Cisco RV042 Administration Guide - Page 173

Other Design Considerations, Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers

Page 173 highlights

Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers Other Design Considerations D Other Design Considerations Before you configure your VPN tunnels, consider the following points about your network setup. WAN Setup The WAN setup pertains to the network that your router connects to outside your office. The first consideration is the type of IP addresses that you received for your Internet service at your two sites. As when constructing a physical tunnel or bridge, you need to know where the VPN tunnel is going. • If at least one site has a static IP address: A VPN tunnel easily can be established if at least one of the sites has a static IP address for the WAN connection. A static IP address is a publicly routable Internet address that does not change. In this scenario, establishing a VPN tunnel can be compared to building a bridge between two docks (two sites with static IP addresses), or even setting a gangplank between a dock and an unanchored boat (one site with a static IP address and one with a dynamic IP address). Figure 3 Gateway To Gateway Tunnel with Static IP Addresses Outside Site A 209.165.200.226/24 RV016 router Inside 192.168.1.1/24 Internet Outside 209.165.200.236/24 RV042 router Inside 192.168.2.1/24 Site B Printer Personal computers Personal computers Printer 199468 • If both sites have dynamic IP addresses: A dynamic IP address is a publicly routable IP address that is issued for your use when you connect to your service provider's network. Dynamic IP addresses may change without warning. In this scenario, establishing a VPN tunnel is like trying to build a bridge between two unanchored boats. However, you can "anchor" Cisco Small Business RV0xx Series Routers Administration Guide 173

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199

Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers
Other Design Considerations
Cisco Small Business RV0xx Series Routers Administration Guide
173
D
Other Design Considerations
Before you configure your VPN tunnels, consider the following points about your
network setup.
WAN Setup
The WAN setup pertains to the network that your router connects to outside your
office. The first consideration is the type of IP addresses that you received for
your Internet service at your two sites. As when constructing a physical tunnel or
bridge, you need to know where the VPN tunnel is going.
If at least one site has a static IP address:
A VPN tunnel easily can be
established if at least one of the sites has a static IP address for the WAN
connection. A static IP address is a publicly routable Internet address that
does not change. In this scenario, establishing a VPN tunnel can be
compared to building a bridge between two docks (two sites with static IP
addresses), or even setting a gangplank between a dock and an
unanchored boat (one site with a static IP address and one with a dynamic
IP address).
Figure 3
Gateway To Gateway Tunnel with Static IP Addresses
If both sites have dynamic IP addresses:
A dynamic IP address is a
publicly routable IP address that is issued for your use when you connect to
your service provider’s network. Dynamic IP addresses may change
without warning. In this scenario, establishing a VPN tunnel is like trying to
build a bridge between two unanchored boats. However, you can “anchor”
199468
Site A
RV016
router
RV042
router
Site B
Inside
192.168.1.1/24
Outside
209.165.200.226/24
Outside
209.165.200.236/24
Inside
192.168.2.1/24
Personal
computers
Personal
computers
Printer
Printer
Internet