Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems RV042G, RV016 manual Add a New Tunnel

Models: RV016 RV042G

1 199

Download 199 pages 48.22 Kb

Page 140

VPN	9
VPN
Setting Up a Remote Access Tunnel for VPN Clients (Client To Gateway)

Add a New Tunnel

You can configure a VPN tunnel for one remote user or configure a group VPN for multiple remote users. You have two options:

•Tunnel: Choose this option to create a tunnel for a single remote user. The tunnel number is automatically generated and appear in the Tunnel No field.

•Group VPN: Choose this option to create a tunnel for a group of users. Group VPN facilitates setup and eliminates the need to configure individual users. All of the remote users can use the same Preshared Key to connect to RV0xx, up to the maximum number of supported tunnels. The router supports up to two VPN groups. The group number is automatically generated and appears in the Group No field.

Enter the following information:

•Tunnel Name: Enter a name to describe the tunnel. For a single user, you could enter the user’s name or location. For a group VPN, you could identify the group’s business role or location. This description is for your reference and does not have to match the name used at the other end of the tunnel.

•Interface: Select the appropriate WAN port.

•Enable: Check this box to enable a group VPN.

Local Group Setup

Enter the following information about this router.

•Local Security Gateway Type: Specify the method for identifying this router to establish the VPN tunnel.

-IP Only: Choose this option if this router has a static WAN IP address. The WAN IP address appears automatically.

-IP + Domain Name (FQDN) Authentication: Choose this option if this router has a static IP address and a registered domain name. Also enter any Domain Name to use for authentication. The domain name can only be used only for one tunnel connection.

-IP + E-mail Addr.(USER FQDN) Authentication: Choose this option if this router has a static IP address and you want to use an email address for authentication. The current WAN IP address appears automatically. Enter any Email Address to use for authentication.

-Dynamic IP + Domain Name (FQDN) Authentication: Choose this option if this router has a dynamic IP address and a registered Dynamic

Cisco Small Business RV0xx Series Routers Administration Guide

140

Image 140

Cisco Systems RV042G, RV016 manual Add a New Tunnel

Contents

ADMINISTRATION GUIDE Cisco Small BusinessRV0xx Series Routers RV042 Dual WAN VPN Router RV042G Gigabit Dual WAN VPN Router2011-2012 Cisco Systems, Inc. All rights reserved 78-19576-01 B0Chapter 3 Setup ContentsChapter 1 Introduction Chapter 2 Viewing System Summary InformationContents Chapter 4 DHCPChapter 5 System Management Chapter 6 Port ManagementChapter 9 VPN Contents RV0xx Series Router Features IntroductionRV0xx Series Router Features, page Mounting Options, page Connecting the Equipment, page15RV0xx Series Router Features Cisco Small Business RV0xx Series Routers Administration GuideIntroduction RV042 and RV042G PortsPorts IntroductionPort DescriptionStatus Lights IntroductionLight DescriptionOther Hardware Features FeatureReset To restart the router or restoreMounting Options Default SettingsPlacement Tips Desktop PlacementWall Mounting IntroductionSuggested Hardware for RV042 and RV042G Suggested Hardware for RV082 and RV016Cisco Small Business RV0xx Series Routers Administration Guide IntroductionMounting Options Rack Mounting RV082 or RV016Connecting the Equipment IntroductionRV042 and RV042G Internet Port RV082 Internet PortGetting Started with the Configuration IntroductionTroubleshooting Tips IntroductionFeatures of the User Interface Navigation, page18 Pop-Up Windows, page19 Setup Wizards, pageSaving the Settings, page19 Help, page19 Logout, page19 NavigationSetup Wizards Saving the SettingsPop-Up Windows HelpViewing System Summary Information Configuration, page Port Statistics, page WAN Status, pageFirewall Setting Status, page VPN Setting Status, page Log Setting Status, pageViewing System Summary Information System InformationCisco ProtectLink Web Configuration Port StatisticsViewing System Summary Information Port Information WindowViewing System Summary Information This window displays the following informationWAN information WAN StatusViewing System Summary Information Firewall Setting Status VPN Setting StatusLog Setting Status Viewing System Summary InformationSetup Setting Up the Network, page DMZ Setting, pageChanging the Administrator Username and Password, page Setting the System Time, page Setting Up a DMZ Host, pageSetting Up the Network SetupLAN Setting device IP address and subnets, page WAN Setting Internet connection, page DMZ Setting, pageLAN Setting device IP address and subnets SetupIP Mode Changing the device IP address, pageSetup Enabling multiple subnets IPv4 onlySetup STEP 3 In the pop-up window, add or edit entries as neededWAN Setting Internet connection SetupDMZ Setting SetupCisco Small Business RV0xx Series Routers Administration Guide SetupSetting Up the Network Editing a WAN Connection with IPv6 Addressing Editing a WAN ConnectionEditing a WAN Connection with IPv4 Addressing Subnet Mask IPv4 The subnet mask specified by your ISP Page Page Editing a DMZ Connection IPv4 IPv6Cisco Small Business RV0xx Series Routers Administration Guide If you are using IPv6 addressing, enter the following informationPrefix Length Enter the prefix length. The default value is To open this page Click Setup Password in the navigation tree Changing the Administrator Username and PasswordSetup Setup Includes at least 8 characters Is not the same as the usernameTo open this page Click Setup Time in the navigation tree Setting the System TimeSetup To open this page Click Setup DMZ Host in the navigation tree Setting Up a DMZ HostSetup Setting Up Port Forwarding and Port Triggering SetupPort Range Forwarding Port Range Forwarding, page Port Triggering, pageSetup Enable Check the box to enable this port range forwarding entrySetup Adding a serviceSetup Port TriggeringTo open this page Click Setup UPnP in the navigation tree Setting Up Universal Plug and Play UPnPSetup Setup Setup Adding a serviceTo open this page Click Setup One-to-One NAT in the navigation pane Setting Up One-to-One NATSetup Setup Setting Up One-to-One NATCloning a MAC Address for the Router Cloning a MAC Address for the RouterSetup Editing the MAC Address Clone Settings Assigning a Dynamic DNS Host Name to a WAN Interface To open this page Click Setup Dynamic DNS in the navigation treeEditing the Dynamic DNS Setup Setting Up Advanced Routing Configuring Dynamic Routing, page Configuring Static Routing, pagedata None, RIPv1, RIPv2 - Broadcast, or RIPv2 - Multicast Configuring Dynamic RoutingDynamic Routing for IPv4 Prefix Length Pv6 only Enter the prefix length Configuring Static RoutingDynamic Routing for IPv6 Setting Up Advanced Routing Cisco Small Business RV0xx Series Routers Administration GuideIPv6 Transition To open this page Click Setup IPv6 Transition in the navigation treeto Go From Here.” Setting Up the DHCP Server or DHCP Relay DHCPSetting Up the DHCP Server or DHCP Relay, page Viewing the DHCP Status Information, pageEnabling DHCP Server and DHCP Relay To open this page Click DHCP DHCP Setup in the navigation treeDHCP DHCP Dynamic IP used for DHCP Server onlyDNS used for DHCP Server only WINS used for DHCP Server, IPv4 OnlyUsing the Static IP List to Block Devices, page DHCPAbout Static IP Addresses for IPv4 Only Assigning static IP addresses by adding devices from a list, pageDHCP Assigning static IP addresses by entering devices manuallyUsing the Static IP List to Block Devices DHCPDHCP DNS Local DatabaseViewing the DHCP Status Information DHCP ServerClient Table DHCPRouter Advertisement IPv6 Router Advertisement IPv6DHCP DHCP RA Flags Choose whether or not hosts can use DHCPv6 to obtain addresses and other information. The options are described belowSetting Up Dual WAN and Multi-WAN Connections System ManagementSetting Up Dual WAN and Multi-WAN Connections, page Managing the Bandwidth Settings, page Setting Up SNMP, pageMode - Cisco RV042, RV042G, and RV082 System ManagementMode - Cisco RV016 System ManagementInterface Setting System ManagementMax Bandwidth Provided by ISP Editing the Dual WAN and Multi-WAN SettingsNetwork Service Detection Protocol Binding for Cisco RV016 only, when Load Balancer is selected Adding a service Cisco Small Business RV0xx Series Routers Administration Guide Managing the Bandwidth Settings Max Bandwidth Provided by ISPBandwidth Management Type Appendix F, “Bandwidth Management.”Priority for Priority management only Choose the priority for this Adding a service Setting Up SNMP Setting Up SNMPEnabling Device Discovery with Bonjour Cisco Small Business RV0xx Series Routers Administration Guide Enabling Device Discovery with BonjourUsing Built-In Diagnostic Tools DNS Name LookupPing Restoring the Factory Default Settings Restoring the Factory Default SettingsUpgrading the Firmware Restarting the Router Backing Up and Restoring the Settings Restoring the Settings from a Configuration FileRestoring the Settings from a Configuration File, page Backing Up Configuration Files and Mirror Files, pageSTEP 3 Close the Download Complete window Backing Up Configuration Files and Mirror FilesCopying a Startup File or Mirror File To copy a file, click the button Configuring the Port Settings Port ManagementConfiguring the Port Settings, page Viewing the Status Information for a Port, pagePort Management Port Management Viewing the Status Information for a PortSummary Statistics Port ManagementConfiguring the General Firewall Settings FirewallConfiguring the General Firewall Settings, page Managing Access Rules, page Configuring Firewall Access Rules, pageConfiguring the General Firewall Settings FirewallRestrict Web Features FirewallDon’t block Java/ActiveX/Cookies/Proxy to Trusted Domains If you blocked any of the web features, you can check this box to allow these features for the domains that you enter on the trusted list. This area of the page is available only if you checked one of the other boxes to disable a web feature. If you leave the box unchecked, then the selected web features are blocked for all websites FirewallConfiguring Firewall Access Rules About Access RulesAbout Access Rules, page103 Managing Access Rules, page Configuring Access Rules, pageManaging Access Rules FirewallTo delete all custom rules Click Restore to Default Rules FirewallConfiguring Access Rules Services IPv4 and IPv6Schedule IPv4 Only Adding a service Cisco Small Business RV0xx Series Routers Administration Guide Using Content Filters to Control Internet Access Forbidden Domains, page Website Blocking by Keywords, pageSchedule, page Web.”Website Blocking by Keywords Using Content Filters to Control Internet AccessForbidden Domains Schedule Cisco ProtectLink Web Getting Started with Cisco ProtectLink WebSpecifying the Global Settings for Approved URLs and Clients, page Getting Started with Cisco ProtectLink Web, pageCisco ProtectLink Web Choose the appropriate optionCisco ProtectLink Web Specifying the Global Settings for Approved URLs and ClientsSpecifying the Global Settings for Approved URLs and Clients Approved URL Configuration Approved Clients ConfigurationApproved URLs and Approved Clients Cisco ProtectLink WebCisco ProtectLink Web Enabling Web Protection for URL FilteringWeb Protection URL Filtering Cisco ProtectLink WebCisco ProtectLink Web Business Hour SettingWeb Reputation Cisco ProtectLink Web Updating the ProtectLink LicenseURL Overflow Control Cisco ProtectLink Web LicenseLicense Information Introduction to VPNs Setting Up a Gateway to Gateway Site to Site VPN, pageSetting Up VPN Passthrough, page Setting Up PPTP Server, page Remote Access Client To Gateway, pageRemote Access Client To Gateway Configuration tasksSite to Site VPN Gateway To Gateway Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers.”NOTE Consider two other remote access options Remote Access with Cisco QuickVPN, page125 and Remote Access with PPTP, page125Remote Access with Cisco QuickVPN Remote Access with PPTPTo open this page Click VPN Summary in the navigation tree Viewing the Summary Information for VPNSummary Tunnel Status Up a Remote Access Tunnel for VPN Clients Client To Gateway, page GroupVPN StatusVPN Clients Status Setting Up a Gateway to Gateway Site to Site VPN Setting Up a Gateway to Gateway Site to Site VPNLocal Group Setup and Remote Group Setup Add a New TunnelIP + Domain Name FQDN Authentication Choose this option if this router has a static IP address and a registered domain name, such as MyServer.MyDomain.com. Also enter the Domain Name to use for authentication. The domain name can be used only for one tunnel connection IPSec Setup Required fields for Manual mode Preshared Key, page 135 and Advanced settings for IKE withPreshared Key, page Phase 1 / Phase 2 Authentication Select a method of authentication Required fields for IKE with Preshared KeyAdvanced settings for IKE with Preshared Key AH Hash Algorithm The AH Authentication Header protocol describes the packet format and default standards for packet structure. With the use of AH as the security protocol, protection is extended forward into the IP header to verify the integrity of the entire packet. Check the box to use this feature. Then select an authentication method MD5 or SHA1. MD5 produces a 128-bit digest to authenticate packet data. SHA1 produces a 160-bit digest to authenticate packet data. Both sides of the tunnel should use the same algorithm Page Setting Up a Remote Access Tunnel for VPN Clients Client To Gateway Setting Up a Remote Access Tunnel for VPN Clients Client To GatewayCisco Small Business RV0xx Series Routers Administration Guide RV0xxAdd a New Tunnel DNS hostname available from providers such as DynDNS.com. Enter a Domain Name to use for authentication. The domain name can be used only for one tunnel connection Remote Client Setup for a Group “Group VPN” Type IPSec Setup Required fields for Manual mode Enter the settings for manual modePhase 1 / Phase 2 Authentication Select a method of authentication Required fields for IKE with Preshared KeyAggressive Mode available for Tunnel, not Group VPN Two modes of Page Users, page Certificate Management, page148 Managing VPN Users and CertificatesTo open this page Click VPN VPN Client Access in the navigation tree Users Certificate ManagementSetting Up VPN Passthrough To open this page Click VPN VPN Passthrough in the navigation treeSetting Up PPTP Server Setting Up PPTP ServerTo open this page Click VPN PPTP Server in the navigation tree IP Address RangePPTP Server Connection List Setting Up the System Log and Alerts Logging System StatisticsSetting Up the System Log and Alerts, page Viewing the System Log, pageLog Setting, page Buttons, page Syslog sectionE-mail section Logging System StatisticsLog Setting Logging System StatisticsButtons Logging System StatisticsTo open this page click Log System Statistics in the navigation tree Viewing the System LogLogging System Statistics Logging System Statistics Received Bytes The number of bytes received through this interfaceWizard on the System Summary page WizardBasic Setup, page Access Rule Setup, page160 Wizard Basic SetupAccess Rule Setup Definition GlossaryTerm Glossary TermDefinition Fragmentation ThresholdGlossary TermDefinition RADVD RouterGlossary TermDefinition RIPng RIP next generationTroubleshooting The router does not have a coaxial port for the cable connection TroubleshootingThe DSL telephone line does not fit into the router’s Internet port Cisco QuickVPN for Windows IntroductionCisco QuickVPN Client Installation and Configuration, page Using the Cisco QuickVPN Software, pageCisco QuickVPN for Windows Cisco QuickVPN Client Installation and ConfigurationUsing the Cisco QuickVPN Software Cisco QuickVPN for Windows STEP 3 To save this profile, click SaveTopology Options Configuring a VPN Tunnel on a Cisco RV0xx Series Router, pageOverview, page Topology Options, page Other Design Considerations, pageVPN Hub and Spoke Topology Figure 1 Hub and SpokeVPN Mesh Topology Figure 2 MeshOther Design Considerations Figure 3 Gateway To Gateway Tunnel with Static IP AddressesLAN Setup Figure 4 Gateway To Gateway Tunnel with a Dynamic IP AddressConfiguring a VPN Tunnel on a Cisco RV0xx Series Router Value Example Sites with Static WAN IP AddressesField Field ValueField ValueField ValuesExample Site with a Dynamic WAN IP Address FieldValues FieldField ValueField ValueField ValuesField ValuesIPSec NAT Traversal OverviewConfiguration of Router A IPSec NAT TraversalConfiguration of Router B IPSec NAT TraversalCreation of New Services Bandwidth ManagementCreation of New Services, page STEP 4 On the Bandwidth Management page, click Service ManagementCreation of New Bandwidth Management Rules Bandwidth ManagementBandwidth Management STEP 5 Click SaveSpecifications RV042Specifications Network5.12 x 1.52 x 7.87 in. W x H x D 130 x 38.5 x 200 mm RV042GSpecifications Specifications PerformanceSecurity NetworkEnvironmental SpecificationsManagement Cisco RV082 Cisco RV082Specifications Specifications ManagementCisco RV016 Cisco RV016Specifications Network SpecificationsSecurity Environmental SpecificationsManagement Where to Go From Here SupportProduct Documentation Cisco Small Business