Add a New Tunnel, Local Group Setup | Cisco Systems RV042G, RV016

VPN	9
VPN
Setting Up a Remote Access Tunnel for VPN Clients (Client To Gateway)

Add a New Tunnel

You can configure a VPN tunnel for one remote user or configure a group VPN for multiple remote users. You have two options:

•Tunnel: Choose this option to create a tunnel for a single remote user. The tunnel number is automatically generated and appear in the Tunnel No field.

•Group VPN: Choose this option to create a tunnel for a group of users. Group VPN facilitates setup and eliminates the need to configure individual users. All of the remote users can use the same Preshared Key to connect to RV0xx, up to the maximum number of supported tunnels. The router supports up to two VPN groups. The group number is automatically generated and appears in the Group No field.

Enter the following information:

•Tunnel Name: Enter a name to describe the tunnel. For a single user, you could enter the user’s name or location. For a group VPN, you could identify the group’s business role or location. This description is for your reference and does not have to match the name used at the other end of the tunnel.

•Interface: Select the appropriate WAN port.

•Enable: Check this box to enable a group VPN.

Local Group Setup

Enter the following information about this router.

•Local Security Gateway Type: Specify the method for identifying this router to establish the VPN tunnel.

-IP Only: Choose this option if this router has a static WAN IP address. The WAN IP address appears automatically.

-IP + Domain Name (FQDN) Authentication: Choose this option if this router has a static IP address and a registered domain name. Also enter any Domain Name to use for authentication. The domain name can only be used only for one tunnel connection.

-IP + E-mail Addr.(USER FQDN) Authentication: Choose this option if this router has a static IP address and you want to use an email address for authentication. The current WAN IP address appears automatically. Enter any Email Address to use for authentication.

-Dynamic IP + Domain Name (FQDN) Authentication: Choose this option if this router has a dynamic IP address and a registered Dynamic

Cisco Small Business RV0xx Series Routers Administration Guide

140

Image 140

Cisco Systems RV042G, RV016 manual Add a New Tunnel, Local Group Setup

Contents

Administration Guide Cisco Systems, Inc. All rights reserved 78-19576-01 B0 Viewing System Summary Information Setup Other Hardware FeaturesPlacement Tips Introduction Dhcp System ManagementPort Management Firewall VPN 122 Logging System Statistics 153 Appendix G Specifications 189 Appendix H Where to Go From Here 199Appendix E IPSec NAT Traversal 183 Appendix F Bandwidth Management 186 RV0xx Series Router Features ModelPorts RV042 and RV042G RV082 RV016 Introduction RV042 and RV042G PortsRV042 and RV042G Status Lights RV082 Ports and Status Lights Ports Port Description Status Lights Light Description Other Hardware Features Feature Description Default Settings Placement TipsDesktop Placement Parameter Default Value Wall Mounting RV042 and RV042G 58 mm apart RV082 and RV016 94 mm apart Rack Mounting RV082 or RV016 Connecting the Equipment RV042 and RV042G Internet PortRV082 Internet Port RV016 Internet 1 Port Getting Started with the Configuration Troubleshooting Tips Features of the User Interface Navigation Setup Wizards Saving the SettingsPop-Up Windows Help Viewing System Summary Information Viewing System Summary Information System InformationCisco ProtectLink Web Port Information Window ConfigurationPort Statistics Viewing System Summary Information WAN Status WAN information Firewall Setting Status VPN Setting StatusLog Setting Status DMZ information Setup Host Name and Domain Name Setting Up the NetworkSetup Changing the device IP address IP ModeLAN Setting device IP address and subnets Enabling multiple subnets IPv4 only Setup WAN Setting Internet connection DMZ Setting Setup Editing a WAN Connection Page Page Page Editing a DMZ Connection IPv4 IPv6Page Changing the Administrator Username and Password Setup Setting the System Time To open this page Click Setup Time in the navigation tree Setting Up a DMZ Host Port Range Forwarding, Port Triggering, Setting Up Port Forwarding and Port TriggeringPort Range Forwarding Setup Adding a service Port Triggering Setting Up Universal Plug and Play UPnP To open this page Click Setup UPnP in the navigation tree Setup Adding a service Setting Up One-to-One NAT Setup Cloning a MAC Address for the Router Editing the MAC Address Clone Settings Assigning a Dynamic DNS Host Name to a WAN Interface Editing the Dynamic DNS Setup Setting Up Advanced Routing Configuring Dynamic Routing, Configuring Static Routing, Data None, RIPv1, RIPv2 Broadcast, or RIPv2 Multicast Configuring Dynamic RoutingDynamic Routing for IPv4 Prefix Length Pv6 only Enter the prefix length Configuring Static RoutingDynamic Routing for IPv6 Setting Up Advanced Routing IPv6 Transition To Go From Here Setting Up the Dhcp Server or Dhcp Relay Dhcp Dhcp Wins used for Dhcp Server, IPv4 Only Dynamic IP used for Dhcp Server onlyDNS used for Dhcp Server only About Static IP Addresses for IPv4 Only Assigning static IP addresses by adding devices from a list Assigning static IP addresses by entering devices manually Using the Static IP List to Block Devices DNS Local Database Client Table Viewing the Dhcp Status InformationDhcp Server Router Advertisement IPv6 Dhcp Setting Up Dual WAN and Multi-WAN Connections System Management Mode Cisco RV042, RV042G, and RV082 System Management Mode Cisco RV016 Interface Setting Max Bandwidth Provided by ISP Editing the Dual WAN and Multi-WAN SettingsNetwork Service Detection Page Adding a service Page Managing the Bandwidth Settings Max Bandwidth Provided by ISPBandwidth Management Type Appendix F, Bandwidth Management Managing the Bandwidth Settings Adding a service Setting Up Snmp Enabling Device Discovery with Bonjour Enabling Device Discovery with Bonjour DNS Name Lookup Using Built-In Diagnostic ToolsTo open this page Click System Management Diagnostic Ping Restoring the Factory Default Settings Upgrading the Firmware Restarting the Router Backing Up and Restoring the Settings Restoring the Settings from a Configuration File Backing Up Configuration Files and Mirror Files Copying a Startup File or Mirror File Backing Up and Restoring the Settings Configuring the Port Settings Port Management Port Management Viewing the Status Information for a Port Summary Statistics Configuring the General Firewall Settings Firewall Firewall Restrict Web Features Firewall Configuring Firewall Access Rules About Access Rules Managing Access Rules To delete all custom rules Click Restore to Default Rules Configuring Access Rules Services IPv4 and IPv6 Schedule IPv4 Only Adding a service Page Using Content Filters to Control Internet Access Forbidden Domains, Website Blocking by Keywords, Schedule, Forbidden Domains Website Blocking by Keywords Schedule Cisco ProtectLink Web Getting Started with Cisco ProtectLink Web Cisco ProtectLink Web Specifying the Global Settings for Approved URLs and Clients Approved URL Configuration Approved Clients ConfigurationApproved URLs and Approved Clients To delete an entry Click the Delete icon Enabling Web Protection for URL Filtering Web Protection URL Filtering Business Hour Setting Web Reputation Updating the ProtectLink License URL Overflow Control License License Information VPN Introduction to VPNs Remote Access Client To Gateway Configuration tasksSite to Site VPN Gateway To Gateway Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers QuickVPN, page125 and Remote Access with PPTP, page125 Router Remote Access with Cisco QuickVPN Remote Access with Pptp Viewing the Summary Information for VPN To open this page Click VPN Summary in the navigation tree Tunnel Status Up a Remote Access Tunnel for VPN Clients Client To Gateway, GroupVPN Status VPN Clients Status Setting Up a Gateway to Gateway Site to Site VPN Local Group Setup and Remote Group Setup Add a New Tunnel VPN IPSec Setup Preshared Key, page 135 and Advanced settings for IKE with Required fields for Manual mode Required fields for IKE with Preshared Key Advanced settings for IKE with Preshared Key VPN VPN RV0xx Local Group Setup Remote Client Setup for Single User Tunnel Type VPN IPSec Setup Required fields for IKE with Preshared Key Advanced settings for IKE with Preshared Key VPN Managing VPN Users and Certificates Users, Certificate Management, page148 Users Certificate Management Setting Up VPN Passthrough Setting Up Pptp Server IP Address Range Pptp Server Connection List Setting Up the System Log and Alerts Syslog section, Mail section, Log Setting, Buttons, Syslog sectionMail section Logging System Statistics Log Setting Buttons Viewing the System Log Logging System Statistics Basic Setup, Access Rule Setup, page160 Wizard Wizard Basic SetupAccess Rule Setup Term Definition Beacon intervalDtim Delivery Traffic Indication Message Glossary Term Definition Radvd Router Advertisement DaemonRequest to Send RTS Threshold Vlan Virtual LAN RIPng RIP next generationStatic routing Firmware upgrade has failed Your computer cannot connect to the Internet Troubleshooting Router does not have a coaxial port for the cable connection Cisco QuickVPN for Windows Introduction Cisco QuickVPN for Windows Cisco QuickVPN Client Installation and ConfigurationUsing the Cisco QuickVPN Software Using the Cisco QuickVPN Software Topology Options VPN Hub and Spoke Topology Hub and Spoke VPN Mesh Topology Mesh WAN Setup Other Design Considerations LAN Setup Gateway To Gateway Tunnel with a Dynamic IP Address Configuring a VPN Tunnel on a Cisco RV0xx Series Router Field Value Settings on the Site a RouterExample Sites with Static WAN IP Addresses Encryption Phase MD5 Field Values Encryption Example Site with a Dynamic WAN IP Address Authentication Field Value IPSec Setup Keying Mode IKE with Preshared Key Phase IPSec NAT Traversal Overview Configuration of Router a IPSec NAT Traversal Configuration of Router B Click Add to List Creation of New ServicesClick the System Management tab Creation of New Bandwidth Management Rules Bandwidth Management Click Save Specifications RV042Performance Security QoS SpecificationsNetwork Environmental RV042GManagement Operating System Linux VPN Cisco RV082 IKE Cisco RV016 Dhcp DNS NAT DMZ Built-in Pptp server supporting 10 Pptp clients Cisco Small Business SupportProduct Documentation