Cisco WRV200 User Guide - Page 48

´³

Configuring IPSec with a Windows 2000

or XP Computer

Wireless-G VPN Router with RangeBooster

Appendix D

Appendix D:

Configuring

IPSec with

a Windows ²000 or XP

Computer

Introduction

This appendix explains how to establish a secure IPSec

tunnel using preshared keys to join a private network

inside the Router and a Windows 2000 or XP computer.

You can find detailed information on configuring the

Windows 2000 server at the Microsoft website:

Microsoft KB Q252735—How to Configure IPSec Tunneling

in Windows 2000:

http://support.microsoft.com/support/kb/articles/

Q²µ²/·/³µ.asp

Microsoft KB Q257225—Basic IPSec Troubleshooting in

Windows 2000:

http://support.microsoft.com/support/kb/articles/

Q²µ·/²/²µ.asp

NOTE:

Keep a record of any changes you make.

Those changes will be identical in the Windows

“secpol” application and the Router’s Web-

based Utility.

NOTE:

The text on your screen may differ from

the text in your instructions regarding the

OK

or

Close

buttons; click the appropriate button

on your screen.

Environment

The IP addresses and other specifics mentioned in this

appendix are for illustration purposes only.

Windows ²000 or Windows XP

IP Address: 140.111.1.2 <= User ISP provides IP Address;

this is only an example.

Subnet Mask: 255.255.255.0

WRV²00

WAN IP Address: 140.111.1.1 <= User ISP provides IP

Address; this is only an example.

Subnet Mask: 255.255.255.0

LAN IP Address: 192.168.1.1

Subnet Mask: 255.255.255.0

How to Establish a Secure IPSec Tunnel

Step 1: Create an IPSec Policy

Click

Start

, select

Run

, and type

secpol.msc

in the

Open

field. The Local Security Settings screen appears.

Local Security Settings

Right-click

IP Security Policies on Local Computer

(Windows XP) or

IP Security Policies on Local Machine

(Windows 2000), and click

Create IP Security Policy

.

Click the

Next

button, and then enter a name for your

policy (for example, to_Router). Then, click

Next

.

Deselect the

Activate the default response rule

check box, and then click

Next

.

Click

Finish

, making sure the

Edit

check box is

checked.

Step 2: Build Filter Lists

NOTE:

Throughout the following section the

term “win” refers to both Windows 2000 and

Windows XP.

NOTE:

The text on your screen may differ from

the text in your instructions regarding the

OK

or

Close

buttons; click the appropriate button

on your screen.

Filter List 1: win -> router

In the new policy’s properties screen, verify that the

Rules

tab is selected. Deselect the

Use Add Wizard

check box, and click

Add

to create a new rule.

Rules Tab

1.

2.

3.

4.

5.

1.

Section	Page
Chapter 1: Introduction	6
Chapter 2: Planning Your Wireless Network	7
Network Topology	7
Ad-Hoc versus Infrastructure Mode	7
Network Layout	7
Chapter 3: Planning Your Virtual Private Network (VPN)	8
Why do I need a VPN?	8
1) MAC Address Spoofing	8
2) Data Sniffing	8
3) Man in the middle attacks	8
What is a VPN?	8
VPN Router to VPN Router	9
Computer (using the Linksys VPN client software) to VPN Router	9
Chapter 4: Product Overview	10
Front Panel	10
Back Panel	10
Chapter 5: Configuring the Wireless-G VPN Router	11
Overview	11
How to Access the Web-based Utility	12
Setup	12
Setup > Basic Settings	12
Setup > VLAN	15
Setup > DDNS	15
Setup > MAC Address Clone	16
Setup > Advanced Routing	17
Wireless	18
Wireless > Basic Wireless Settings	18
Wireless > Wireless Security	18
Wireless > Wireless Network Access	21
Wireless > Advanced Wireless Settings	22
Wireless > WDS	22
Firewall	23
Firewall > General	23
Firewall > Port Forwarding	23
Firewall > Port Triggering	24
Firewall > DMZ	24
Firewall > Access Restriction	25
Firewall > URL Filtering	25
VPN	25
VPN > VPN Client Access	25
VPN > VPN Passthrough	26
VPN > IPSec VPN	27
VPN > VPN Summary	29
QoS	30
QoS > Application-Based QoS	30
QoS > Port-Based QoS	30
Administration	31
Administration > Management	31
Administration > Log	32
Administration > Diagnostics	33
Administration > Factory Default	33
Administration > Firmware Upgrade	33
Administration > Reboot	34
Status	34
Status > Router	34
Status > Local Network	35
Status > Wireless	35
Status > System Performance	35
Status > VPN Clients	36
Appendix A: Troubleshooting	37
Frequently Asked Questions	42
Appendix B: Wireless Security Checklist	44
General Network Security Guidelines	44
Additional Security Tips	44
Appendix C: Using Linksys QuickVPN for Windows 2000, XP, or Vista	45
Overview	45
Before You Begin	45
Installing the Linksys QuickVPN Software	45
Installing from the CD-ROM	45
Downloading and Installing from the Internet	45
Using the Linksys QuickVPN Software	46
Version Number of the QuickVPN Client	46
Distributing Certificates to QuickVPN Users	47
Appendix D: Configuring IPSec with a Windows 2000 or XP Computer	48
Introduction	48
Environment	48
How to Establish a Secure IPSec Tunnel	48
Step 1: Create an IPSec Policy	48
Step 2: Build Filter Lists	48
Step 3: Configure Individual Tunnel Rules	50
Step 4: Assign New IPSec Policy	53
Step 5: Create a Tunnel Through the Web-Based Utility	53
Appendix E: Gateway-to-Gateway VPN Tunnel	54
Overview	54
Before You Begin	54
Configuration when the Remote Gateway Uses a Static IP Address	54
Configuration of the WRV200	54
Configuration of the RV082	55
Configuration of PC 1 and PC 2	55
Configuration when the Remote Gateway Uses a Dynamic IP Address	56
Configuration of the WRV200	56
Configuration of the RV082	56
Configuration of PC 1 and PC 2	57
Configuration when Both Gateways Use Dynamic IP Addresses	57
Configuration of the WRV200	57
Configuration of the RV082	58
Configuration of PC 1 and PC 2	58
Appendix F: Glossary	59
Appendix G: Specifications	62
Appendix H: Warranty Information	64
Exclusions and Limitations	64
Obtaining Warranty Service	64
Technical Support	65
Appendix I: Regulatory Information	66
FCC Statement	66
FCC Radiation Exposure Statement	66
Safety Notices	66
Industry Canada Statement	66
Industry Canada Radiation Exposure Statement:	66
Avis d’Industrie Canada	67
Avis d’Industrie Canada concernant l’exposition aux radiofréquences :	67
Wireless Disclaimer	67
Avis de non-responsabilité concernant les appareils sans fil	67
User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE)	68

Cisco WRV200 User Guide - Page 48

Appendix D: Configuring IPSec with a Windows 2000 or XP Computer, Introduction, Environment

Page 48 highlights