Cisco Systems RV042RF manual

USER GUIDE BUSINESS SERIES 10/100 4-P or t VPN Router Model: RV042[...]

i About This Guide 10/100 4-Port VPN Router About T his Guide Icon Descriptions While reading through the User Guide you may see various icons that call attention to specific items. Below is a description of these icons: NO TE: This check mark indicates that there is a not e of interest and is something tha t y ou should pay special attention to wh[...]

ii T able of Contents 10/100 4-Port VPN Router Chapter 1: Introduction 1 Introduction to the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Introduction to VPNs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 VPN Examples . . . . . . . . . . . . . . . . . . . . . . . [...]

iii T able of Contents 10/100 4-Port VPN Router One -to-One NA T . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16 Setup > MAC Clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16 MA C Clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

iv T able of Contents 10/100 4-Port VPN Router VPN > Client to Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Add a New Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 IPSec Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

v T able of Contents 10/100 4-Port VPN Router Conguration of PC 1 and PC 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Conguration when the Remote Gatew ay Uses a Dynamic IP Address . . . . . . . . . . . . 64 Conguration of the RVL200. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64 Con[...]

vi T able of Contents 10/100 4-Port VPN Router Appendix I: W arranty Informa tion 82 Exclusions and Limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Obtaining W arranty Ser vice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 T echnical Suppor t . . . . . . . . . . . . .[...]

1 Introduc tion 10/100 4-Port VPN Router Chapter 1 Chapter 1: Introduction Introduction to the Router Thank you f or choosing the Linksys 10/100 4-P or t VPN Router . The Router lets multiple computers in your office share an I nternet connection. The dual Internet por ts let you connec t a second Internet line as a backup, or you can use both Inte[...]

2 Introduc tion 10/100 4-Port VPN Router Chapter 1 Computer (using VPN client software) to VPN Router The follo wing is an example of a computer -to-VPN Router VPN. In her hotel room, a traveling businesswoman connects to her I nternet Ser vice Provider (ISP). Her notebook comput er has VPN client software that is configured with her office’ s VP[...]

3 Produc t Over view 10/100 4-Port VPN Router Chapter 2 Chapter 2: Pr oduc t O v er view Front P anel Diag (Red) The Diag LED lights up when the Router is not ready for use. It turns off when the Router is ready f or use. Sy stem (Green) The System LED lights up when the Router is pow ered on. It flashes when the Router is running a diagnostic test[...]

4 Installation 10/100 4-Port VPN Router Chapter 3 Chapter 3: Installation Physical Installation There are two ways to place the R outer . The first way is to place the Router horizontally on a sur face. The second way is to mount the Router on a w all. Horizontal Placement The Router has four rubber feet on its bottom panel. Set the Router on a fla[...]

5 Installation 10/100 4-Port VPN Router Chapter 3 Connect one end of an Ethernet network cable to 2. one of the numbered por ts on the back of the Router . Connect the other end to an Ethernet port on a network device, such as a comput er or switch. Repeat this step to connect more computers or other network devices to the Router . Connect to Port [...]

Chapter 4 Advanced Configura tion 6 10/100 4-Port VPN Router Chapter 4: A dvanc ed C onfigur ation Over view The Router ’ s web-based utility allows you to set up the Router and per form advanced configuration and troubleshooting. This chapter will explain all of the functions in this utility. These are the main tabs of the utility : Syst em Summ[...]

Chapter 4 Advanced Configura tion 7 10/100 4-Port VPN Router System Summary (ProtectLink™ A vailable) Site Map System Inf ormation Serial Number Displayed here is the serial number of the Router . Firm ware version Displayed here is the current version number of the firmware installed on the Router . CPU Displayed here are the type and speed of t[...]

Chapter 4 Advanced Configura tion 8 10/100 4-Port VPN Router Port 1 Information F or the selected por t, the statistics table shows this information: number of packets received, number of packet bytes received, number of packets transmitted, number of packet bytes transmitted, and number of packet errors. T o update the on-screen inf ormation, clic[...]

Chapter 4 Advanced Configura tion 9 10/100 4-Port VPN Router be sent out, probably use incorrec t settings, ” will be displayed . Setup T ab > Network The Network screen shows all of the Router’ s basic setup functions. The Router can be used in most network setups without changing any of the default values; however , you may need to enter a[...]

Chapter 4 Advanced Configura tion 10 10/100 4-Port VPN Router If you want to modify a subnet you have crea ted, select it and make changes. Click Save Settings to sav e your changes, or click Cancel Changes t o undo them. Click Exit to return to the Network screen. If you want to delete a subnet you have created , select it and click Delete selecte[...]

Chapter 4 Advanced Configura tion 11 10/100 4-Port VPN Router Static IP Specify W AN IP Address Enter the external IP address of the Router . Subnet Mask Enter the subnet mask of the Router . Default Gateway Address Enter the IP address of the default gateway . DNS Server (Required) 1/2 Enter at least one DNS server IP address. Multiple DNS server [...]

Chapter 4 Advanced Configura tion 12 10/100 4-Port VPN Router Default Gateway Address Enter the IP address of the default gateway . User Name and Password Enter your account’ s User Name and P asswor d. The maximum number of char acters is 60. Connect on Demand If you select the C onnect on Demand option, the connection will be disconnected after[...]

Chapter 4 Advanced Configura tion 13 10/100 4-Port VPN Router Setup > Passwor d Passw ord The User Name is admin ; it cannot be changed. Old Passwor d Enter the old password. The default is admin when you first pow er up the Router . New Password Enter a new passw ord for the R outer . Y our password must have 20 or fewer characters and cannot c[...]

Chapter 4 Advanced Configura tion 14 10/100 4-Port VPN Router Setup T ab > F or warding The Forwarding screen allows you to set up port range forwarding and por t tr iggering applications. P or t range forwarding can be used to set up public ser vices or other specialized Internet applications on your network, while port triggering can be used t[...]

Chapter 4 Advanced Configura tion 15 10/100 4-Port VPN Router Some I nternet applications or games use alternate por ts to communicate between the server and LAN host. When you want to use these applications, enter the triggering (outgoing) port and alternate incoming port in the P or t T riggering table . Then the Router will forward the incoming [...]

Chapter 4 Advanced Configura tion 16 10/100 4-Port VPN Router If you want to modify a ser vice you have created, select it and click Update this ser vice . Make changes. Click Save Settings to save your changes, or click Cancel Changes to undo them. Click Exit to return to the UP nP screen. If you want to delete a ser vice you have created, selec t[...]

Chapter 4 Advanced Configura tion 17 10/100 4-Port VPN Router Setup > MAC Clone MAC Clone W AN1/2 If you have enabled the Dual W AN feature, then you will have two por ts, W AN1 and W AN2, available f or MA C address assignment or cloning . User Defined W AN MAC Address T o manually clone a MA C address, selec t User Defined W AN MAC Address , a[...]

Chapter 4 Advanced Configura tion 18 10/100 4-Port VPN Router Host Name Enter your host name in the three Host Name fields. For example, if your host name wer e myhouse .3322. org, then myhouse would go into the first field, 3322 would go into the sec ond field, and org w ould go int o the last field. Click Save Settings , and the status of the DDN[...]

Chapter 4 Advanced Configura tion 19 10/100 4-Port VPN Router Static Routing If the Router is connected to more than one network or there are multiple routers installed on y our network , it may be necessary to set up static rout es. The static routing function determines the path that data follow s over your network befor e and after it passes thr[...]

Chapter 4 Advanced Configura tion 20 10/100 4-Port VPN Router DHCP > Setup Setup Enable DHCP Server T o use the Router as your network ’ s DHCP server , selec t Enable DHCP Ser ver . I f you already have a DHCP server on your network, remove the check mark. Dynamic IP Client Lease T ime The Client L ease Time is the amount of time a net work u[...]

Chapter 4 Advanced Configura tion 21 10/100 4-Port VPN Router NO TE: T o support NetBIOS for DHCP clients, the Router uses tw o methods. F irst, when the DHCP clien ts receiv e dynamic IP addresses from the Router , it automatically includes the information of the WINS ser ver to support NetBIOS. S econd, if a user sets up a static IP address , the[...]

Chapter 4 Advanced Configura tion 22 10/100 4-Port VPN Router Network Service Detec tion Enable Network Ser vice Detec tion Network Service Detection helps manage your connec tion and can repor t when your connection experiences problems. T o use this service, select this option. Retry Count Enter the number of times the Router will tr y to rec onn[...]

Chapter 4 Advanced Configura tion 23 10/100 4-Port VPN Router DNS L ookup H ost Selec t this option to ping the DNS Lookup Host. Then enter the IP address. Bandwidth W AN1/2 Upstream Enter the maximum upstream bandwidth provided by y our ISP . The default is 512 kbit/sec. Downstream Enter the maximum downstr eam bandwidth provided by your ISP . The[...]

Chapter 4 Advanced Configura tion 24 10/100 4-Port VPN Router Bandwidth Management The Maximum Bandwidth provided b y ISP W AN1/2 Upstream Enter the maximum upstream bandwidth provided by y our ISP . The default is 512 kbit/sec. Downstream Enter the maximum downstr eam bandwidth provided by your ISP . The default is 512 kbit/sec. Bandwidth Manageme[...]

Chapter 4 Advanced Configura tion 25 10/100 4-Port VPN Router Priority System Management > Bandwidth Management > P riority Interface Selec t the appropriate W AN inter face, W AN1 or W AN2 . Service S elect the Ser vice you want. If the Service you need is not listed in the menu, click Service Management to add the new service. The Service M[...]

Chapter 4 Advanced Configura tion 26 10/100 4-Port VPN Router System Management > SNMP SNMP Enable SNMP is enabled b y default. T o disable the SNMP agent, click this option to remo ve the check mark. Sy stem Name Set the hostname far the Router . Sy stem Contact Enter the name of the net work administrator who can be contacted with updates abou[...]

Chapter 4 Advanced Configura tion 27 10/100 4-Port VPN Router System Management > Diagnostic > P ing Ping host or IP address Enter the IP address of the device being pinged, and click Go . The test will take a few seconds to complete . Then the Router will display the r esults. Status The status of the ping test is displayed. Pack ets The num[...]

Chapter 4 Advanced Configura tion 28 10/100 4-Port VPN Router from the Restart screen, then the Router will send out your log file before it is r eset. System Management > Restart Restart Restart Router Click Restar t Router to restar t the Router . After click ing the button, a confirmation screen appears. Click OK to continue . Restart Confirm[...]

Chapter 4 Advanced Configura tion 29 10/100 4-Port VPN Router Priority F or por t-based Q oS, selec t the appropriate priority level, High or Normal . Speed Selec t the port speed, 10M or 100M . Duplex Select the duplex mode, Half or Full . Auto Neg. S elect Enable if you want the Router’ s por ts to auto-negotiate connection speeds and duplex mo[...]

Chapter 4 Advanced Configura tion 30 10/100 4-Port VPN Router as SYN F looding, Smurf, LAND , Ping of Death, IP Spoofing, and reassembly attacks. Block W AN Request This option is enabled by default. Using this feature , the Router drops both unaccepted T CP request and ICMP packets from the W AN side . Hackers will not find the Router by pinging t[...]

Chapter 4 Advanced Configura tion 31 10/100 4-Port VPN Router Fir ewall > Access Rules Access Rules Except for the default rules, all c onfigured access rules are listed in the Access Rules table, and you can set the priority for each custom rule. If the Access Rules table has multiple pages, select a differen t page to view fr om the Jump to dr[...]

Chapter 4 Advanced Configura tion 32 10/100 4-Port VPN Router Service Management Service Name Enter a name. Protoc ol Selec t the protocol it uses . Port Range Enter its range. Click Add to List . Click S ave S ettings to save your changes, or click Canc el Changes to undo them. Click Exit to r eturn to the Add a New A ccess Rule scr een. If you wa[...]

Chapter 4 Advanced Configura tion 33 10/100 4-Port VPN Router Content F ilter F orbidden Domains Block Forbidden Domains T o block access to the websites on the Forbidden Domains list, select this option. Add Enter the domain you want to block. T o add a domain to the list, click Add to list . T o remove a domain fr om the list, select the en tr y [...]

Chapter 4 Advanced Configura tion 34 10/100 4-Port VPN Router Mode Choose Gatew ay to Gat eway T o create a tunnel between t wo VPN devices, such as two VPN Routers, click Add Now . The Gateway to G ateway screen appears. P roceed to the “ VPN > Gateway to Gateway” section for instructions. Click Return to return to the Summary screen. Clien[...]

Chapter 4 Advanced Configura tion 35 10/100 4-Port VPN Router VPN Clients Status This section identifies the VPN clients currently connected to the Router . No . It shows the number of the VPN client. Username I t shows the name of the VPN client. Status This indicat es the status of the VPN client connection. Start Time This shows the time when th[...]

Chapter 4 Advanced Configura tion 36 10/100 4-Port VPN Router Local Security Gateway T ype > IP + Domain Name(FQDN) Authentication Domain Name The F ully Qualified Domain Name (FQDN) is the host name and domain name for a specific comput er on the Internet. Enter the FQDN of the Router . IP address The W AN (or Internet) IP address of the Router[...]

Chapter 4 Advanced Configura tion 37 10/100 4-Port VPN Router Local Security Group T ype > IP Range IP range Enter the range of IP addresses. The default is 192.168.1.0~254 . Remote Group Setup Before you configure the Remote Group Setup, make sure your VPN tunnel will have two differ ent IP subnets. F or example, if the local VPN R outer has an[...]

Chapter 4 Advanced Configura tion 38 10/100 4-Port VPN Router Remote Security Gateway T ype > Dynamic IP + Domain Name(FQDN) Authentication Domain Name Enter the domain name for authentication. (Once used, you cannot use it again to cr eate a new tunnel connection.) Dynamic IP + E-mail Addr .(USER FQDN) Authentication The Remote S ecurity Gat ew[...]

Chapter 4 Advanced Configura tion 39 10/100 4-Port VPN Router a one -way hashing algorithm that produces a 128-bit digest. SHA is a one-way hashing algorithm that produces a 160-bit digest. SHA is recommended because it is more secure. Make sure both ends of the VPN tunnel use the same authentication method. Phase 1 SA Life Time Configure the lengt[...]

Chapter 4 Advanced Configura tion 40 10/100 4-Port VPN Router If MD5 is selec ted, the Authentication Key is 32-bit, which requires 32 hexadecimal values. I f you do not enter enough hexadecimal values, then the rest of the Authentication Key will be automa tically complet ed with zer oes un til it has 32 hexadecimal values. If SHA is selected, the[...]

Chapter 4 Advanced Configura tion 41 10/100 4-Port VPN Router VPN > Client to Gateway NO TE: The 10/100 4-Port VPN Router supports IPSec VPN clien t software , including the Linksys QuickVPN software. T o manage access for Linksys QuickVPN clients, click the VPN Client A ccess tab. (F or more information about QuickVPN, refer to “ Appendix B: [...]

Chapter 4 Advanced Configura tion 42 10/100 4-Port VPN Router IP + E-mail Addr .(USER FQDN) Authentication Local Security Gateway T ype > IP + E-mail Addr .(USER FQDN) Authentication E-mail address Enter the e -mail address for authentication. IP address The W AN (or Internet) IP address of the Router automatically appears. Dynamic IP + Domain N[...]

Chapter 4 Advanced Configura tion 43 10/100 4-Port VPN Router IP Only The default is IP Only . Only the computer with a specific IP address will be able to access the tunnel. Select IP addr ess or IP by DNS Resolved . Remote Client > IP Only IP address Selec t this option if you know the static IP address of the remote computer at the other end [...]

Chapter 4 Advanced Configura tion 44 10/100 4-Port VPN Router NO TE: The Local Security Group Type y ou select should match the Remote Security Group T ype selected on the remote computer at the other end of the tunnel. After you hav e selected the L ocal Security Group Type , the settings available on this screen may change, depending on which sel[...]

Chapter 4 Advanced Configura tion 45 10/100 4-Port VPN Router shared keys . There ar e three gr oups of differen t prime key lengths. Group 1 is 768 bits, and Group 2 is 1,024 bits. Group 5 is 1,536 bits. If net work speed is preferred, select Group 1 . If network security is preferred, select Group 5 . Phase 1 Encr yption Selec t a method of encr [...]

Chapter 4 Advanced Configura tion 46 10/100 4-Port VPN Router If DES is selec ted, the Encr yption Key is 16-bit, which requires 16 hexadecimal values. I f you do not enter enough hexadecimal values, then the rest of the Encryption Key will be automatically completed with zeroes , so the Encryption Key will be 16-bit. I f 3DES is selected, the Encr[...]

Chapter 4 Advanced Configura tion 47 10/100 4-Port VPN Router VPN > VPN Client Access VPN Client Access F or each QuickVPN client, do the following: Export a client cer tificate. 1. Configure a user name and passw ord. 2. Add the QuickVPN client to the list. 3. VPN Client Users User Name Enter the user name. New P assword Enter the new password [...]

Chapter 4 Advanced Configura tion 48 10/100 4-Port VPN Router VPN > VPN Pass Through VPN Pass Through IPSec Pass Through Internet Protoc ol Security (IPSec) is a suite of protocols used to implement secure ex change of packets at the IP la yer . IPSec P ass Through is enabled by default to allow IPSec tunnels to pass through the Rout er . PPTP P[...]

Chapter 4 Advanced Configura tion 49 10/100 4-Port VPN Router Log > Syst em Log Log > Syst em Log (Pr otectLink Enabled) System L og Syslog Syslog is a standard protocol used to capture information about net work ac tivity . T he Router suppor ts this protoc ol and can send its activity logs to an ex ternal server . Enable Syslog Select this [...]

Chapter 4 Advanced Configura tion 50 10/100 4-Port VPN Router General Log Sy stem Error Messages If this option is enabled, system error messages are included. This option is enabled by default. Deny Policies Select this option if you do not want to include log events from Deny rules on the Firewall > Ac cess Rule screen. Log events from Deny ru[...]

Chapter 4 Advanced Configura tion 51 10/100 4-Port VPN Router Log > Syst em Statistics Click Refresh to update the sta tistics. Wizard Use this tab to access two Setup Wizards , the Basic Setup Wizar d and the Acc ess Rule Setup Wizard . Run the Basic Setup Wizar d to set up the Router for your I nternet connection(s). Run the A ccess Rule Setup[...]

Chapter 4 Advanced Configura tion 52 10/100 4-Port VPN Router Select the W AN (or I nternet) Connection Type for the 4. W AN por t. Selec t the appropriate connection type: Obtain an IP automatically , S tatic IP , or PPP oE . Click Nex t to continue. Click Previous if you want to return to the previous screen. Click Exit if you wan t t o exit the [...]

Chapter 4 Advanced Configura tion 53 10/100 4-Port VPN Router PPP oE Complete the User Name and Passw ord fields with the information pro vided by your ISP . Click N ex t to continue. Click Pr evious if you want to return to the previous screen. Click Exit if you want to exit the Setup Wizar d. PPPoE Select C onnect on demand or Keep alive . If you[...]

Chapter 4 Advanced Configura tion 54 10/100 4-Port VPN Router If you want to save your changes, click 8. Save Settings . Click Previous if you want to return to the previous screen. Click Exit if you wan t to exit the Setup Wizar d. Save Settings A screen appears to notify you that the settings have 9. been saved. T o proceed to the Wizard screen, [...]

Chapter 4 Advanced Configura tion 55 10/100 4-Port VPN Router F or this service, you can select whether or not you want 5. the R outer to keep a log tracking this type of activity. T o keep a log, select Log packets match this rule . If you do not want a log , select Not log . Click N ex t to continue. Click Pr evious if you want to return to the p[...]

Chapter 4 Advanced Configura tion 56 10/100 4-Port VPN Router Nex t to continue. Click Previous if you want to return to the previous screen. Click Exit if you wan t t o exit the Setup Wizard . When It W orks If you want to save your changes, click 9. Save Settings . Click Previous if you want to return to the previous screen. Click Exit if you wan[...]

57 T roubleshooting 10/100 4-Port VPN Router Appendix A Appendix A: T roubleshooting The rmw are upgrade has failed. A firmwar e upgrade takes approximately ten minutes. An error may occur if you powered off the Router , pressed the Reset button, closed the System Management > Firmw are Upgrade screen, or disconnec ted the computer from the R[...]

58 Linksys QuickVPN for Window s 2000, XP , or Vista 10/100 4-Port VPN Router Appendix B Appendix B: Linksy s QuickVPN for W indow s 2000, XP , or V ista Introduction The 10/100 4-Port VPN Router (model number: R V042) supports IPSec VPN client software, including the Linksys QuickVPN software (also known as the Linksys VPN client). The Router supp[...]

59 Linksys QuickVPN for Window s 2000, XP , or Vista 10/100 4-Port VPN Router Appendix B In the Router ’ s web-based utilit y , click the 3. VPN tab. Click the 4. VPN Client Ac cess tab . Click 5. Generate to generate a new cer tificate (if needed). VPN Client Access Scr een T o expor t a client cer tificate, click 6. Export for Client and save t[...]

60 Linksys QuickVPN for Window s 2000, XP , or Vista 10/100 4-Port VPN Router Appendix B Copying F iles Installation Complete Click 3. Finish to complete the installation. Proc eed to the section, “Install the Client Certificate” . Download from the Int ernet Go to 1. ww w .linksys .com and select Products . Click 2. Business . Click 3. Router/[...]

61 Linksys QuickVPN for Window s 2000, XP , or Vista 10/100 4-Port VPN Router Appendix B Passw ord • Enter the P assword assig ned to you. Server Addr ess • Enter the IP addr ess or domain name of the Linksys 10/100 4-P ort VPN Router . Port for Q uickVPN • Enter the por t number that the QuickVPN client will use to communicate with the remot[...]

62 Gate wa y-to- Gate wa y VPN T unnel 10/100 4-Port VPN Router Appendix C Appendix C: Gatew a y-to- Gatew ay VPN T unnel Over view This appendix explains how to configur e an IPSec VPN tunnel between t wo VPN Routers, using an example. T w o computers are used t o test the liveliness of the tunnel. Before Y ou Begin The follo wing is a list of equ[...]

63 Gate wa y-to- Gate wa y VPN T unnel 10/100 4-Port VPN Router Appendix C In the 11. Preshared K ey field, enter a string for this key , f or example, 13572468. RVL200 IPSec Setup S ettings If you need more detailed settings, click 12. Advanced Settings . O ther wise, click S av e Settings and proceed to the next section, “Configura tion of the [...]

64 Gate wa y-to- Gate wa y VPN T unnel 10/100 4-Port VPN Router Appendix C Configuration when the R emote Gate wa y Uses a Dynamic IP Address This example assumes the Remote Gateway is using a dynamic IP address. I f the Remote Gateway uses a static IP address, ref er to “Configuration when the Remote Gateway Uses a Sta tic IP Address . ” RVL20[...]

65 Gate wa y-to- Gate wa y VPN T unnel 10/100 4-Port VPN Router Appendix C Select 7. Enable . F or the Local S ecurity Gateway T ype , select 8. IP Only . The W AN IP address (B.B.B .B) of the RV042 will be automatically detected. F or the Local Security Group T ype, select Subnet . Enter the RV042’ s local network settings in the IP Addr ess and[...]

66 Gate wa y-to- Gate wa y VPN T unnel 10/100 4-Port VPN Router Appendix C RVL200 IPSec VPN Settings F or the Remote Security G ateway T ype, select 8. IP Only . Then select IP by DNS Resolved . Enter the R V042’ s domain name in the field provided . F or the Remote Securit y Group T ype , select 9. Subnet . Enter the R V042’ s local net work s[...]

67 IPSec NA T Tra v ersal 10/100 4-Port VPN Router Appendix D Appendix D: IPSec NA T T rav ersal Over view Network Addr ess T ranslation (NA T ) trav ersal is a technique developed so that data protected by IPSec can pass through a NA T . (See NA T 1 and NA T 2 in the diagram.) Since IPSec provides integrity for the entire IP datagram, any changes [...]

68 IPSec NA T Tra v ersal 10/100 4-Port VPN Router Appendix D F or the Local S ecurity Gateway T ype , select 7. IP Only . The W AN IP address of Router A will be automatically detected. F or the Local Security Group T ype, select Subnet . Enter Router A ’ s local net work settings in the IP Address and Subnet Mask fields. Router A ’ s IPSec VP[...]

69 IPSec NA T Tra v ersal 10/100 4-Port VPN Router Appendix D Configuration of the One-to- O ne NA T Rules The one -to- one NA T rules must be configured on NA T 2 - R V042 and NA T 1 - R VO42. One -to-O ne NA T Rule on NA T 2 - RV042 192.168.99.1 => 192.168.111.11 F ollow these instruc tions for the one -to -one NA T rule on NA T 2 - R V042. La[...]

70 IPSec NA T Tra v ersal 10/100 4-Port VPN Router Appendix D Click the 4. One -to- One NA T tab. F or the One -to-One NA T setting, select 5. Enable . In the 6. Privat e Range Begin field, enter 111.11 . In the 7. Public Range Begin field, ent er 11.101 . In the 8. Range L ength field, enter an appropriate value. The range length cannot exceed the[...]

71 IPSec NA T Tra v ersal 10/100 4-Port VPN Router Appendix D F or the Remote Securit y Group T ype , select 9. Subnet . Enter Router B’ s local network settings in the IP Address and Subnet Mask fields. In the IPSec Setup sec tion, select the appropriate 10. encr yption, authentication, and other key management settings. In the 11. Preshared Key[...]

72 Bandwidth Management 4-Port SSL/IPSec VPN Router Appendix E Appendix E: Bandwidth Management Over view This appendix explains how to ensure Qualit y of Ser vice (QoS) on Vonage V oice over Internet Protoc ol ( VoIP) phone ser vice. This example uses V onage; however , similar instructions will apply to other V oIP ser vices. Creation of Ne w Ser[...]

73 Bandwidth Management 4-Port SSL/IPSec VPN Router Appendix E Creation of Ne w Bandwidth Management Rules Create four new rules: Vonage VoIP (Upstream), V onage V oIP (Downstr eam), V onage 2 (Upstream), and Vonage 2 (Downstream). On the 1. Bandwidth Management screen, select V onage V oIP from the Service drop-down menu. Enter the IP address or r[...]

74 Firm ware Upgrade 10/100 4-Port VPN Router Appendix F Appendix F : F irm w are Upgr ade Over view This appendix explains how to upgrade the firmwar e of the Router . How t o Access the W eb -Based Utility F or local access of the Router’ s web-based utility , 1. launch your web brow ser , and enter the Router ’ s default IP address, 192.168.[...]

75 Firm ware Upgrade 10/100 4-Port VPN Router Appendix F The utilit y zip file will automatically open. Extrac t .exe 7. file to an appropriate loca tion on your computer . Double -click the 8. .ex e file. In the 9. Router IP field, enter the IP address of the Router . Firm ware Upgrade Utility Login In the 10. Passw ord field, enter the password f[...]

76 T rend Micro ProtectLink G ate wa y Ser vice 10/100 4-Port VPN Router Appendix G Appendix G: T rend Micro Pr otectLink Gatew a y Ser vice Over view The optional T rend M icro Prot ectLink Gateway ser vice provides securit y f or y our network. It checks e -mail messages, filters website addresses (URLs), and blocks potentially malicious websites[...]

77 T rend Micro ProtectLink G ate wa y Ser vice 10/100 4-Port VPN Router Appendix G NO TE: T o hav e your e-mail checked , you will need to provide the domain name and IP address of your e -mail server . If you do not know this information, contact your ISP . Activate I f you have registered, click Activate . A wizard begins. F ollow the on-scr een[...]

78 T rend Micro ProtectLink G ate wa y Ser vice 10/100 4-Port VPN Router Appendix G ProtectLink > W eb Protection The W eb Protection features are provided by the Router . Configure the w ebsite filtering settings on this screen. Prot ectLink > W eb Pr otection W eb Prot ec tion Enable URL Filtering T o filter website addresses (URLs), select[...]

79 T rend Micro ProtectLink G ate wa y Ser vice 10/100 4-Port VPN Router Appendix G IP addresses/range Enter the appropriate IP addresses or ranges. Separate multiple URLs with semicolons (“ ; ”). F or a range of IP addresses , use a hyphen (“ - ”). Example: 10.1.1.0-10.1.1.10. Add T o add the IP addresses or ranges, click Add . Approv ed C[...]

80 T rend Micro ProtectLink G ate wa y Ser vice 10/100 4-Port VPN Router Appendix G Platform The platform type, Gateway Ser vice, is automatically display ed. License expires on The date and time your license expires are displa yed. Renew T o renew your license, click Renew . Then follow the on-screen instructions. Add Seats Each seat allows an e -[...]

81 Specific ations 10/100 4-Port VPN Router Appendix H Appendix H: Specifications Specications Model RV042 Standards IEEE 802.3, 802.3u Ports 4 10/100 RJ-45 Ports, 1 10/100 RJ-45 Internet Port, 1 10/100 RJ-45 DMZ/Internet Port Button Reset Cabling Type Category 5 Ethernet LEDs System, Internet, DMZ/Internet, DMZ Mode, Diag, 1-4 UPnP able/cert Ce[...]

82 Appendix I Warranty Informa tion 10/100 4-Port VPN Router ser vice offerings. This limited warranty shall not apply to such third par t y sof tware or service offerings. This limited warranty does not guarantee any continued availability of a third par ty ’ s ser vice for which this product’ s use or operation may r equire. T O THE EX TENT N[...]

83 Appendix I Warranty Informa tion 10/100 4-Port VPN Router original purchase when returning your product. Products receiv ed without a RMA number and dated proof of original purchase will be rejected. Do not include any other items with the product you are returning to Linksys . Defective product co vered by this limited w arranty will be repaire[...]

84 Sof tware License Agreement 10/100 4-Port VPN Router Appendix J Appendix J: Sof tware Lic ense A greement Soft ware in Linksy s Produc ts: This product from Cisco-Linksys LLC or from one of its affiliates Cisc o Syst ems-Linksys (A sia) Pte Lt d. or C isco- Linksys K.K. (“Linksys”) contains soft ware (including firmware) originating from Lin[...]

85 Sof tware License Agreement 10/100 4-Port VPN Router Appendix J and process information about your Linksys product and/or the Soft ware and/or your use of either in or der (i) to enable Linksys to offer you Upgrades; (ii) to ensure that your Linksys produc t and/or the Soft ware is being used in accordanc e with the terms of this Agr eement; (ii[...]

86 Sof tware License Agreement 10/100 4-Port VPN Router Appendix J Everyone is permitted to c opy and distribute verbatim copies of this lic ense document, but changing it is not allowed . Preamble The licenses for most soft ware are designed to take away your freedom t o share and change it. By con trast, the GNU General Public License is in tende[...]

87 Sof tware License Agreement 10/100 4-Port VPN Router Appendix J a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user ho w to view a c opy of this License. (Exception: if the Prog ram itself is interactive but does not normally pri[...]

88 Sof tware License Agreement 10/100 4-Port VPN Router Appendix J that contradict the conditions of this License , they do not excuse you from the conditions of this License. I f you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribut[...]

89 Sof tware License Agreement 10/100 4-Port VPN Router Appendix J The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Ac tually both licenses are BSD -style Open Source licenses. In case of any license issues re[...]

90 Sof tware License Agreement 10/100 4-Port VPN Router Appendix J If you include any W indows specific code (or a 4. derivative thereof ) from the apps director y (application code) you must include an acknowledgement: “ This product includes soft ware written by Tim Hudson (tjh@cr yptsoft.com)” THIS SOFT W ARE IS PROVIDED BY ERIC Y OUNG ``AS [...]

91 Regula tor y Informa tion 10/100 4-Port VPN Router Appendix K Appendix K: Regulat or y Information FCC Sta tement This produc t has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable prot ection against harmful inter ference in a res[...]

92 Regula tor y Informa tion 10/100 4-Port VPN Router Appendix K User Inf ormation f or Consumer Products Cov ered b y EU Direc tive 2002/96/EC on W aste Electric and Elec tronic Equipment ( WEEE) This document contains impor tant information for users with regards to the proper disposal and recycling of Linksys products. Consumers are required to [...]

93 Regula tor y Informa tion 10/100 4-Port VPN Router Appendix K Eesti (Estonian) - Keskkonnaalane informatsioon Euroopa Liidus asuva tele klientidele Euroopa Liidu direktiivi 2002/96/EÜ nõuete kohaselt on seadmeid, millel on tootel või pakendil k äesolev sümbol , keelatud kõr valdada koos sor teerimata olmejäätmetega. See sümbol näitab, [...]

94 Regula tor y Informa tion 10/100 4-Port VPN Router Appendix K Lietuvškai (Lithuanian) - Aplinkosaugos informacija, skir ta Europos Sąjungos vartotojams Europos dir ektyva 2002/96/EC numato , kad įrangos, kuri ir kurios pakuotė yra pažymėta šiuo simboliu (įvesk ite simbolį), negalima šalinti kar tu su nerūšiuotomis komunalinėmis atli[...]

95 Regula tor y Informa tion 10/100 4-Port VPN Router Appendix K Português (P ortuguese) - Informação ambiental para clientes da União Eur opeia A Directiva Europeia 2002/96/CE exige que o equipamento que exibe este símbolo no produto e/ou na sua embalagem não seja eliminado junto com os resíduos municipais não separados. O símbolo indica [...]

96 Contac t Informa tion 10/100 4-Port VPN Router Appendix L Appendix L: C ontact Information Linksys C ontact Information W ebsite http://www.linksy s.com Support Site http://www.linksys .com/support FTP Site ftp.linksys .com Advice Line 800-546-5797 (LINKSYS) Support 800-326-7114 RMA (Return Merchandise Authorization) http://www .linksys.com/warr[...]