Cisco RV320 User Manual

VPN
Gateway to Gateway
Cisco RV320/RV325 Administration Guide 89
8
Advanced Settings for IKE with Preshared Key and IKE with
Certificate
For most users, the basic settings should suffice; advanced users can click
Advanced to display the advanced settings. If you change the Advanced settings
on one router, also enter the settings on the other router.
• Aggressive Mode—Two modes of IKE SA negotiation are possible: Main
Mode and Aggressive Mode. If network security is preferred, Main Mode is
recommended. If network speed is preferred, Aggressive Mode is
recommended. Check this box to enable Aggressive Mode, or uncheck the
box to use Main Mode.
If the Remote Security Gateway Type is one of the Dynamic IP types,
Aggressive Mode is required. The box is checked automatically, and this
setting cannot be changed.
• Compress (Support IP Payload Compression Protocol (IP Comp))—A
protocol that reduces the size of IP datagrams. Check the box to enable the
router to propose compression when it initiates a connection. If the
responder rejects this proposal, then the router does not implement
compression. When the router is the responder, it accepts compression,
even if compression is not enabled. If you enable this feature for this router,
also enable it on the router at the other end of the tunnel.
• Keep-Alive—Attempts to reestablish the VPN connection if it is dropped.
• AH Hash Algorithm—Authentication Header (AH) protocol describes the
packet format and default standards for packet structure. When AH is the
security protocol, protection is extended forward into the IP header to verify
the integrity of the entire packet. Check the box to use this feature and
select an authentication method: MD5 or SHA1. MD5 produces a 128-bit
digest to authenticate packet data. SHA1 produces a 160-bit digest to
authenticate packet data. Both sides of the tunnel should use the same
algorithm.
• NetBIOS Broadcast—Broadcast messages used for name resolution in
Windows networking to identify resources such as computers, printers, and
file servers. These messages are used by some software applications and
Windows features such as Network Neighborhood. LAN broadcast traffic is
typically not forwarded over a VPN tunnel. However, you can check this box
to allow NetBIOS broadcasts from one end of the tunnel to be rebroadcast
to the other end.

Cisco RV320 Specifications

General

Ethernet LAN	Yes
Cabling technology	10/100/1000Base-T(X)
Networking standards	IEEE 802.3, IEEE 802.3u
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Ethernet interface type	Gigabit Ethernet
USB version	2.0
USB ports quantity	2
Ethernet LAN (RJ-45) ports	6
Gigabit Ethernet (copper) ports quantity	4
Routing protocols	RIP-1, RIP-2
Supported network protocols	IPv4, IPv6, Static IP, PPPoE, PPTP, DNS, DynDNS
VPN support	IPsec, L2TP, DPD, DNS
Firewall security	Port Address Translation (PAT) firewall, Stateful packet inspection (SPI) firewall, Network address translation (NAT) firewall
Security algorithms	128-bit AES, 192-bit AES, 256-bit AES, 3DES, DES, HTTPS, MD5, SHA-1, SSL/TLS
VPN tunnels quantity	25
Authentication method	SHA-1, MD5
MAC address filtering	-
Certification	FCC, CE, UL, cUL, CB, CCC, BSMI, KC, Anatel
Storage temperature (T-T)	0 - 70 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 90 %
Operating relative humidity (H-H)	10 - 85 %
Product color	Black
Rack mounting	No
LED indicators	Activity, LAN, Link, Power, USB, WAN
Input current	1.5 A
Output voltage	12 V

Weight and Dimensions

Depth	44 mm
Width	206 mm
Height	132 mm
Weight	- g