Cisco Systems RV016, RV042G manual

Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers

Configuring a VPN Tunnel on a Cisco RV0xx Series Router

D

Configuring a VPN Tunnel on a Cisco RV0xx Series Router

This procedure describes the basic tasks in configuring your router. Example entries are provided on page 176.

NOTE

•For a hub-and-spoke topology, configure one tunnel between each remote site and the central site. For the scenario illustrated in Figure 1, configure three VPN tunnels on the router at the main site, and configure one VPN tunnel on the router at each remote site.

•For a mesh topology, configure multiple tunnels on each router to ensure connectivity between all sites. For the scenario illustrated in Figure 2, configure three VPN tunnels on each router.

STEP 1 Connect a computer to your Cisco RV0xx Series router (called Site A in the examples), and start the web-based configuration utility.

STEP 2 Click VPN > Gateway to Gateway in the navigation tree.

STEP 3 Enter the following information about the tunnel:

•Tunnel Name—Enter a name, for your reference. This name will be used on the VPN > Summary page.

•Interface—Select the appropriate Interface, WAN1 or WAN2.

Note: The Enable check box is unavailable until after you save the configuration.

STEP 4 In the Local Group Setup section, enter the following information about this router (Site A):

•Local Security Gateway Type—SelectIP Only. The WAN IP address of the router will be automatically detected and will appear in the IP Address field.

•Local Security Group Type—SelectSubnet. Enter the LAN IP Address and the subnet mask.

STEP 5 In the Remote Group Setup section, enter the following information about the router at the other end of the tunnel (Site B):

•Remote Security Gateway Type—Depending on the type of IP address for the Internet connection, choose one of the following options:

-If the remote gateway (Site B) has a static WAN IP address: Select IP Only. Enter the WAN IP Address of the Site B router.

Cisco Small Business RV0xx Series Routers Administration Guide

175

Image 175

Cisco Systems RV016, RV042G manual Configuring a VPN Tunnel on a Cisco RV0xx Series Router

Contents

Administration Guide Cisco Systems, Inc. All rights reserved 78-19576-01 B0 Introduction Viewing System Summary Information SetupOther Hardware Features Placement Tips Firewall DhcpSystem Management Port Management Logging System Statistics 153 VPN 122 Appendix F Bandwidth Management 186 Appendix G Specifications 189Appendix H Where to Go From Here 199 Appendix E IPSec NAT Traversal 183 RV042 and RV042G RV082 RV016 RV0xx Series Router FeaturesModel Ports RV082 Ports and Status Lights IntroductionRV042 and RV042G Ports RV042 and RV042G Status Lights Port Description Ports Light Description Status Lights Feature Description Other Hardware Features Parameter Default Value Default SettingsPlacement Tips Desktop Placement RV042 and RV042G 58 mm apart RV082 and RV016 94 mm apart Wall Mounting Rack Mounting RV082 or RV016 RV016 Internet 1 Port Connecting the EquipmentRV042 and RV042G Internet Port RV082 Internet Port Getting Started with the Configuration Troubleshooting Tips Navigation Features of the User Interface Help Setup WizardsSaving the Settings Pop-Up Windows Viewing System Summary Information Cisco ProtectLink Web System InformationViewing System Summary Information Port Statistics ConfigurationPort Information Window Viewing System Summary Information WAN information WAN Status DMZ information Firewall Setting StatusVPN Setting Status Log Setting Status Setup Setup Setting Up the NetworkHost Name and Domain Name LAN Setting device IP address and subnets IP ModeChanging the device IP address Enabling multiple subnets IPv4 only Setup WAN Setting Internet connection DMZ Setting Setup Editing a WAN Connection Page Page Page IPv4 IPv6 Editing a DMZ ConnectionPage Changing the Administrator Username and Password Setup To open this page Click Setup Time in the navigation tree Setting the System Time Setting Up a DMZ Host Port Range Forwarding Setting Up Port Forwarding and Port TriggeringPort Range Forwarding, Port Triggering, Setup Adding a service Port Triggering To open this page Click Setup UPnP in the navigation tree Setting Up Universal Plug and Play UPnP Setup Adding a service Setting Up One-to-One NAT Setup Cloning a MAC Address for the Router Editing the MAC Address Clone Settings Assigning a Dynamic DNS Host Name to a WAN Interface Editing the Dynamic DNS Setup Configuring Dynamic Routing, Configuring Static Routing, Setting Up Advanced Routing Dynamic Routing for IPv4 Configuring Dynamic RoutingData None, RIPv1, RIPv2 Broadcast, or RIPv2 Multicast Dynamic Routing for IPv6 Configuring Static RoutingPrefix Length Pv6 only Enter the prefix length Setting Up Advanced Routing IPv6 Transition To Go From Here Dhcp Setting Up the Dhcp Server or Dhcp Relay Dhcp DNS used for Dhcp Server only Dynamic IP used for Dhcp Server onlyWins used for Dhcp Server, IPv4 Only Assigning static IP addresses by adding devices from a list About Static IP Addresses for IPv4 Only Assigning static IP addresses by entering devices manually Using the Static IP List to Block Devices DNS Local Database Dhcp Server Viewing the Dhcp Status InformationClient Table Router Advertisement IPv6 Dhcp System Management Setting Up Dual WAN and Multi-WAN Connections System Management Mode Cisco RV042, RV042G, and RV082 Mode Cisco RV016 Interface Setting Network Service Detection Editing the Dual WAN and Multi-WAN SettingsMax Bandwidth Provided by ISP Page Adding a service Page Appendix F, Bandwidth Management Managing the Bandwidth SettingsMax Bandwidth Provided by ISP Bandwidth Management Type Managing the Bandwidth Settings Adding a service Setting Up Snmp Enabling Device Discovery with Bonjour Enabling Device Discovery with Bonjour To open this page Click System Management Diagnostic Using Built-In Diagnostic ToolsDNS Name Lookup Ping Restoring the Factory Default Settings Upgrading the Firmware Restarting the Router Restoring the Settings from a Configuration File Backing Up and Restoring the Settings Copying a Startup File or Mirror File Backing Up Configuration Files and Mirror Files Backing Up and Restoring the Settings Port Management Configuring the Port Settings Port Management Summary Viewing the Status Information for a Port Statistics Firewall Configuring the General Firewall Settings Firewall Restrict Web Features Firewall About Access Rules Configuring Firewall Access Rules Managing Access Rules To delete all custom rules Click Restore to Default Rules Services IPv4 and IPv6 Configuring Access Rules Schedule IPv4 Only Adding a service Page Forbidden Domains, Website Blocking by Keywords, Schedule, Using Content Filters to Control Internet Access Website Blocking by Keywords Forbidden Domains Schedule Getting Started with Cisco ProtectLink Web Cisco ProtectLink Web Cisco ProtectLink Web Specifying the Global Settings for Approved URLs and Clients To delete an entry Click the Delete icon Approved URL ConfigurationApproved Clients Configuration Approved URLs and Approved Clients Web Protection Enabling Web Protection for URL Filtering URL Filtering Web Reputation Business Hour Setting URL Overflow Control Updating the ProtectLink License License Information License Introduction to VPNs VPN Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers Remote Access Client To GatewayConfiguration tasks Site to Site VPN Gateway To Gateway Router QuickVPN, page125 and Remote Access with PPTP, page125 Remote Access with Pptp Remote Access with Cisco QuickVPN To open this page Click VPN Summary in the navigation tree Viewing the Summary Information for VPN Tunnel Status GroupVPN Status Up a Remote Access Tunnel for VPN Clients Client To Gateway, VPN Clients Status Setting Up a Gateway to Gateway Site to Site VPN Add a New Tunnel Local Group Setup and Remote Group Setup VPN IPSec Setup Required fields for Manual mode Preshared Key, page 135 and Advanced settings for IKE with Required fields for IKE with Preshared Key Advanced settings for IKE with Preshared Key VPN VPN RV0xx Local Group Setup Remote Client Setup for Single User Tunnel Type VPN IPSec Setup Required fields for IKE with Preshared Key Advanced settings for IKE with Preshared Key VPN Users, Certificate Management, page148 Managing VPN Users and Certificates Certificate Management Users Setting Up VPN Passthrough Setting Up Pptp Server Pptp Server IP Address Range Connection List Syslog section, Mail section, Setting Up the System Log and Alerts Logging System Statistics Log Setting, Buttons,Syslog section Mail section Log Setting Buttons Viewing the System Log Logging System Statistics Wizard Basic Setup, Access Rule Setup, page160 Access Rule Setup Basic SetupWizard Indication Message Term DefinitionBeacon interval Dtim Delivery Traffic Glossary Term Definition Threshold Radvd RouterAdvertisement Daemon Request to Send RTS Static routing RIPng RIP next generationVlan Virtual LAN Your computer cannot connect to the Internet Firmware upgrade has failed Router does not have a coaxial port for the cable connection Troubleshooting Introduction Cisco QuickVPN for Windows Using the Cisco QuickVPN Software Cisco QuickVPN Client Installation and ConfigurationCisco QuickVPN for Windows Using the Cisco QuickVPN Software Topology Options Hub and Spoke VPN Hub and Spoke Topology Mesh VPN Mesh Topology Other Design Considerations WAN Setup Gateway To Gateway Tunnel with a Dynamic IP Address LAN Setup Configuring a VPN Tunnel on a Cisco RV0xx Series Router Example Sites with Static WAN IP Addresses Settings on the Site a RouterField Value MD5 Encryption Phase Encryption Field Values Example Site with a Dynamic WAN IP Address Authentication Field Value IPSec Setup Keying Mode IKE with Preshared Key Phase Overview IPSec NAT Traversal IPSec NAT Traversal Configuration of Router a Configuration of Router B Click the System Management tab Creation of New ServicesClick Add to List Bandwidth Management Creation of New Bandwidth Management Rules Click Save Security SpecificationsRV042 Performance Network SpecificationsQoS Management RV042GEnvironmental Operating System Linux VPN Cisco RV082 IKE Cisco RV016 Dhcp DNS NAT DMZ Built-in Pptp server supporting 10 Pptp clients Product Documentation SupportCisco Small Business