10/100 16-Port VPN Router

Dynamic IP + Domain Name(FQDN) Authentication. If the Remote Security Gateway has a dynamic IP and you want to use the Domain Name for authentication, then select this type. When the Remote Security Gateway asks to create a tunnel with the Router, the Router will work as a responder. For authentication, complete the Domain Name field, and make sure it matches the Domain Name set on the Local Gateway of the remote VPN device. (The Remote Security Gateway has a dynamic IP, so you do not need to enter an IP address.) The Domain Name can be used for only one tunnel connection, so you can’t use the same Domain Name to create another new tunnel connection.

Dynamic IP + E-mail Addr.(USER FQDN) Authentication. If the Remote Security Gateway has a dynamic IP and you want to use the e-mail address for authentication, then select this type. When the Remote Security Gateway asks to create a tunnel with the Router, the Router will work as a responder. For authentication, enter the appropriate e-mail address in the E-mail address fields. (The Remote Security Gateway has a dynamic IP, so you do not need to enter an IP address.)

Figure 6-63: Remote Security Gateway Type -

Dynamic IP + Domain Name (FQDN) Authentication

Figure 6-64: Remote Security Gateway Type -

Dynamic IP + E-mail Addr. (USER FQDN) Authentication

Remote Security Group Type

Select the Remote Security Group behind the Remote Gateway that can use this VPN tunnel. Select one of these three available types: IP, Subnet, or IP Range. The Remote Security Group Type you select should match the Local Security Group Type selected on the VPN device at the other end of the tunnel.

After you have selected the Remote Security Group Type, the settings available on this screen may change, depending on which selection you have made.

IP. If you select IP, then only the computer with a specific IP address will be able to access the tunnel. Enter the appropriate IP address.

Subnet. If you select Subnet, which is the default, then all computers on the remote subnet will be able to access the tunnel. Complete the IP address and Subnet Mask fields. The default Subnet Mask is 255.255.255.0.

IP Range. If you select IP Range, then you can specify a range of IP addresses within the subnet that will be able to access the tunnel. Complete the IP range fields.

IPSec Setup

In order for any encryption to occur, the two ends of a VPN tunnel must agree on the methods of encryption, decryption, and authentication. This is done by sharing a key to the encryption code. For key management, there are two modes available; select IKE with Preshared Key or Manual. Both ends of a VPN tunnel must use the same mode of key management.

Chapter 6: Setting up and Configuring the Router

Figure 6-65: Remote Security Group Type - IP

Figure 6-66: Remote Security Group Type - Subnet

Figure 6-67: Remote Security Group Type - IP Range

55

VPN Tab - Gateway to Gateway

Page 66
Image 66
Linksys RV016 manual IPSec Setup, Remote Security Group Type

RV016 specifications

The Linksys RV016 is a robust VPN router designed for small to medium-sized businesses, providing secure and reliable network connectivity. This device offers versatile features, catering to the demands of advanced users while maintaining ease of use for those less experienced with networking technologies.

One of the standout characteristics of the Linksys RV016 is its ability to handle multiple WAN connections. It features dual WAN ports, which enable load balancing and failover support. This ensures that in the event one internet connection fails, the other takes over seamlessly, minimizing downtime and enhancing productivity. The RV016 is equipped with eight Ethernet ports, providing sufficient connectivity for various devices within an office environment.

Security is a paramount consideration in the design of the RV016. The device supports a robust VPN (Virtual Private Network) capability, allowing secure remote access for employees working from home or traveling. The router supports both IPSec and PPTP VPN protocols, ensuring versatile and secure communication channels. Additionally, it offers advanced firewall features, including stateful packet inspection (SPI) and denial-of-service (DoS) attack prevention, which safeguard the network from unauthorized access and external threats.

Linksys has also incorporated Quality of Service (QoS) features into the RV016, allowing users to prioritize their network traffic. This is particularly useful for businesses that rely on voice over IP (VoIP) services or have high bandwidth applications, ensuring that critical applications receive the necessary bandwidth for optimal performance.

The RV016 supports a variety of network management protocols, including DHCP, DNS, and static routing, making it easy to integrate into existing network infrastructures. Its web-based interface simplifies configuration and management, enabling IT staff to efficiently set up network parameters without the need for extensive training.

In summary, the Linksys RV016 stands out as a feature-rich VPN router that combines security, reliability, and ease of use. Its multiple WAN support, advanced security features, and network management capabilities make it an ideal choice for businesses seeking a dependable networking solution. Whether handling remote access or managing network performance, the RV016 provides the necessary tools to keep business operations running smoothly.