Cisco RV042 Administration Guide - Page 133

VPN

Setting Up a Gateway to Gateway (Site to Site) VPN

Cisco Small Business RV0xx Series Routers Administration Guide

133

9

-

Dynamic IP +

E-mail Addr.(USER FQDN) Authentication:

Choose this

option if this router has a dynamic IP address and does not have a

Dynamic DNS hostname. Enter any

Email Address

to use for

authentication.

If both routers have dynamic IP addresses (as with PPPoE connections),

do not choose Dynamic IP + Email Addr. for both gateways. For the

remote gateway, choose

IP Address

and

IP Address by DNS Resolved

.

•

Local/Remote Security Group Type:

Specify the LAN resources that can

use this tunnel. The Local Security Group is for this router’s LAN resources;

the Remote Security Group is for the other router’s LAN resources.

-

IP Address:

Choose this option to specify one device that can use this

tunnel. Then enter the IP address of the device.

-

Subnet:

Choose this option (the default option) to allow all devices on a

subnet to use the VPN tunnel. Then enter the subnetwork IP address and

mask.

-

IP Range:

Choose this option to specify a range of devices that can use

the VPN tunnel. Then identify the range of IP addresses by entering the

first address in the

Begin IP

field and the final address in the

End IP

field.

IPSec Setup

Enter the Internet Protocol Security settings for this tunnel.

IMPORTANT:

In order for any encryption to occur, the two ends of a VPN tunnel

must agree on the methods of encryption, decryption, and authentication. Enter

exactly the same settings on both routers.

•

Keying Mode:

Choose one of the following key management methods:

-

Manual:

Choose this option if you want to generate the key yourself and

you do not want to enable key negotiation. Manual key management is

used in small static environments or for troubleshooting purposes. Enter

the required settings. For information, see

Required fields for Manual

mode, page 134

.

-

IKE with Preshared Key:

Choose this option to use the Internet Key

Exchange protocol to set up a Security Association (SA) for your tunnel.

IKE uses a preshared key to authenticate the remote IKE peer. This

setting is recommended and is selected by default. Enter the required

settings. For more information, see

Required fields for IKE with

Section	Page
Introduction	7
RV0xx Series Router Features	7
Ports	9
Status Lights	10
Other Hardware Features	11
Default Settings	12
Mounting Options	12
Placement Tips	12
Desktop Placement	12
Wall Mounting	13
Rack Mounting RV082 or RV016	14
Connecting the Equipment	15
Getting Started with the Configuration	16
Troubleshooting Tips	17
Features of the User Interface	18
Viewing System Summary Information	20
Setup	26
Setting Up the Network	27
Changing the Administrator Username and Password	40
Setting the System Time	42
Setting Up a DMZ Host	43
Setting Up Port Forwarding and Port Triggering	44
Setting Up Universal Plug and Play (UPnP)	48
Setting Up One-to-One NAT	51
Cloning a MAC Address for the Router	53
Assigning a Dynamic DNS Host Name to a WAN Interface	55
Setting Up Advanced Routing	57
IPv6 Transition	61
DHCP	63
Setting Up the DHCP Server or DHCP Relay	63
Viewing the DHCP Status Information	70
Router Advertisement (IPv6)	71
System Management	73
Setting Up Dual WAN and Multi-WAN Connections	73
Managing the Bandwidth Settings	81
Setting Up SNMP	84
Enabling Device Discovery with Bonjour	85
Using Built-In Diagnostic Tools	87
Restoring the Factory Default Settings	89
Upgrading the Firmware	90
Restarting the Router	91
Backing Up and Restoring the Settings	92
Port Management	95
Configuring the Port Settings	95
Viewing the Status Information for a Port	97
Firewall	99
Configuring the General Firewall Settings	99
Configuring Firewall Access Rules	103
Using Content Filters to Control Internet Access	110
Cisco ProtectLink Web	113
Getting Started with Cisco ProtectLink Web	113
Specifying the Global Settings for Approved URLs and Clients	115
Approved URLs and Approved Clients	116
Enabling Web Protection for URL Filtering	117
Updating the ProtectLink License	120
VPN	122
Introduction to VPNs	122
Site to Site VPN (Gateway To Gateway)	123
Remote Access (Client To Gateway)	123
Remote Access with Cisco QuickVPN	125
Remote Access with PPTP	125
Viewing the Summary Information for VPN	126
Setting Up a Gateway to Gateway (Site to Site) VPN	130
Setting Up a Remote Access Tunnel for VPN Clients (Client To Gateway)	139
Managing VPN Users and Certificates	147
Setting Up VPN Passthrough	149
Setting Up PPTP Server	150
Logging System Statistics	153
Setting Up the System Log and Alerts	153
Viewing the System Log	157
Wizard	159
Glossary	161
Troubleshooting	165
Cisco QuickVPN for Windows	167
Introduction	167
Cisco QuickVPN Client Installation and Configuration	168
Using the Cisco QuickVPN Software	168
Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers	170
Topology Options	170
VPN Hub and Spoke Topology	171
VPN Mesh Topology	172
Other Design Considerations	173
Configuring a VPN Tunnel on a Cisco RV0xx Series Router	175
Example: Sites with Static WAN IP Addresses	176
Example: Site with a Dynamic WAN IP Address	179
IPSec NAT Traversal	183
Overview	183
Bandwidth Management	186
Creation of New Services	186
Creation of New Bandwidth Management Rules	187
Specifications	189
RV042	189
RV042G	191
Cisco RV082	194
Cisco RV016	196

Cisco RV042 Administration Guide - Page 133

E-mail Addr.USER FQDN Authentication, IP Address by DNS Resolved

Page 133 highlights