Cisco RV180, Руководство администратора

Страница: 122 / 187

Configuring VPN and Security
Configuring Advanced VPN Parameters
Cisco RV180/RV180W Administration Guide 113
5
STEP 1
At the top of the page, enter these settings:
• Policy Name— Enter a unique name for the policy for identification and
management purposes.
• Direction/Type— Choose one of the following connection methods:
- Initiator —The router will initiate the connection to the remote end.
- Responder —The router will wait passively and respond to remote IKE
requests.
- Both —The router will work in either Initiator or Responder mode.
• Exchange Mode— Choose one of the following options:
- Main —This mode negotiates the tunnel with higher security, but is
slower.
- Aggressive —This mode establishes a faster connection, but with
lowered security.
Note: If either the Local or Remote identifier type is not an IP address, then
negotiation is only possible in Aggressive Mode. If FQDN, User FQDN or DER
ASN1 DN is selected, the router disables Main mode and sets the default to
Aggressive mode.
STEP 2
In the Local section, enter the Identifier Type to specify the Internet Security
Association and Key Management Protocol (ISAKMP) identifier for the local router:
• Local WAN (Internet) IP
• FQDN
• User-FQDN
• DER ASN1 DN
If you chose FQDN , User-FQDN , or DER ASN1 DN as the identifier type —
Enter the IP address or domain name in the Identifier field.
STEP 3
In the Remote section, enter the Identifier Type to specify the Internet Security
Association and Key Management Protocol (ISAKMP) identifier for the remote
router:
• Remote WAN (Internet) IP
• FQDN
• User FQDN