Configuring Security; Using Certificates For Authentication - Cisco Small Business RV220W Administration Manual

Configuring Virtual Private Networks and Security

Configuring Security

Configuring Security
Cisco RV220W Administration Guide
The RV220W provides several security methods, including certificate
authentication, RADIUS server support, and 802. 1 x port-based authentication.

Using Certificates for Authentication

The RV220W uses digital certificates for IPsec VPN authentication and SSL
validation (for HTTPS and SSL VPN authentication).
You can obtain a digital certificate from a well-known Certificate Authority (CA)
such as VeriSign, or generate and sign your own certificate using functionality
available on this gateway.
The gateway comes with a self certificate, and this can be replaced by one signed
by a CA as per your networking requirements. A CA certificate provides strong
assurance of the server's identity and is a requirement for most corporate network
VPN solutions.
The certificates menu allows you to view a list of certificates (both from a CA and
self) currently loaded on the gateway. The following certificate data is displayed in
the list of Trusted (CA) certificates:
• CA Identity (Subject Name)—The certificate is issued to this person or
organization.
• Issuer Name—The name of the Certificate Authority that issued this
certificate.
• Expiry Time—The date after which this Trusted certificate becomes invalid.
A self certificate is a certificate issued by a CA identifying your device (or self if
you don't want the identity protection of a CA). The Active Self Certificate Table
lists the self certificates currently loaded on the gateway. The following
information is displayed for each uploaded self certificate:
• Name—The name you use to identify this certificate. It is not displayed to
IPsec VPN peers or SSL users.
• Subject Name—This is the name that is displayed as the owner of this
certificate. This should be your official registered or company name, as
IPsec or SSL VPN peers are shown this field.
• Serial Number—The serial number is maintained by the CA and used to
identify this signed certificate.
5
127