Overview:

Today, secure networking is imperative for every business, even the smallest one.

To configure the Client-to-Site, follow these steps: Step 1 Click VPN Client-to-Site. Step 2 Click Add and the IPsec Client-to-Site Groups table will be displayed. Step 3 To add a Client to Site connection, click Add. Step 4 In the Add a New Group section, select an option (Cisco VPN Client or 3rd Party Client). Jul 21, 2017 RV340 Dual-WAN VPN Router-Product Views Front Panel View. The front panel shows the model number, the Reset button and several LEDs for Power, VPN, Diagnostics, LAN, WAN, and USB.

The RV340 Series security router provides business users with advanced connectivity and secure high-speed access for the growing demand and usage of digital services.

The Cisco RV340 Series routers connect small businesses securely to the Internet. The routers protect employees from threats such as viruses, network attacks, unwanted content, and malicious websites. All that without compromising the online experience.

Rv340 Vpn Client To Site Software

Implementing advanced Unified Threat Management (UTM) features on a high-performing router platform creates one of the most desirable small business connectivity solutions.

Standard are dual WAN ports, business class firewall, and flexible VPN options. Integrated Wi-Fi-5, 16- port LAN switch, and PoE LAN orts are available in model variants.

For cloud-based security, an easy-to-configure Cisco Umbrella™ integration is available.

Security

IT security is a priority for business of all sorts and sizes. With the size of an office or a remote office typically being rather small, IT staff is less likely to be available and offer user support. Any office environment requires the same functionality as the corporate office in terms of security that may include firewall, VPN, IPS, blocking applications and web protection.

The Cisco 340 Series offers comprehensive security and best-in-class performance.

• Firewall: Stateful, scalable, and flexible.
• UTM features (your choice of on prem or in the cloud) — Unified security features provide reliable and highly secure Internet connectivity with cloud application detection and policies.
• Secure connectivity: Flexible VPN functionality with support of Cisco AnyConnect® Secure Mobility Client.
• Hardware-accelerated performance: Dual core ARM-based architecture with embedded hardware-accelerated VPN.
• Dual-WAN with load-balancing and 3G/4G failover brings resiliency and increased bandwidth.
• Partner- or customer-centric single pane-of-glass network management with the integration into FindIT Manager or web UI.
• Automated software updates to keep the firmware current.

The security features include an on-board UTM feature set and a cloud-based Cisco Umbrella integration. These features can be used independently from each other and require a software license. When the Cisco Umbrella integration is activated, the on-board web security is turned off. All other security features will work.

Cisco Umbrella is a cloud-based web security service that delivers automatic protection from malicious or compromised websites, phishing, C2 Callbacks, and malware. With Cisco Umbrella, you gain visibility and enforcement at the DNS layer, so you can block requests to malicious domains and IPs before a connection to your network or endpoints is ever made. And because it’s built into the foundation of the Internet and delivered from the cloud, Umbrella is the simplest security product to deploy and delivers powerful, effective protection. The router integration allows for easy setup, enhanced visibility and reporting, and a small business–friendly branch license for Cisco Umbrella.

The on-board UTM security features include: Intrusion prevention, gateway antivirus, application identification, client identification, on-board web security. These features protect your network from attacks from the Internet and at the same allow for setting policies for corporate usage of the Internet by limiting Internet surfing to appropriate site categories and eliminating unwanted network traffic, hence boosting employee productivity and overall network performance.

Licensing

To operate the router no license is required. It will work with full performance and all VPN features are turned on.

1. The customer can add advanced security features to the router using a license. The license will enable IPS, Antivirus, Web Security, App ID, and Client ID. The licensed security features can be trialed at no cost for 90 days.
2. To integrate the router into Cisco Umbrella as a “network device type,” and to have the advantage of detailed security reporting for all hosts behind the router, a Cisco Umbrella license is required. For customers using only the RV routers, an affordable Cisco Umbrella branch license is available.

RV Security License (LS-RV34X-SEC-1YR=)
Enables dynamic web filter, Internet security and Application Visibility, Client Identification, IPS, and Antivirus.

Umbrella RV Branch License (UMB-BRAN-RV)
1-Year Cisco RV-Branch license. Uses Cisco Umbrella Licensing.

Features and Benefits:

• Dual WAN
  High resiliency and load balancing for reliable Internet connectivity.
• Integrated switch
  4- or 16-port*integrated gigabit switch to connect the devices directly to the router. PoE+* for powering connected phones and access point from the router. (RV340, RV340W: 4 Ports, RV345 16 Ports, RV345P: 16 Ports and PoE)
• Integrated WiFi-5
  Provides connectivity for all wireless devices. Wi-Fi-5 allows router to communicate with multiple devices simultaneously, decreases the time each device has to wait for a signal, and dramatically speeds up the wireless network. (RV340W only)
• 3G/4G failover via USB modem
  Provides high reliability and connectivity when broadband connection is down.
• Enhanced VPN functionality
  Protects employees and their data. Enterprise class, easy to set up. Encrypt all your traffic between sites. Flexible options. IPSec IKEv2, IKev1, Anyconnect SSL, L2TP.
• Support for the Cisco AnyConnect Secure Mobility Client
  Ideal for remote access by mobile devices.
• Dynamic web filtering
  Enables business efficiency and security while connecting to the Internet, allows Internet access policies for end devices and Internet applications to help ensure performance and security.
• Client identification
  Identifies the type of connected devices and allows setting policies. Application visibility Generates reports of Internet applications being used by clients and allows setting policies.
• Cisco Umbrella integration
  The Umbrella integration allows One-Click configuration for Cisco Umbrella cloud-based web security service.
• Intrusion Prevention System (IPS)
  Blocking network connections that are determined too risky for the organization.
• Antivirus
  Antivirus delivers deep extensive protection against all types of viruses.
• Cisco Plug and Play (PnP)
  Cloud-based Zero Touch Deployment. Improve operational efficiency with a simple, secure, and integrated method for device onboarding.
• Automatic software download and update
  Keeps the router constantly up-to-date without user intervention. Quickest way to mitigate 0-Day vulnerabilities.

Specifications:

Documentation:

Download the Cisco RV340, RV345, RV345P, and RV340W Dual WAN Security VPN Router Data Sheet (.PDF)

Pricing Notes:

• Pricing and product availability subject to change without notice.

Objective

In a Client-to-Site Virtual Private Network (VPN) connection, clients from the Internet can connect to the server to access the corporate network or Local Area Network (LAN) behind the server but still maintains the security of the network and its resources. This feature is very useful since it creates a new VPN tunnel that would allow teleworkers and business travelers to access your network by using a VPN client software without compromising privacy and security.

The objective of this document is to show you how to configure Client-to-Site VPN connection on the RV34x Series Router.

Applicable Devices

• RV34x Series

Software Version

• 1.0.01.16

Configure Client-to-Site VPN

Step 1. Log in to the router web-based utility and choose VPN > Client-to-Site.

Step 2. Click the Add button under IPSec Client-to-Site Tunnels section.

Step 3. In the Add a New Tunnel area, click the Cisco VPN Client radio button.

Step 4. Check the Enable check box to enable the configuration.

Step 5. Enter a group name in the field provided. This will serve as identifier for all the member of this group during the Internet Key Exchange (IKE) negotiations.

Note: Enter characters between A to Z or 0 to 9. Spaces and special characters are not allowed for the group name. In this example, TestGroup is used.

Step 6. Click on the drop-down list to choose the Interface. The options are:

• WAN1
• WAN2
• USB1
• USB2

Note: In this example, WAN1 is chosen. This is the default setting.

Step 7. In the IKE Authentication Method area, choose an authentication method to be used in IKE negotiations in IKE-based tunnel. The options are:

• Pre-shared Key — IKE peers authenticate each other by computing and sending a keyed hash of data that includes the Pre-shared Key. If the receiving peer is able to create the same hash independently using its Pre-shared key, it knows that both peers must share the same secret, thus authenticating the other peer. Pre-shared keys do not scale well because each IPSec peer must be configured with the Pre-shared key of every other peer with which it establishes a session.
• Certificate — The digital certificate is a package that contains information such as a certificate identity of the bearer: name or IP address, the serial number expiration date of the certificate, and a copy of the public key of the certificate bearer. The standard digital certificate format is defined in the X.509 specification. X.509 version 3 defines the data structure for certificates.

Note: In this example, Pre-shared Key is chosen. This is the default setting.

Step 8. Enter a pre-shared key in the field provided. This will be the authentication key among your group of IKE peers.

Step 9. (Optional) Check the Enable check box for the Minimum Pre-shared Key Complexity to view the Pre-shared Key Strength Meter and determine the strength of your key. The strength of your key are defined as follows:

• Red— The password is weak.
• Orange— The password is fairly strong.
• Green — The password is strong.

Note: You can check the Enable check box in the Show Pre-shared Key field to check your password in plain text.

Step 10. (Optional) Click on the plus icon in the User Group table to add a group.

Step 11. (Optional) Choose from the drop-down list whether the user group is for admin or for guests. If you created your own user group with user accounts, you can select it. In this example, we will be selecting TestGroup.

Note: TestGroup is a user group that we have created in System Configuration >User Groups.

Note: In this example, TestGroup is chosen. You can also check the box beside the user group and then click the Delete button if you want to delete a user group.

Step 12. Click on a radio button to choose a Mode. The options are:

• Client — This option allows the client to request for an IP address and the server supplies the IP addresses from the configured address range.
• Network Extension Mode (NEM) — This option allows clients to propose their subnet for which VPN services need to be applied on traffic between LAN behind server and subnet proposed by client.

Note: In this example, Client is chosen.

Step 13. Enter the starting IP address in the Start IP field. This will be the first IP address in the pool that can be assigned to a client.

Note: In this example, 192.168.100.1 is used.

Step 14. Enter the ending IP address in the End IP field. This will be the last IP address in the pool that can be assigned to a client.

Note: In this example, 192.168.100.100 is used.

Step 15. (Optional) Under the Mode Configuration area, enter the IP address of the primary DNS server in the field provided.

Note: In this example, 192.168.1.1 is used.

Rv340 Vpn Client To Site Download

Step 16. (Optional) Enter the IP address of the secondary DNS server in the field provided.

Note: In this example, 192.168.1.2 is used.

Step 17. (Optional) Enter the IP address of the primary WINS server in the field provided.

Note: In this example, 192.168.1.1 is used.

Step 18. (Optional) Enter the IP address of the secondary WINS server in the field provided.

Rv340 Vpn Client To Site Free

Note: In this example, 192.168.1.2 is used.

Step 19. (Optional) Enter the default domain to be used in the remote network in the field provided.

Note: In this example, sample.com is used.

Step 20. (Optional) In the Backup Server 1 field, enter the IP address or the domain name of the backup server. This will be where the device can start the VPN connection in case the primary IPSec VPN server fails. You can enter up to three backup servers in the fields provided. The Backup Server 1 has the highest priority among the three servers and the Backup Server 3 has the lowest.

Note: In this example, Example.com is used for Backup Server 1.

Step 21. (Optional) Check the Split Tunnel check box to enable split tunnel. Split Tunneling allows you to access the resources of a private network and the Internet at the same time.

Step 22. (Optional) Under the Split Tunnel Table, click the plus icon to add an IP address for split tunnel.

Step 23. (Optional) Enter the IP address and netmask of the split tunnel in the fields provided.

Note: In this example, 192.168.1.0 and 255.255.255.0 are used. You can also check the box and click on the Add, Edit, and Delete buttons to add, edit, or delete a split tunnel, respectively.

Step 24. (Optional) Check the Split DNS check box to enable split DNS. Split DNS allows you to create separate DNS servers for internal and external networks to maintain security and privacy of network resources.

Step 25. (Optional) Click the plus icon under the Split DNS Table to add a domain name for split DNS.

Step 26. (Optional) Enter the domain name of the split DNS in the field provided.

Note: In this example, labsample.com is used. You can also check the box and click on the Add, Edit, and Delete buttons to add, edit, or delete a split DNS, respectively.

Step 27. Click Apply.

Conclusion

You should now have successfully configured Client-to-Site connection on the RV34x Series Router.

Click on the following articles to learn more on the following topics:

View a video related to this article...