Cisco RV260 series Administration Manual page 103

VPN
Step 1
On the Basic Settings tab, provide the following information:
Enable
Connection Name
IPSec Profile
Interface
Remote Endpoint
IKE Authentication Method
Pre-shared Key
Show Pre-shared Key
Preshared Key Strength
Meter
Minimum Preshared Key
Complexity
Certificate
For Local Group Setup
Local Identifier Type
Local Identifier
Local IP Type
IP Address
Subnet Mask
Remote Group Setup
Remote Identifier Type
Remote Identifier
Remote IP Type
Click Enable to enable the configuration.
Enter a connection name for the VPN tunnel. This description is for reference purposes;
it does not have to match the name used at the other end of the tunnel.
Default – Auto Profile is already chosen.
Select the interface (WAN1, WAN2, USB1, or USB2) from the drop-down list to use
for this tunnel.
Select Static IP, or FQDN from the drop-down list.
IKE peers authenticate each other by computing and sending a keyed hash of data that
includes the pre-shared key. If the receiving peer is able to create the same hash
independently using its pre-shared key, it knows that both peers must share the same
secret, thus authenticating the other peer. Pre-shared keys do not scale well because each
IPSec peer must be configured with the pre-shared key of every other peer with which
it establishes a session. Enter the Pre-shared Key, and click Enable to enable the Minimum
Pre-shared Key Complexity.
Check Enable to display the pre-shared key.
This shows the strength of the preshared key through colored bars.
Check Enable to enable the minimum preshared key complexity.
The digital certificate is a package that contains information such as a certificate bearer's
identity: name or IP address, the certificate's serial number, the certificate's expiration
date, and a copy of the certificate bearer's public key. The standard digital certificate
format is defined in the X.509 specification. X.509 version 3 defines the data structure
for certificates. Select the certificate from the drop-down list.
Select Local WAN IP, Local FQDN, or Local User FQDN from the drop-down list.
Enter the identifier name or IP Address based on your selection.
Select IP address or Subnet from the drop-down list.
Enter the IP address of the device that can use this tunnel.
Enter the subnet mask.
Select Local WAN IP, Local FQDN, or Local User FQDN from the drop-down list.
Enter the identifier name or IP Address based on your selection.
Select IP address or Subnet from the drop-down list.
Site-to-Site VPN Connection
RV260x Administration Guide
95