IPSec NAT Traversal

Overview

E

NOTE Both the IPSec initiator and responder must support the mechanism for detecting the NAT router in the path and changing to a new port, as defined in RFC 3947.

Configuration of Router A

Follow these instructions for Router A.

STEP 1 Launch the web browser for a networked computer, designated PC 1. STEP 2 Access the configuration utility of Router A.

STEP 3 Click VPN > Gateway to Gateway in the navigation tree.

STEP 4 Enter a name in the Tunnel Name field.

STEP 5 For the VPN Tunnel setting, select Enable.

STEP 6 For the Local Security Gateway Type, select IP Only. The WAN IP address of Router A will be automatically detected.

For the Local Security Group Type, select Subnet. Enter Router A’s local network settings in the IP Address and Subnet Mask fields.

STEP 7 For the Remote Security Gateway Type, select IP Only. Enter Router B’s WAN IP address in the IP Address field.

STEP 8 For the Remote Security Group Type, select Subnet. Enter Router B’s local network settings in the IP Address and Subnet Mask fields.

STEP 9 In the IPSec Setup section, select the appropriate encryption, authentication, and other key management settings.

STEP 10 In the Preshared Key field, enter a string for this key, for example, 13572468. STEP 11 Click Advanced Settings.

STEP 12 Check the NAT Traversal box to enable this feature.

STEP 13 Click Save.

STEP 14 Proceed to the next section, Configuration of Router B, page185.

Cisco Small Business RV0xx Series Routers Administration Guide

184

Page 184
Image 184
Cisco Systems RV042G, RV016 manual IPSec NAT Traversal, Configuration of Router a