[WXC/VFX] WAG310G: VPN passthrough

Forums › One New Zealand (including Vodafone, WxC, Farmside) › [WXC/VFX] WAG310G: VPN passthrough

denizej

19 posts

Geek

#99882 29-Mar-2012 05:13

Hi all,

I have a WAG310G and wish to connect to my work via a IPsec VPN connection (Checkpoint) but it fails from home, works at a friends and works in the office using an ADSL connection there, so the problem must be my router.

I was instructed to enable VPN passthrough on the router but I see no option in the WAG310G configuration screens
Firmware Version:1.00.03(100701-1727)-AU

The cisco support site indicates that under the security section of their routers there is a VPN Passthrough section, however this is not visible on my WAG310G, e.g:
http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=42784d125768424e843ce21350600748_4282.xml&pid=98&slnid=3

This is not visible on my WAG310G running the current firmware (and only firmware I can find for it)

do I need a new router?

cheers
josh

denizej

19 posts

Geek

#601970 29-Mar-2012 15:22

ping xnet.co.nz ....

I would like some advice or assistance please.

I tried calling the xnet technical support line again and this time the person was slightly more helpful by providing me the 0800 number for Linksys support, however I gave up on these people when they wanted the router's serial number and mentioned that I proably have an old router that is no longer in support (I know this already thanks).

Currently on the xnet site it is mentioned that the Cisco SRP527 router is the latest and greatest and a search on the cisco support forum for "SRP527 vpn" returned this page:
https://supportforums.cisco.com/message/3575757#3575757

The "best answer" for this was:

Only one set of routes can be specified for an IPSec policy. Either create an additional policy for the voice VLAN, or renumber the VLANs so that they can both be covered by a common address/mask.

I am not sure if this applies to the WAG310G or not, but when I am home I will see if this is possible or applicable, but it at least shows that the SRP527 router is capable of using IPSec VPNs

can anyone at xnet/wxc please confirm and possibly assist with configuring my WAG310G to work with IPSec VPNs?

cheers
josh

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#602013 29-Mar-2012 16:19

sorry missed this, the WAG310 does not support IPSEC / VPN on the box sorry, the SRP52x series do and we have a number of our own guys using it

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

denizej

19 posts

Geek

#602022 29-Mar-2012 16:32

thanks for the reply, so it would seem I need to fork out for a new router...

is it possible for me to get another ADSL router (that supports IPsec) and plug the WAG310G into this to provide the VOIP phone line (bridged or similar?) or must the one device do the ADSL and VOIP?

I don't need a wireless-N router as I run an ethernet to 2TB apple time capsule that provides me with 2.4 and 5GHZ wireless-N, so it would be good if I could just get a small and simple ADSL2 modem router and connect the WAG310G and ATC to this.

cheers
josh

coffeebaron

6235 posts

Uber Geek

Trusted

Lifetime subscriber

#602193 29-Mar-2012 20:54

You can chnage the WAG310G to operate in WAN mode, and use it as just an ATA

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#602276 30-Mar-2012 05:50

The WAG310 does not work in WAN mode unfortunately, was something they never fixed before support was ended for the device.

You can get a router and then get a ATA e.g. spa112 / 122 depend on the router cost this would generally be pretty close to price of the SRP527, but do some comparisons and see what you can find.

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

denizej

19 posts

Geek

#602283 30-Mar-2012 06:48

thanks again for the replies and advice

I have had a quick look on the PB technologies website at their router/modems and found this:

NetComm NB5 ADSL2+ Modem Router wi/ USB and Single Ethernet 10/100 LAN port VPN Pass-through IP-Sec TI Chipset SPI firewallhttp://www.pbwellington.co.nz/p.aspx?8821

for $49 + GST

couldn't I use this or something similar then connect the ATA ($99+GST) to this for the telephone and then via ethernet cable my apple time capsule to provide my 2.4GHz + 5GHz wireless-N network?

Ideally I would like an ADSL2+ modem router that has gigabit ports on it as the ATC and PS3 support this...

cheers
josh

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#602286 30-Mar-2012 06:53

Not sure of the SIP ALG / support on this product but should be fine, single Ethernet port though

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

denizej

19 posts

Geek

#602287 30-Mar-2012 07:00

I would need a gigabit switch for this or the SRP527 to connect PS3 and ATC ...

coffeebaron

6235 posts

Uber Geek

Trusted

Lifetime subscriber

#602310 30-Mar-2012 08:47

maverick: The WAG310 does not work in WAN mode unfortunately, was something they never fixed before support was ended for the device.

You can get a router and then get a ATA e.g. spa112 / 122 depend on the router cost this would generally be pretty close to price of the SRP527, but do some comparisons and see what you can find.

Hmm, interesting, as I have got one connected this way

Rural IT and Broadband support.

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

Ragnor

8223 posts

Uber Geek

Trusted

#602365 30-Mar-2012 10:09

denizej: I would need a gigabit switch for this or the SRP527 to connect PS3 and ATC ...

If you want all in one SRP527 is probably the best option.

If you are fine with separate components you can go for something like:

Modem:
Draytek Vigor 120 ~$100
http://pricespy.co.nz/product.php?p=464899

Router/Gigabit Switch/Wifi:
TP-Link TL-WR1043ND ~$100
http://pricespy.co.nz/product.php?p=529115

VOIP ATA:
Cisco Linksys SPA112 ~$100
http://nicegear.co.nz/analog-telephone-adaptors/cisco-spa112/

Either way works out about $300, separate components gives you more flexibility imo ie: if you want to change to VDSL2 or fibre you're just replacing/removing the modem.

However of course more devices = more power cords, more space taken up and more config/tech savy required for setup.

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#602643 30-Mar-2012 17:35

coffeebaron:
maverick: The WAG310 does not work in WAN mode unfortunately, was something they never fixed before support was ended for the device.

You can get a router and then get a ATA e.g. spa112 / 122 depend on the router cost this would generally be pretty close to price of the SRP527, but do some comparisons and see what you can find.

Hmm, interesting, as I have got one connected this way

Interesting , missed your post Frazer.

WAN connections have proved to be very hit and miss mostly they would not connect the SIP it works fine over DSL but not over the WAN port when used in this mode , when we approached Cisco over this it was not going to addressed.

Is your WAG310 running the voice or just the router ?

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

RunningMan

8961 posts

Uber Geek

#602701 30-Mar-2012 19:37

coffeebaron:
maverick: The WAG310 does not work in WAN mode unfortunately, was something they never fixed before support was ended for the device.

You can get a router and then get a ATA e.g. spa112 / 122 depend on the router cost this would generally be pretty close to price of the SRP527, but do some comparisons and see what you can find.

Hmm, interesting, as I have got one connected this way

+1

Had one running for several days in WAN mode (with a VFX line) through another modem that was doing NAT, while I was troubleshooting a connection issue. Didn't notice any problems...

coffeebaron

6235 posts

Uber Geek

Trusted

Lifetime subscriber

#602708 30-Mar-2012 20:21

maverick:
coffeebaron:
maverick: The WAG310 does not work in WAN mode unfortunately, was something they never fixed before support was ended for the device.

You can get a router and then get a ATA e.g. spa112 / 122 depend on the router cost this would generally be pretty close to price of the SRP527, but do some comparisons and see what you can find.

Hmm, interesting, as I have got one connected this way

Interesting , missed your post Frazer.

WAN connections have proved to be very hit and miss mostly they would not connect the SIP it works fine over DSL but not over the WAN port when used in this mode , when we approached Cisco over this it was not going to addressed.

Is your WAG310 running the voice or just the router ?

Running voice, no problem (as far as I know). Nothing connected on the LAN side, so basically using it as just an ATA.
I did full factory default, enabled the WAN port to grab it's IP from router (a Telecom 2wire), then VFX provisioned.

Rural IT and Broadband support.

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

dolsen

1476 posts

Uber Geek

Trusted

Lifetime subscriber

#602732 30-Mar-2012 21:13

I have previously used a wag310g with a dynalink rta1320v6 in half bridge mode to the wan port. The phone line (VFX) worked fine with it. Only issue was that if the internet connection went down it wouldn't work until I rebooted the modem.

denizej

19 posts

Geek

#606072 6-Apr-2012 12:24

I can confirm that I now have my WAG310G operating and working as an ATA in WAN mode connected to my new $69 TP-LINK TP-8840 ADSL2+ modem router, which should allow me to connect to my work via IPsec VPN tunneling... that will be my next test, after first getting my PS3 Netflix app working again (unblock-us.com)

And my Apple Time Capsule is happily providing me with the 5GHz wireless-n network (plus 2TB of networked storage space)

cheers and thanks for peoples suggestions/solutions

josh