Cisco Systems RV016, RV042G manual IPSec Setup

VPN	9
Setting Up a Gateway to Gateway (Site to Site) VPN

-Dynamic IP + E-mail Addr.(USER FQDN) Authentication: Choose this option if this router has a dynamic IP address and does not have a Dynamic DNS hostname. Enter any Email Address to use for authentication.

If both routers have dynamic IP addresses (as with PPPoE connections), do not choose Dynamic IP + Email Addr. for both gateways. For the remote gateway, choose IP Address and IP Address by DNS Resolved.

•Local/Remote Security Group Type: Specify the LAN resources that can use this tunnel. The Local Security Group is for this router’s LAN resources; the Remote Security Group is for the other router’s LAN resources.

-IP Address: Choose this option to specify one device that can use this tunnel. Then enter the IP address of the device.

-Subnet: Choose this option (the default option) to allow all devices on a subnet to use the VPN tunnel. Then enter the subnetwork IP address and mask.

-IP Range: Choose this option to specify a range of devices that can use the VPN tunnel. Then identify the range of IP addresses by entering the first address in the Begin IP field and the final address in the End IP field.

IPSec Setup

Enter the Internet Protocol Security settings for this tunnel.

IMPORTANT: In order for any encryption to occur, the two ends of a VPN tunnel must agree on the methods of encryption, decryption, and authentication. Enter exactly the same settings on both routers.

•Keying Mode: Choose one of the following key management methods:

-Manual: Choose this option if you want to generate the key yourself and you do not want to enable key negotiation. Manual key management is used in small static environments or for troubleshooting purposes. Enter the required settings. For information, see Required fields for Manual mode, page 134.

-IKE with Preshared Key: Choose this option to use the Internet Key Exchange protocol to set up a Security Association (SA) for your tunnel. IKE uses a preshared key to authenticate the remote IKE peer. This setting is recommended and is selected by default. Enter the required settings. For more information, see Required fields for IKE with

Cisco Small Business RV0xx Series Routers Administration Guide 133