Cisco Small Business RV 120W Wireless-N VPN Firewall ...

Configuring Virtual Private Networks (VPNs) and SecurityConfiguring Advanced VPN Parameters5Configuring IKE PoliciesThe Internet Key Exchange (IKE) protocol dynamically exchanges keys betweentwo IPsec hosts. You can create IKE policies to define the security parameterssuch as authentication of the peer, encryption algorithms, etc. to be used in thisprocess. Be sure to use compatible encryption, authentication, and key-groupparameters for the VPN policy.To configure IKE Policies:STEP 1STEP 2STEP 3Choose VPN > IPsec > Advanced VPN Setup. In the IKE Policy table, click Add.Under Policy Name, enter a unique name for the policy for identification andmanagement purposes.Under Direction/Type, choose one of the following connection methods:• Initiator—The router will initiate the connection to the remote end.• Responder—The router will wait passively and respond to remote IKErequests.• Both—The router will work in either Initiator or Responder mode.STEP 4Under Exchange Mode, choose one of the following options:• Main—This mode negotiates the tunnel with higher security, but is slower.• Aggressive—This mode establishes a faster connection, but with loweredsecurity.NOTE If either the Local or Remote identifier type is not an IP address, thennegotiation is only possible in Aggressive Mode. If FQDN, User FQDN or DERASN1 DN is selected, the router disables Main mode and sets the default toAggressive mode.STEP 5In the Local section, under Identifier Type, choose the Internet SecurityAssociation and Key Management Protocol (ISAKMP) identifier for this router:• Local WAN (Internet) IP• FQDN• User-FQDN• DER ASN1 DNCisco RV120W Administration Guide 95