Cisco Systems RVS4000RF manual Local Group Setup, Remote Group Setup, Name Fqdn Authentication

Setting Up and Configuring the Router	5
VPN

Select Tunnel Entry To create a new tunnel, select new. To configure an existing tunnel, select it from the drop-down menu.

Delete Click this button to delete all settings for the selected tunnel.

Summary Clicking this button shows the settings and status of all enabled tunnels.

IPSec VPN Tunnel Check the Enable option to enable this tunnel.

Tunnel Name Enter a name for this tunnel, such as “Anaheim Office”.

Local Group Setup

Local Security Gateway Type This has two settings, IP Only and IP + Domain

Name (FQDN) Authentication.

•IP Only With this setting, the IP Address field automatically displays the router’s WAN IP address.

•IP + Domain Name (FQDN) Authentication With this setting, the IP Address field automatically displays the WAN IP address and domain name for greater security. Enter an arbitrary domain name in the Domain Name field.

Local Security Group Type Select the local LAN user(s) behind the router that can use this VPN tunnel. This may be a single IP address or Sub-network. Notice that the Local Security Group Type must match the other router’s Remote Security Group Type.

IP Address Enter the IP address on the local network.

Subnet Mask If the Local Security Group Type is set to Subnet, enter the mask to determine the IP addresses on the local network.

Remote Group Setup

Remote Security Gateway Type Select either IP Only or IP + Domain Name (FQDN) Authentication. The setting should match the Local Security Gateway Type for the VPN device at the other end of the tunnel.

•IP Only Choose this option to specify the remote device that can access the tunnel. Then either select IP Address from the drop-down menu and enter the remote gateway’s WAN IP address in the IP Address field, or select IP by DNS Resolved from the drop-down menu and enter the remote gateway’s domain name in the Domain Name field.

•IP + Domain Name (FQDN) Authentication Choose this option to include the IP address and a domain name for greater security. Enter an arbitrary

Cisco RVS4000 Security Router with VPN Administrator Guide 61