Cisco RV345 Administration Guide

Authentication method to be used in IKE negotiations in IKE-based tunnels.
•
Pre-shared Key: IKE peers authenticate each other by computing and sending a
keyed hash of data that includes the Pre-shared Key. If the receiving peer is able
to create the same hash independently using its Pre-shared key, it knows that both
peers must share the same secret, thus authenticating the other peer. Pre-shared
keys do not scale well because each IPSec peer must be configured with the
Pre-shared key of every other peer with which it establishes a session. Enter the
Pre-shared Key, and click Enable to enable the Minimum Pre-shared Key
Complexity.
•
Certificate: The digital certificate is a package that contains information such as
a certificate bearer's identity: name or IP address, the certificate's serial number,
the certificate's expiration date, and a copy of the certificate bearer's public key.
The standard digital certificate format is defined in the X.509 specification. X.509
version 3 defines the data structure for certificates. Select the certificate from the
drop-down list.
IKE Authentication Method
Click Group Name and select the user group (admin or guest).Click Add or Delete
to modify the User Group.
User Group
Select the mode from the options.
• Client — Client request for IP address and server supplies the IP addresses from
the configured address range. Select Client and enter the start and end IP addresses
for client’s LAN.
• Network Extension Mode (NEM) — Clients propose their subnet for which VPN
services need to be applied on traffic between LAN behind server and subnet
proposed by client.
Mode
Start IP — Enter the start IP address for the pool range.End IP - Enter the end IP
address for the pool range.
Pool Range for Client LAN
For Mode Configuration
Enter the IP address of the primary DNS server.Primary DNS
Enter the IP address of the secondary DNS server.Secondary DNS
Enter the IP address of the primary WINS.Primary Windows Internet
Name Service (WINS)
Server
Enter the IP address of the secondary WINS.Secondary WINS Server
Enter the name of the default domain to be used in remote network.Default Domain
RV345/345P Administration Guide
86
VPN
Client to Site

Cisco RV345 Specifications

General

Brand	Cisco
Model	RV345
Category	Network Router
Language	English