Configuring Site-to-Site VPN Advanced Settings and Failover on the RV160 and RV260

<!DOCTYPE html> <html xmlns:fb="//www.facebook.com/2008/fbml" xmlns:og="//opengraphprotocol.org/schema/" lang="en" xml:lang="en" class="no-touch no-js"> <head> <meta charset="utf-8"> <meta name="HandheldFriendly" content="True" /> <meta name="MobileOptimized" content="320" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="rei" content="3/2/2022 10.39am est" /> <script tyle="text/javascript" src="/content/dam/cdc/j/cdcrSwitch.js"></script> <script type="text/javascript"> if (typeof cdc === "undefined"){ cdc = {}; } cdc.localizedLang="en/us"; if (window.cdcext === undefined) { window.cdcext = {}; } cdcext.customEnvironment = "prod"; if (window.cdclocale === undefined) { window.cdclocale = {}; } cdclocale.locale = cdc.localizedLang=="en/us"?"en_us":cdc.localizedLang; </script> <script src="/c/dam/cdc/t/ctm-core.js"></script> <script> window['adrum-start-time'] = new Date().getTime(); window.environ = "prod" ; </script> <script> if (window.cpe === undefined) { window.cpe = {}; } cpe.accountName = "prod"; cpe.config = ["cinf","dsc","pps"]; cpe.hideMethod = "elements"; window.targetGlobalSettings = JSON.parse('{\x22timeout\x22:4000}'); window.targetPageParamsAll = () => JSON.parse('{\x22entity\x22:\x22{\\\x22id\\\x22:\\\x221555000531296930\\\x22,\\\x22categoryId\\\x22:\\\x22Products,Routers,TSD Products Tech Note\\\x22}\x22}'); const bullseyeLibrary = `/etc.clientlibs/cisco-cdc/clientlibs/clientlib-external/resources/external/bullseye.js`; import(bullseyeLibrary); </script> <script src="/etc.clientlibs/cisco-cdc/clientlibs/clientlib-external/resources/regional-mbox/regional-mbox.js"></script> <title>Configuring Site-to-Site VPN Advanced Settings and Failover on the RV160 and RV260 - Cisco</title> <meta name="format-detection" content="telephone=no"> <meta http-equiv="Content-type" content="text/html;charset=UTF-8" /> <meta name="description" content="The objective of this document is to show you how to configure site-to-site VPN advanced settings and failover on the RV160 and RV260." /> <meta name="title" content="Configuring Site-to-Site VPN Advanced Settings and Failover on the RV160 and RV260" /> <meta name="documentId" content="1554933610037562" /> <meta name="templateName" content="eot" /> <meta name="SecondaryPID" content="RV260-K9-G5-WS,RV260-K9-G5,RV260P-K9-G5,RV260P-K9-G5-WS" /> <meta property="fb:app_id" content="156494687694418" /> <meta name="ioContentSource" content="WEM" /> <meta name="concept" content="Cisco Small Business RV Series Routers" /> <meta name="secondaryConcept" content="Cisco RV160 VPN Router" /> <meta name="secondaryConcept" content="Cisco RV260 VPN Router" /> <meta name="docType" content="TSD Products Tech Note" /> <meta name="iaPath" content="cisco.com#Products#Cisco Products#Routers#Small Business Routers#Cisco Small Business RV Series Routers" /> <meta name="contentType" content="cisco.com#US#postSales" /> <meta name="Topics" content="SMB#Virtual Private Network VPN#Site2Site VPN,SMB#Family#Routers#routers-160,SMB#Family#Routers#routers-260" /> <meta name="locale" content="US" /> <meta name="language" content="en" /> <meta name="country" content="US" /> <meta name="hub" content="Enterprise Networks" /> <meta name="CCID_Page" content="cc001772" /> <meta name="date" content="Thu Jun 20 14:43:41 PDT 2019" /> <meta name="accessLevel" content="Customer" /> <meta name="accessLevel" content="Guest" /> <meta name="accessLevel" content="Partner" /> <meta name="entitlementExpression" content="contains( "0,1,2,3,4,7" , $profileField[3] )" /> <meta property="og:site_name" content="Cisco" /> <meta property="og:type" content="website" /> <meta property="og:title" content="Configuring Site-to-Site VPN Advanced Settings and Failover on the RV160 and RV260" /> <meta property="og:description" content="The objective of this document is to show you how to configure site-to-site VPN advanced settings and failover on the RV160 and RV260." /> <meta property="og:url" content="https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html" /> <link rel="canonical" href="https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="x-default" href="https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="pt-br" href="https://www.cisco.com/c/pt_br/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="es-mx" href="https://www.cisco.com/c/es_mx/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="ko-kr" href="https://www.cisco.com/c/ko_kr/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="it-it" href="https://www.cisco.com/c/it_it/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="ja-jp" href="https://www.cisco.com/c/ja_jp/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="de-de" href="https://www.cisco.com/c/de_de/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="fr-ca" href="https://www.cisco.com/c/fr_ca/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="ar-ae" href="https://www.cisco.com/c/ar_ae/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="nl-nl" href="https://www.cisco.com/c/nl_nl/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="zh-tw" href="https://www.cisco.com/c/zh_tw/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="zh-cn" href="https://www.cisco.com/c/zh_cn/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <link rel="alternate" hreflang="en-us" href="https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html"/> <script src="/etc.clientlibs/clientlibs/granite/jquery.min.js"></script> <script src="/etc.clientlibs/clientlibs/granite/utils.min.js"></script> <script src="/etc.clientlibs/clientlibs/granite/jquery/granite.min.js"></script> <script src="/etc.clientlibs/foundation/clientlibs/jquery.min.js"></script> <script src="/etc.clientlibs/foundation/clientlibs/shared.min.js"></script> <script src="/etc.clientlibs/cq/personalization/clientlib/underscore.min.js"></script> <script src="/etc.clientlibs/cq/personalization/clientlib/personalization/kernel.min.js"></script> <script src="/etc.clientlibs/cq/personalization/clientlib/personalization/kernel.min.js"></script> <script type="text/javascript"> $CQ(function() { CQ_Analytics.SegmentMgr.loadSegments("\/etc\/segmentation"); CQ_Analytics.ClientContextUtils.init("\/c\/dnc\/etc\/clientcontext\/default", "\/content\/en\/us\/support\/docs\/smb\/routers\/cisco\u002Drv\u002Dseries\u002Dsmall\u002Dbusiness\u002Drouters\/Configuring_Site\u002Dto\u002DSite_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260"); }); </script> <link rel="stylesheet" href="/etc/designs/cdc/clientlibs/responsive/css/cisco-sans.min.css" type="text/css"> <script src="/etc/designs/cdc/clientlibs/responsive/js/foundation.min.js"></script> <link rel="stylesheet" href="/etc/designs/cdc/fw/b/responsive/css/eot.min.css" type="text/css"> <script> sessionStorage.setItem("logOutIntermediateMessage", 'You are being logged out.'); </script>  <script type="application/ld+json"> [ { "@context": "http://www.schema.org", "@type": "WebPage", "name": "Configuring Site-to-Site VPN Advanced Settings and Failover on the RV160 and RV260", "url": "https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html", "description": "The objective of this document is to show you how to configure site-to-site VPN advanced settings and failover on the RV160 and RV260.", "publisher": { "@type": "Corporation", "name": "Cisco" } }] </script>    <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="GKZXC-NS3SU-A7VFH-HKBHM-U7LKH",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"GKZXC-NS3SU-A7VFH-HKBHM-U7LKH";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="bdpnbeqxgy4r2z2g56pq-f-e6268f770-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"61004","ak.ai":parseInt("271834",10),"ak.ol":"0","ak.cr":3,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"3227da8","ak.r":37669,"ak.a2":n,"ak.m":"dsca","ak.n":"essl","ak.bpcip":"8.222.208.0","ak.cport":33910,"ak.gh":"23.53.33.212","ak.quicv":"","ak.tlsv":"tls1.2","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"reno","ak.t":"1732702111","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==CoI7Pe8KCV5xYjUtbqtsEPlfWoQRucBQMmGErps8v0VFteEld0wevuP7deGKtitcHbPq13J4v8hhxTpefYWf9R+AOuu1RIunVe6Kl4x/QNPI2j5wrqV0nSgyWmmIYwKUXHxopysWHHwpMm8OnGACmDUgzGILUoLU5E/UUaFqrtIQAkxeyYsAODqe/NJnAlCEg68oSme9Z2SxAsU0oEBkxtm6o05sOAVMtwngo8SPvRIfGRgcW71OR7/ah2ABmjrFZhR2cxkHj66J9XncCvef6sqcbyZ9YQgwJGSbOnXCfRj8RcMEW2633ZbKlrBV1SUs3jQ9+qSbsbU+Lx2orZ400xSh1ntptaP++DAjWXdiLnz0oqNXL0m4n1fLLGLgouoHC2q8ObOqnvbGY4a2JSznB6YMo8dvQPkS1C6w/6HSeVw=","ak.pv":"517","ak.dpoabenc":"","ak.tf":i};if(""!==t)o["ak.ruds"]=t;var r={i:!1,av:function(n){var t="http.initiator";if(n&&(!n[t]||"spa_hard"===n[t]))o["ak.feo"]=void 0!==e.aFeoApplied?1:0,BOOMR.addVar(o)},rv:function(){var e=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(e)}};BOOMR.plugins.AK={akVars:o,akDNSPreFetchDomain:a,init:function(){if(!r.i){var e=BOOMR.subscribe;e("before_beacon",r.av,null,null),e("onbeacon",r.rv,null,null),r.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head> <body id="wcq" class="fw-res cdc-support cdc-eot cdc-high-density cdc-full-width cdc-transform "> <div id="fw-skiplinks"> <ul class="container"> <li><a id="skiplink-content" href="#fw-content">Skip to content</a></li> <li><a id="skiplink-search" href="#">Skip to search</a></li> <li><a id="skiplink-footer" href="#fw-footer-v2" class="last">Skip to footer</a></li> </ul> </div> <script type="module" src="/site/web-components/us/en/cdc-header.js"></script> <cdc-header></cdc-header> <nav class="fw-c-header__seo-links" aria-hidden="true" style="display:none"> <ul> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/index.html">Cisco.com Worldwide</a></li> <li><a tabindex="-1" href="/c/en/us/products/index.html">Products and Services</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/solutions/index.html">Solutions</a></li> <li><a tabindex="-1" href="/c/en/us/support/index.html">Support</a></li> <li><a tabindex="-1" href="/c/en/us/training-events.html">Learn</a></li> <li><a tabindex="-1" href="//www.cisco.com/c/en/us/about/sitemap.html">Explore Cisco</a></li> <li><a tabindex="-1" href="/c/en/us/buy.html">How to Buy</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/index.html?dtid=odicdc001129">Partners Home</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/cisco-partner-program/index.html?ccid=cc000864&dtid=odiprc001129">Partner Program</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/support-help/index.html">Support</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/tools/index.html?dtid=odiprc001129">Tools</a></li> <li><a tabindex="-1" href="https://locatr.cloudapps.cisco.com/WWChannels/LOCATR/pf/index.jsp#/">Find a Cisco Partner</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/connect-with-a-partner/index.html?ccid=cc000864&dtid=odiprc001129">Meet our Partners</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/index.html?dtid=odicdc001129">Become a Cisco Partner</a></li> </ul> </nav> <div id="fw-content" class="container grid"> <div class="row full blowout" data-owner="ID"> <div class="col full "> <nav id="fw-breadcrumb" class="data-based" aria-label="breadcrumbs" data-owner="ID"> <ul itemscope itemtype="//schema.org/BreadcrumbList"> <li aria-hidden="true"><a href='#' class="skip"><span></span></a></li> <li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/support/index.html'><span itemprop='name'>Support</span><meta itemprop='position' content='1' /></a><span class='caret'></span></li><li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/support/all-products.html'><span itemprop='name'>Product Support</span><meta itemprop='position' content='2' /></a><span class='caret'></span></li><li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/support/routers/index.html'><span itemprop='name'>Routers</span><meta itemprop='position' content='3' /></a><span class='caret'></span></li><li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/support/routers/small-business-rv-series-routers/series.html'><span itemprop='name'>Cisco Small Business RV Series Routers</span><meta itemprop='position' content='4' /></a><span class='caret'></span></li><li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/support/routers/small-business-rv-series-routers/products-configuration-examples-list.html'><span itemprop='name'>Configuration Examples and TechNotes</span><meta itemprop='position' content='5' /></a><span class='caret'></span></li> </ul> </nav> <script> if (window.cdc === undefined) { window.cdc = {}; } if (cdc.breadcrumb === undefined) { cdc.breadcrumb = (function () { let clone = document.querySelector('#fw-breadcrumb').cloneNode(true); let appendClone = function () { let hasBreadcrumb = document.querySelector('#fw-breadcrumb') !== null, firstMarquee = document.querySelectorAll('.dmc-mq')[0]; if (!hasBreadcrumb && firstMarquee !== undefined) { firstMarquee.querySelector('.frame .inset').insertBefore(this.clone, firstMarquee.querySelector('.frame .inset').firstElementChild); } }; return { clone: clone, appendClone: appendClone } }()); } //DE380224 var anchorChild = document.getElementsByTagName("a"); for(var i=0; i<anchorChild.length; i++){ if(anchorChild[i].getAttribute("itemprop")=="item") { if ( anchorChild[i].href.includes("%3Clocale%3E") ){ let anchorChildHREF = anchorChild[i].href; let docLocale = document.querySelector('meta[name="locale"]').getAttribute('content'); let docLanguage = document.querySelector('meta[name="language"]').getAttribute('content'); var docSeparator; if ((docLocale.toLowerCase() == "us") && (docLanguage.toLowerCase() == "en")) { docSeparator="/"; } else { docSeparator="_"; } let anchorURLReplace = docLanguage.toLowerCase() + docSeparator + docLocale.toLowerCase(); anchorChildHREF = anchorChildHREF.replace("%3Clocale%3E", anchorURLReplace); anchorChild[i].setAttribute('href', anchorChildHREF); } } } </script> <h1 id="fw-pagetitle" class="" data-owner="ID">Configuring Site-to-Site VPN Advanced Settings and Failover on the RV160 and RV260</h1> </div> </div>  <div class="row blowout wide-narrow-v2 visitedlinks"> <div class="col wide-v2"> <script> if (typeof(cdc) == "undefined") cdc={}; if (typeof(cdc.translations) == "undefined") cdc.translations={}; </script> <div class="docHeaderComponent base-blowout"> <div class="linksRow"> <div class="toolbar"> <div class="noprint" id="saveModule"> <script type="text/javascript"> cdc.util.ensureNamespace("cdc.rc.savedoc"); cdc.rc.savedoc.isLoggedIn = false; cdc.rc.savedoc.save = "Save"; cdc.rc.savedoc.saved = "Saved"; </script> <button class="save" aria-expanded="false"> <label>Save</label> </button> </div> <div class="saveDocumentMessage login cdc-expandPanel" role="region" aria-live="polite"> <a href="/c/login/index.html?referer=/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html">Log in</a> to Save Content </div>   <div class="noprint translations"> <a href="#" tabindex="-1"> <button type="button" class="translations translations-link anchor translationOptions simpleOverlay-trigger"> <div class="toolbarIcon translationsIcon"></div><label class="iconLabel" id="onlyForNonEn">Translations</label> </button> </a> </div> <div class="noprint downloadDocument" ><button type="button" class="view-download-list-link anchor" aria-expanded="false"><div class="toolbarIcon downloadIcon"></div><label class="iconLabel">Download</label></button></div> <div class="noprint printDocument js-only"><button type="button" class="anchor printPage"><div class="toolbarIcon printIcon"></div><label class="iconLabel">Print</label></button></div> </div> </div>  <script language="javascript"> cdc.translations.map = "{pt-br=https://www.cisco.com/c/pt_br/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, es-mx=https://www.cisco.com/c/es_mx/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, ko-kr=https://www.cisco.com/c/ko_kr/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, it-it=https://www.cisco.com/c/it_it/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, ja-jp=https://www.cisco.com/c/ja_jp/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, de-de=https://www.cisco.com/c/de_de/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, fr-ca=https://www.cisco.com/c/fr_ca/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, ar-ae=https://www.cisco.com/c/ar_ae/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, nl-nl=https://www.cisco.com/c/nl_nl/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, zh-tw=https://www.cisco.com/c/zh_tw/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, zh-cn=https://www.cisco.com/c/zh_cn/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, en-us=https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html, x-default=https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.html}";//storing the map for use in the JS cdc.translations.locale="en_us"; </script> <div class="availableLanguagesList"> <h3>Available Languages</h3> <ul id="translationsList"> </ul> </div> <div id="download-list-container" class="noprint panelRow" role="region" aria-live="polite"> <div class='download-list' aria-label="Download Options"> <h3>Download Options</h3> <ul> <li> <div class="fileText"> <a href="/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.pdf" class="download-pdf"><div class="fileIcon pdfIcon"></div>PDF</a> <span class="docSize">(1.8 MB)</span> <br /> <span class="description">View with Adobe Reader on a variety of devices</span> </div> </li> <li> <div class="fileText"> <a href="/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.epub" class="download-epub"><div class="fileIcon epubIcon"></div>ePub</a> <span class="docSize">(1.9 MB)</span> <br /> <span class="description">View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone</span> </div> </li> <li> <div class="fileText"> <a href="/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260.mobi" class="download-mobi"><div class="fileIcon mobiIcon"></div>Mobi (Kindle)</a> <span class="docSize">(1.6 MB)</span> <br /> <span class="description">View on Kindle device or Kindle app on multiple devices</span> </div> </li> </ul> </div> </div> <div class="infobarClearFix"> <div class="infobar"> <div class="updatedDate"><span>Updated:</span>April 10, 2019</div> <div class="documentId"><span>Document ID:</span>1554933610037562</div> </div> <div class="disclaimers support"> <div class="disclaimerButtons"> <div class="aboutBias"> <button aria-expanded="false" >Bias-Free Language</button> </div> </div> <div class="biasfreeContent panel"> <h3>Bias-Free Language</h3> <p>The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. <a href="https://www.cisco.com/c/en/us/about/social-justice/inclusive-language-policy.html">Learn more</a> about how Cisco is using Inclusive Language.</p> </div> </div> </div> </div> <script> jQuery(document).ready(function(){ if(jQuery("body").hasClass("cdc-eot-toc") && jQuery(".cdc-eot-toc").find(".DocumentHistory").length > 0){ jQuery(".cdc-eot-toc .seeRevisions").show(); if(jQuery(window).width() >= 768){ jQuery(".cdc-eot-toc .updatedDate").nextAll(".bullet").show(); } }else{ jQuery(".cdc-eot-toc .infobar .bullet").hide(); jQuery(".cdc-eot-toc .seeRevisions"); jQuery(".cdc-eot-toc .updatedDate"); } }) </script> <script src="/etc/designs/cdc/fw/clientlibs/granite-utils.min.js"></script> <script> if (window.cdc === "undefined") window.cdc={}; if (typeof cdc.rc === "undefined") cdc.rc={}; // initialize dictionary for i18n cdc.util.ensureNamespace("cdc.rc"); cdc.rc.eotkeys = { showOnly5Products : "Show Only 5 Products", showAllRowsProducts : "Show All nRows Products", supportCommunityUrl : "https://community.cisco.com/t5/technology-and-support/ct-p/technology-support", supportCommunity : "Cisco Community", thankYou : "Thank You", viewersAlso : "Customers Also Viewed", show : "Show", more : "More", showOnly3Documents: "Show Only 3 Documents" }; </script> <div id="eot-doc-wrapper"> <html> <head> <meta http-equiv=Content-Type content="text/html; charset=utf-8"> <meta name=Generator content="Microsoft Word 15 (filtered)"> <link rel="stylesheet" type="text/css" href="https://www.cisco.com/etc/designs/cdc/transforma tion/support-responsive.css"/> <style type="text/css"> .Vid-Card-CDT:hover { -webkit-box-shadow: -2px 0 2px 0 rgba(0, 0, 0, 0.16), 2px 0 2px 0 rgba(0, 0, 0, 0.16), 0 2px 2px 0 rgba(0, 0, 0, 0.23); box-shadow: -2px 0 2px 0 rgba(0, 0, 0, 0.16), 2px 0 2px 0 rgba(0, 0, 0, 0.16), 0 2px 2px 0 rgba(0, 0, 0, 0.23); } .Vid-Card-CDT { border-radius: 1px; border-top: 30px solid #64BBE3; -webkit-box-shadow: -1px 0 2px 0 rgba(0, 0, 0, 0.15), 1px 0 2px 0 rgba(0, 0, 0, 0.15), 0 1px 1px 0 rgba(0, 0, 0, 0.24); box-shadow: -1px 0 2px 0 rgba(0, 0, 0, 0.15), 1px 0 2px 0 rgba(0, 0, 0, 0.15), 0 1px 1px 0 rgba(0, 0, 0, 0.24); padding: 16px; margin-bottom: 1em; /* width: 95%; */ width: calc(100% - 80px); position: relative; margin: auto; margin-bottom: 2em; } .Vid-Card-CDT>h2 { margin-bottom: 1em; } .videoWrapper { position: relative; padding-bottom: 56.25%; /* 16:9 */ padding-top: 25px; height: 0; margin-bottom: 1em; } .videoWrapper iframe:hover { -webkit-box-shadow: -2px 0 2px 0 rgba(0, 0, 0, 0.16), 2px 0 2px 0 rgba(0, 0, 0, 0.16), 0 2px 2px 0 rgba(0, 0, 0, 0.23); box-shadow: -2px 0 2px 0 rgba(0, 0, 0, 0.16), 2px 0 2px 0 rgba(0, 0, 0, 0.16), 0 2px 2px 0 rgba(0, 0, 0, 0.23); } .videoWrapper iframe { position: absolute; top: 0; left: 0; width: 95%; height: 95%; } #Vid-Button-CDT { background-color: #6CC04A; border: none; font-weight: 1900; color: white; padding: 15px 31px; text-decoration: none; display: inline-block; font-size: 16px; border-radius: 12px; margin-top: 2em; } #Vid-Button-CDT:hover { text-decoration: underline; -webkit-text-decoration-line: underline; -webkit-box-shadow: -2px 0 2px 0 rgba(0, 0, 0, 0.16), 2px 0 2px 0 rgba(0, 0, 0, 0.16), 0 2px 2px 0 rgba(0, 0, 0, 0.23); box-shadow: -2px 0 2px 0 rgba(0, 0, 0, 0.16), 2px 0 2px 0 rgba(0, 0, 0, 0.16), 0 2px 2px 0 rgba(0, 0, 0, 0.23); } </style> <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="GKZXC-NS3SU-A7VFH-HKBHM-U7LKH",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"GKZXC-NS3SU-A7VFH-HKBHM-U7LKH";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="bdpnbeqxgy4r2z2g56pq-f-e6268f770-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"61004","ak.ai":parseInt("271834",10),"ak.ol":"0","ak.cr":3,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"3227da8","ak.r":37669,"ak.a2":n,"ak.m":"dsca","ak.n":"essl","ak.bpcip":"8.222.208.0","ak.cport":33910,"ak.gh":"23.53.33.212","ak.quicv":"","ak.tlsv":"tls1.2","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"reno","ak.t":"1732702111","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==CoI7Pe8KCV5xYjUtbqtsEPlfWoQRucBQMmGErps8v0VFteEld0wevuP7deGKtitcHbPq13J4v8hhxTpefYWf9R+AOuu1RIunVe6Kl4x/QNPI2j5wrqV0nSgyWmmIYwKUXHxopysWHHwpMm8OnGACmDUgzGILUoLU5E/UUaFqrtIQAkxeyYsAODqe/NJnAlCEg68oSme9Z2SxAsU0oEBkxtm6o05sOAVMtwngo8SPvRIfGRgcW71OR7/ah2ABmjrFZhR2cxkHj66J9XncCvef6sqcbyZ9YQgwJGSbOnXCfRj8RcMEW2633ZbKlrBV1SUs3jQ9+qSbsbU+Lx2orZ400xSh1ntptaP++DAjWXdiLnz0oqNXL0m4n1fLLGLgouoHC2q8ObOqnvbGY4a2JSznB6YMo8dvQPkS1C6w/6HSeVw=","ak.pv":"517","ak.dpoabenc":"","ak.tf":i};if(""!==t)o["ak.ruds"]=t;var r={i:!1,av:function(n){var t="http.initiator";if(n&&(!n[t]||"spa_hard"===n[t]))o["ak.feo"]=void 0!==e.aFeoApplied?1:0,BOOMR.addVar(o)},rv:function(){var e=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(e)}};BOOMR.plugins.AK={akVars:o,akDNSPreFetchDomain:a,init:function(){if(!r.i){var e=BOOMR.subscribe;e("before_beacon",r.av,null,null),e("onbeacon",r.rv,null,null),r.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head> <body lang="EN-US" link="#0563C1" vlink="#954F72"> <div class=WordSection1> <h2>Objective</h2> <p class=MsoNormal><span id="span_0a45_1">The objective of this document is to show you how to configure site-to-site VPN advanced settings and failover on the RV160 and RV260. </span></p> <h2>Introduction</h2> <p class=MsoNormal><span id="span_0a45_3">A virtual private network (VPN) is a great way to connect remote workers to a secured network. A VPN allows a remote host to act as if they were connected to the onsite secured network. In a site-to-site VPN, the local router at one location connects to a remote router through a VPN tunnel. This tunnel encapsulates data securely by using industry-standard encryption and authentication techniques to secure sent data. </span>An identical configuration must be done on both sides of the connection for a successful site-to-site VPN connection to be established. Advanced site-to-site VPN configuration provides the flexibility to configure optional configurations for the VPN tunnel. </p> <p class=MsoNormal><span id="span_0a45_4">Failover is a powerful feature that ensures a constant connection between these two sites. This is useful when fault-tolerance is important. A failover occurs when the primary router is down. At this point, a secondary or backup router will take over and provide a connection. This will help prevent a single point of failure. </span></p> <h2>Applicable Devices</h2> <p class=MsoListParagraphCxSpFirst id="p_0a45_0"><font size=2 face=Symbol><span id="span_0a45_6">·<font size=1 face="Times New Roman"><span id="span_0a45_7">       </span></font></span></font>RV160</p> <p class=MsoListParagraphCxSpLast id="p_0a45_1"><font size=2 face=Symbol><span id="span_0a45_8">·<font size=1 face="Times New Roman"><span id="span_0a45_9">       </span></font></span></font>RV260</p> <h2>Software Version</h2> <p class=MsoListParagraph id="p_0a45_2"><font size=2 face=Symbol><span id="span_0a45_11">·<font size=1 face="Times New Roman"><span id="span_0a45_12">       </span></font></span></font>1.0.00.13</p> <h2>Prerequisites</h2> <p class=MsoNormal><span id="span_0a45_14">Before configuring advanced settings and failover for site-to-site VPN on the RV160 and RV260, you will need to configure IPsec profile and site-to-site VPN on your local and remote router. Below is a list of articles that can help you configure them. You have the option to use the VPN Setup Wizard which will help you configure both IPsec profile as well as site-to-site VPN or you can configure them separately and follow along the two documents that are provided below. </span></p> <p class=MsoListParagraph id="p_0a45_3"><span id="span_0a45_15">1.<font size=1 face="Times New Roman"><span id="span_0a45_16">       </span></span></font><a href="https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_VPN_Setup_Wizard_on_the_RV160_and_RV260.html">Configuring VPN Setup Wizard on the RV160 and RV260</a> </p> <p class=MsoNormal id="p_0a45_4"><span id="span_0a45_17">Or</span></p> <p class=MsoListParagraphCxSpFirst id="p_0a45_5"><span id="span_0a45_18">1.<font size=1 face="Times New Roman"><span id="span_0a45_19">       </span></span></font><a href="https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_IPSec_Profiles_Auto_Keying_Mode_on_the_RV160_and_RV260.html">Configuring IPSec Profiles (Auto Keying Mode) on the RV160 and RV260</a> (Optional)</p> <p class=MsoListParagraphCxSpLast id="p_0a45_6"><span id="span_0a45_20">2.<font size=1 face="Times New Roman"><span id="span_0a45_21">       </span></span></font><a href="https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Configuring_Site-to-Site_VPN_on_the_RV160_and_RV260.html">Configuring Site-to-Site VPN on the RV160 and RV260</a></p> <h2>Configuring Site-to-Site VPN Advanced Settings </h2> <p class=MsoNormal><span id="span_0a45_23">The advanced settings should be configured the same on both sides of the VPN connection.</span></p> <p class=MsoNormal><span id="span_0a45_24">Step 1. Log in to the web configuration utility.</span></p> <img border="0" width="490" height="584" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image001.png"> <p class=MsoNormal><span id="span_0a45_26">Step 2. Navigate to <b><span id="span_0a45_27">VPN > IPSec VPN > Site-to-Site</span></b>.<b><span id="span_0a45_28"> </span></b></span></p> <img border="0" width="226" height="577" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image002.png"> <p class=MsoNormal><span id="span_0a45_30">Step 3. Check the checkbox of the connection that you want to edit. Then press the <b><span id="span_0a45_31">pen and paper</span></b> icon to edit the connection. In this example, the connection named HomeOffice is selected. </span></p> <img border="0" width="750" height="179" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image003.png"> <p class=MsoNormal><span id="span_0a45_33">Step 4. Click the <b><span id="span_0a45_34">Advanced Settings</span></b> tab. <b><span id="span_0a45_35"> </span></b></span></p> <img border="0" width="623" height="327" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image004.png"> <p class=MsoNormal><span id="span_0a45_37">Step 5. Check the <b><span id="span_0a45_38">Compress (Support IP Payload Compression Protocol (IPComp))</span></b><i><span id="span_0a45_39"> </span></i>check box to enable the router to propose compression when it starts a connection. This protocol reduces the size of IP datagrams. If the responder rejects this proposal, then the router does not implement compression. When the router is the responder, it accepts compression, even if compression is not enabled. If you enable this feature for this router, you would need to enable it on the remote router (the other end of the tunnel). </span></p> <img border="0" width="624" height="306" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image005.png"> <p class=MsoNormal><span id="span_0a45_41">Step 6. Broadcast messages are used for name resolution in Windows networking to identify resources such as computers, printers, and file servers. These messages are utilized by some software applications and Windows features such as Network Neighborhood. LAN broadcast traffic is typically not forwarded over a VPN tunnel. However, you can check this box to allow NetBIOS broadcasts from one end of the tunnel to be rebroadcast to the other end. Check the <b><span id="span_0a45_42">NetBIOS Broadcast</span></b> checkbox to enable.</span></p> <img border="0" width="624" height="290" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image006.png"> <p class=MsoNormal><span id="span_0a45_44">Step 7. Check the <b><span id="span_0a45_45">Keep-Alive</span></b> checkbox to enable the router to attempt to re-establish the VPN connection in regular intervals of time. Enter the number of seconds to set the keep-alive monitoring interval in the <i><span id="span_0a45_46">Keep-Alive Monitoring Interval </span></i>field. The range is from 10-999 seconds. </span></p> <img border="0" width="624" height="296" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image007.png"> <p class=MsoNormal><span id="span_0a45_48">Step 8. Check <b><span id="span_0a45_49">Dead Peer Detection (DPD) Enabled</span></b> to enable DPD. It sends periodic HELLO/ACK messages to check the status of the VPN tunnel. DPD option must be enabled on both ends of the VPN tunnel. Specify the interval between HELLO/ACK messages in the Interval field by entering the following:</span></p> <p class=MsoListParagraphCxSpFirst id="p_0a45_7"><font size=2 face=Symbol><span id="span_0a45_50">·<font size=1 face="Times New Roman"><span id="span_0a45_51">       </span></font></span></font>Delay Time – Enter the time delay in seconds between each Hello message. The range is from 10 – 300 seconds and the default value is 10. </p> <p class=MsoListParagraphCxSpMiddle id="p_0a45_8"><font size=2 face=Symbol><span id="span_0a45_52">·<font size=1 face="Times New Roman"><span id="span_0a45_53">       </span></font></span></font>Detection Timeout – Enter the timeout in seconds to declare that the peer is dead. The range is from 30 – 1800 seconds. </p> <p class=MsoListParagraphCxSpLast id="p_0a45_9"><font size=2 face=Symbol><span id="span_0a45_54">·<font size=1 face="Times New Roman"><span id="span_0a45_55">       </span></font></span></font>DPD Action – Action to be taken after DPD timeout. Select <b><span id="span_0a45_56">Clear </span></b>or <b><span id="span_0a45_57">Restart</span></b> from the drop-down list. </p> <img border="0" width="624" height="341" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image008.png"> <p class=MsoNormal><span id="span_0a45_59">Step 9. Check <b><span id="span_0a45_60">Extended Authentication </span></b>if you want to enable extended authentication. This will provide an additional level of authentication that will require remote users to key in their credentials before being granted access to the VPN. To get extended authentication to work, the main site must use group authentication and the remote site must use user authentication. In the next few steps, we will be configuring the main site to use group authentication. </span></p> <p class=MsoNormal><b><span id="span_0a45_61">Note:</span></b> It is recommended to configure Client-to-Site for user authentication instead of extended authentication. </p> <p class=MsoNormal><span id="span_0a45_62">If you haven’t already created a User Group for your main site, click the link to learn how to create a User Group located in this article: <a href="#UserGroup">Creating User Group for Extended Authentication</a>. </span></p> <p class=MsoNormal><span id="span_0a45_63">If you want to learn how to create User Accounts, click the link to be redirected to the section: <a href="#UserAccounts">Creating User Account for Extended Authentication</a>. </span></p> <img border="0" width="750" height="348" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image009.png"> <p class=MsoNormal><span id="span_0a45_65">Step 10. Select <b><span id="span_0a45_66">Group</span></b> as the extended authentication and press the <b><span id="span_0a45_67">plus</span></b> icon to add a new group. From the drop-down list, choose the group that you want to use for authentication. Make sure the users that you want are in that group. </span></p> <img border="0" width="750" height="346" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image010.png"> <p class=MsoNormal><span id="span_0a45_69">Step 11. In the next few steps, we will be configuring the remote router to use user authentication. In the remote router, check <b><span id="span_0a45_70">Extended Authentication</span></b> check box to enable extended authentication. </span></p> <img border="0" width="750" height="336" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image011.png"> <p class=MsoNormal><span id="span_0a45_72">Step 12. Select <b><span id="span_0a45_73">User </span></b>as the extended authentication. Enter the <b><span id="span_0a45_74">User Name </span></b>and <b><span id="span_0a45_75">Password</span></b> of the user in the group that was selected in the main router. In this example, VPNuser and CiscoTest123! was entered.</span></p> <img border="0" width="750" height="245" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image012.png"> <p class=MsoNormal><span id="span_0a45_78">Step 13. Check <b><span id="span_0a45_79">Split DNS </span></b>to enable. This splits the Domain Name System (DNS) server and other DNS requests to another DNS server, based on specified domain names. When the router receives an address resolution request, it inspects the domain name. If the domain name matches a domain name in the Split DNS settings, it passes the request to the specified DNS server within the VPN server network. Otherwise, the request is passed to the DNS server that is specified in the WAN interface settings (i.e. the ISP DNS server). </span></p> <p class=MsoNormal><span id="span_0a45_80">Split DNS is separated into two zones for the same domain. One to be used by the internal network and the other used by the external network. Split DNS directs internal hosts to an internal DNS for name resolution and external hosts are directed to an external DNS for name resolution. </span></p> <p class=MsoNormal><span id="span_0a45_81">If you have enabled <i><span id="span_0a45_82">Split DNS</span></i>, enter the IP address of the DNS server to use for the specified domains. Optionally, specify a secondary DNS server in the <i><span id="span_0a45_83">DNS Server 2 </span></i>field. In the <i><span id="span_0a45_84">Domain Name 1-6</span></i>, enter the domain names for the DNS servers. Requests for the domains are passed to the specified DNS server. </span></p> <img border="0" width="741" height="400" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image013.png"> <p class=MsoNormal><span id="span_0a45_86">Step 14. Click <b><span id="span_0a45_87">Apply</span></b>. </span></p> <img border="0" width="750" height="388" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image014.png"> <h2><a name="UserGroup">Creating User Group for Extended Authentication </a></h2> <p class=MsoNormal><span id="span_0a45_90">Step 1. Navigate to <b><span id="span_0a45_91">System Configuration > User Groups</span></b>.</span></p> <img border="0" width="176" height="400" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image015.png"> <p class=MsoNormal><span id="span_0a45_93">Step 2. Click the <b><span id="span_0a45_94">plus </span></b>icon to add a new user group. </span></p> <img border="0" width="750" height="258" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image016.png"> <p class=MsoNormal><span id="span_0a45_96">Step 3. Enter a name in the <i><span id="span_0a45_97">Group Name</span></i> field and then press <b><span id="span_0a45_98">Apply</span></b>. In this example, SiteGroupTest was entered as the group name. </span></p> <img border="0" width="750" height="236" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image017.png"> <h2><a name="UserAccounts">Configuring User Accounts for Extended Authentication</a></h2> <p><b>Important Note:</b> Please leave the default admin account in the admin group and create a new user account and user group for Shrew Soft. If you move your admin account to a different group, you will prevent yourself from logging into the router.</p> <p class=MsoNormal><span id="span_0a45_101">Step 1. Navigate to <b><span id="span_0a45_102">System Configuration > User Accounts.</span></b></span></p> <img border="0" width="174" height="400" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image018.png"> <p class=MsoNormal><span id="span_0a45_104">Step 2. Scroll down the page to <i><span id="span_0a45_105">Local Users</span></i>. Click the <b><span id="span_0a45_106">plus </span></b>icon to add a new local user.</span></p> <img border="0" width="750" height="205" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image019.png"> <p class=MsoNormal><span id="span_0a45_108">Step 3. The <i><span id="span_0a45_109">Add user account </span></i>page opens. Enter a username in the <i><span id="span_0a45_110">Username</span></i> field. In this example, VPNuser was entered as the username. </span></p> <img border="0" width="617" height="538" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image020.png"> <p class=MsoNormal><span id="span_0a45_112">Step 4. Enter a password in the <i><span id="span_0a45_113">New Password </span></i>and <i><span id="span_0a45_114">Confirm Password</span></i> field. In this example, CiscoTest123! was entered.</span></p> <p class=MsoNormal><b><span id="span_0a45_115">Note:</span></b> This password was used as an example, however a more complex password is recommended. </p> <img border="0" width="614" height="542" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image021.png"> <p class=MsoNormal><span id="span_0a45_117">Step 5. Select a group and then press <b><span id="span_0a45_118">Apply</span></b> to create your new user account. In this example, SiteGroupTest was selected as the group. </span></p> <img border="0" width="614" height="542" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image022.png"> <h2>Configuring Failover</h2> <p class=MsoNormal><span id="span_0a45_121">To enable the Site-to-Site Failover, the keep-alive must be enabled on the <i><span id="span_0a45_122">Advanced Settings</span></i> tab. </span></p> <p class=MsoNormal><span id="span_0a45_123">Step 1. Click the <b><span id="span_0a45_124">Failover</span></b> tab to configure failover. </span></p> <img border="0" width="623" height="202" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image023.png"> <p class=MsoNormal><span id="span_0a45_126">Step 2. Check <b><span id="span_0a45_127">Tunnel Backup</span></b> to enable. When the primary tunnel is down, this feature enables the router to re-establish the VPN tunnel by using either an alternate IP address for the remote peer or an alternate local WAN. This feature is available only if DPD is enabled. </span></p> <img border="0" width="625" height="124" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image024.png"> <p class=MsoNormal><span id="span_0a45_129">Step 3. In the <i><span id="span_0a45_130">Remote Backup IP Address</span></i> field, enter the IP address for the remote peer, or re-enter the WAN IP address that was already set for the remote gateway. Then select the local interface (<b><span id="span_0a45_131">WAN1</span></b>, <b><span id="span_0a45_132">WAN2</span></b>, <b><span id="span_0a45_133">USB1</span></b>, or <b><span id="span_0a45_134">USB2</span></b>) from the drop-down list. </span></p> <img border="0" width="624" height="114" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image025.png"> <p class=MsoNormal><span id="span_0a45_136">Step 4. Click <b><span id="span_0a45_137">Apply</span></b>.</span></p> <img border="0" width="624" height="183" src="/c/dam/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/images/Configuring_Site-to-Site_VPN_Advanced_Settings_and_Failover_on_the_RV160_and_RV260_image026.png"> <h2>Conclusion</h2> <p class=MsoNormal><span id="span_0a45_140">You should now have successfully configured advanced settings and failover for your site-to-site VPN on the RV160 and RV260. Your site-to-site VPN should still be connected. </span></p> </div> <div class="Vid-Card-CDT"> <h2 style="margin-top: 0;color: #2b5592;">View a video related to this article...</h2> <div class="videoWrapper"> <iframe src="https://www.youtube.com/embed/3769iAmDJqY" loading="lazy" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe> </div> <a id="Vid-Button-CDT" href="https://www.youtube.com/playlist?list=PLB4F91009260AB3D7"><strong>Click here to view other Tech Talks from Cisco</strong></a> </div> </body> </html> <cdc:do action="com.cisco.wem.framework.service.command.eotcontent.EOTResponsiveContent@7bb62d44" returnTypedAs="eotResponsiveContainerVo" id="eotResponsiveContainerVo" /> <div class="row full visitedlinks" style="padding: 0px; margin:0px"> <div class="col full" > </div> </div> </div> <script> if (window.cdc === undefined) { cdc = {}; } if (cdc.eot === undefined) { cdc.eot = {}; } cdc.eot.isEot = true; cdc.eot.isToc = false; jQuery(document).ready(function () { if (jQuery('.unpublished').length > 0) { let lastRel = "1.0"; if (jQuery('.published').length > 0) { lastRel = Number(jQuery('.published td')[0].innerText) + 1 + ".0"; } jQuery('.preview_revision').text(lastRel); } const linkItemsLen = jQuery("#eot-doc-wrapper link[rel='stylesheet']").length; function addNewTocStyleSheet() { const fileName = "/etc/designs/cdc/transformation/wemdcmt_responsive.css", linkElement = `<link rel="stylesheet" href="" type="text/css" />`; document.head.append(linkElement); } if (cdc.eot.isToc && !linkItemsLen) { addNewTocStyleSheet(); } else if (cdc.eot.isEot) { jQuery("#eot-doc-wrapper link[rel='stylesheet']").each(function () { const linkTag = jQuery(this), hrefVal = jQuery(linkTag).attr("href"); if (hrefVal != undefined && hrefVal.indexOf("support-responsive.css") == -1 && hrefVal.indexOf("_responsive.css") == -1) { let fileName = hrefVal.substr(hrefVal.lastIndexOf("/") + 1, hrefVal.length).split(".css")[0]; const filePath = "/etc/designs/cdc/transformation/"; if (fileName == "ccimr") { fileName = "techdocs_responsive"; } else if (fileName == "support-docs") { fileName = "support-responsive"; } else if (fileName == "framework") { fileName = "responsiveframework"; } else if (fileName == "dcmt") { fileName = "wemdcmt_responsive"; } else if (fileName == "techdocs_85_11_word") { fileName = "techdocs_85_11_word"; if (cdc.eot.isToc) { addNewTocStyleSheet(); } } else { fileName += "_responsive"; } jQuery(linkTag).attr("href", filePath + fileName + ".css"); } if (hrefVal.indexOf("support-responsive.css") > -1) { jQuery(linkTag).attr("href", "/etc/designs/cdc/transformation/support-responsive.css"); } }); jQuery("#eot-doc-wrapper > table").wrap("<div></div>"); jQuery("#eot-doc-wrapper table:not('.olh_note')").parent().css({ overflowX: "auto" }); } }); </script> </div> <div class="col narrow-v2"> <div class="rightRailComponent base-blowout"> <div class="eotPersonalization"> <section id="eotSupportCampaign"></section> </div>   <div class="hideComponent"> <div class="tac-image"> <script type="text/javascript"> document.getElementsByClassName('tac-image')[0].parentElement.style.display="none"; </script> </div> </div> <div class="hideComponent"> <div class="eot-authors"> <ul> </ul> </div> </div>  <div class="eot-feedback-container"> <div class="eot-feedback"> <h3>Was this Document Helpful?</h3> <span class="eot-feedback-btnwrap"> <button class="eot-feedback-btn eot-feedback-btn-yes" aria-label="Was this Document Helpful?? Yes">Yes</button> <button class="eot-feedback-btn eot-feedback-btn-no" aria-label="Was this Document Helpful?? No">No</button> </span> <span lang="en" class="eot-feedback-olwrap"> <a href="javascript: void(0);" class="eot-feedback-ol" onclick="window.open('https://ciscocx.qualtrics.com/jfe/form/SV_dpqK8gJRAW2GHCC?Ref=' + location.href + '&resize=false', 'feedback', 'width=650, height=460, scrollbars=1, menubar=1, resizable=1'); return false;"> <img id="feedback_img" border="0" style="cursor: pointer;" title="Feedback" src="//www.cisco.com/c/dam/cdc/i/Feedback_OceanBlue.png" alt="Feedback">Feedback</a> </span> </div> </div> <div class="hideComponent"> <div class="eot-vav"> <ul> </ul> </div> </div> <div class="hideComponent"> <div class="eotLetUsHelp"> <h3>Contact Cisco</h3> <ul> <li><a id="eotLetUsHelpProdDocUrl" href="https://mycase.cloudapps.cisco.com/start?prodDocUrl=">Open a Support Case</a><img src="/etc/designs/cdc/fw/i/icon_lock_small.png" alt="login required"/></li> <li>(Requires a <a href="//www.cisco.com/c/en/us/services/order-services.html">Cisco Service Contract</a>)</li> </ul> </div> <script> jQuery(document).ready(function() { var getURL=jQuery("#eotLetUsHelpProdDocUrl").attr("href"), domInd = location.href.indexOf('cisco.com') ; if ( domInd > -1 && domInd < location.href.search(/\w\/\w/) ) { getURL += encodeURI(location.href); } jQuery("#eotLetUsHelpProdDocUrl").attr("href",getURL); }); </script> </div>  <div id="eotRightRailMBox">  <div> <div class="mboxDefault"></div> <script type="text/javascript"> var test=""; if(test!=undefined && test.trim().length>0){ mboxCreate('en-us_dg_support_eot','type=default',''); }else{ mboxCreate('en-us_dg_support_eot','type=default'); } </script> </div> </div> <div class="hideComponent"> <script type="text/javascript"> var eottdatp = document.getElementsByClassName('eot-tdatp'); if (eottdatp && eottdatp.style) { eottdatp.style.display="none"; } </script> </div> <div class="showClass"> </div> </div> </div> </div>   </div> <script type="module" src="/site/web-components/us/en/cdc-footer.js"></script> <cdc-footer></cdc-footer> <script type="text/javascript"> if(document.querySelector('#privacy-manager')!=null){ document.querySelector('#privacy-manager').href='#cookies'; } </script> <div id="fw-overlay"></div> <script src="/etc/designs/cdc/fw/b/responsive/js/eot.min.js"></script> <script src="/c/dam/cdc/t/ctm.js" type="text/javascript"></script>  <noscript><img src="//cisco.112.2o7.net/b/ss/cisco-mobile/5/12345" width="2" height="2" border="0" alt=""/></noscript> </body> </html>

CINXE.COM

Configuring Site-to-Site VPN Advanced Settings and Failover on the RV160 and RV260 - Cisco