Sep 21 18:08:09 2010 Connection Accepted UDP 192.168.1.9:19181->195.238.2.21:53 on ixp1
Sep 21 18:08:09 2010 Connection Accepted UDP 192.168.1.9:19181->195.238.2.21:53 on ixp1
Sep 21 18:08:10 2010 Connection Accepted UDP 192.168.4.2:49152->192.168.17.168:161 on ixp1
Sep 21 18:08:11 2010 Connection Accepted UDP 192.168.1.9:18122->195.238.2.21:53 on ixp1
Sep 21 18:08:11 2010 Connection Accepted UDP 192.168.1.9:18122->195.238.2.21:53 on ixp1
Sep 21 18:08:12 2010 Connection Accepted UDP 192.168.1.9:11040->192.238.2.22:53 on ixp1
Sep 21 18:08:13 2010 Connection Accepted UDP 192.168.1.9:18598->195.238.2.21:53 on ixp1
Sep 21 18:08:13 2010 Connection Accepted UDP 192.168.1.9:18598->195.238.2.21:53 on ixp1
Sep 21 18:08:14 2010 Connection Accepted UDP 192.168.1.9:11410->195.238.2.21:53 on ixp1
Sep 21 18:08:14 2010 Connection Accepted UDP 192.168.1.9:11410->195.238.2.21:53 on ixp1
Sep 21 18:08:15 2010 Connection Accepted UDP 192.168.1.9:19571->195.238.2.21:53 on ixp1
Sep 21 18:08:15 2010 Connection Accepted UDP 192.168.1.9:19571->195.238.2.21:53 on ixp1
Sep 21 18:08:16 2010 Connection Accepted UDP 192.168.1.9:14060->195.238.2.21:53 on ixp1
Sep 21 18:08:16 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:16 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:17 2010 Connection Accepted UDP 192.168.1.9:13451->195.238.2.21:53 on ixp1
Sep 21 18:08:17 2010 VPN Log Discarding duplicate packet; already STATE_MAIN_I3
Sep 21 18:08:17 2010 VPN Log Discarding duplicate packet; already STATE_MAIN_I3
Sep 21 18:08:18 2010 Connection Accepted UDP 192.168.1.9:11211->195.238.2.21:53 on ixp1
Sep 21 18:08:18 2010 VPN Log Received Vendor ID payload Type = [Dead Peer Detection]
Sep 21 18:08:18 2010 VPN Log [Tunnel Negotiation Info] <<< Responder Received Aggressive Mode 1st packet
Sep 21 18:08:18 2010 VPN Log Aggressive mode peer ID is ID_IPV4_ADDR: '192.168.2.254'
Sep 21 18:08:18 2010 VPN Log No suitable connection for peer '192.168.2.254', Please check Phase 1 ID value
Sep 21 18:08:18 2010 VPN Log initial Aggressive Mode packet claiming to be from 91.183.51.103 on 91.183.51.103 but no connection has been authorized,please check peer ID
Sep 21 18:08:18 2010 VPN Log initial Aggressive Mode packet claiming to be from 91.183.51.103 on 91.183.51.103 but no connection has been authorized,please check peer ID
Sep 21 18:08:19 2010 Connection Accepted UDP 192.168.1.9:11726->195.238.2.21:53 on ixp1
Sep 21 18:08:19 2010 Connection Accepted UDP 192.168.1.9:11726->195.238.2.21:53 on ixp1
Sep 21 18:08:20 2010 Connection Accepted UDP 192.168.1.9:12683->195.238.2.21:53 on ixp1
Sep 21 18:08:21 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:21 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:21 2010 Connection Accepted UDP 192.168.1.9:14824->195.238.2.21:53 on ixp1
Sep 21 18:08:21 2010 Connection Accepted UDP 192.168.1.9:14824->195.238.2.21:53 on ixp1
Sep 21 18:08:22 2010 Connection Accepted UDP 192.168.1.9:15811->195.238.2.21:53 on ixp1
Sep 21 18:08:23 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:23 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:23 2010 Connection Accepted UDP 192.168.1.9:17406->195.238.2.21:53 on ixp1
Sep 21 18:08:24 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:24 2010 Authentication Success HTTP Basic authentication succeeded for user: admin
Sep 21 18:08:26 2010 Connection Accepted UDP 192.168.1.9:18400->195.238.2.21:53 on ixp1
Sep 21 18:08:26 2010 Connection Accepted UDP 192.168.1.9:18400->195.238.2.21:53 on ixp1
Sep 21 18:08:27 2010 Connection Accepted UDP 192.168.1.9:19607->195.238.2.21:53 on ixp1
Sep 21 18:08:27 2010 Connection Accepted UDP 192.168.1.9:19607->195.238.2.21:53 on ixp1
Sep 21 18:08:28 2010 Connection Accepted UDP 192.168.1.9:15059->195.238.2.21:53 on ixp1
Sep 21 18:08:28 2010 Authentication Success HTTP Basic authentication succeeded for user: admin


Ik vermoed dat de oorzaal is omdat dit interne ip adressen zijn en niet de public ip's.
Maar kan ik vanuit een router het public ip adres doorgeven??