Cisco RV042 Administration Guide - Page 146

VPN

Setting Up a Remote Access Tunnel for VPN Clients (Client To Gateway)

Cisco Small Business RV0xx Series Routers Administration Guide

146

9

always accept compression, even if compression is not enabled. If you

enable this feature for this router, also enable it on the client.

-

Keep-Alive:

This feature enables the router to attempt to automatically

re-establish the VPN connection if it is dropped. Check the box to enable

this feature, or uncheck the box to disable it.

-

AH Hash Algorithm:

The AH (Authentication Header) protocol describes

the packet format and default standards for packet structure. With the

use of AH as the security protocol, protection is extended forward into

the IP header to verify the integrity of the entire packet. Check the box to

use this feature. Then select an authentication method: MD5 or SHA1.

MD5 produces a 128-bit digest to authenticate packet data. SHA1

produces a 160-bit digest to authenticate packet data. Both sides of the

tunnel should use the same algorithm.

-

NetBIOS Broadcast:

NetBIOS broadcast messages are used for name

resolution in Windows networking, to identify resources such as

computers, printers, and file servers. These messages are required by

some software applications and Windows features such as Network

Neighborhood. LAN broadcast traffic is typically not forwarded over a

VPN tunnel. However, you can check this box to allow NetBIOS

broadcasts from one end of the tunnel to be rebroadcast to the other

end.

-

Dead Peer Detection (DPD)

(available for Tunnel, not Group VPN)

:

Check the box to enable the router to send periodic HELLO/ACK

messages to check the status of the VPN tunnel. This feature can be

used only when it is enabled on both ends of the VPN tunnel. Specify the

interval between HELLO/ACK messages (how often you want the

messages to be sent).

-

NAT Traversal:

Network Address Translation (NAT) enables users with

private LAN addresses to access Internet resources by using a publicly

routable IP address as the source address. However, for inbound traffic,

the NAT gateway has no automatic method of translating the public IP

address to a particular destination on the private LAN. This issue

prevents successful IPsec exchanges. If your VPN router is behind a NAT

gateway, check this box to enable NAT traversal. Uncheck the box to

disable this feature. The same setting must be used on both ends of the

tunnel.

Section	Page
Introduction	7
RV0xx Series Router Features	7
Ports	9
Status Lights	10
Other Hardware Features	11
Default Settings	12
Mounting Options	12
Placement Tips	12
Desktop Placement	12
Wall Mounting	13
Rack Mounting RV082 or RV016	14
Connecting the Equipment	15
Getting Started with the Configuration	16
Troubleshooting Tips	17
Features of the User Interface	18
Viewing System Summary Information	20
Setup	26
Setting Up the Network	27
Changing the Administrator Username and Password	40
Setting the System Time	42
Setting Up a DMZ Host	43
Setting Up Port Forwarding and Port Triggering	44
Setting Up Universal Plug and Play (UPnP)	48
Setting Up One-to-One NAT	51
Cloning a MAC Address for the Router	53
Assigning a Dynamic DNS Host Name to a WAN Interface	55
Setting Up Advanced Routing	57
IPv6 Transition	61
DHCP	63
Setting Up the DHCP Server or DHCP Relay	63
Viewing the DHCP Status Information	70
Router Advertisement (IPv6)	71
System Management	73
Setting Up Dual WAN and Multi-WAN Connections	73
Managing the Bandwidth Settings	81
Setting Up SNMP	84
Enabling Device Discovery with Bonjour	85
Using Built-In Diagnostic Tools	87
Restoring the Factory Default Settings	89
Upgrading the Firmware	90
Restarting the Router	91
Backing Up and Restoring the Settings	92
Port Management	95
Configuring the Port Settings	95
Viewing the Status Information for a Port	97
Firewall	99
Configuring the General Firewall Settings	99
Configuring Firewall Access Rules	103
Using Content Filters to Control Internet Access	110
Cisco ProtectLink Web	113
Getting Started with Cisco ProtectLink Web	113
Specifying the Global Settings for Approved URLs and Clients	115
Approved URLs and Approved Clients	116
Enabling Web Protection for URL Filtering	117
Updating the ProtectLink License	120
VPN	122
Introduction to VPNs	122
Site to Site VPN (Gateway To Gateway)	123
Remote Access (Client To Gateway)	123
Remote Access with Cisco QuickVPN	125
Remote Access with PPTP	125
Viewing the Summary Information for VPN	126
Setting Up a Gateway to Gateway (Site to Site) VPN	130
Setting Up a Remote Access Tunnel for VPN Clients (Client To Gateway)	139
Managing VPN Users and Certificates	147
Setting Up VPN Passthrough	149
Setting Up PPTP Server	150
Logging System Statistics	153
Setting Up the System Log and Alerts	153
Viewing the System Log	157
Wizard	159
Glossary	161
Troubleshooting	165
Cisco QuickVPN for Windows	167
Introduction	167
Cisco QuickVPN Client Installation and Configuration	168
Using the Cisco QuickVPN Software	168
Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers	170
Topology Options	170
VPN Hub and Spoke Topology	171
VPN Mesh Topology	172
Other Design Considerations	173
Configuring a VPN Tunnel on a Cisco RV0xx Series Router	175
Example: Sites with Static WAN IP Addresses	176
Example: Site with a Dynamic WAN IP Address	179
IPSec NAT Traversal	183
Overview	183
Bandwidth Management	186
Creation of New Services	186
Creation of New Bandwidth Management Rules	187
Specifications	189
RV042	189
RV042G	191
Cisco RV082	194
Cisco RV016	196

Cisco RV042 Administration Guide - Page 146

Keep-Alive, AH Hash Algorithm, NetBIOS Broadcast, Dead Peer Detection DPD, NAT Traversal

Page 146 highlights