Cisco RV120W iOS (and general mobile support) for VPN

[sean_dusoe]

Hi Everyone,

I recently picked up a Cisco RV120W and I'm attempting to use it for VPN for mobile devices (iOS first, Android and WP later). I set up the various policies, and I am able to hit the router from my iOS device, however, I am receiving the following log output from the Cisco device:

2000-01-07 00:32:09: [rv120w][IKE] ERROR: Local configuration for xx.xx.xx.xx[4500] does not have mode config

I am using the native iOS VPN app trying to connect via IPSec. I've also tried using the Cisco AnyConnect app and nothing seems to happen with that. I've done a fair bit of googling on this issue and I can only find a single thread from about 5 years ago. Does anyone know if this device just does not support iOS devices for VPN?

Thanks in advance!
Sean

 

[phibertron]

From looking at the emulator for the device

RV120W Wireless-N VPN Firewall Online Device Emulator

If you look under VPN then IPSEC then VPN Users
You notice that a user can authenticate using one of 3 protocols
note: xauth is for IPsec

pptp, xauth, quick vpn

As I understand it, the AnyConnect is for SSL VPNs only
and could be wrong about that.

But I do know that apple uses "Easy VPN" in the native built in client
The only Small Business RV series router "that I am aware of"
that can use the apple native client for IPsec is the RV320

Im not sure if there is a Quick VPN client for apple ios

 

[phibertron]

I took a peek at the manual for the RV120

http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv120w/administration/guide/rv120w_admin.pdf

Creating Cisco QuickVPN Client Users, page 93.


To use the Cisco QuickVPN, you must do the following:

STEP 1 Enable remote management.
See Configuring Remote Management, page 119.

STEP 2 Create QuickVPN users.
See Configuring VPN Users, page 105.

After a user account is created, the credentials can be used by the QuickVPN client.

For more information on installing and using Cisco QuickVPN, see Appendix A,
“Using Cisco QuickVPN for Windows 7, 2000, XP, or Vista.”

I find it odd that one would have to enable remote management for quickvpn
which seems to unblock port 443, which suggest SSL
So maybe quickvpn is an SSL VPN
and "maybe, but I doubt it" it "might" work with anyconnect

why would they force one to expose the remote management interface is also odd.

 

[phibertron]

It looks like QuickVPN is not an SSL VPN, probably using it for authentication
Its an old thread, but tells us what ports it uses

QuickVPN needs ports 443, 60443, 500 and 4500 to be open

https://supportforums.cisco.com/discussion/11332136/ports-used-quickvpn

I think your only option is to use PPTP
But in the scope of security, it would be very bad choice,
as it is well known to have been completely compromised.

But, If your using this for home and only turn it on when needed
you might be all right to use it sparingly

 

[sean_dusoe]

Thank you so much for looking into it. Overall, its ridiculously confusing, but what you're saying makes sense. Sadly, I do need to use IPSec, so looks like I'll be sending this box back to Cisco. Again, thank you so much for looking into it. I really appreciate it!

 

[phibertron]

Your Welcome

Please let the forum know what you end up going with
as I am sure others would like to know what other options exist
for people wanting/needing to use the built in vpn clients on phones and tablets os's

 

[phibertron]

Maybe it was a blessing in disguise that the router didn't work out

The RV120W and RV220W will go EoL December 2014.
However our replacement is the new RV130W.

https://supportforums.cisco.com/announcement/12338681/rv120w-and-rv220w-will-be-eol