ER6020: Building VPN IPsec behind NAT with Cisco RV042

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ER6020: Building VPN IPsec behind NAT with Cisco RV042

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
ER6020: Building VPN IPsec behind NAT with Cisco RV042
ER6020: Building VPN IPsec behind NAT with Cisco RV042
2015-11-12 06:48:09 - last edited 2021-08-21 05:32:33
Model :

Hardware Version : Not Clear

Firmware Version :

ISP :

Hi,

I want to build a VPN between 2 sites.
They are connected to Internet with ADSL connexion from Orange (LiveBox Pro)

192.168.10.0/24 <-> tplink ER6020 <-> 192.168.1.0/24 <-> Livebox <-> Internet <-> livebox <-> 192.168.0.0/24 <-> RV042 <-> 192.168.2.0/24

Off course, on the two livebox, I configure the routers (respectively the ER6020 and RV042) as the DMZ.

In the IKE Policy, I put FQDN to avoid problems with NAT.
This doesn't work.
I have the following message on log:
IKE began to negociate as initiator.
Mod=main, peers=192.168.1.32<->217.128.xxx.yyy

I think there should be a NAT-T problem, because in my understanding, the peers should be public address of the livebox, and not private address of the network between the livebox and the router.

Does anyone has an idea?
  0      
  0      
#1
Options
2 Reply
Re:ER6020: Building VPN IPsec behind NAT with Cisco RV042
2015-11-12 10:50:15 - last edited 2021-08-21 05:32:33
Why not set the modem as bridge mode?
  0  
  0  
#2
Options
Re:ER6020: Building VPN IPsec behind NAT with Cisco RV042
2015-11-12 16:37:49 - last edited 2021-08-21 05:32:33

tomm wrote

Why not set the modem as bridge mode?


Unfortunatly, the livebox of the french ISP Orange cannot be configured as bridge mode.
And if it could be, il will lose the phone service linked to the box.
  0  
  0  
#3
Options