-Dynamic IP + E-mail Addr.(USER FQDN) Authentication—This router has a dynamic IP address and does not have a Dynamic DNS hostname. Enter an Email Address to use for authentication.
If both routers have dynamic IP addresses (as with PPPoE connections), do not choose Dynamic IP + Email Addr. for both gateways. For the remote gateway, choose IP Address and IP Address by DNS Resolved.
Keying Mode = IKE with Certificate
•Local Security Gateway Type—LAN resources that can use this tunnel. The only option is IP + Certificate.
-IP Address—Displays the WAN IP address of the device.
•Local Certificate—Certificates available in the Certificate Management > My Certificate window. Select the certificate from the drop-down menu.
Self-Generatordisplays the Certificate Generator window. Import Certificate displays the My Certificate window.
•Local Security Group Type—Allows selection of a single IP address, a Subnet, or an IP (address) Range within a subnet.
-IP Address—Specify one device that can use this tunnel. Enter the IP Address of the device.
-Subnet—Allow all devices on a subnet to use the VPN tunnel. Enter the subnetwork IP Address and Subnet Mask.
-Begin IP and End IP (IP Range)—A range of devices that can use the VPN tunnel. Enter the first IP address in Begin IP and the end IP address in End IP.
Cisco Small Business RV320/RV325 Administration Guide | 85 |
