Could someone help me with the configuration for a site-to-site VPN tunnel between an RV180 and RVS4000?
I am pretty sure these two devices should be able to establish a VPN tunnel between each other, but I cannot seem to get it working. I have configured what is labeled as the Phase 2 IPSec Setup on the RVS4000 as a new IKE policy on the RV180. I have configured what is labeled as the Phase 1 IPSec Setup on the RVS4000 as VPN policy that uses the IKE policy, but no connection. Is this the correct way to think about it? Are there other considerations? Are there any gotch'yas?
Here's a couple of notes regarding my setup:
- Main office upgraded to RV180 (upgraded to get faster NAT throughput)
- Remote offices still run RVS4000's
- RVS4000 at main to remote RVS4000's site-to-site VPN has been working perfectly for years
- WAN connection is by domain name, not IP address (dyndns in use)
- RVS4000 setup generally looks like this
- Local Group Setup
- Local Security Gateway Type: IP Only
- Local Security Group Type: Subnet
- IP Address: 192.168.aaa.1
- Subnet: 255.255.255.0
- Remote Group Setup
- Remote Security Gateway Type: IP Only
- IP by DNS Resolved: xxxxx.dyndns.org
- Remote Security Group Type: Subnet
- IP Address: 192.168.bbb.1
- Subnet: 255.255.255.0
- IPSec Setup
- Keying Mode: IKE with Preshared Key
- Phase 1
- Encryption: 3DES
- Authentication: MD5
- Group: 1536 bit
- Key lifetime: 28800 seconds
- Phase 2
- Encryption: 3DES
- Authentication: SHA1
- Perfect Forward Secrecy: Enabled
- Preshared Key: xxxxxxxxxx
- Group: 1536 bit
- Key lifetime: 28800 seconds
- Aggressive Mode: Disabled
- NetBios Broadcast: Enabled
