Cisco Small Business RV 120W Wireless-N VPN Firewall ...

More documents

Recommendations

Info

Configuring Virtual Private Networks (VPNs) and SecurityConfiguring Advanced VPN Parameters5NOTE When configuring a lifetime in kilobytes (also known as lifebytes), be awarethat two SAs are created for each policy. One SA applies to inbound traffic,and one SA applies to outbound traffic. Due to differences in the upstreamand downstream traffic flows, the SA may expire asymmetrically. Forexample, if the downstream traffic is very high, the lifebyte for a downloadstream may expire frequently. The lifebyte of the upload stream may notexpire as frequently. It is recommended that the values be reasonably set, toreduce the difference in expiry frequencies of the SAs; otherwise thesystem may eventually run out of resources as a result of this asymmetry.The lifebyte specifications are generally recommended for advanced usersonly.STEP 2STEP 3STEP 4STEP 5Select the algorithm used to encrypt the data.Select the algorithm used to verify the integrity of the data.Under PFS Key Group, check the Enable box to enable Perfect Forward Secrecy(PFS) to improve security. While slower, this protocol helps to preventeavesdroppers by ensuring that a Diffie-Hellman exchange is performed for everyphase-2 negotiation.Choose the IKE policy that will define the characteristics of phase 1 of thenegotiation. (For information on creating these policies, see Configuring IKEPolicies, page 95.)Configuring VPN ClientsVPN clients must be configured with the same VPN policy parameters used in theVPN tunnel the client wishes to use: encryption, authentication, life time, and PFSkey-group. Upon establishing these authentication parameters, the VPN Clientuser database must also be populated with an account to give a user access tothe tunnel.VPN client software is required to establish a VPN tunnel between the router andremote endpoint. Open source software (such as OpenVPN or Openswan) as wellas Microsoft IPsec VPN software can be configured with the required IKE policyparameters to establish an IPsec VPN tunnel. Refer to the client software guide fordetailed instructions on setup as well as the router’s online help.Cisco RV120W Administration Guide 103
Configuring Virtual Private Networks (VPNs) and SecurityConfiguring Advanced VPN Parameters5The user database contains the list of VPN user accounts that are authorized touse a given VPN tunnel. Alternatively VPN tunnel users can be authenticated usinga configured RADIUS database. Refer to the online help to determine how topopulate the user database and/or configure RADIUS authentication.Monitoring VPN Tunnel StatusYou can view and change the status of (connect or drop) the router’s IPsecsecurity associations by performing one of the following actions:• Choose VPN > IPsec > Advanced VPN Setup and click IPsec VPNConnection Status.• Choose Status > IPsec Connection Status.Here the active IPsec SAs (security associations) are listed along with the trafficdetails and tunnel state. The traffic is a cumulative measure of transmitted/received packets since the tunnel was established.If a VPN policy state is “not connected”, it can be enabled from the List of VPNPolicies in the VPN > IPsec > Advanced VPN Setup page.Cisco RV120W Administration Guide 104
Page 1 and 2:
ADMINISTRATIONGUIDECisco Small Busi
Page 4 and 5:
ContentsChapter 2: Configuring Netw
Page 6 and 7:
ContentsChapter 4: Configuring the
Page 8 and 9:
ContentsConfiguring Network Managem
Page 10 and 11:
1IntroductionThis chapter describes
Page 12 and 13:
IntroductionProduct Overview1Securi
Page 14 and 15:
IntroductionGetting to Know the Cis
Page 16 and 17:
IntroductionMounting the Cisco RV12
Page 18 and 19:
IntroductionConnecting the Equipmen
Page 20 and 21:
IntroductionConnecting the Equipmen
Page 22 and 23:
IntroductionUsing the Getting Start
Page 24 and 25:
IntroductionNavigating through the
Page 26 and 27:
IntroductionSaving Your Changes1Sav
Page 28 and 29:
2Configuring NetworkingThe networki
Page 30 and 31:
Configuring NetworkingConfiguring t
Page 32 and 33:
Page 34 and 35:
Page 36 and 37:
Page 38 and 39:
Page 40 and 41:
Page 42 and 43:
Page 44 and 45:
Configuring NetworkingConfiguring R
Page 47 and 48:
Configuring NetworkingConfiguring R
Page 49 and 50:
Configuring NetworkingConfiguring P
Page 51 and 52:
Configuring NetworkingConfiguring I
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62: Configuring the Wireless NetworkA N
Page 63 and 64: Configuring the Wireless NetworkUnd
Page 65 and 66: Configuring the Wireless NetworkCon
Page 75 and 76: Configuring the FirewallCisco RV120
Page 77 and 78: Configuring the FirewallConfiguring
Page 97 and 98: Configuring the FirewallFirewall Co
Page 99 and 100: Configuring the FirewallFirewall Co
Page 101 and 102: 5Configuring Virtual Private Networ
Page 103 and 104: Configuring Virtual Private Network
Page 111: Configuring Virtual Private Network
Page 121 and 122: 6Configuring Quality of Service (Qo
Page 123 and 124: Configuring Quality of Service (QoS
Page 125 and 126: Configuring Quality of Service (QoS
Page 127 and 128: Administering Your Cisco RV120WConf
Page 129 and 130: Administering Your Cisco RV120WUsin
Page 135 and 136: Administering Your Cisco RV120WCapt
Page 143 and 144: Administering Your Cisco RV120WUpgr
Page 145 and 146: 8Viewing the Cisco RV120W StatusThi
Page 147 and 148: Viewing the Cisco RV120W StatusView
Page 159 and 160: AUsing Cisco QuickVPN for Windows 7
Page 161 and 162: Using Cisco QuickVPN for Windows 7,
Page 163:
BWhere to Go From HereCisco provide
show all

Cisco Small Business RV 120W Wireless-N VPN Firewall ...

Create successful ePaper yourself

Delete template?

Save as template?