Cisco Systems RV042G, RV016 manual

VPN	9
VPN
Setting Up a Gateway to Gateway (Site to Site) VPN

Setting Up a Gateway to Gateway (Site to Site) VPN

Use the VPN > Gateway to Gateway page to create a new tunnel between two VPN devices, such as a Cisco RV082 router at your office and a Cisco RV042 router at a remote office.

Outside Site A 209.165.200.226/24

RV016 router

Inside 192.168.1.1/24

Printer

Personal

computers

Internet

			Outside							Site B
			Outside
			209.165.200.236/24
					RV042
					RV042
					router
				Inside
				192.168.2.1/24

						Printer

	Personal					199468
	computers					199468
	computers

You will enter the settings for the local group and the remote group, and you will enter the corresponding settings (reversing “local” and “remote”) when configuring the other router. A successful connection requires that at least one router is identifiable by a static IP address or a Dynamic DNS hostname. Alternatively, if one router has only a dynamic IP address, you can use any email address as authentication to establish the connection.

NOTE The two ends of the tunnel cannot be on the same subnet. For example, if the Site A LAN uses the 192.168.1.x subnet, Site B could use 192.168.2.x.

You will enter corresponding settings (reversing “local” and “remote”) when configuring the two routers. When you configure this router (Router A), enter its settings in the Local Group Setup section, and enter the settings for the other router (Router B) in the Remote Group Setup section. When you configure the other router (Router B), enter its settings in the Local Group Setup section, and enter the Router A settings in the Remote Group Setup section. For more details and examples, see Appendix D, “Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers.”.

To open this page: Click VPN > Gateway to Gateway in the navigation tree. Alternatively, you can click the Add Tunnel button on the VPN > Summary page, in the Tunnel Status section. Then choose Gateway to Gateway.

Cisco Small Business RV0xx Series Routers Administration Guide

130

Image 130

Cisco Systems RV042G, RV016 manual Setting Up a Gateway to Gateway Site to Site VPN

Contents

Administration Guide Cisco Systems, Inc. All rights reserved 78-19576-01 B0 Placement Tips Viewing System Summary Information SetupOther Hardware Features Introduction Port Management DhcpSystem Management Firewall VPN 122 Logging System Statistics 153 Appendix E IPSec NAT Traversal 183 Appendix G Specifications 189Appendix H Where to Go From Here 199 Appendix F Bandwidth Management 186 Ports RV0xx Series Router FeaturesModel RV042 and RV042G RV082 RV016 RV042 and RV042G Status Lights IntroductionRV042 and RV042G Ports RV082 Ports and Status Lights Ports Port Description Status Lights Light Description Other Hardware Features Feature Description Desktop Placement Default SettingsPlacement Tips Parameter Default Value Wall Mounting RV042 and RV042G 58 mm apart RV082 and RV016 94 mm apart Rack Mounting RV082 or RV016 RV082 Internet Port Connecting the EquipmentRV042 and RV042G Internet Port RV016 Internet 1 Port Getting Started with the Configuration Troubleshooting Tips Features of the User Interface Navigation Pop-Up Windows Setup WizardsSaving the Settings Help Viewing System Summary Information Cisco ProtectLink Web System InformationViewing System Summary Information Port Statistics ConfigurationPort Information Window Viewing System Summary Information WAN Status WAN information Log Setting Status Firewall Setting StatusVPN Setting Status DMZ information Setup Setup Setting Up the NetworkHost Name and Domain Name LAN Setting device IP address and subnets IP ModeChanging the device IP address Enabling multiple subnets IPv4 only Setup WAN Setting Internet connection DMZ Setting Setup Editing a WAN Connection Page Page Page Editing a DMZ Connection IPv4 IPv6Page Changing the Administrator Username and Password Setup Setting the System Time To open this page Click Setup Time in the navigation tree Setting Up a DMZ Host Port Range Forwarding Setting Up Port Forwarding and Port TriggeringPort Range Forwarding, Port Triggering, Setup Adding a service Port Triggering Setting Up Universal Plug and Play UPnP To open this page Click Setup UPnP in the navigation tree Setup Adding a service Setting Up One-to-One NAT Setup Cloning a MAC Address for the Router Editing the MAC Address Clone Settings Assigning a Dynamic DNS Host Name to a WAN Interface Editing the Dynamic DNS Setup Setting Up Advanced Routing Configuring Dynamic Routing, Configuring Static Routing, Dynamic Routing for IPv4 Configuring Dynamic RoutingData None, RIPv1, RIPv2 Broadcast, or RIPv2 Multicast Dynamic Routing for IPv6 Configuring Static RoutingPrefix Length Pv6 only Enter the prefix length Setting Up Advanced Routing IPv6 Transition To Go From Here Setting Up the Dhcp Server or Dhcp Relay Dhcp Dhcp DNS used for Dhcp Server only Dynamic IP used for Dhcp Server onlyWins used for Dhcp Server, IPv4 Only About Static IP Addresses for IPv4 Only Assigning static IP addresses by adding devices from a list Assigning static IP addresses by entering devices manually Using the Static IP List to Block Devices DNS Local Database Dhcp Server Viewing the Dhcp Status InformationClient Table Router Advertisement IPv6 Dhcp Setting Up Dual WAN and Multi-WAN Connections System Management Mode Cisco RV042, RV042G, and RV082 System Management Mode Cisco RV016 Interface Setting Network Service Detection Editing the Dual WAN and Multi-WAN SettingsMax Bandwidth Provided by ISP Page Adding a service Page Bandwidth Management Type Managing the Bandwidth SettingsMax Bandwidth Provided by ISP Appendix F, Bandwidth Management Managing the Bandwidth Settings Adding a service Setting Up Snmp Enabling Device Discovery with Bonjour Enabling Device Discovery with Bonjour To open this page Click System Management Diagnostic Using Built-In Diagnostic ToolsDNS Name Lookup Ping Restoring the Factory Default Settings Upgrading the Firmware Restarting the Router Backing Up and Restoring the Settings Restoring the Settings from a Configuration File Backing Up Configuration Files and Mirror Files Copying a Startup File or Mirror File Backing Up and Restoring the Settings Configuring the Port Settings Port Management Port Management Viewing the Status Information for a Port Summary Statistics Configuring the General Firewall Settings Firewall Firewall Restrict Web Features Firewall Configuring Firewall Access Rules About Access Rules Managing Access Rules To delete all custom rules Click Restore to Default Rules Configuring Access Rules Services IPv4 and IPv6 Schedule IPv4 Only Adding a service Page Using Content Filters to Control Internet Access Forbidden Domains, Website Blocking by Keywords, Schedule, Forbidden Domains Website Blocking by Keywords Schedule Cisco ProtectLink Web Getting Started with Cisco ProtectLink Web Cisco ProtectLink Web Specifying the Global Settings for Approved URLs and Clients Approved URLs and Approved Clients Approved URL ConfigurationApproved Clients Configuration To delete an entry Click the Delete icon Enabling Web Protection for URL Filtering Web Protection URL Filtering Business Hour Setting Web Reputation Updating the ProtectLink License URL Overflow Control License License Information VPN Introduction to VPNs Site to Site VPN Gateway To Gateway Remote Access Client To GatewayConfiguration tasks Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers QuickVPN, page125 and Remote Access with PPTP, page125 Router Remote Access with Cisco QuickVPN Remote Access with Pptp Viewing the Summary Information for VPN To open this page Click VPN Summary in the navigation tree Tunnel Status Up a Remote Access Tunnel for VPN Clients Client To Gateway, GroupVPN Status VPN Clients Status Setting Up a Gateway to Gateway Site to Site VPN Local Group Setup and Remote Group Setup Add a New Tunnel VPN IPSec Setup Preshared Key, page 135 and Advanced settings for IKE with Required fields for Manual mode Required fields for IKE with Preshared Key Advanced settings for IKE with Preshared Key VPN VPN RV0xx Local Group Setup Remote Client Setup for Single User Tunnel Type VPN IPSec Setup Required fields for IKE with Preshared Key Advanced settings for IKE with Preshared Key VPN Managing VPN Users and Certificates Users, Certificate Management, page148 Users Certificate Management Setting Up VPN Passthrough Setting Up Pptp Server IP Address Range Pptp Server Connection List Setting Up the System Log and Alerts Syslog section, Mail section, Mail section Log Setting, Buttons,Syslog section Logging System Statistics Log Setting Buttons Viewing the System Log Logging System Statistics Basic Setup, Access Rule Setup, page160 Wizard Access Rule Setup Basic SetupWizard Dtim Delivery Traffic Term DefinitionBeacon interval Indication Message Glossary Term Definition Request to Send RTS Radvd RouterAdvertisement Daemon Threshold Static routing RIPng RIP next generationVlan Virtual LAN Firmware upgrade has failed Your computer cannot connect to the Internet Troubleshooting Router does not have a coaxial port for the cable connection Cisco QuickVPN for Windows Introduction Using the Cisco QuickVPN Software Cisco QuickVPN Client Installation and ConfigurationCisco QuickVPN for Windows Using the Cisco QuickVPN Software Topology Options VPN Hub and Spoke Topology Hub and Spoke VPN Mesh Topology Mesh WAN Setup Other Design Considerations LAN Setup Gateway To Gateway Tunnel with a Dynamic IP Address Configuring a VPN Tunnel on a Cisco RV0xx Series Router Example Sites with Static WAN IP Addresses Settings on the Site a RouterField Value Encryption Phase MD5 Field Values Encryption Example Site with a Dynamic WAN IP Address Authentication Field Value IPSec Setup Keying Mode IKE with Preshared Key Phase IPSec NAT Traversal Overview Configuration of Router a IPSec NAT Traversal Configuration of Router B Click the System Management tab Creation of New ServicesClick Add to List Creation of New Bandwidth Management Rules Bandwidth Management Click Save Performance SpecificationsRV042 Security Network SpecificationsQoS Management RV042GEnvironmental Operating System Linux VPN Cisco RV082 IKE Cisco RV016 Dhcp DNS NAT DMZ Built-in Pptp server supporting 10 Pptp clients Product Documentation SupportCisco Small Business