Linksys RV042 - Manuals

v Table of Contents 10/100 4-Port VPN Router Configuration of PC 1 and PC 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63 Configuration when the Remote Gateway Uses a Dynamic IP Address . . . . . . . . . . . .64 Configuration of the RVL200. . . . . . . . . . . . . . . . . . ....

vi Table of Contents 10/100 4-Port VPN Router Appendix I: Warranty Information 82 Exclusions and Limitations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82Obtaining Warranty Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82Techn...

1 Introduction 10/100 4-Port VPN Router Chapter 1 Chapter 1: Introduction Introduction to the Router Thank you for choosing the Linksys 10/100 4-Port VPN Router. The Router lets multiple computers in your office share an Internet connection. The dual Internet ports let you connect a second Internet ...

2 Introduction 10/100 4-Port VPN Router Chapter 1 Computer (using VPN client software) to VPN Router The following is an example of a computer-to-VPN Router VPN. In her hotel room, a traveling businesswoman connects to her Internet Service Provider (ISP). Her notebook computer has VPN client softwar...

3 Product Overview 10/100 4-Port VPN Router Chapter 2 Chapter 2: Product Overview Front Panel Diag (Red) The Diag LED lights up when the Router is not ready for use. It turns off when the Router is ready for use. System (Green) The System LED lights up when the Router is powered on. It flashes when ...

4 Installation 10/100 4-Port VPN Router Chapter 3 Chapter 3: Installation Physical Installation There are two ways to place the Router. The first way is to place the Router horizontally on a surface. The second way is to mount the Router on a wall. Horizontal Placement The Router has four rubber fee...

Chapter 4 Advanced Configuration 6 10/100 4-Port VPN Router Chapter 4: Advanced Configuration Overview The Router’s web-based utility allows you to set up the Router and perform advanced configuration and troubleshooting. This chapter will explain all of the functions in this utility. These are the ...

Chapter 4 Advanced Configuration 7 10/100 4-Port VPN Router System Summary (ProtectLink™ Available) Site Map System Information Serial Number Displayed here is the serial number of the Router. Firmware version Displayed here is the current version number of the firmware installed on the Router. CPU ...

Chapter 4 Advanced Configuration 8 10/100 4-Port VPN Router Port 1 Information For the selected port, the statistics table shows this information: number of packets received, number of packet bytes received, number of packets transmitted, number of packet bytes transmitted, and number of packet erro...

Chapter 4 Advanced Configuration 9 10/100 4-Port VPN Router be sent out, probably use incorrect settings,” will be displayed. Setup Tab > Network The Network screen shows all of the Router’s basic setup functions. The Router can be used in most network setups without changing any of the default v...

Chapter 4 Advanced Configuration 10 10/100 4-Port VPN Router If you want to modify a subnet you have created, select it and make changes. Click Save Settings to save your changes, or click Cancel Changes to undo them. Click Exit to return to the Network screen. If you want to delete a subnet you hav...

Chapter 4 Advanced Configuration 12 10/100 4-Port VPN Router Default Gateway Address Enter the IP address of the default gateway. User Name and Password Enter your account’s User Name and Password. The maximum number of characters is 60. Connect on Demand If you select the Connect on Demand option, ...

Chapter 4 Advanced Configuration 13 10/100 4-Port VPN Router Setup > Password Password The User Name is admin ; it cannot be changed. Old Password Enter the old password. The default is admin when you first power up the Router. New Password Enter a new password for the Router. Your password must ...

Chapter 4 Advanced Configuration 14 10/100 4-Port VPN Router Setup Tab > Forwarding The Forwarding screen allows you to set up port range forwarding and port triggering applications. Port range forwarding can be used to set up public services or other specialized Internet applications on your net...

Chapter 4 Advanced Configuration 16 10/100 4-Port VPN Router If you want to modify a service you have created, select it and click Update this service . Make changes. Click Save Settings to save your changes, or click Cancel Changes to undo them. Click Exit to return to the UPnP screen. If you want ...

Chapter 4 Advanced Configuration 17 10/100 4-Port VPN Router Setup > MAC Clone MAC Clone WAN1/2 If you have enabled the Dual WAN feature, then you will have two ports, WAN1 and WAN2, available for MAC address assignment or cloning. User Defined WAN MAC Address To manually clone a MAC address, sel...

Chapter 4 Advanced Configuration 18 10/100 4-Port VPN Router Host Name Enter your host name in the three Host Name fields. For example, if your host name were myhouse.3322. org, then myhouse would go into the first field, 3322 would go into the second field, and org would go into the last field.Clic...

Chapter 4 Advanced Configuration 19 10/100 4-Port VPN Router Static Routing If the Router is connected to more than one network or there are multiple routers installed on your network, it may be necessary to set up static routes. The static routing function determines the path that data follows over...

Chapter 4 Advanced Configuration 20 10/100 4-Port VPN Router DHCP > Setup Setup Enable DHCP Server To use the Router as your network’s DHCP server, select Enable DHCP Server . If you already have a DHCP server on your network, remove the check mark. Dynamic IP Client Lease Time The Client Lease T...

Chapter 4 Advanced Configuration 21 10/100 4-Port VPN Router NOTE: To support NetBIOS for DHCP clients, the Router uses two methods. First, when the DHCP clients receive dynamic IP addresses from the Router, it automatically includes the information of the WINS server to support NetBIOS. Second, if ...

Chapter 4 Advanced Configuration 22 10/100 4-Port VPN Router Network Service Detection Enable Network Service Detection Network Service Detection helps manage your connection and can report when your connection experiences problems. To use this service, select this option. Retry Count Enter the numb...

Chapter 4 Advanced Configuration 23 10/100 4-Port VPN Router DNS Lookup Host Select this option to ping the DNS Lookup Host. Then enter the IP address. Bandwidth WAN1/2 Upstream Enter the maximum upstream bandwidth provided by your ISP. The default is 512 kbit/sec. Downstream Enter the maximum downs...

Chapter 4 Advanced Configuration 24 10/100 4-Port VPN Router Bandwidth Management The Maximum Bandwidth provided by ISP WAN1/2 Upstream Enter the maximum upstream bandwidth provided by your ISP. The default is 512 kbit/sec. Downstream Enter the maximum downstream bandwidth provided by your ISP. The ...

Chapter 4 Advanced Configuration 25 10/100 4-Port VPN Router Priority System Management > Bandwidth Management > Priority Interface Select the appropriate WAN interface, WAN1 or WAN2 . Service Select the Service you want. If the Service you need is not listed in the menu, click Service Managem...

Chapter 4 Advanced Configuration 26 10/100 4-Port VPN Router System Management > SNMP SNMP Enable SNMP is enabled by default. To disable the SNMP agent, click this option to remove the check mark. System Name Set the hostname far the Router. System Contact Enter the name of the network administra...

Chapter 4 Advanced Configuration 27 10/100 4-Port VPN Router System Management > Diagnostic > Ping Ping host or IP address Enter the IP address of the device being pinged, and click Go . The test will take a few seconds to complete. Then the Router will display the results. Status The status o...

Chapter 4 Advanced Configuration 28 10/100 4-Port VPN Router from the Restart screen, then the Router will send out your log file before it is reset. System Management > Restart Restart Restart Router Click Restart Router to restart the Router. After clicking the button, a confirmation screen app...

Chapter 4 Advanced Configuration 29 10/100 4-Port VPN Router Priority For port-based QoS, select the appropriate priority level, High or Normal . Speed Select the port speed, 10M or 100M . Duplex Select the duplex mode, Half or Full . Auto Neg. Select Enable if you want the Router’s ports to auto-ne...

Chapter 4 Advanced Configuration 30 10/100 4-Port VPN Router as SYN Flooding, Smurf, LAND, Ping of Death, IP Spoofing, and reassembly attacks. Block WAN Request This option is enabled by default. Using this feature, the Router drops both unaccepted TCP request and ICMP packets from the WAN side. Hac...

Chapter 4 Advanced Configuration 31 10/100 4-Port VPN Router Firewall > Access Rules Access Rules Except for the default rules, all configured access rules are listed in the Access Rules table, and you can set the priority for each custom rule.If the Access Rules table has multiple pages, select ...

Chapter 4 Advanced Configuration 32 10/100 4-Port VPN Router Service Management Service Name Enter a name. Protocol Select the protocol it uses. Port Range Enter its range. Click Add to List . Click Save Settings to save your changes, or click Cancel Changes to undo them. Click Exit to return to the...

Chapter 4 Advanced Configuration 33 10/100 4-Port VPN Router Content Filter Forbidden Domains Block Forbidden Domains To block access to the websites on the Forbidden Domains list, select this option. Add Enter the domain you want to block. To add a domain to the list, click Add to list . To remove ...

Chapter 4 Advanced Configuration 34 10/100 4-Port VPN Router Mode Choose Gateway to Gateway To create a tunnel between two VPN devices, such as two VPN Routers, click Add Now . The Gateway to Gateway screen appears. Proceed to the “VPN > Gateway to Gateway” section for instructions. Click Return ...

Chapter 4 Advanced Configuration 35 10/100 4-Port VPN Router VPN Clients Status This section identifies the VPN clients currently connected to the Router. No. It shows the number of the VPN client. Username It shows the name of the VPN client. Status This indicates the status of the VPN client conne...

Chapter 4 Advanced Configuration 36 10/100 4-Port VPN Router Local Security Gateway Type > IP + Domain Name(FQDN) Authentication Domain Name The Fully Qualified Domain Name (FQDN) is the host name and domain name for a specific computer on the Internet. Enter the FQDN of the Router. IP address Th...

Chapter 4 Advanced Configuration 37 10/100 4-Port VPN Router Local Security Group Type > IP Range IP range Enter the range of IP addresses. The default is 192.168.1.0~254 . Remote Group Setup Before you configure the Remote Group Setup, make sure your VPN tunnel will have two different IP subnets...

Chapter 4 Advanced Configuration 38 10/100 4-Port VPN Router Remote Security Gateway Type > Dynamic IP + Domain Name(FQDN) Authentication Domain Name Enter the domain name for authentication. (Once used, you cannot use it again to create a new tunnel connection.)Dynamic IP + E-mail Addr.(USER FQD...

Chapter 4 Advanced Configuration 39 10/100 4-Port VPN Router a one-way hashing algorithm that produces a 128-bit digest. SHA is a one-way hashing algorithm that produces a 160-bit digest. SHA is recommended because it is more secure. Make sure both ends of the VPN tunnel use the same authentication ...

Chapter 4 Advanced Configuration 40 10/100 4-Port VPN Router If MD5 is selected, the Authentication Key is 32-bit, which requires 32 hexadecimal values. If you do not enter enough hexadecimal values, then the rest of the Authentication Key will be automatically completed with zeroes until it has 32 ...

Chapter 4 Advanced Configuration 41 10/100 4-Port VPN Router VPN > Client to Gateway NOTE: The 10/100 4-Port VPN Router supports IPSec VPN client software, including the Linksys QuickVPN software. To manage access for Linksys QuickVPN clients, click the VPN Client Access tab. (For more informatio...

Chapter 4 Advanced Configuration 42 10/100 4-Port VPN Router IP + E-mail Addr.(USER FQDN) Authentication Local Security Gateway Type > IP + E-mail Addr.(USER FQDN) Authentication E-mail address Enter the e-mail address for authentication. IP address The WAN (or Internet) IP address of the Router ...

Chapter 4 Advanced Configuration 43 10/100 4-Port VPN Router IP OnlyThe default is IP Only . Only the computer with a specific IP address will be able to access the tunnel. Select IP address or IP by DNS Resolved . Remote Client > IP Only IP address Select this option if you know the static IP ad...

Chapter 4 Advanced Configuration 46 10/100 4-Port VPN Router If DES is selected, the Encryption Key is 16-bit, which requires 16 hexadecimal values. If you do not enter enough hexadecimal values, then the rest of the Encryption Key will be automatically completed with zeroes, so the Encryption Key w...

Chapter 4 Advanced Configuration 47 10/100 4-Port VPN Router VPN > VPN Client Access VPN Client Access For each QuickVPN client, do the following: Export a client certificate. 1. Configure a user name and password. 2. Add the QuickVPN client to the list. 3. VPN Client Users User Name Enter the us...

Chapter 4 Advanced Configuration 48 10/100 4-Port VPN Router VPN > VPN Pass Through VPN Pass Through IPSec Pass Through Internet Protocol Security (IPSec) is a suite of protocols used to implement secure exchange of packets at the IP layer. IPSec Pass Through is enabled by default to allow IPSec ...

Chapter 4 Advanced Configuration 49 10/100 4-Port VPN Router Log > System Log Log > System Log (ProtectLink Enabled) System Log Syslog Syslog is a standard protocol used to capture information about network activity. The Router supports this protocol and can send its activity logs to an extern...

Chapter 4 Advanced Configuration 50 10/100 4-Port VPN Router General Log System Error Messages If this option is enabled, system error messages are included. This option is enabled by default. Deny Policies Select this option if you do not want to include log events from Deny rules on the Firewall &...

Chapter 4 Advanced Configuration 51 10/100 4-Port VPN Router Log > System Statistics Click Refresh to update the statistics. Wizard Use this tab to access two Setup Wizards, the Basic Setup Wizard and the Access Rule Setup Wizard. Run the Basic Setup Wizard to set up the Router for your Internet ...

Chapter 4 Advanced Configuration 52 10/100 4-Port VPN Router Select the WAN (or Internet) Connection Type for the 4. WAN port. Select the appropriate connection type: Obtain an IP automatically , Static IP , or PPPoE . Click Next to continue. Click Previous if you want to return to the previous scre...

Chapter 4 Advanced Configuration 54 10/100 4-Port VPN Router If you want to save your changes, click 8. Save Settings . Click Previous if you want to return to the previous screen. Click Exit if you want to exit the Setup Wizard. Save Settings A screen appears to notify you that the settings have 9....

Chapter 4 Advanced Configuration 56 10/100 4-Port VPN Router Next to continue. Click Previous if you want to return to the previous screen. Click Exit if you want to exit the Setup Wizard. When It Works If you want to save your changes, click 9. Save Settings . Click Previous if you want to return t...

57 Troubleshooting 10/100 4-Port VPN Router Appendix A Appendix A: Troubleshooting The firmware upgrade has failed. A firmware upgrade takes approximately ten minutes. An error may occur if you powered off the Router, pressed the Reset button, closed the System Management > Firmware Upgrade scree...

58 Linksys QuickVPN for Windows 2000, XP, or Vista 10/100 4-Port VPN Router Appendix B Appendix B: Linksys QuickVPN for Windows 2000, XP, or Vista Introduction The 10/100 4-Port VPN Router (model number: RV042) supports IPSec VPN client software, including the Linksys QuickVPN software (also known a...

59 Linksys QuickVPN for Windows 2000, XP, or Vista 10/100 4-Port VPN Router Appendix B In the Router’s web-based utility, click the 3. VPN tab. Click the 4. VPN Client Access tab. Click 5. Generate to generate a new certificate (if needed). VPN Client Access Screen To export a client certificate, cl...

60 Linksys QuickVPN for Windows 2000, XP, or Vista 10/100 4-Port VPN Router Appendix B Copying Files Installation Complete Click 3. Finish to complete the installation. Proceed to the section, “Install the Client Certificate”. Download from the Internet Go to 1. www.linksys.com and select Products ....

61 Linksys QuickVPN for Windows 2000, XP, or Vista 10/100 4-Port VPN Router Appendix B Password • Enter the Password assigned to you. Server Address • Enter the IP address or domain name of the Linksys 10/100 4-Port VPN Router. Port for QuickVPN • Enter the port number that the QuickVPN client will ...

62 Gateway-to-Gateway VPN Tunnel 10/100 4-Port VPN Router Appendix C Appendix C: Gateway-to-Gateway VPN Tunnel Overview This appendix explains how to configure an IPSec VPN tunnel between two VPN Routers, using an example. Two computers are used to test the liveliness of the tunnel. Before You Begin...

63 Gateway-to-Gateway VPN Tunnel 10/100 4-Port VPN Router Appendix C In the 11. Preshared Key field, enter a string for this key, for example, 13572468. RVL200 IPSec Setup Settings If you need more detailed settings, click 12. Advanced Settings . Otherwise, click Save Settings and proceed to the nex...

64 Gateway-to-Gateway VPN Tunnel 10/100 4-Port VPN Router Appendix C Configuration when the Remote Gateway Uses a Dynamic IP Address This example assumes the Remote Gateway is using a dynamic IP address. If the Remote Gateway uses a static IP address, refer to “Configuration when the Remote Gateway ...

65 Gateway-to-Gateway VPN Tunnel 10/100 4-Port VPN Router Appendix C Select 7. Enable . For the Local Security Gateway Type, select 8. IP Only . The WAN IP address (B.B.B.B) of the RV042 will be automatically detected.For the Local Security Group Type, select Subnet . Enter the RV042’s local network...

67 IPSec NAT Traversal 10/100 4-Port VPN Router Appendix D Appendix D: IPSec NAT Traversal Overview Network Address Translation (NAT) traversal is a technique developed so that data protected by IPSec can pass through a NAT. (See NAT 1 and NAT 2 in the diagram.) Since IPSec provides integrity for th...

68 IPSec NAT Traversal 10/100 4-Port VPN Router Appendix D For the Local Security Gateway Type, select 7. IP Only . The WAN IP address of Router A will be automatically detected.For the Local Security Group Type, select Subnet . Enter Router A’s local network settings in the IP Address and Subnet Ma...

69 IPSec NAT Traversal 10/100 4-Port VPN Router Appendix D Configuration of the One-to-One NAT Rules The one-to-one NAT rules must be configured on NAT 2 - RV042 and NAT 1 - RVO42. One-to-One NAT Rule on NAT 2 - RV042 192.168.99.1 => 192.168.111.11Follow these instructions for the one-to-one NAT ...

72 Bandwidth Management 4-Port SSL/IPSec VPN Router Appendix E Appendix E: Bandwidth Management Overview This appendix explains how to ensure Quality of Service (QoS) on Vonage Voice over Internet Protocol (VoIP) phone service. This example uses Vonage; however, similar instructions will apply to ot...

73 Bandwidth Management 4-Port SSL/IPSec VPN Router Appendix E Creation of New Bandwidth Management Rules Create four new rules: Vonage VoIP (Upstream), Vonage VoIP (Downstream), Vonage 2 (Upstream), and Vonage 2 (Downstream). On the 1. Bandwidth Management screen, select Vonage VoIP from the Servic...

74 Firmware Upgrade 10/100 4-Port VPN Router Appendix F Appendix F: Firmware Upgrade Overview This appendix explains how to upgrade the firmware of the Router. How to Access the Web-Based Utility For local access of the Router’s web-based utility, 1. launch your web browser, and enter the Router’s d...

76 Trend Micro ProtectLink Gateway Service 10/100 4-Port VPN Router Appendix G Appendix G: Trend Micro ProtectLink Gateway Service Overview The optional Trend Micro ProtectLink Gateway service provides security for your network. It checks e-mail messages, filters website addresses (URLs), and blocks...

77 Trend Micro ProtectLink Gateway Service 10/100 4-Port VPN Router Appendix G NOTE: To have your e-mail checked, you will need to provide the domain name and IP address of your e-mail server. If you do not know this information, contact your ISP. Activate If you have registered, click Activate . A ...

78 Trend Micro ProtectLink Gateway Service 10/100 4-Port VPN Router Appendix G ProtectLink > Web Protection The Web Protection features are provided by the Router. Configure the website filtering settings on this screen. ProtectLink > Web Protection Web Protection Enable URL Filtering To filte...

79 Trend Micro ProtectLink Gateway Service 10/100 4-Port VPN Router Appendix G IP addresses/range Enter the appropriate IP addresses or ranges. Separate multiple URLs with semicolons (“ ; ”). For a range of IP addresses, use a hyphen (“ - ”). Example: 10.1.1.0-10.1.1.10. Add To add the IP addresses ...

81 Specifications 10/100 4-Port VPN Router Appendix H Appendix H: Specifications Specifications Model RV042 Standards IEEE 802.3, 802.3u Ports 4 10/100 RJ-45 Ports, 1 10/100 RJ-45 Internet Port, 1 10/100 RJ-45 DMZ/Internet Port Button Reset Cabling Type Category 5 Ethernet LEDs System, Internet, DMZ...

82 Appendix I Warranty Information 10/100 4-Port VPN Router service offerings. This limited warranty shall not apply to such third party software or service offerings. This limited warranty does not guarantee any continued availability of a third party’s service for which this product’s use or opera...

83 Appendix I Warranty Information 10/100 4-Port VPN Router original purchase when returning your product. Products received without a RMA number and dated proof of original purchase will be rejected. Do not include any other items with the product you are returning to Linksys. Defective product cov...

84 Software License Agreement 10/100 4-Port VPN Router Appendix J Appendix J: Software License Agreement Software in Linksys Products: This product from Cisco-Linksys LLC or from one of its affiliates Cisco Systems-Linksys (Asia) Pte Ltd. or Cisco- Linksys K.K. (“Linksys”) contains software (includi...

85 Software License Agreement 10/100 4-Port VPN Router Appendix J and process information about your Linksys product and/or the Software and/or your use of either in order (i) to enable Linksys to offer you Upgrades; (ii) to ensure that your Linksys product and/or the Software is being used in accor...

86 Software License Agreement 10/100 4-Port VPN Router Appendix J Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast,...

88 Software License Agreement 10/100 4-Port VPN Router Appendix J that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligatio...

89 Software License Agreement 10/100 4-Port VPN Router Appendix J The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open So...

90 Software License Agreement 10/100 4-Port VPN Router Appendix J If you include any Windows specific code (or a 4. derivative thereof ) from the apps directory (application code) you must include an acknowledgement: “This product includes software written by Tim Hudson ([email protected])” THIS SOF...

91 Regulatory Information 10/100 4-Port VPN Router Appendix K Appendix K: Regulatory Information FCC Statement This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protect...

92 Regulatory Information 10/100 4-Port VPN Router Appendix K User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE) This document contains important information for users with regards to the proper disposal and recycling of Linksy...

96 Contact Information 10/100 4-Port VPN Router Appendix L Appendix L: Contact Information Linksys Contact Information Website http://www.linksys.com Support Site http://www.linksys.com/support FTP Site ftp.linksys.com Advice Line 800-546-5797 (LINKSYS) Support 800-326-7114 RMA (Return Merchandise A...