Configuring VPN
Configuring Advanced VPN Setup
Cisco CVR100W Wireless-N VPN Router Administration Guide
108
6
Policy Type
Choose one of the following options:
•
Auto Policy:
Some parameters for the VPN
tunnel are generated automatically. This
requires using the IKE (Internet Key Exchange)
protocol to perform negotiations between the
two VPN endpoints.
•
Manual Policy:
All settings (including the keys)
for the VPN tunnel are manually input for each
endpoint. No third-party server or organization
is involved.
Remote Endpoint
Select the type of identifier that you want to provide
for the gateway at the remote endpoint:
IP Address
or
FQDN
. Then enter the identifier in the space provided.
Redundancy
Endpoint
Check
Enable
to enable the redundancy gateway
feature so that the CVR100W can connect to a backup
VPN endpoint when the primary VPN connection fails.
If you enable this feature, specify the IP address or
FQDN of the remote redundancy endpoint or the router
to which the CVR100W will connect when the primary
VPN connection fails.
Rollback enable
Check to switch to the primary VPN connection by
disabling the backup VPN connection when the
primary VPN connection has recovered from a failure.
NOTE
DPD should be enabled if you want to use the
Redundant Endpoint feature for IPsec VPN connection.
Local Traffic Selection
Local IP
Select the type of identifier that you want to provide
for the local peer:
•
Single:
Limits the policy to one host. Enter the IP
address of the local host that will be part of the
VPN in
IP Address
field.
•
Subnet:
Allows an entire subnet to connect to
the VPN. Enter your local network address in the
IP Address
field, and enter the subnet mask in
the
Subnet Mask
field.