VPN
Setting Up a Gateway to Gateway (Site to Site) VPN
Cisco Small Business RV0xx Series Routers Administration Guide 133
9
- Dynamic IP + E-mail Addr.(USER FQDN) Authentication: Choose this
option if this router has a dynamic IP address and does not have a
Dynamic DNS hostname. Enter any Email Address to use for
authentication.
If both routers have dynamic IP addresses (as with PPPoE connections),
do not choose Dynamic IP + Email Addr. for both gateways. For the
remote gateway, choose IP Address and IP Address by DNS Resolved.
• Local/Remote Security Group Type: Specify the LAN resources that can
use this tunnel. The Local Security Group is for this router’s LAN resources;
the Remote Security Group is for the other router’s LAN resources.
- IP Address: Choose this option to specify one device that can use this
tunnel. Then enter the IP address of the device.
- Subnet: Choose this option (the default option) to allow all devices on a
subnet to use the VPN tunnel. Then enter the subnetwork IP address and
mask.
- IP Range: Choose this option to specify a range of devices that can use
the VPN tunnel. Then identify the range of IP addresses by entering the
first address in the Begin IP field and the final address in the End IP
field.
IPSec Setup
Enter the Internet Protocol Security settings for this tunnel.
IMPORTANT: In order for any encryption to occur, the two ends of a VPN tunnel
must agree on the methods of encryption, decryption, and authentication. Enter
exactly the same settings on both routers.
• Keying Mode: Choose one of the following key management methods:
- Manual: Choose this option if you want to generate the key yourself and
you do not want to enable key negotiation. Manual key management is
used in small static environments or for troubleshooting purposes. Enter
the required settings. For information, see Required fields for Manual
mode, page 134.
- IKE with Preshared Key: Choose this option to use the Internet Key
Exchange protocol to set up a Security Association (SA) for your tunnel.
IKE uses a preshared key to authenticate the remote IKE peer. This
setting is recommended and is selected by default. Enter the required
settings. For more information, see Required fields for IKE with
To Next Page
Loading...
Need help?
General
