Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems RV042G, RV016 manual Field, Value

Models: RV016 RV042G

1 199

Download 199 pages 48.22 Kb

Page 180

Manual background

Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers

Configuring a VPN Tunnel on a Cisco RV0xx Series Router

Field	Value
Local Security	Subnet
Group Type
IP Address	192.168.1.0
Subnet Mask	255.255.255.0

D

Remote Group Setup

Remote Security	Dynamic IP + Domain Name (FQDN) Authentication
Gateway Type

Domain Name	cisco.com

Remote Security	Subnet
Group Type

IP Address	192.168.2.0

Subnet Mask	255.255.255.0

IPSec Setup

Keying Mode	IKE with Preshared Key

Phase 1	DES
Encryption

Phase 1	MD5
Authentication

Phase 1 SA Life	28800
Time

Perfect Forward	Enabled
Secrecy

Phase 2 DH	Group 1 - 768 bit
Group

Phase 2	DES
Encryption

Phase 2	MD5
Authentication

Cisco Small Business RV0xx Series Routers Administration Guide

180

Image 180

Cisco Systems RV042G, RV016 manual Field, Value

Contents

ADMINISTRATION GUIDE Cisco Small BusinessRV0xx Series Routers RV042 Dual WAN VPN Router RV042G Gigabit Dual WAN VPN Router2011-2012 Cisco Systems, Inc. All rights reserved 78-19576-01 B0Chapter 3 Setup ContentsChapter 1 Introduction Chapter 2 Viewing System Summary InformationContents Chapter 4 DHCPChapter 5 System Management Chapter 6 Port ManagementChapter 9 VPN Contents RV0xx Series Router Features IntroductionRV0xx Series Router Features, page Mounting Options, page Connecting the Equipment, page15RV0xx Series Router Features Cisco Small Business RV0xx Series Routers Administration GuideIntroduction RV042 and RV042G PortsPorts IntroductionPort DescriptionStatus Lights IntroductionLight DescriptionOther Hardware Features FeatureReset To restart the router or restoreMounting Options Default SettingsPlacement Tips Desktop PlacementWall Mounting IntroductionSuggested Hardware for RV042 and RV042G Suggested Hardware for RV082 and RV016Cisco Small Business RV0xx Series Routers Administration Guide IntroductionMounting Options Rack Mounting RV082 or RV016Connecting the Equipment IntroductionRV042 and RV042G Internet Port RV082 Internet PortGetting Started with the Configuration IntroductionTroubleshooting Tips IntroductionFeatures of the User Interface Navigation, page18 Pop-Up Windows, page19 Setup Wizards, pageSaving the Settings, page19 Help, page19 Logout, page19 NavigationSetup Wizards Saving the SettingsPop-Up Windows HelpViewing System Summary Information Configuration, page Port Statistics, page WAN Status, pageFirewall Setting Status, page VPN Setting Status, page Log Setting Status, pageSystem Information Cisco ProtectLink WebViewing System Summary Information Configuration Port StatisticsViewing System Summary Information Port Information WindowViewing System Summary Information This window displays the following informationWAN Status Viewing System Summary InformationWAN information Firewall Setting Status VPN Setting StatusLog Setting Status Viewing System Summary InformationSetup Setting Up the Network, page DMZ Setting, pageChanging the Administrator Username and Password, page Setting the System Time, page Setting Up a DMZ Host, pageSetting Up the Network SetupLAN Setting device IP address and subnets, page WAN Setting Internet connection, page DMZ Setting, pageLAN Setting device IP address and subnets SetupIP Mode Changing the device IP address, pageSetup Enabling multiple subnets IPv4 onlySetup STEP 3 In the pop-up window, add or edit entries as neededWAN Setting Internet connection SetupDMZ Setting SetupSetup Setting Up the NetworkCisco Small Business RV0xx Series Routers Administration Guide Editing a WAN Connection Editing a WAN Connection with IPv4 AddressingEditing a WAN Connection with IPv6 Addressing Subnet Mask IPv4 The subnet mask specified by your ISP Page Page Editing a DMZ Connection IPv4 IPv6If you are using IPv6 addressing, enter the following information Prefix Length Enter the prefix length. The default value isCisco Small Business RV0xx Series Routers Administration Guide Changing the Administrator Username and Password SetupTo open this page Click Setup Password in the navigation tree Setup Includes at least 8 characters Is not the same as the usernameSetting the System Time SetupTo open this page Click Setup Time in the navigation tree Setting Up a DMZ Host SetupTo open this page Click Setup DMZ Host in the navigation tree Setting Up Port Forwarding and Port Triggering SetupPort Range Forwarding Port Range Forwarding, page Port Triggering, pageSetup Enable Check the box to enable this port range forwarding entrySetup Adding a serviceSetup Port TriggeringSetting Up Universal Plug and Play UPnP SetupTo open this page Click Setup UPnP in the navigation tree Setup Setup Adding a serviceSetting Up One-to-One NAT SetupTo open this page Click Setup One-to-One NAT in the navigation pane Setup Setting Up One-to-One NATCloning a MAC Address for the Router SetupCloning a MAC Address for the Router Editing the MAC Address Clone Settings Assigning a Dynamic DNS Host Name to a WAN Interface To open this page Click Setup Dynamic DNS in the navigation treeEditing the Dynamic DNS Setup Setting Up Advanced Routing Configuring Dynamic Routing, page Configuring Static Routing, pageConfiguring Dynamic Routing Dynamic Routing for IPv4data None, RIPv1, RIPv2 - Broadcast, or RIPv2 - Multicast Configuring Static Routing Dynamic Routing for IPv6Prefix Length Pv6 only Enter the prefix length Setting Up Advanced Routing Cisco Small Business RV0xx Series Routers Administration GuideIPv6 Transition To open this page Click Setup IPv6 Transition in the navigation treeto Go From Here.” Setting Up the DHCP Server or DHCP Relay DHCPSetting Up the DHCP Server or DHCP Relay, page Viewing the DHCP Status Information, pageTo open this page Click DHCP DHCP Setup in the navigation tree DHCPEnabling DHCP Server and DHCP Relay DHCP Dynamic IP used for DHCP Server onlyDNS used for DHCP Server only WINS used for DHCP Server, IPv4 OnlyUsing the Static IP List to Block Devices, page DHCPAbout Static IP Addresses for IPv4 Only Assigning static IP addresses by adding devices from a list, pageDHCP Assigning static IP addresses by entering devices manuallyUsing the Static IP List to Block Devices DHCPDHCP DNS Local DatabaseViewing the DHCP Status Information DHCP ServerClient Table DHCPRouter Advertisement IPv6 DHCPRouter Advertisement IPv6 DHCP RA Flags Choose whether or not hosts can use DHCPv6 to obtain addresses and other information. The options are described belowSetting Up Dual WAN and Multi-WAN Connections System ManagementSetting Up Dual WAN and Multi-WAN Connections, page Managing the Bandwidth Settings, page Setting Up SNMP, pageMode - Cisco RV042, RV042G, and RV082 System ManagementMode - Cisco RV016 System ManagementInterface Setting System ManagementEditing the Dual WAN and Multi-WAN Settings Network Service DetectionMax Bandwidth Provided by ISP Protocol Binding for Cisco RV016 only, when Load Balancer is selected Adding a service Cisco Small Business RV0xx Series Routers Administration Guide Managing the Bandwidth Settings Max Bandwidth Provided by ISPBandwidth Management Type Appendix F, “Bandwidth Management.”Priority for Priority management only Choose the priority for this Adding a service Setting Up SNMP Setting Up SNMPEnabling Device Discovery with Bonjour Cisco Small Business RV0xx Series Routers Administration Guide Enabling Device Discovery with BonjourUsing Built-In Diagnostic Tools DNS Name LookupPing Restoring the Factory Default Settings Restoring the Factory Default SettingsUpgrading the Firmware Restarting the Router Backing Up and Restoring the Settings Restoring the Settings from a Configuration FileRestoring the Settings from a Configuration File, page Backing Up Configuration Files and Mirror Files, pageBacking Up Configuration Files and Mirror Files Copying a Startup File or Mirror FileSTEP 3 Close the Download Complete window To copy a file, click the button Configuring the Port Settings Port ManagementConfiguring the Port Settings, page Viewing the Status Information for a Port, pagePort Management Viewing the Status Information for a Port SummaryPort Management Statistics Port ManagementConfiguring the General Firewall Settings FirewallConfiguring the General Firewall Settings, page Managing Access Rules, page Configuring Firewall Access Rules, pageConfiguring the General Firewall Settings FirewallRestrict Web Features FirewallDon’t block Java/ActiveX/Cookies/Proxy to Trusted Domains If you blocked any of the web features, you can check this box to allow these features for the domains that you enter on the trusted list. This area of the page is available only if you checked one of the other boxes to disable a web feature. If you leave the box unchecked, then the selected web features are blocked for all websites FirewallConfiguring Firewall Access Rules About Access RulesAbout Access Rules, page103 Managing Access Rules, page Configuring Access Rules, pageManaging Access Rules FirewallTo delete all custom rules Click Restore to Default Rules FirewallConfiguring Access Rules Services IPv4 and IPv6Schedule IPv4 Only Adding a service Cisco Small Business RV0xx Series Routers Administration Guide Using Content Filters to Control Internet Access Forbidden Domains, page Website Blocking by Keywords, pageSchedule, page Web.”Using Content Filters to Control Internet Access Forbidden DomainsWebsite Blocking by Keywords Schedule Cisco ProtectLink Web Getting Started with Cisco ProtectLink WebSpecifying the Global Settings for Approved URLs and Clients, page Getting Started with Cisco ProtectLink Web, pageCisco ProtectLink Web Choose the appropriate optionSpecifying the Global Settings for Approved URLs and Clients Specifying the Global Settings for Approved URLs and ClientsCisco ProtectLink Web Approved URL Configuration Approved Clients ConfigurationApproved URLs and Approved Clients Cisco ProtectLink WebEnabling Web Protection for URL Filtering Web ProtectionCisco ProtectLink Web URL Filtering Cisco ProtectLink WebBusiness Hour Setting Web ReputationCisco ProtectLink Web Updating the ProtectLink License URL Overflow ControlCisco ProtectLink Web License License InformationCisco ProtectLink Web Introduction to VPNs Setting Up a Gateway to Gateway Site to Site VPN, pageSetting Up VPN Passthrough, page Setting Up PPTP Server, page Remote Access Client To Gateway, pageRemote Access Client To Gateway Configuration tasksSite to Site VPN Gateway To Gateway Gateway-to-Gateway VPN Tunnel Between RV0xx Series Routers.”NOTE Consider two other remote access options Remote Access with Cisco QuickVPN, page125 and Remote Access with PPTP, page125Remote Access with Cisco QuickVPN Remote Access with PPTPViewing the Summary Information for VPN SummaryTo open this page Click VPN Summary in the navigation tree Tunnel Status Up a Remote Access Tunnel for VPN Clients Client To Gateway, page GroupVPN StatusVPN Clients Status Setting Up a Gateway to Gateway Site to Site VPN Setting Up a Gateway to Gateway Site to Site VPNLocal Group Setup and Remote Group Setup Add a New TunnelIP + Domain Name FQDN Authentication Choose this option if this router has a static IP address and a registered domain name, such as MyServer.MyDomain.com. Also enter the Domain Name to use for authentication. The domain name can be used only for one tunnel connection IPSec Setup Preshared Key, page 135 and Advanced settings for IKE with Preshared Key, pageRequired fields for Manual mode Phase 1 / Phase 2 Authentication Select a method of authentication Required fields for IKE with Preshared KeyAdvanced settings for IKE with Preshared Key AH Hash Algorithm The AH Authentication Header protocol describes the packet format and default standards for packet structure. With the use of AH as the security protocol, protection is extended forward into the IP header to verify the integrity of the entire packet. Check the box to use this feature. Then select an authentication method MD5 or SHA1. MD5 produces a 128-bit digest to authenticate packet data. SHA1 produces a 160-bit digest to authenticate packet data. Both sides of the tunnel should use the same algorithm Page Setting Up a Remote Access Tunnel for VPN Clients Client To Gateway Setting Up a Remote Access Tunnel for VPN Clients Client To GatewayCisco Small Business RV0xx Series Routers Administration Guide RV0xxAdd a New Tunnel DNS hostname available from providers such as DynDNS.com. Enter a Domain Name to use for authentication. The domain name can be used only for one tunnel connection Remote Client Setup for a Group “Group VPN” Type IPSec Setup Required fields for Manual mode Enter the settings for manual modePhase 1 / Phase 2 Authentication Select a method of authentication Required fields for IKE with Preshared KeyAggressive Mode available for Tunnel, not Group VPN Two modes of Page Managing VPN Users and Certificates To open this page Click VPN VPN Client Access in the navigation treeUsers, page Certificate Management, page148 Users Certificate ManagementSetting Up VPN Passthrough To open this page Click VPN VPN Passthrough in the navigation treeSetting Up PPTP Server Setting Up PPTP ServerIP Address Range PPTP ServerTo open this page Click VPN PPTP Server in the navigation tree Connection List Setting Up the System Log and Alerts Logging System StatisticsSetting Up the System Log and Alerts, page Viewing the System Log, pageLog Setting, page Buttons, page Syslog sectionE-mail section Logging System StatisticsLog Setting Logging System StatisticsButtons Logging System StatisticsViewing the System Log Logging System StatisticsTo open this page click Log System Statistics in the navigation tree Logging System Statistics Received Bytes The number of bytes received through this interfaceWizard Basic Setup, page Access Rule Setup, page160Wizard on the System Summary page Basic Setup Access Rule SetupWizard Glossary TermDefinition Glossary TermDefinition Fragmentation ThresholdGlossary TermDefinition RADVD RouterGlossary TermDefinition RIPng RIP next generationTroubleshooting Troubleshooting The DSL telephone line does not fit into the router’s Internet portThe router does not have a coaxial port for the cable connection Cisco QuickVPN for Windows IntroductionCisco QuickVPN Client Installation and Configuration, page Using the Cisco QuickVPN Software, pageCisco QuickVPN Client Installation and Configuration Using the Cisco QuickVPN SoftwareCisco QuickVPN for Windows Cisco QuickVPN for Windows STEP 3 To save this profile, click SaveTopology Options Configuring a VPN Tunnel on a Cisco RV0xx Series Router, pageOverview, page Topology Options, page Other Design Considerations, pageVPN Hub and Spoke Topology Figure 1 Hub and SpokeVPN Mesh Topology Figure 2 MeshOther Design Considerations Figure 3 Gateway To Gateway Tunnel with Static IP AddressesLAN Setup Figure 4 Gateway To Gateway Tunnel with a Dynamic IP AddressConfiguring a VPN Tunnel on a Cisco RV0xx Series Router Example Sites with Static WAN IP Addresses FieldValue Field ValueField ValueField ValuesExample Site with a Dynamic WAN IP Address FieldValues FieldField ValueField ValueField ValuesField ValuesIPSec NAT Traversal OverviewConfiguration of Router A IPSec NAT TraversalConfiguration of Router B IPSec NAT TraversalCreation of New Services Bandwidth ManagementCreation of New Services, page STEP 4 On the Bandwidth Management page, click Service ManagementCreation of New Bandwidth Management Rules Bandwidth ManagementBandwidth Management STEP 5 Click SaveSpecifications RV042Specifications NetworkRV042G Specifications5.12 x 1.52 x 7.87 in. W x H x D 130 x 38.5 x 200 mm Specifications PerformanceSecurity NetworkSpecifications ManagementEnvironmental Cisco RV082 SpecificationsCisco RV082 Specifications ManagementCisco RV016 SpecificationsCisco RV016 Specifications SecurityNetwork Specifications ManagementEnvironmental Where to Go From Here SupportProduct Documentation Cisco Small Business