Cisco Systems RVL200 IPSec VPN VPN Pass Through, SSL VPN Summary, SSL VPN Certificate Management

Page 48

Chapter 4

Advanced Configuration

the Router will disconnect the tunnel so the connection can be re-established. Specify the interval between HELLO/ACK messages (how often you want the messages to be sent). DPD is enabled by default, and the default interval is 10 seconds.

Click Save Settings to save your changes, or click Cancel Changes to undo them.

IPSec VPN > VPN Pass Through

The VPN Pass Through screen allows you to enable or disable passthrough for a variety of VPN methods.

IPSec VPN > VPN Pass Through

VPN Pass Through

IPSec Pass Through Internet Protocol Security (IPSec) is a suite of protocols used to implement secure exchange of packets at the IP layer. IPSec Pass Through is enabled by default to allow IPSec tunnels to pass through the Router.

PPTP Pass Through Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point Protocol (PPP) to be tunneled through an IP network. PPTP Pass Through is enabled by default.

L2TP Pass Through Layer 2 Tunneling Protocol is the method used to enable Point-to-Point sessions via the Internet on the Layer 2 level. L2TP Pass Through is enabled by default.

Click Save Settings to save your changes, or click Cancel Changes to undo them.

SSL VPN > Summary

This screen displays general information about the SSL VPN tunnels. The Router supports up to five SSL VPN tunnels.

4-Port SSL/IPSec VPN Router

SSL VPN > Summary

Summary

Tunnel Used The number of VPN tunnels being used is displayed.

Tunnel Available The number of available VPN tunnels is displayed.

Active Users

This section displays the active users using Virtual Passage and administrative users logged into the SSL VPN Portal.

User Name This is the name of the user.

IP Address This is the IP address of the user.

Login Time This is the time stamp indicating when the user logged in.

Status Displayed here is the user’s status, “Login” or “Connected.” The status line will also display “Login” for administrative users who logged in through the Portal and did not create an SSL tunnel by Virtual Passage.

Logout Any administrative user can click the Trash Can icon to terminate a user session and log the user out.

SSL VPN > Certificate Management

Manage the certificate used for securing communications between the Router and VPN clients.

SSL VPN > Certificate Management

40

Image 48

Contents Port SSL/IPSec VPN Router About This Guide About This GuideTable of Contents Ddns IPSec VPN Gateway to Gateway Appendix C Bandwidth Management Appendix D Active Directory ServerAppendix E User for the Active Directory Server Appendix I Gateway-to-Gateway VPN Tunnel Appendix J IPSec NAT TraversalAppendix L Multiple VLANs with Computers Appendix O Firmware Upgrade Appendix P Battery ReplacementAppendix Q Specifications Appendix M Multiple VLANs and SubnetsChapter Chapter IntroductionIntroduction Introduction to the RouterComputer using SSL VPN client software to VPN Router Chapter Product Overview Product OverviewFront Panel Back PanelChapter Installation InstallationPhysical Installation Cable Connection Chapter Advanced Configuration Advanced ConfigurationOverview Before You BeginHow to Access the Web-Based Utility Click Security Select Use SSL 2.0 and Use SSLSystem Summary System InformationNetwork Setting Status Firewall Setting StatusIPSec VPN Setting Status SSL VPN Setting StatusSetup Tab Network LAN SettingNetwork WAN Connection TypeStatic IP PPPoE Point-to-Point Protocol over EthernetSetup Password Pptp Point-to-Point Tunneling ProtocolSetup Time Setup DMZ HostPassword TimeSetup Tab Forwarding ForwardingPort Range Forwarding Port TriggeringSetup UPnP UPnPSetup One-to-One NAT Setup MAC CloneOne-to-One NAT Setup Ddns Setup Advanced RoutingMAC Clone Advanced RoutingDhcp Setup Static RoutingSetup Dynamic IPStatic IP Dhcp Status StatusDhcp Multiple VLANs Multiple VLANsSystem Management Diagnostic DiagnosticDhcp Inter-VLAN Routing Inter-VLAN RoutingFactory Default Firmware UpgradeSystem Management Restart Firmware DownloadImport Configuration File Export Configuration FileSystem Management Port Mirroring RestartPort Management Port Setup Basic Per Port ConfigPort Management Port Status Port StatusPort Management Port Setting Port SettingPort Management Create Vlan Create VlanQoS Bandwidth Management Vlan MembershipBandwidth Management Rate Control PriorityQoS QoS Setup QoS SetupQoS Mode Trust Mode Default CoSQoS Queue Settings QoS Dscp SettingsQueue Settings CoS SettingsDscp Settings Firewall GeneralGeneral Dscp to QueueFirewall Access Rules Access RulesRestrict WEB Features Add a New Access Rule ServicesFirewall Content Filter Content FilterScheduling IP/MAC GroupIPSec VPN Summary Forbidden DomainsWebsite Blocking by Keywords IP AddressLocal Group Setup IPSec VPN Gateway to GatewaySummary Add a New TunnelRemote Group Setup Local Security Group TypeRemote Security Gateway Type Remote Security Group Type IPSec Setup IKE with Preshared KeyAdvanced IPSec VPN VPN Pass Through SSL VPN SummarySSL VPN Certificate Management VPN Pass ThroughAuthentication Type SSL VPN User ManagementUser Management Edit GroupSSL VPN Virtual Passage Edit UserSnmp Global Parameters Virtual PassageGlobal Parameters Snmp Views Snmp Group ProfileViews Group ProfileSnmp Group Membership Snmp CommunitiesGroup Membership CommunitiesSnmp Notification Recipient Notification RecipientLog System Log System LogLog Setting Log System StatisticsAlert Log General LogBasic Setup WizardObtain an IP automatically PPPoEAccess Rule Setup Select the Service Support LogoutManual Linksys Web SiteLogout Appendix a Troubleshooting TroubleshootingAppendix a Appendix B Appendix B Virtual Passage SSL VPN ClientBefore You Begin Windows OS Make the SSL VPN Portal a Trusted Site Windows OS Click Trusted sitesInstallation of the Virtual Passage Client Windows OS Login for the SSL VPN Portal Windows OSWhen you right-click the icon, you have three options Click Continue AnywayInstallation of the Virtual Passage Client Mac OS Login for the SSL VPN Portal Mac OSWindows Vista Usage Removal of the Virtual Passage Client Mac OS Click ContinueInstallation of the Virtual Passage Client Linux OS Login for the SSL VPN Portal Linux OSBefore You Begin Linux OS Removal of the Virtual Passage Client Linux OS Creation of New Services Appendix CAppendix C Bandwidth Management Bandwidth ManagementClick Save Settings Creation of New Bandwidth Management RulesAppendix D Appendix D Active Directory ServerActive Directory Server Select Domain in a new forest, and then click Next Enter a domain name, and then click Next Active Directory Server Troubleshooting Appendix E Appendix E User for the Active Directory ServerUser for the Active Directory Server Appendix F Internet Authentication Service IAS Server Appendix FInternet Authentication Service IAS Server Select Unencrypted authentication. Click Apply Click Finish Welcome to the New Connection Request Policy Wizard Click Edit Profile Appendix G Click the User Management tabSelect HTTPSTCP/443~443 from the Service drop- down menu Appendix HAppendix H Deployment in an Existing Network LAN-to-LAN ConnectionWAN-to-LAN Connection Configuration of the RVL200 AppendixAppendix Gateway-to-Gateway VPN Tunnel Click the Gateway to Gateway tabConfiguration of the RV082 Configuration of PC 1 and PCRV082 RVL200 Dynamic IP B.B.B.B with Configuration when Both Gateways Use Dynamic IP Addresses Appendix Configuration of Scenario Configuration of Router aAppendix J Appendix J IPSec NAT TraversalConfiguration of Router B IPSec NAT TraversalOne-to-One NAT Rule on NAT 2 RV042 One-to-One NAT Rule on NAT 1 RV042Configuration of Router a Configuration of Multiple RVL200-to-RV042 ConfigurationAppendix K Appendix KRV042 #1 Configuration Click Save SettingClick the Advanced Routing tab RV042 #2 Configuration RVL200-to-SRW2048 Configuration Appendix LAppendix L Multiple VLANs with Computers Click the Port Management tabSRW2048 Configuration Select Enable VlanClick Save Settings Click the Vlan Membership tab RVL200 Configuration Appendix MAppendix M Multiple VLANsInter-VLAN Routing Option Click the Inter-VLAN Routing tabAccess of Multiple VLANs Appendix NAppendix N Over a SSL VPN TunnelAppendix O Firmware Upgrade Firmware UpgradeAppendix O Upgrade the Firmware Click the Firmware Upgrade tabAppendix P Battery Replacement Battery ReplacementReplace the Lithium Battery Appendix PAppendix Q Specifications SpecificationsAppendix Q Warranty Information Limited WarrantyAppendix R Appendix S Regulatory InformationDansk Danish Miljøinformation for kunder i EU Port SSL/IPSec VPN Router 106 Norsk Norwegian Miljøinformasjon for kunder i EU Port SSL/IPSec VPN Router 108 Appendix T Contact Information