Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems RV016, RV042G manual Remote Access with Cisco QuickVPN, Remote Access with PPTP

Models: RV016 RV042G

1 199

Download 199 pages 48.22 Kb

Page 125

VPN	9
VPN
Introduction to VPNs

Remote Access with Cisco QuickVPN

Users with Cisco QuickVPN software can establish a VPN tunnel to your network. Use this option if you want to simplify the VPN setup process. You do not have to configure VPN policies. Remote users can connect securely with the Cisco QuickVPN client and an Internet connection. For information about the benefits and limitations, see “Easy and Secure Access with Cisco QuickVPN” at http:// www.cisco.com/en/US/docs/routers/csbr/app_notes/QuickVPN_an_OL- 25680.pdf

Configuration Tasks:

1.Use the VPN Client Access page to add the usernames and passwords.

2.Optionally, use the VPN > VPN Client Access page to generate certificates to install on the users computers. For more information, see Certificate Management, page 148.

3.Install Cisco QuickVPN on the users’ computers. To get the software, go to www.cisco.com/go/software. Enter the router’s model number in the search box and then click Find. In the list of links, click Quick Virtual Private Network (QVPN) Utility. After downloading the software on the computer, double-click Setup.exe to start the installation.

4.If you generated certificates, copy the certificate to the directory where Cisco QuickVPN is installed, typically C:\Program Files\Cisco Small Business\QuickVPN client.

Remote Access with PPTP

A remote user with a Microsoft computer can establish a VPN tunnel by connecting to a PPTP server at your site. Use this option to simplify VPN setup. You do not have to configure VPN policies on the router, and there is no need to install a VPN client on the users’ computers. However, be aware that security vulnerabilities have been found in this protocol.

Configuration Tasks:

1.Use the VPN > PPTP Server page to enable PPTP server, set the IP address range for clients, and enter the usernames and passwords.

2.Distribute the user names and passwords to the users.

Cisco Small Business RV0xx Series Routers Administration Guide

125

Image 125

Cisco Systems RV016, RV042G manual Remote Access with Cisco QuickVPN, Remote Access with PPTP

Contents

Cisco Small Business ADMINISTRATION GUIDERV0xx Series Routers RV042 Dual WAN VPN Router RV042G Gigabit Dual WAN VPN Router78-19576-01 B0 2011-2012 Cisco Systems, Inc. All rights reservedContents Chapter 3 SetupChapter 1 Introduction Chapter 2 Viewing System Summary InformationChapter 4 DHCP ContentsChapter 5 System Management Chapter 6 Port ManagementChapter 9 VPN Contents Introduction RV0xx Series Router FeaturesRV0xx Series Router Features, page Mounting Options, page Connecting the Equipment, page15Cisco Small Business RV0xx Series Routers Administration Guide RV0xx Series Router FeaturesIntroduction RV042 and RV042G PortsIntroduction PortsPort DescriptionIntroduction Status LightsLight DescriptionFeature Other Hardware FeaturesReset To restart the router or restoreDefault Settings Mounting OptionsPlacement Tips Desktop PlacementIntroduction Wall MountingSuggested Hardware for RV042 and RV042G Suggested Hardware for RV082 and RV016Introduction Cisco Small Business RV0xx Series Routers Administration GuideMounting Options Rack Mounting RV082 or RV016Introduction Connecting the EquipmentRV042 and RV042G Internet Port RV082 Internet PortIntroduction Getting Started with the ConfigurationIntroduction Troubleshooting TipsNavigation, page18 Pop-Up Windows, page19 Setup Wizards, page Features of the User InterfaceSaving the Settings, page19 Help, page19 Logout, page19 NavigationSaving the Settings Setup WizardsPop-Up Windows HelpConfiguration, page Port Statistics, page WAN Status, page Viewing System Summary InformationFirewall Setting Status, page VPN Setting Status, page Log Setting Status, pageViewing System Summary Information System InformationCisco ProtectLink Web Port Statistics ConfigurationViewing System Summary Information Port Information WindowThis window displays the following information Viewing System Summary InformationWAN information WAN StatusViewing System Summary Information VPN Setting Status Firewall Setting StatusLog Setting Status Viewing System Summary InformationSetting Up the Network, page DMZ Setting, page SetupChanging the Administrator Username and Password, page Setting the System Time, page Setting Up a DMZ Host, pageSetup Setting Up the NetworkLAN Setting device IP address and subnets, page WAN Setting Internet connection, page DMZ Setting, pageSetup LAN Setting device IP address and subnetsIP Mode Changing the device IP address, pageEnabling multiple subnets IPv4 only SetupSTEP 3 In the pop-up window, add or edit entries as needed SetupSetup WAN Setting Internet connectionSetup DMZ SettingCisco Small Business RV0xx Series Routers Administration Guide SetupSetting Up the Network Editing a WAN Connection with IPv6 Addressing Editing a WAN ConnectionEditing a WAN Connection with IPv4 Addressing Subnet Mask IPv4 The subnet mask specified by your ISP Page Page IPv4 IPv6 Editing a DMZ ConnectionCisco Small Business RV0xx Series Routers Administration Guide If you are using IPv6 addressing, enter the following informationPrefix Length Enter the prefix length. The default value is To open this page Click Setup Password in the navigation tree Changing the Administrator Username and PasswordSetup Includes at least 8 characters Is not the same as the username SetupTo open this page Click Setup Time in the navigation tree Setting the System TimeSetup To open this page Click Setup DMZ Host in the navigation tree Setting Up a DMZ HostSetup Setup Setting Up Port Forwarding and Port TriggeringPort Range Forwarding Port Range Forwarding, page Port Triggering, pageEnable Check the box to enable this port range forwarding entry SetupAdding a service SetupPort Triggering SetupTo open this page Click Setup UPnP in the navigation tree Setting Up Universal Plug and Play UPnPSetup Setup Adding a service SetupTo open this page Click Setup One-to-One NAT in the navigation pane Setting Up One-to-One NATSetup Setting Up One-to-One NAT SetupCloning a MAC Address for the Router Cloning a MAC Address for the RouterSetup Editing the MAC Address Clone Settings To open this page Click Setup Dynamic DNS in the navigation tree Assigning a Dynamic DNS Host Name to a WAN InterfaceEditing the Dynamic DNS Setup Configuring Dynamic Routing, page Configuring Static Routing, page Setting Up Advanced Routingdata None, RIPv1, RIPv2 - Broadcast, or RIPv2 - Multicast Configuring Dynamic RoutingDynamic Routing for IPv4 Prefix Length Pv6 only Enter the prefix length Configuring Static RoutingDynamic Routing for IPv6 Cisco Small Business RV0xx Series Routers Administration Guide Setting Up Advanced RoutingTo open this page Click Setup IPv6 Transition in the navigation tree IPv6 Transitionto Go From Here.” DHCP Setting Up the DHCP Server or DHCP RelaySetting Up the DHCP Server or DHCP Relay, page Viewing the DHCP Status Information, pageEnabling DHCP Server and DHCP Relay To open this page Click DHCP DHCP Setup in the navigation treeDHCP Dynamic IP used for DHCP Server only DHCPDNS used for DHCP Server only WINS used for DHCP Server, IPv4 OnlyDHCP Using the Static IP List to Block Devices, pageAbout Static IP Addresses for IPv4 Only Assigning static IP addresses by adding devices from a list, pageAssigning static IP addresses by entering devices manually DHCPDHCP Using the Static IP List to Block DevicesDNS Local Database DHCPDHCP Server Viewing the DHCP Status InformationClient Table DHCPRouter Advertisement IPv6 Router Advertisement IPv6DHCP RA Flags Choose whether or not hosts can use DHCPv6 to obtain addresses and other information. The options are described below DHCPSystem Management Setting Up Dual WAN and Multi-WAN ConnectionsSetting Up Dual WAN and Multi-WAN Connections, page Managing the Bandwidth Settings, page Setting Up SNMP, pageSystem Management Mode - Cisco RV042, RV042G, and RV082System Management Mode - Cisco RV016System Management Interface SettingMax Bandwidth Provided by ISP Editing the Dual WAN and Multi-WAN SettingsNetwork Service Detection Protocol Binding for Cisco RV016 only, when Load Balancer is selected Adding a service Cisco Small Business RV0xx Series Routers Administration Guide Max Bandwidth Provided by ISP Managing the Bandwidth SettingsBandwidth Management Type Appendix F, “Bandwidth Management.”Priority for Priority management only Choose the priority for this Adding a service Setting Up SNMP Setting Up SNMPEnabling Device Discovery with Bonjour Enabling Device Discovery with Bonjour Cisco Small Business RV0xx Series Routers Administration GuideDNS Name Lookup Using Built-In Diagnostic ToolsPing Restoring the Factory Default Settings Restoring the Factory Default SettingsUpgrading the Firmware Restarting the Router Restoring the Settings from a Configuration File Backing Up and Restoring the SettingsRestoring the Settings from a Configuration File, page Backing Up Configuration Files and Mirror Files, pageSTEP 3 Close the Download Complete window Backing Up Configuration Files and Mirror FilesCopying a Startup File or Mirror File To copy a file, click the button Port Management Configuring the Port SettingsConfiguring the Port Settings, page Viewing the Status Information for a Port, pagePort Management Port Management Viewing the Status Information for a PortSummary Port Management StatisticsFirewall Configuring the General Firewall SettingsConfiguring the General Firewall Settings, page Managing Access Rules, page Configuring Firewall Access Rules, pageFirewall Configuring the General Firewall SettingsFirewall Restrict Web FeaturesFirewall Don’t block Java/ActiveX/Cookies/Proxy to Trusted Domains If you blocked any of the web features, you can check this box to allow these features for the domains that you enter on the trusted list. This area of the page is available only if you checked one of the other boxes to disable a web feature. If you leave the box unchecked, then the selected web features are blocked for all websitesAbout Access Rules Configuring Firewall Access RulesAbout Access Rules, page103 Managing Access Rules, page Configuring Access Rules, pageFirewall Managing Access RulesFirewall To delete all custom rules Click Restore to Default RulesServices IPv4 and IPv6 Configuring Access RulesSchedule IPv4 Only Adding a service Cisco Small Business RV0xx Series Routers Administration Guide Forbidden Domains, page Website Blocking by Keywords, page Using Content Filters to Control Internet AccessSchedule, page Web.”Website Blocking by Keywords Using Content Filters to Control Internet AccessForbidden Domains Schedule Getting Started with Cisco ProtectLink Web Cisco ProtectLink WebSpecifying the Global Settings for Approved URLs and Clients, page Getting Started with Cisco ProtectLink Web, pageChoose the appropriate option Cisco ProtectLink WebCisco ProtectLink Web Specifying the Global Settings for Approved URLs and ClientsSpecifying the Global Settings for Approved URLs and Clients Approved Clients Configuration Approved URL ConfigurationApproved URLs and Approved Clients Cisco ProtectLink WebCisco ProtectLink Web Enabling Web Protection for URL FilteringWeb Protection Cisco ProtectLink Web URL FilteringCisco ProtectLink Web Business Hour SettingWeb Reputation Cisco ProtectLink Web Updating the ProtectLink LicenseURL Overflow Control Cisco ProtectLink Web LicenseLicense Information Setting Up a Gateway to Gateway Site to Site VPN, page Introduction to VPNsSetting Up VPN Passthrough, page Setting Up PPTP Server, page Remote Access Client To Gateway, pageConfiguration tasks Remote Access Client To GatewaySite to Site VPN Gateway To Gateway Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers.”QuickVPN, page125 and Remote Access with PPTP, page125 NOTE Consider two other remote access options Remote Access with CiscoRemote Access with PPTP Remote Access with Cisco QuickVPNTo open this page Click VPN Summary in the navigation tree Viewing the Summary Information for VPNSummary Tunnel Status GroupVPN Status Up a Remote Access Tunnel for VPN Clients Client To Gateway, pageVPN Clients Status Setting Up a Gateway to Gateway Site to Site VPN Setting Up a Gateway to Gateway Site to Site VPNAdd a New Tunnel Local Group Setup and Remote Group SetupIP + Domain Name FQDN Authentication Choose this option if this router has a static IP address and a registered domain name, such as MyServer.MyDomain.com. Also enter the Domain Name to use for authentication. The domain name can be used only for one tunnel connection IPSec Setup Required fields for Manual mode Preshared Key, page 135 and Advanced settings for IKE withPreshared Key, page Required fields for IKE with Preshared Key Phase 1 / Phase 2 Authentication Select a method of authenticationAdvanced settings for IKE with Preshared Key AH Hash Algorithm The AH Authentication Header protocol describes the packet format and default standards for packet structure. With the use of AH as the security protocol, protection is extended forward into the IP header to verify the integrity of the entire packet. Check the box to use this feature. Then select an authentication method MD5 or SHA1. MD5 produces a 128-bit digest to authenticate packet data. SHA1 produces a 160-bit digest to authenticate packet data. Both sides of the tunnel should use the same algorithm Page Setting Up a Remote Access Tunnel for VPN Clients Client To Gateway Setting Up a Remote Access Tunnel for VPN Clients Client To GatewayCisco Small Business RV0xx Series Routers Administration Guide RV0xxAdd a New Tunnel DNS hostname available from providers such as DynDNS.com. Enter a Domain Name to use for authentication. The domain name can be used only for one tunnel connection Remote Client Setup for a Group “Group VPN” Type Required fields for Manual mode Enter the settings for manual mode IPSec SetupRequired fields for IKE with Preshared Key Phase 1 / Phase 2 Authentication Select a method of authenticationAggressive Mode available for Tunnel, not Group VPN Two modes of Page Users, page Certificate Management, page148 Managing VPN Users and CertificatesTo open this page Click VPN VPN Client Access in the navigation tree Certificate Management UsersTo open this page Click VPN VPN Passthrough in the navigation tree Setting Up VPN PassthroughSetting Up PPTP Server Setting Up PPTP ServerTo open this page Click VPN PPTP Server in the navigation tree IP Address RangePPTP Server Connection List Logging System Statistics Setting Up the System Log and AlertsSetting Up the System Log and Alerts, page Viewing the System Log, pageSyslog section Log Setting, page Buttons, pageE-mail section Logging System StatisticsLogging System Statistics Log SettingLogging System Statistics ButtonsTo open this page click Log System Statistics in the navigation tree Viewing the System LogLogging System Statistics Received Bytes The number of bytes received through this interface Logging System StatisticsWizard on the System Summary page WizardBasic Setup, page Access Rule Setup, page160 Wizard Basic SetupAccess Rule Setup Definition GlossaryTerm Term GlossaryDefinition Fragmentation ThresholdTerm GlossaryDefinition RADVD RouterTerm GlossaryDefinition RIPng RIP next generationTroubleshooting The router does not have a coaxial port for the cable connection TroubleshootingThe DSL telephone line does not fit into the router’s Internet port Introduction Cisco QuickVPN for WindowsCisco QuickVPN Client Installation and Configuration, page Using the Cisco QuickVPN Software, pageCisco QuickVPN for Windows Cisco QuickVPN Client Installation and ConfigurationUsing the Cisco QuickVPN Software STEP 3 To save this profile, click Save Cisco QuickVPN for WindowsConfiguring a VPN Tunnel on a Cisco RV0xx Series Router, page Topology OptionsOverview, page Topology Options, page Other Design Considerations, pageFigure 1 Hub and Spoke VPN Hub and Spoke TopologyFigure 2 Mesh VPN Mesh TopologyFigure 3 Gateway To Gateway Tunnel with Static IP Addresses Other Design ConsiderationsFigure 4 Gateway To Gateway Tunnel with a Dynamic IP Address LAN SetupConfiguring a VPN Tunnel on a Cisco RV0xx Series Router Value Example Sites with Static WAN IP AddressesField Value FieldValue FieldField ValuesField Example Site with a Dynamic WAN IP AddressValues FieldValue FieldValue FieldField ValuesValues FieldOverview IPSec NAT TraversalIPSec NAT Traversal Configuration of Router AIPSec NAT Traversal Configuration of Router BBandwidth Management Creation of New ServicesCreation of New Services, page STEP 4 On the Bandwidth Management page, click Service ManagementBandwidth Management Creation of New Bandwidth Management RulesSTEP 5 Click Save Bandwidth ManagementRV042 SpecificationsNetwork Specifications5.12 x 1.52 x 7.87 in. W x H x D 130 x 38.5 x 200 mm RV042GSpecifications Performance SpecificationsSecurity NetworkEnvironmental SpecificationsManagement Cisco RV082 Cisco RV082Specifications Management SpecificationsCisco RV016 Cisco RV016Specifications Network SpecificationsSecurity Environmental SpecificationsManagement Support Where to Go From HereProduct Documentation Cisco Small Business