On RV160 HUBGw Site-B Router =========================== ------------------------------ S2S Tunnel-2 to Site-C router ---------------------------------- Step-1: On RV160 Router, create the ipsec-algorithm-profile as below: - This Ipsec-Profile, should be the same as used on both Site-A and Site-C routers Name: IKEv1_Profile1 Version: IKEv1 Phase-1: AES128-SHA1-GROUP2; Lifetime: 28800sec Phase-2: ESP; AES256-SHA256; pfs=no; lifetime:3600sec - apply and do a permanent save too Step-2: Configure the S2S tunnel-2 to SiteC router as below: * In Basic Settings Tab: Enable: Yes(enable checkbox) Connection Name: toSiteC IPSec Profile: IKEv1-Profile1 Interface: WAN1 Remote Endpoint: dynamic-IP IKE Authentication Method: Pre-Shared-Key: Test$123456789 Local Group Setup: Local ID Type: Local FQDN Local Identifier: hubgw.test.local Local IP Type: ANY Remote Group Setup: Remote ID Type: Remote FQDN Remote Identifier: spoke2gw.test.local Remote IP Type: Subnet IP Address: 192.168.2.0 Subnet Mask: 255.255.255.0 * In Advanced Settings Tab: ------------------------- Aggressive Mode: Enable/checked Compress: Disable/Unchecked Netbios Broadcast: Disable/Unchecked Keepalive: Disabled/Unchecked DPD Enable: Yes (Checked/Enable) - Delay Time:10s - Detection Timeout: 30s - Delay Action: clear