Linksys RV0041 manual VPN tab Gateway to Gateway Remote Group Setup

Page 49

10/100/1000 4-Port VPN Router

Dynamic IP + E-mail Addr.(USER FQDN) Authentication: This setting uses a dynamic IP address, which is constantly changing. In addition, the tunnel is confirmed through use of an email address. Only one email address can be used for one tunnel and may not be applied to another tunnel.These settings must match the Remote Group Setup on the other end of the tunnel.

Local Security Group Type. Select the local LAN user(s) that can use this VPN tunnel. Local Security Group Type may be a single IP address, a Subnet or an IP address range. The Local Secure Group must match the Remote Secure Group on the other end of the tunnel. Selecting IP Address allows only one computer, with the specific IP Address, access to the tunnel. (The default IP is 192.168.1.0.) If you select Subnet, all computers on the local subnet can access the tunnel. The default IP is 192.168.1.0, and default Subnet Mask is 255.255.255.192. If you select IP Range, you can specify a range of IP Addresses to access the tunnel. The default IP Range is 192.168.1.0~254.

Remote Group Setup:

The Remote Group Setup section configures the remote settings for the VPN tunnel you are creating. Remember, all settings for the Remote Group must be exactly the same as those for the Local Group.

Remote Security Gateway Type: There are five types. They are IP Only, IP + Domain Name (FQDN) Authentication, IP + E-mail Addr. (USER FQDN) Authentication, Dynamic IP + Domain Name (FQDN) Authentication, Dynamic IP + E-mail Addr. (USER FQDN) Authentication. The type of Remote Security Gateway Type must match the Local Security Gateway Type of VPN devices in the other end of tunnel. The first three options are easier to use because the IP Addresses are static and do not change.

IP Only: If you select IP Only, only the specific IP Address that you enter will be able to access the tunnel. It's the IP Address of the remote VPN Router or device which you wish to communicate. The remote VPN device can be another VPN Router or a VPN Server. If you know the static IP address of remote VPN device, select IP address from drop-down menu. If you don't know the static IP address of remote VPN device, but the domain name of remote VPN device is known, you can select IP by DNS Resolved, and enter the real domain name on the Internet. RV0041 will get the IP address of remote VPN device by DNS Resolved, and IP address of remote VPN device will be displayed on VPN Status of Summary page.

IP + Domain Name (FQDN) Authentication: This selection affords a greater amount of security because each side of the tunnel must use the same IP Address as well as the same domain name. Only one domain name can be used for one tunnel and may not be applied to another tunnel.These settings must match the Remote Group Setup on the other end of the tunnel. If you know the static IP address of remote VPN device, select IP address from drop-down menu. If you don't know the static IP address of remote VPN device, but the domain name of remote VPN device is known, you can select IP by DNS Resolved, and enter the real domain name on the Internet. RV0041 will get the IP address of remote VPN device by DNS Resolved, and IP address of remote VPN device will be displayed on VPN Status of Summary page.

Chapter 5: Setting Up and Configuring the Router

Figure 5-40: VPN tab - Gateway to Gateway

Remote Group Setup

41

VPN Tab - Gateway to Gateway

Image 49
Contents 10/100/1000 4-Port Word definition Copyright and TrademarksTable of Contents Appendix C Physical Setup of the Router Appendix a TroubleshootingAppendix D Battery Replacement Setting up the Router10/100/1000 4-Port VPN Router Computer-to-VPN Router VPN VPN Router-to-VPN Router VPN24 System Management Tab DNS Name Lookup 54 Basic Setup Wizard Host and Domain Name Welcome IntroductionIP a protocol used to send data over a network Adapter a device that adds network functionality to your PC What’s in this Guide?Introduction What’s in this Guide? An Introduction to LANs Networking BasicsUse of IP Addresses MAC Address Spoofing Why do I need a VPN?There are two basic ways to create a VPN connection What is a VPN?VPN Router-to-VPN Router VPN VPN Router to VPN RouterSFP Getting to Know the RouterButton on your PC to reboot it Reset Button Reset button can be used in one of two waysForwarding or a new password Proceed to Connecting the RouterOverview Connecting the RouterVPN Router Connection Instructions Setting Up and Configuring the RouterSetup Tab Setting Up and Configuring the RouterSystem Summary Tab System Management Tab Dhcp TabPort Management Tab VPN Tab Firewall TabLog Tab Wizard TabConfiguration How to Access the Web-based UtilitySystem Summary Tab System InformationFirewall Setting Status Network Setting StatusPort Statistics Log Setting Status VPN Setting StatusWAN Interface Setting LAN SettingNetwork WAN Connection TypePPPoE Point-to-Point Protocol over Ethernet most DSL users Static IPPptp Point-to-Point Tunneling Protocol Setup Tab Time Setup Tab PasswordTime Setup Tab Forwarding Setup Tab DMZ HostPort Range Forwarding Select the Service from the pull-down menu, shown in FigurePort Triggering Setup Tab One-to-One NAT Setup Tab UPnPSetup Tab Ddns Setup Tab MAC CloneDynamic Routing Setup Tab Advanced RoutingEnter the following data to create a static route entry Static RoutingSetup Dhcp Tab SetupDynamic IP Static IPSystem Management Tab Snmp Dhcp Tab StatusDNS Name Lookup System Management Tab DiagnosticPing Lookup tool may be used to find the IP addressSystem Management Tab Firmware Upgrade System Management Tab Factory DefaultFirmware Upgrade Firmware DownloadImport Configuration File System Management Tab Setting BackupExport Configuration File System Management Tab RestartBasic Per Port Config Port Management Tab Port Setup32 Port Management Tab Port Status Port Management Tab Port Status33 Firewall Tab General Firewall Tab General34 Firewall Tab Access Rules Firewall Tab Access RulesServices Add a New Access RuleScheduling Editing an Access Rule Firewall Tab Content FilterForbidden Domains Scheduling Summary VPN Tab Summary Tunnel Status 37 VPN Tab Summary Detail GroupVPN StatusVPN Tab Gateway to Gateway Local Group Setup40 VPN tab Gateway to Gateway Remote Group Setup Remote Group SetupManual IPSec SetupIKE with Preshared Key automatic 10/100/1000 4-Port VPN Router 42 VPN tab Gateway to Gateway Advanced AdvancedVPN Tab Client to Gateway With Tunnel Enabled45 VPN tab Client to Gateway Remote Group Setup With Group VPN enabled 46 VPN tab Client to Gateway IPSec Setup IKE with Preshared Key automatic 47 VPN tab Client to Gateway Advanced Tunnel mode, it will also be limited as Aggressive ModeCompress Support IP Payload compression Protocol IP Comp VPN Tab VPN Pass ThroughLog Tab System Log Log SettingSyslog Mail51 Log tab System Statistics Log Tab System StatisticsWizard Tab Basic Setup55 Basic Setup Wizard Selecting WAN Connection Types 57 Access Rule Wizard What is Access Rules Access Rule Setup59 Access Rule Wizard Select the Service 61 Access Rule Wizard Select the Destination Logout Tab Support TabOn Line Manual Linksys Web SiteCommon Problems and Solutions Appendix a TroubleshootingFor Windows 98 and Millennium Need to set a static IP address on a PCFor Windows XP For WindowsFor Windows 98 and Millennium 10/100/1000 4-Port VPN Router Need to set up a server behind my Router Am not able to access the Router’s Web-based Utility SetupWeb server 80 to Both 192.168.1.100 FTP server 21 to Application Start and End Protocol IP Address Enable500 to Application Start and End Protocol IP Address EnabledCan’t get the Internet game, server, or application to work Click the DMZ Host tabNeed to upgrade the firmware To start over, I need to set the Router to factory defaultFor Microsoft Internet Explorer 5.0 or higher For Netscape 4.7 or higherMy DSL service’s PPPoE is always disconnecting Firmware upgrade failedNeed to use port triggering Where is the Router installed on the network? Frequently Asked QuestionsRouter will support up to 253 IP addresses Is IPSec Passthrough supported by the Router?How can I block corrupted FTP downloads? Router allows Pptp packets to pass through What is DMZ Hosting?Is the Router cross-platform compatible? Which modems are compatible with the Router? How many ports can be simultaneously forwarded?How can I check whether I have static or Dhcp IP addresses? Ask your ISP to find outWindows 2000 or XP Instructions Windows 98 or Me InstructionsFigure B-3 MAC Address/Physical Address For the Router’s Web-based UtilitySetting up the Router Appendix C Physical Setup of the RouterPlacement of the Router Rack-Mounting the Router10/100/1000 4-Port VPN Router Figure C-3 Wall-Mounting the Router Wall-Mounting the RouterFigure C-4 Wall-Mounting Hardware Replacing a Lithium Battery Appendix D Battery ReplacementThis section instructs the user on battery replacement Appendix E Upgrading Firmware Figure E-1 Upgrade FirmwareShared Resources Appendix F Windows HelpNetwork Neighborhood/My Network Places Appendix G Glossary 10/100/1000 4-Port VPN Router 10/100/1000 4-Port VPN Router 10/100/1000 4-Port VPN Router Standards Ieee 802.3, 802.3u Ports Appendix H SpecificationsSFP Port 10/100/100 Gigabit Ports, 1 10/100 RJ-45 Internet PortLimited Warranty Appendix I Warranty InformationFCC Statement Appendix J Regulatory InformationNeed to contact Linksys? Appendix K Contact InformationInformation section in this Guide Linksys