Setting up a VPN

0 pts.
Tags:
Networking
Dear All, I am trying to set up a VPN client to VPN router tunnel. The problem is that my ISP-supplied modem has a built-in router. This modem/router assigns a private IP to the Linksys WRV200 I am trying to use to create my VPN. I have already obtained a hostname for my dynamic IP from dyndns.org. However, this points to my modem/router which does not support VPN and not my Linksys router which does. I tried forwarding on port 500 of my modem/router, but my client still does not connect. Is there any way in which I can get my modem/router to forward VPN packets to my Linksys router?
ASKED: October 30, 2006  2:46 PM
UPDATED: November 4, 2006  2:14 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

Ok, well I am confused why you don’t just put the Linksys in place of the ISP Modem? If this isn’t an option, hopping with that particular VPN client will come in on a specific port to a specific IP. Depending on the Linksys (Which you could call for support), you should be able to setup a pass-through that makes the ISP modem invisible to the VPN tunnel, just as the other hops do, on their way to your Linksys.

Cordially,
Geoff
geoff@iis-resources.com

http://www.virtualserver-resources.com

Discuss This Question: 6  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Celtic
    Hello, A simple solution to your problem can be turning your ISP-supplied modem/router to function in bridge-mode rather than router-mode. This way the Dial-In to the ISP will be handled by the Linksys router (I'm sure it has an option to define a Dialer) and you'll have no problem setting up the VPN with the Linksys as the termination. Hope I helped...
    0 pointsBadges:
    report
  • Douger
    NJ, If neither of the above solutions work, check out getting a block of static ip addresses from your provider. Assign one to the router and another to the Linksys. You can then connect directly to the Linksys. Also, make sure your VPN config works without any other equipment between the Linksys and the client workstation. VPNs can be tricky, and you might be forwarding through the modem/router OK, but not connecting due to a configuration issue. Good luck. Doug
    0 pointsBadges:
    report
  • BadFinger
    The problem is your ISP uses the MAC address of the modem/router. PPOE also plays into this. My advice is to call your ISP, tell them what you have, and they will walk you through setting it up in 10 minutes or less. Needless to say, I've been through this a couple of times.
    0 pointsBadges:
    report
  • Bigshybear
    You may have a problem that the ISP's modem router is not passing UDP port 500 through. Give us the manufacturer & model and we can check. Also, the ISP may be blocking UDP port 500 upstream at one of their upstream routers. Only way to check this is to call their tech support. ----------------------- It sounds like you have admin access to the ISP's modem/router, try port forwarding EVERYTHING to the Linksys not just UDP port 500 for IPSEC. (though this configuration assumes that ALL your computers are behind the Linksys. If you have any computers off the ISP's modem/router this would block them from accessing the internet.) As a side note, make sure you look at the firmware code on the Linksys, it appears that Linksys is up to version 1.0.20 for the WRV200. It looks like the earlier firmware versions have had serious security problems.
    0 pointsBadges:
    report
  • Stevesz
    If you are using IPSec as an encryption method, you could be rning into problems with the NAT. The ISP's router will sometimes NAT the address to your Router, and then your router is using NAT to distribute addresses to the machines connected to it. IPSec does not handle Network Address Translation very well. Look to see what IP address your router is picking up from the modem. If it is a real IP address, then you only need to worry about your router. I am not familiar with the WRV200 youare using, but most Linksys routers have a bypass for VPN, and it is just a matter of settingthe router to have the correct ports open for the VPN solution you are using. Different vendors may use different ports. You do not mention the VPN solution youare using, so anything firther said here would be pure conjecture. Some of the Linksys routers have a built in VPN, but that is generally for handling incoming VPN connections. A quick look at the user's guide for your roouter shows how to make an IPSec connection using Windows 2000 or XP. Have a look at that if you are using IPSec. A bit more info on what you are doing and how you are trying to do it would help a lot here as well. Steve//
    2,015 pointsBadges:
    report
  • Mortree
    If you are using L2TP you need port 1701 as well. IPSec needs to be in transport mode so that the IP headers are visible for NAT. Don't use site to site tunneling mode.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following