Cisco Systems RVS4000RF Network Router User Manual


 
Setting Up and Configuring the Router
VPN
Cisco RVS4000 Security Router with VPN Administrator Guide 61
5
Select Tunnel Entry To create a new tunnel, select new. To configure an existing
tunnel, select it from the drop-down menu.
Delete Click this button to delete all settings for the selected tunnel.
Summary Clicking this button shows the settings and status of all enabled tunnels.
IPSec VPN Tunnel Check the Enable option to enable this tunnel.
Tunnel Name Enter a name for this tunnel, such as “Anaheim Office”.
Local Group Setup
Local Security Gateway Type This has two settings, IP Only and IP + Domain
Name (FQDN) Authentication.
IP Only With this setting, the IP Address field automatically displays the
router’s WAN IP address.
IP + Domain Name (FQDN) Authentication With this setting, the IP
Address field automatically displays the WAN IP address and domain name
for greater security. Enter an arbitrary domain name in the Domain Name
field.
Local Security Group Type Select the local LAN user(s) behind the router that can
use this VPN tunnel. This may be a single IP address or Sub-network. Notice that
the Local Security Group Type must match the other router’s Remote Security
Group Type.
IP Address Enter the IP address on the local network.
Subnet Mask If the Local Security Group Type is set to Subnet, enter the mask to
determine the IP addresses on the local network.
Remote Group Setup
Remote Security Gateway Type Select either IP Only or IP + Domain Name
(FQDN) Authentication. The setting should match the Local Security Gateway
Type for the VPN device at the other end of the tunnel.
IP Only Choose this option to specify the remote device that can access
the tunnel. Then either select IP Address from the drop-down menu and
enter the remote gateway’s WAN IP address in the IP Address field, or
select IP by DNS Resolved from the drop-down menu and enter the remote
gateway’s domain name in the Domain Name field.
IP + Domain Name (FQDN) Authentication Choose this option to include
the IP address and a domain name for greater security. Enter an arbitrary