Cisco Small Business RV220W Administration Manual page 116

Configuring Virtual Private Networks (VPNs) and Security
Configuring Advanced VPN Parameters
STEP 5
STEP 6
Cisco RV220W Administration Guide
Optionally in the Extended Authentication section, enable Extended
Authentication (XAUTH). When connecting many VPN clients to a VPN gateway
router, XAUTH allows authentication of users with methods in addition to the
authentication method mentioned in the IKE SA parameters.
• XAUTH Type—Choose one of the following options:
- None—Disables XAUTH.
- Edge Device—Authentication is done by one of the following methods:
User Database—User accounts created in the router are used to
authenticate users. After completing this procedure, enter the users on
the VPN > IPsec > VPN Users page. See
page 122.
RADIUS-PAP or RADIUS-CHAP—Authentication is done by using a
RADIUS server and either password authentication protocol (PAP) or
challenge handshake authentication protocol (CHAP). After completing
this procedure, set up the RADIUS server on the Security > RADIUS
Server page. See
page 146.
- IPsec Host—The router is authenticated by a remote gateway with a
username and password combination. In this mode, the router acts as a
VPN Client of the remote gateway. If you select this option, also enter the
Username and Password for the host.
Click Save to save your settings, or click Cancel to reload the page with the
current settings. Click Back to return to the VPN > IPsec > Advanced VPN Setup
page.
Using the Cisco RV220W With a RADIUS Server,
Configuring VPN Users,
6
116