® A Division of Cisco Systems, Inc. 10/100 8-Port VPN Router WIRED Model No.
10/100 8-Port VPN Router Copyright and Trademarks Specifications are subject to change without notice. Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright © 2004 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered trademarks of their respective holders.
10/100 8-Port VPN Router Table of Contents Chapter 1: Introduction 1 Welcome What’s in this Guide? 1 2 Chapter 2: Networking Basics 4 An Introduction to LANs The Use of IP Addresses Why do I need a VPN? What is a VPN? 4 4 5 6 Chapter 3: Getting to Know the Router The Front Panel The Back Panel Chapter 4: Connecting the Router Overview Connection Instructions Chapter 5: Setting Up and Configuring the Router Overview How to Access the Web-based Utility System Summary Tab Setup Tab - Network Setup T
10/100 8-Port VPN Router System Management Tab - Factory Default System Management Tab - Firmware Upgrade System Management Tab - Restart System Management Tab - Setting Backup Port Management Tab - Port Setup Port Management Tab - Port Status Firewall Tab - General Firewall Tab - Access Rules Firewall Tab - Content Filter VPN Tab - Summary VPN Tab - Gateway to Gateway VPN Tab - Client to Gateway VPN Tab - VPN Client Access VPN Tab - VPN Pass Through VPN Tab - PPTP Server Log Tab - System Log Log Tab - Sys
10/100 8-Port VPN Router Appendix H: Glossary Appendix I: Specifications Appendix J: Warranty Information Appendix K: Regulatory Information Appendix L: Contact Information 89 93 94 95 96
10/100 8-Port VPN Router List of Figures Figure 2-1: VPN Router-to-VPN Router VPN Figure 2-2: Computer-to-VPN Router VPN Figure 3-1: Front Panel Figure 3-2: Back Panel Figure 4-1: Example of a Typical Network Figure 4-2: Connect a PC Figure 4-3: Connect the Internet and DMZ/Internet Figure 4-4: Connect the Power Figure 5-1: Router’s IP Address Figure 5-2: Login Screen Figure 5-3: System Summary Figure 5-4: Site Map Figure 5-5: Setup Tab - Network Figure 5-6: WAN Connection Type - Obtain an IP Automatically
10/100 8-Port VPN Router Figure 5-21: Setup Tab - Advanced Routing Figure 5-22: Setup Tab - Routing Table Entry List Figure 5-23: DHCP Setup Figure 5-24: DHCP Status Figure 5-25: System Management Tab - Dual-WAN Figure 5-26: Protocol Binding - Service Management Figure 5-27: System Management Tab - SNMP Figure 5-28: System Management Tab - DNS Name Lookup Figure 5-29: System Management Tab - Ping Figure 5-30: System Management Tab - Factory Default Figure 5-31: Are You Sure Figure 5-32: System Management T
10/100 8-Port VPN Router Figure 5-51: VPN tab - Client to Gateway Remote Group Setup Figure 5-52: VPN tab - Client to Gateway IPSec Setup Figure 5-53: VPN tab - Client to Gateway Advanced Figure 5-54: VPN tab - VPN Client Access Figure 5-55: VPN tab - VPN Pass Through Figure 5-56: VPN tab - PPTP Server Figure 5-57: Log tab - System Log Figure 5-58: Log tab - View Log Figure 5-59: Log tab - System Statistics Figure 5-60: Wizard tab Figure 5-61: Basic Setup Wizard - Dual WAN or DMZ Figure 5-62: Basic Setup W
10/100 8-Port VPN Router Figure C-3: MAC Address/Physical Address Figure C-4: MAC Address Clone Figure D-1: Mounting Brackets Figure D-2: Attaching the Brackets to the Router and Rack-Mounting the Router Figure D-3: Wall-Mounting the Router Figure D-4: Wall-Mounting Hardware Figure F-1: Upgrade Firmware 81 81 82 83 84 85 87
/100 8-Port VPN Router Chapter 1: Introduction Bandwidth: the transmission capacity of a given device or network Welcome Thank you for choosing the 10/100 8-Port VPN Router. The Linksys 10/100 8-Port VPN Router is an advanced Internet-sharing network solution for your small business needs. Like any router, it lets multiple computers in your office share an Internet connection.
10/100 8-Port VPN Router What’s in this Guide? This user guide covers the steps for setting up and using the 10/100 8-Port VPN Router. • Chapter 1: Introduction This chapter describes the 10/100 8-Port VPN Router and this User Guide. • Chapter 2: Networking Basics This chapter describes the basics of networking. • Chapter 3: Getting to Know the 10/100 8-Port VPN Router This chapter describes the physical features of the Router.
10/100 8-Port VPN Router • Appendix H: Glossary This appendix gives a brief glossary of terms frequently used in networking. • Appendix I: Specifications This appendix provides the Router’s technical specifications. • Appendix J: Warranty Information This appendix supplies the Router’s warranty information. • Appendix K: Regulatory Information This appendix supplies the Router’s regulatory information.
10/100 8-Port VPN Router Chapter 2: Networking Basics An Introduction to LANs A Router is a network device that connects two networks together. The Router connects your local area network (LAN), or the group of PCs in your home or office, to the Internet. The Router processes and regulates the data that travels between these two networks. The Router’s Network Address Translation (NAT) technology protects your network of PCs so users on the Internet cannot “see” your PCs.
10/100 8-Port VPN Router A DHCP server can either be a designated PC on the network or another network device, such as the Router. By default, the Router’s Internet Connection Type is Obtain an IP automatically (DHCP). The PC or network device obtaining an IP address is called the DHCP client. DHCP frees you from having to assign IP addresses manually every time a new user is added to your network.
10/100 8-Port VPN Router A hacker can use this information to spoof (or fake) a MAC address allowed on the network. With this spoofed MAC address, the hacker can also intercept information meant for another user. 2) Data Sniffing Data “sniffing” is a method used by hackers to obtain network data as it travels through unsecured networks, such as the Internet.
10/100 8-Port VPN Router •VPN Router to VPN Router •Computer (using VPN client software that supports IPSec) to VPN Router The VPN Router creates a “tunnel” or channel between two endpoints, so that data transmissions between them are secure. A computer with VPN client software that supports IPSec can be one of the two endpoints. Any computer with the built-in IPSec Security Manager (Microsoft 2000 and XP) allows the VPN Router to create a VPN tunnel using IPSec).
10/100 8-Port VPN Router Chapter 3: Getting to Know the Router The Front Panel The Router’s LEDs, ports, and Reset button are located on the front panel of the Router. LAN WAN2 WAN1 Figure 3-1: Front Panel Ports 1-8 (LAN) These eight LAN (Ethernet) ports connect to network devices, such as PCs, print servers, or additional switches. DMZ/Internet (WAN2) The DMZ/Internet port can be used in two different ways: a second Internet port, or DMZ port.
10/100 8-Port VPN Router DMZ/Internet Green. The DMZ/Internet LED lights up when the Router is connected to your cable or DSL modem when used as an Internet port, and it lights up when the Router is connected to the hub, switch, or public server when used as a DMZ port. Internet Green. The Internet LED lights up when the Router is connected to your cable or DSL modem. DMZ Mode Green. The DMZ Mode LED lights up when the Router is using DMZ mode. 1-8 (LAN) Green. The LAN LED serves two purposes.
10/100 8-Port VPN Router Chapter 4: Connecting the Router Overview To set up your network, you will do the following: • Connect the Router to one of your PCs according to the instructions in this chapter. • If necessary, configure your PCs to obtain an IP address automatically from the Router, according to “Appendix G: Windows Help”.
10/100 8-Port VPN Router Connection Instructions Hardware: the physical aspect of computers, telecommunications, and other information technology devices 1. Before you begin, make sure that all of your hardware is powered off, including the Router, PCs, hubs, switches, and cable or DSL modem. 2. Connect one end of an Ethernet network cable to one of the numbered ports on the front of the Router. Connect the other end to an Ethernet port on a network device, e.g., a PC, print server, hub, or switch.
10/100 8-Port VPN Router Chapter 5: Setting Up and Configuring the Router Overview The Router comes with a Web-based Utility that allows for easy set up and configuration. This chapter will explain all of the functions in this Utility. (You can access the web-based utility by accessing 192.168.1.1.) There are eleven main tabs in the Utility: System Summary, Setup, DHCP, System Management, Port Management, Firewall, VPN, Log, Wizard, Support, and Logout.
10/100 8-Port VPN Router • MAC Clone. Some ISPs require that you register a MAC address. From this screen, you can “clone” your network adapter's MAC address onto the Router. This prevents you from having to call your ISP to change the registered MAC address to the Router's MAC address. • DDNS. DDNS (Dynamic DNS) service, on this screen, allows you to assign a fixed domain name to a dynamic Internet IP address. This allows you to host your own Web, FTP or other type of TCP/IP server in your network.
10/100 8-Port VPN Router Port Management Tab • Port Setup. From this screen, users can configure the functionality for each port. • LAN Status. Users can choose this screen to see the status of a selected port. Firewall Tab • General. From this screen, you can configure the Router’s broadest settings for denying or allowing specific users from accessing the Internet. • Access Rules.
10/100 8-Port VPN Router Wizard Tab • Wizard. Use this tab to access two Setup Wizards, the Basic Setup Wizard and Access Rule Setup Wizard. Figure 5-1: Router’s IP Address Support Tab • Support. The buttons on this tab allow you to access the user guide and the Linksys website. Logout Tab • Logout. Clicking this tab exits you from the Utility.
10/100 8-Port VPN Router System Up Time: This displays the length of time in Days, Hours, and Minutes that the Router has been active, along with the current time. Configuration If you need help configuring the router, click the Setup Wizard button. A complete walk-through of the Setup Wizard is shown in the Wizard Tab section. Port Statistics You can check the status of any of the Router’s ports simply by clicking the port number on the port diagram.
10/100 8-Port VPN Router Firewall Setting Status SPI (Stateful Packet Inspection): This shows if the SPI status is On or Off, hyperlinked to that section of the Firewall Tab. DoS (Denial of Service): This shows if the DoS status is On or Off, hyperlinked to that section of the Firewall Tab. Block WAN Request: This shows if the Block WAN Request status is On or Off, hyperlinked to that section of the Firewall Tab.
10/100 8-Port VPN Router Setup Tab - Network The Setup screen contains all of the Router’s basic setup functions. These functions can be set from this screen but normally don’t need to be adjusted, as the Router has been designed to be used in most network settings without changing any of the default values. Some users, however, may need to enter additional information in order to connect to the Internet through an ISP (Internet Service Provider) or broadband (DSL, cable modem) carrier.
10/100 8-Port VPN Router Static IP If you have to specify the WAN IP Address, Subnet Mask, Default Gateway Address, and DNS Server, select Static IP. All of this information can be obtained from your ISP. Figure 5-7: WAN Connection Type - Static IP PPPoE (Point-to-Point Protocol over Ethernet) (most DSL users) Your ISP will let you know whether PPPoE should be enabled or not, which will be determined by if they use this protocol. To enable PPPoE: 1.
10/100 8-Port VPN Router Transparent Bridge Transparent Bridging is used when you have two large networks that you wish to bridge together. Your network administrator should fill in the information for both network segments, including the range of IP addresses each network includes. When this is selected, the WAN and LAN must be in the same subnect and only one WAN port can be set in Transparent Bridge mode.
10/100 8-Port VPN Router Setup Tab - Password The Router's default User Name and Password is admin. For greater network security, you should change the Router's password from this default. If you leave the password field blank, all users on your network will be able to access the Router simply by entering admin into the password field. Old Password: Enter the old password. NOTE: The password cannot be recovered if it is lost or forgotten.
10/100 8-Port VPN Router Setup Tab - DMZ Host The DMZ (Demilitarized Zone) Host feature opens the firewall for one of your network’s users so they can access the Internet to use a special-purpose service such as Internet gaming or video conferencing. This user, however, is unprotected by the firewall. To open the firewall for one network user to access one website, and visa versa, utilize the One-to-One NAT feature. Enter the DMZ Private IP Address to access the DMZ Host settings.
10/100 8-Port VPN Router Port Range Forwarding 1. Select the Service from the pull-down menu, shown in Figure 5-15. 2. If the Service you need is not listed in the menu, please click the Service Management button to add the new Service Name, and enter the Protocol and Port Range. This will open the Service Management screen. Click the Add to List button. Then, click the Save Setting button. Click the Exit button. 3. Enter the IP Address of the server that you want the Internet users to access.
10/100 8-Port VPN Router Setup Tab - UPnP Page UPnP forwarding can be used to set up public services on your network. Windows XP can modify those entries via UPnP when UPnP function is enabled. UPnP Function: Enable this function by selecting Yes. The default setting for this feature is No. To add a UPnP function: 1. Select the Service from the pull-down menu. 2.
10/100 8-Port VPN Router Setup Tab - MAC Clone Some ISPs require that you register a MAC address. The MAC Clone feature “clones” your network adapter's MAC address onto the Router, and prevents you from having to call your ISP to change the registered MAC address to the Router's MAC address. The Router's MAC address is a 12-digit code assigned to a unique piece of hardware for identification. Enter the MAC Address in the User Defined WAN1 or WAN2 MAC Address field or select MAC Address from this PC.
10/100 8-Port VPN Router Setup Tab - Advanced Routing Dynamic Routing The Router's dynamic routing feature can be used to automatically adjust to physical changes in the network's layout. The Router uses the dynamic RIP protocol, which is a networking protocol to manage network communications or communications between networks. It determines the route that the network packets take based on the fewest number of hops between the source and the destination.
10/100 8-Port VPN Router Static Routing You will need to configure Static Routing if there are multiple routers connected to your network. The static routing function determines the path data follows over your network. Static routing allows different IP domain users to access the Internet through this device. This is an advanced feature. Please proceed with caution. To set up static routing, you should add routing entries in the Router's table that tell the device where to send all incoming packets.
10/100 8-Port VPN Router DHCP Tab - Setup Setup The Router can be used as a DHCP (Dynamic Host Configuration Protocol) server on your network. A DHCP server assigns available IP addresses to each computer on your network automatically. If you choose to enable the DHCP server option, you must configure all of the PCs on your LAN to connect to a DHCP server. (See Appendix G: Windows Help.) Enable DHCP Server: Check the box to enable the DHCP Server.
10/100 8-Port VPN Router DHCP Tab - Status The DHCP Server Status reports the IP of the DHCP Server, the number of Dynamic IP Addresses and Static IP Addresses Used, DHCP Addresses Available and Total Addresses within the Range set. The Client Table shows the information related to each PC on the network: Client Host Name, IP Address, MAC Address, and Leased Time.
10/100 8-Port VPN Router Bandwidth Enter the maximum Bandwidth of Upstreamand Downstream for WAN1 and WAN2, as provided by your ISP. Protocol Binding Select a Protocol from the drop-down menu next to Service or, if the one you’re looking for isn’t available, set up a new one by clicking the Service Management button. This should be used to specify the IP Address and/or service that will go through a specific WAN port. To set up a new Service: 1.
10/100 8-Port VPN Router System Management Tab - SNMP SNMP, or Simple Network Management Protocol, is a network protocol that provides network administrators with the ability to monitor the status of the Router and receive notification of any critical events as they occur on the network. The Router supports SNMP v1/v2c and all relevant Management Information Base II (MIBII) groups. The appliance replies to SNMP Get commands for MIBII via any interface and supports a custom MIB for generating trap messages.
10/100 8-Port VPN Router System Management Tab - Diagnostic The Router has two built-in tools that will help with troubleshooting network problems. DNS Name Lookup The Domain Name Service (DNS) allows to look up websites by entering an easily remembered host name, such as www.RV082.com, instead of numerical TCP/IP addresses to access Internet resources. The Router has a DNS lookup tool that will return the numerical TCP/IP address of a host name.
10/100 8-Port VPN Router System Management Tab - Factory Default The Factory Default button can be used to clear all of your configuration information and restore the Router to its factory default settings. Only use this feature if you wish to discard all other configuration preferences. Click the Return to Factory Default Setting button if you want to restore the Router to the factory default settings.
10/100 8-Port VPN Router System Management Tab - Restart When restarting the Router, you should use this Restart tool. Restarting with this button will send out a log file before the box is reset. Select the Active Firmware Version or Backup Firmware Version. Click the Restart Router button to restart the Router. System Management Tab - Setting Backup From this screen, you can make a backup file of the Router’s Preferences.
10/100 8-Port VPN Router Speed: This allows you to manually configure the per-port speed as 10Mbps or 100Mbps. Duplex: This configures the port to half-duplex or full-duplex throughput. Half-Duplex: data transmission that can occur in two directions over a single line, but only one direction at a time. Auto Negotiation: If enabled, every LAN port will be set as auto negotiated, which will automatically manage speed and throughput.
10/100 8-Port VPN Router Firewall Tab - General From the Firewall Tab, you can configure the Router to deny or allow users from accessing the Internet or even network servers. You can set up different packet filters for different users within your network based on their network Port number or access from the Internet based on their IP addresses. Firewall: The Firewall function is enabled by default. If this function is disabled, SPI, DoS, Block WAN Request will also be disabled.
10/100 8-Port VPN Router Firewall Tab - Access Rules Network Access Rules evaluate the network traffic's Source IP address, Destination IP address, and IP protocol type to decide if the IP traffic is allowed to pass through the firewall. When defining Network Access Rules, remember that it is possible to disable all firewall protection or block all access to the Internet. Use extreme caution when creating or deleting Network Access Rules.
10/100 8-Port VPN Router Edit: Clicking the Edit button will open the Add a New Access Rule screen, where you can edit any of the Rule’s settings. Delete: Clicking the TrashCan icon will delete this Rule. Click the Restore to Default Rules to restore the Network Access Rules to their default settings. To add a new Network Access Rule and open the Add a New Access Rule screen, click the Add New Rule button.
10/100 8-Port VPN Router Editing an Access Rule To Edit an Access Rule, click the Edit button on the Access Rule screen. The Edit screen looks very much like the screen for adding a new Access Rule. Enter your changes and click the Save Settings button to save the Service Management settings or click the Cancel Changes button to undo your changes. When your settings are correct, a screen will let you know that settings are successful. Click the Return button to return to the previous screen.
10/100 8-Port VPN Router VPN Tab - Summary Summary The VPN Summary displays summary information about the VPN (Virtual Private Network), along with the Tunnel Status, GroupVPN Status, and VPN Clients Status. Summary: It shows the number of Tunnel(s) Used and Tunnel(s) Available. The 10/100 8-Port VPN Router supports 50 tunnels. Detail: Click the Detail button to see detail of the VPN Summary.
10/100 8-Port VPN Router Tunnel Test: Click the Connect button to verify the tunnel status. The test result will be updated in Status. If the tunnel is connected, a Disconnect button will be available so you can disconnect the VPN connection. Configure: This includes options for editing the tunnel, by clicking Edit, or deleting the tunnel, by clicking the Trash Can. Tunnel(s) Enable and Tunnel(s) Defined: This will show the amount of tunnels enabled and tunnels defined.
10/100 8-Port VPN Router VPN Tab - Gateway to Gateway This screen allows you to create VPN tunnels between VPN routers. You can reach this page by clicking the Gateway to Gateway tab or from the Mode Choose screen (figure 5-44). Tunnel No.: This shows the number assigned to this tunnel, from 1~50, depending on how many tunnels you have already set up. Tunnel Name: Enter the Tunnel Name, such as LA Office, Branch Site, Corporate Site, etc.
10/100 8-Port VPN Router Dynamic IP + Domain Name (FQDN) Authentication: This setting uses a dynamic IP address, which is constantly changing. In addition, the tunnel is confirmed through use of a domain name. Only one domain name can be used for one tunnel and may not be applied to another tunnel.These settings must match the Remote Group Setup on the other end of the tunnel. Dynamic IP + E-mail Addr.(USER FQDN) Authentication: This setting uses a dynamic IP address, which is constantly changing.
10/100 8-Port VPN Router IP + E-mail Addr. (USER FQDN) Authentication: This selection affords a greater amount of security because each side of the tunnel must use the same IP Address as well as the same email. Only one email address can be used for one tunnel and may not be applied to another tunnel.These settings must match the Remote Group Setup on the other end of the tunnel. Dynamic IP + Domain Name (FQDN) Authentication: This setting uses a dynamic IP address, which is constantly changing.
10/100 8-Port VPN Router Encryption: There are two methods of encryption, DES and 3DES. The Encryption method determines the length of the key used to encrypt/decrypt ESP packets. DES is 56-bit encryption and 3DES is 168-bit encryption. 3DES is recommended because it is more secure, and both sides must use the same Encryption method. Authentication: There are two methods of authentication, MD5 and SHA. The Authentication method determines a method to authenticate the ESP packets.
10/100 8-Port VPN Router Phase 1 SA Life Time: This field allows you to configure the length of time a VPN tunnel is active in Phase 1. The default value is 28,800 seconds. Perfect Forward Secrecy: If PFS is enabled, IKE Phase 2 negotiation will generate a new key material for IP traffic encryption and authentication. If PFS is enabled, a hacker using brute force to break encryption keys is not able to obtain other or future IPSec keys.
10/100 8-Port VPN Router Aggressive Mode: There are two types of Phase 1 exchanges: Main mode and Aggressive mode. Aggressive Mode requires half of the main mode messages to be exchanged in Phase 1 of the SA exchange. If network security is preferred, select Main mode. When users select the Dynamic IP in Remote Security Gateway Type, it will be limited as Aggressive Mode. Compress (Support IP Payload compression Protocol (IP Comp) The Router supports IP Payload Compression Protocol.
10/100 8-Port VPN Router Tunnel Name: Enter the Tunnel Name, such as LA Office, Branch Site, Corporate Site, etc. This is to allow you to identify multiple tunnels, and does not have to match the name used at the other end of the tunnel. Interface: All VPN tunnels go out through one of the Router’s WAN ports. When Dual-WAN is enabled, you will have the option of two ports: WAN1 or WAN2. Enable: Checking this box enables the VPN tunnel you’re creating.
10/100 8-Port VPN Router Local Security Group Type. Select the local LAN user(s) that can use this VPN tunnel. Local Security Group Type may be a single IP address, a Subnet or an IP address range. The Local Secure Group must match the Remote Secure Group on the other end of the tunnel. Selecting IP Address allows only one computer, with the specific IP Address, access to the tunnel. (The default IP is 192.168.1.0.) If you select Subnet, all computers on the local subnet can access the tunnel.
10/100 8-Port VPN Router Dynamic IP + E-mail Addr.(USER FQDN) Authentication: This setting uses a dynamic IP address, which is constantly changing. In addition, the tunnel is confirmed through use of an email address. Only one email address can be used for one tunnel and may not be applied to another tunnel.These settings must match the Remote Group Setup on the other end of the tunnel. Remote Security Group Type. Select the local LAN user(s) that can use this VPN tunnel.
10/100 8-Port VPN Router Manual If you select Manual, you generate the key yourself, and no key negotiation is needed. Basically, manual key management is used in small static environments or for troubleshooting purposes. Both sides must use the same Key Management method. Incoming & Outgoing SPI (Security Parameter Index): SPI is carried in the ESP (Encapsulating Security Payload Protocol) header and enables the receiver and sender to select the SA, under which a packet should be processed.
10/100 8-Port VPN Router groups of different prime key lengths. Group 1 is 768 bits, Group 2 is 1,024 bits and Group 5 is 1,536 bits. If network speed is preferred, select Group 1. If network security is preferred, select Group 5. Phase 1 Encryption: There are two methods of encryption, DES and 3DES. The Encryption method determines the length of the key used to encrypt/decrypt ESP packets. DES is 56-bit encryption and 3DES is 168-bit encryption. Both sides must use the same Encryption method.
10/100 8-Port VPN Router Phase 2 SA Life Time: This field allows you to configure the length of time a VPN tunnel is active. The default value is 3,600 seconds. Preshared Key: Character and hexadecimal values are acceptable in this field, e.g. “My_@123” or “4d795f40313233.” The max entry of this field is 30-digit. Both sides must use the same Pre-shared Key. It’s recommended to change Preshared keys regularly to maximize VPN security.
10/100 8-Port VPN Router Dead Peer Detection (DPD): When DPD is enabled, the RV082 will send the periodic HELLO/ACK messages to prove the tunnel liveliness when both peers of VPN tunnel provide DPD mechanism. Once a dead peer has detected, the RV082 will disconnect the tunnel so the connection can be re-established. The Interval is the number of seconds between DPD messages. The default is DPD enabled, and default Interval is 10 seconds.
10/100 8-Port VPN Router VPN Tab - VPN Pass Through IPSec Passthrough: IPSec (Internet Protocol Security) is a suite of protocols used to implement secure exchange of packets at the IP layer. To allow IPSec Passthrough, click the Enabled button. To disable IPSec Passthrough, click the Disabled button. PPTP Pass Through: PPTP (Point-to-Point Tunneling Protocol) Passthrough allows the Point-to-Point (PPP) to be tunneled through an IP network. To allow PPTP Passthrough, click the Enabled button.
10/100 8-Port VPN Router Log Tab - System Log The System Log screen allows to configure the Router’s log, keeping track of the Router’s performance. Syslog Enable Syslog: Checking this box enables the Logging feature, called Syslog. Syslog Server: In addition to the standard event log, the Router can send a detailed log to an external Syslog server. Syslog is an industry-standard protocol used to capture information about network activity.
10/100 8-Port VPN Router General Log You can receive alert logs for any of these events when you check its box on the screen: System Error Messages, Deny Policies, Allow Policies, Content Filtering, Data Inspection, Authorized Login, Configuration Changes. View System Log: Click this button to view all logs: System Log, Access Log, Firewall Log, or VPN Log. Outgoing Log Table: Click this button to view information about the outgoing logs: LAN IP, Destination URL/IP and Service/Port number.
10/100 8-Port VPN Router Wizard Tab Use this tab to access the Router’s two Setup Wizards: the Basic Setup Wizard and the Access Rule Setup Wizard. They will help you to set up the Router to access the Internet and set up a Firewall security policy, or Access Rule. Basic Setup Figure 5-60: Wizard tab 1. Click the Launch Now button to run the Basic Setup Wizard to quickly set up the Router to access the Internet. 2.
10/100 8-Port VPN Router 3. The information on the next screen is used if your Internet Service Provider (ISP) requires a host and domain name. Complete this information, if required by your ISP, and click Next to continue. Click Previous if you want to return to the previous screen. Click Exit if you want to exit the wizard. Figure 5-62: Basic Setup Wizard Host and Domain Name 4. You will now need to set up the connection types for the WAN ports.
10/100 8-Port VPN Router Access Rule Setup You can access this Setup Wizard through the Wizard tab (shown in Figure 5-60) or by clicking the Wizard button on the Add New Access Rule screen (shown in Figure 5-39). 1. From the Wizard tab, click the Launch Now button to run the Access Rule Wizard to help you easily set up the Firewall security policy for the Router. 2. The first screen to appear explains the Access Rules. Click Next to continue. Click Exit if you want to exit the wizard.
10/100 8-Port VPN Router 4. Next select the service from the drop-down menu that will be allowed or denied from the Service menu. Click Next to continue. Click Previous if you want to return to the previous screen. Click Exit if you want to exit the wizard. Figure 5-67: Access Rule Wizard Select the Service 5. From the next screen, select the Source from the Ethernet drop-down menu. Then, select the users from the drop-down menu, Any, single, or Range. Click Next to continue.
10/100 8-Port VPN Router 6. Next, choose the destination, either Any, Single, or Range, from the drop-down menu. Click Next to continue. Click Previous if you want to return to the previous screen. Click Exit if you want to exit the wizard. Figure 5-69: Access Rule Wizard Select the Destination 7. From the next screen, select the scheduling for the rule, Always, if the Rule is always in effect, or Scheduling, if you want to define a range for a specific time and day of the week. Click Next to continue.
10/100 8-Port VPN Router Support Tab On Line Manual Click the On Line Manual button, and it will link to the Support page of the Linksys website. Click the Downloads button from the Technical Support menu, then select the RV082 from the drop-down menu, select your operating system, then click Downloads for this Product. Click User Guide. Linksys Web Site Click the Linksys Web Site button, and it will link to the Support page of the Linksys Web Site, www.linksys.com.
10/100 8-Port VPN Router Appendix A: Troubleshooting This appendix provides solutions to problems that may occur during the installation and operation of the Router. Read the descriptions below to help solve your problems. If you can't find an answer here, check the Linksys website at www.linksys.com. Common Problems and Solutions 1. I need to set a static IP address on a PC. The Router, by default, assigns an IP address range of 192.168.1.100 to 192.168.1.149 using the DHCP server on the Router.
10/100 8-Port VPN Router For Windows 2000: A. Click Start, Settings, and Control Panel. Double-click Network and Dial-Up Connections. B. Right-click the Local Area Connection that is associated with the Ethernet adapter you are using, and select the Properties option. C. In the Components checked are used by this connection box, highlight Internet Protocol (TCP/IP), and click the Properties button. Select Use the following IP address option. D.
10/100 8-Port VPN Router 2. I want to test my Internet connection. A. Check your TCP/IP settings. For Windows 98 and Millennium: Refer to Windows Help for details. Make sure Obtain IP address automatically is selected in the settings. For Windows 2000: 1. Click Start, Settings, and Control Panel. Double-click Network and Dial-Up Connections. 2. Right-click the Local Area Connection that is associated with the Ethernet adapter you are using, and select the Properties option. 3.
10/100 8-Port VPN Router • For Windows 2000 and XP, click Start and Run. In the Open field, type cmd. Press the Enter key or click the OK button. C. In the command prompt, type ping 192.168.1.1 and press the Enter key. • If you get a reply, the computer is communicating with the Router. • If you do NOT get a reply, check the cable, and make sure Obtain an IP address automatically is selected in the TCP/IP settings for your Ethernet adapter. D.
10/100 8-Port VPN Router 4. I am not able to access the Router’s Web-based Utility Setup page. A. Refer to “Problem #2, I want to test my Internet connection” to verify that your computer is properly connected to the Router. B. Refer to “Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter” to verify that your computer has an IP Address, Subnet Mask, Gateway, and DNS. C. Set a static IP address on your system; refer to “Problem #1: I need to set a static IP address.” D.
10/100 8-Port VPN Router documentation provided with the server you installed. Follow these steps to set up port forwarding through the Router’s Web-based Utility. We will be setting up web, ftp, and mail servers. A. Access the Router’s Web-based Utility by going to http://192.168.1.1 or the IP address of the Router. Go to the Setup => Forwarding tab. B. Select the Service from the pull-down menu.
10/100 8-Port VPN Router example, if you have a web server, you would enter the range 80 to 80. Click the Add to List button. Then click the Save Setting button. Click the Exit button. C. Enter the IP Address of the server that you want the Internet users to access. For example, if the web server’s Ethernet adapter IP address is 192.168.1.100, you would enter 100 in the field provided. Check “Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter” for details on getting an IP address.
10/100 8-Port VPN Router 9. I forgot my password, or the password prompt always appears when saving settings to the Router. Reset the Router to factory defaults by pressing the Reset button for ten seconds and then releasing it. If you are still getting prompted for a password when saving settings, then perform the following steps: A. Access the Router’s web interface by going to http://192.168.1.1 or the IP address of the Router. Enter the default password admin, and click the Setup => Password tab. B.
10/100 8-Port VPN Router A. Go to the Linksys website at http://www.linksys.com and download the latest firmware, or use the Web-based Utility to be automatically redirected to the download webpage. Go to System Management Firmware Upgrade, and click the Firmware Download from Linksys Web Site button. Select the Router from the pull-down menu and choose the firmware from the options. A. Extract the firmware file on your computer. B.
10/100 8-Port VPN Router F. You may see the login status display as Connecting. Press the F5 key to refresh the screen, until you see the login status display as Connected. If the connection is lost again, follow steps E and F to re-establish connection. 15. I can't access my email, web, or VPN, or I am getting corrupted data from the Internet. The Maximum Transmission Unit (MTU) setting may need to be adjusted. By default, the MTU is set at 1500.
10/100 8-Port VPN Router 17. When I enter a URL or IP address, I get a time-out error or am prompted to retry. • Check if other PCs work. If they do, ensure that your workstation’s IP settings are correct (IP Address, Subnet Mask, Default Gateway, and DNS). Restart the computer that is having a problem. • If the PCs are configured correctly, but still not working, check the Router. Ensure that it is connected and powered on. Connect to it and check its settings.
10/100 8-Port VPN Router Does the Router support any operating system other than Windows 98, Millennium, 2000, or XP? Yes, but Linksys does not, at this time, provide technical support for setup, configuration or troubleshooting of any non-Windows operating systems. Does the Router support ICQ send file? Yes, with the following fix: click ICQ menu => preference => connections tab=>, and check I am behind a firewall or proxy. Then set the firewall time-out to 80 seconds in the firewall setting.
10/100 8-Port VPN Router If all else fails in the installation, what can I do? Reset the Router by holding down the Reset button for ten seconds. Reset your cable or DSL modem by powering the unit off and then on. Obtain and flash the latest firmware release that is readily available on the Linksys website, www.linksys.com. How can I be notified of new Router firmware upgrades? All Linksys firmware upgrades are posted on the Linksys website at www.linksys.com, where they can be downloaded for free.
10/100 8-Port VPN Router How many ports can be simultaneously forwarded? Theoretically, the Router can establish 4,000 sessions at the same time, but you can only forward 30 ranges of ports. Does the Router replace a modem? Is there a cable or DSL modem in the Router? No, this version of the Router must work in conjunction with a cable or DSL modem. Which modems are compatible with the Router? The Router is compatible with virtually any cable or DSL modem that supports Ethernet.
10/100 8-Port VPN Router Appendix B: Installing the Linksys VPN Client When using your PC to log onto the Router from remote locations, you’ll want to use the Linksys QuickVPN Client. Installing this Client takes just a few steps, provided below. 1. Insert the RV082 User Guide CD into your PC’s CD-ROM drive. 2. Click the Start button, select Run, and, in the window that appears, type D:\Linksys_QuickVPN_1028.exe (where D: is your CD-ROM drive). Then, click the OK button.
10/100 8-Port VPN Router 5. At this point, the Linksys VPN Client (or QuickVPN) will open. From this screen, you can sign in with your Profile Name, Username, and Password. Then, enter the Server Address of the VPN connection onto which you will be logging. Once you’re done, click the Connect button to connect to the VPN connect. you can save your VPN connection information by clicking the Save button or delete it by clicking the Delete button. Clicking the Help button will open a help screen.
10/100 8-Port VPN Router Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter This section describes how to find the MAC address for your computer’s Ethernet adapter so you can use the MAC address cloning feature of the Router. You can also find the IP address of your computer’s Ethernet adapter. This IP address is used for the Router’s filtering, forwarding, and/or DMZ features.
10/100 8-Port VPN Router 3. Write down the Physical Address as shown on your computer screen; it is the MAC address for your Ethernet adapter. This appears as a series of numbers and letters. The MAC address/Physical Address is what you will use for MAC address cloning or MAC filtering. Note: The MAC address is also called the Physical Address. The example in Figure C-3 shows the Ethernet adapter’s IP address as 192.168.1.100. Your computer may show something different.
10/100 8-Port VPN Router Appendix D: Physical Setup of the Router This section describes the physical setup of the Router, including the installation of the mounting brackets. Setting up the Router You can set the Router on a desktop, install it in a rack with attached brackets, or mount it on the wall. Placement of the Router Set the Router on a desktop or other flat, secure surface. Do not place excessive weight on top of the Router that could damage the Router.
10/100 8-Port VPN Router Line up the bracket holes with the holes in the Router and attach with the screws, using four on each side of the Router. After the brackets are attached to the Router by screws, you can rack-mount it. Attach the Router to the rack with two screws on each side.
10/100 8-Port VPN Router Wall-Mounting the Router The Router is shown in Figure D-3 with two holes on the bottom. The horizontal distant between the two holes is 3.701 in (94mm). Install two screws or nails into the wall, 3.701 in (94 mm) apart. After the nails are secured on the wall, line up the Router’s holes with the screws on the wall to wall-mount it. The wall-mount holes are shown below, in Figure D-3. The suggested mounting hardware is shown in Figure D-4.
10/100 8-Port VPN Router Figure D-4: Wall-Mounting Hardware Appendix D: Physical Setup of the Router Setting up the Router 85
10/100 8-Port VPN Router Appendix E: Battery Replacement This section instructs the user on battery replacement. Replacing a Lithium Battery The Router has a lithium battery, number CR2032, on its main circuit board. This battery has an operating life of about 1~2 years. When the battery loses its charge, the Router cannot update the correct time except when connected to the NTP Server. WARNING: The lithium battery can explode if replaced incorrectly.
10/100 8-Port VPN Router Appendix F: Upgrading Firmware You can use the Router’s Web-based Utility to upgrade the firmware; however, if you do so, you may lose the settings you have configured on the Router. To upgrade the Router’s firmware, follow these instructions: 1. Download the Router’s firmware upgrade file from the Linksys website, www.linksys.com or click the Firmware Download from Linksys Web Site button. Select the Router from the pull-down menu and choose the firmware from the options. 2.
10/100 8-Port VPN Router Appendix G: Windows Help All Linksys networking products require Microsoft Windows. Windows is the most used operating system in the world and comes with many features that help make networking easier. These features can be accessed through Windows Help and are described in this appendix. TCP/IP Before a computer can communicate with the Router, TCP/IP must be enabled. TCP/IP is a set of instructions, or protocol, all PCs follow to communicate over a wired or wireless network.
10/100 8-Port VPN Router Appendix H: Glossary Adapter - A device that adds network functionality to your PC. Bandwidth - The transmission capacity of a given device or network. Bit - A binary digit. Boot - To start a device and cause it to start executing instructions. Broadband - An always-on, fast Internet connection. Browser - An application program that provides a way to look at and interact with all the information on the World Wide Web.
10/100 8-Port VPN Router Encryption - Encoding data to prevent it from being read by unauthorized people. Ethernet - A network protocol that specifies how data is placed on and retrieved from a common transmission medium. Firewall - Security measures that protect the resources of a local network from intruders. Firmware - 1. In network devices, the programming that runs the device. 2. Programming loaded into read-only memory (ROM) or programmable read-only memory (PROM) that cannot be altered by end-users.
10/100 8-Port VPN Router NAT (Network Address Translation) - NAT technology translates IP addresses of a local area network to a different IP address for the Internet. Network - A series of computers or devices connected for the purpose of data sharing, storage, and/or transmission between users. Node - A network junction or connection point, typically a computer or work station. Packet - A unit of data sent over a network.
10/100 8-Port VPN Router Switch - 1. Device that is the central point of connection for computers and other devices in a network, so data can be shared at full transmission speeds. 2. A device for making, breaking, or changing the connections in an electrical circuit. TCP/IP (Transmission Control Protocol/Internet Protocol) - A network protocol for transmitting data that requires acknowledgement from the recipient of data sent. Telnet - A user command and TCP/IP protocol used for accessing remote PCs.
10/100 8-Port VPN Router Appendix I: Specifications Standards IEEE 802.3, 802.3u Ports 8 10/100 RJ-45 Ports, 1 10/100 RJ-45 Internet Port, 1 10/100 RJ-45 DMZ/Internet Port Button Reset Cabling Type Ethernet Category 5 LEDs System, Internet, DMZ/Internet, DMZ Mode, Diag, 1-8 UPnP able/cert Yes Security Features SPI Firewall, DES and 3DES Encryption for IPSec VPN Tunnel Dimensions (W x H x D) 11" x 1.75" x 9.50" (279.4 mm x 44.45 mm x 241.3 mm) Unit Weight 52 oz. (1.
10/100 8-Port VPN Router Appendix J: Warranty Information LIMITED WARRANTY Linksys warrants to the original end user purchaser (“You”) that, for a period of one year, (the “Warranty Period”) Your Linksys product will be free of defects in materials and workmanship under normal use. Your exclusive remedy and Linksys's entire liability under this warranty will be for Linksys at its option to repair or replace the product or refund Your purchase price less any rebates.
10/100 8-Port VPN Router Appendix K: Regulatory Information FCC STATEMENT This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
10/100 8-Port VPN Router Appendix L: Contact Information Need to contact Linksys? Visit us online for information on the latest products and updates to your existing products at: http://www.linksys.com or ftp.linksys.
