Create A Site-To-Site Vpn Connection - Cisco RV345 Administration Manual

VPN

Create a Site-to-Site VPN Connection

Step 1 On the Basic Settings tab, provide the following information:
Enable
Connection Name
IPSec Profile
Interface
Remote Endpoint
IKE Authentication Method
Preshared Key
Certificate
For Local Group Setup
Local Identifier Type
Local Identifier
Local IP Type
IP Address
Subnet Mask
Remote Group Setup
Click Enable to enable the configuration.
Enter a connection name for the VPN tunnel. This description is for reference purposes;
it does not have to match the name used at the other end of the tunnel.
Default - Auto Profile is already chosen.
Select the interface (WAN1, WAN2, USB1, or USB2) from the drop-down list to use
for this tunnel.
Select Static IP, or FQDN from the drop-down list.
IKE peers authenticate each other by computing and sending a keyed hash of data that
includes the pre-shared key. If the receiving peer is able to create the same hash
independently using its Pre-shared key, it knows that both peers must share the same
secret, thus authenticating the other peer. Pre-shared keys do not scale well because
each IPSec peer must be configured with the Pre-shared key of every other peer with
which it establishes a session. Enter the Pre-shared Key, and click Enable to enable the
Minimum Pre-shared Key Complexity.
The digital certificate is a package that contains information such as a certificate bearer's
identity: name or IP address, the certificate's serial number, the certificate's expiration
date, and a copy of the certificate bearer's public key. The standard digital certificate
format is defined in the X.509 specification. X.509 version 3 defines the data structure
for certificates. Select the certificate from the drop-down list.
Select Local WAN IP, Local FQDN, or Local User FQDN from the drop-down list
Enter the identifier name or IP Address based on your selection
Select IP address or Subnet from the drop-down list.
Enter the IP address of the device that can use this tunnel.
Enter the subnet mask.
Create a Site-to-Site VPN Connection
RV345/345P Administration Guide
81