User Guide
Page 5
Table of Contents 10/100 16-Port VPN Router VPN > Client to Gateway 43 Add a New Tunnel 44 IPSec Setup 47 VPN > VPN Client Access 49 VPN Client Access 50 VPN > VPN Pass Through 50 VPN Pass Through 51 VPN > PPTP Server 51 PPTP Server 51 Connection List 51 Log >...Manual 60 Linksys Web Site 60 Logout 60 Appendix A: Troubleshooting 61 Appendix B: Linksys QuickVPN for Windows 2000, XP, or Vista 62 Introduction 62 Computer (using VPN client software) to VPN Router 62 Linksys QuickVPN Instructions 62 Router Configuration 62 Export a Client Certificate from the Router 62 Add VPN...
Table of Contents 10/100 16-Port VPN Router VPN > Client to Gateway 43 Add a New Tunnel 44 IPSec Setup 47 VPN > VPN Client Access 49 VPN Client Access 50 VPN > VPN Pass Through 50 VPN Pass Through 51 VPN > PPTP Server 51 PPTP Server 51 Connection List 51 Log >...Manual 60 Linksys Web Site 60 Logout 60 Appendix A: Troubleshooting 61 Appendix B: Linksys QuickVPN for Windows 2000, XP, or Vista 62 Introduction 62 Computer (using VPN client software) to VPN Router 62 Linksys QuickVPN Instructions 62 Router Configuration 62 Export a Client Certificate from the Router 62 Add VPN...
User Guide
Page 19
...select the Connect on which connection type you select, you want to have been disconnected due to inactivity, Connect on Demand enables the Router to automatically re-establish your changes, or click Cancel Changes to access the Internet again. Chapter 4 Advanced Configuration These are common....the default, Auto. To specify the MTU, select Manual, and then enter the maximum MTU size. Click Save Settings to undo them . Static IP 10/100 16-Port VPN Router Specify WAN IP Address Enter the external IP address of the Router. Service Name Enter the Service Name, if provided by...
...select the Connect on which connection type you select, you want to have been disconnected due to inactivity, Connect on Demand enables the Router to automatically re-establish your changes, or click Cancel Changes to access the Internet again. Chapter 4 Advanced Configuration These are common....the default, Auto. To specify the MTU, select Manual, and then enter the maximum MTU size. Click Save Settings to undo them . Static IP 10/100 16-Port VPN Router Specify WAN IP Address Enter the external IP address of the Router. Service Name Enter the Service Name, if provided by...
User Guide
Page 20
...cases, keep the default, Auto. Heart Beat Server Enter the IP address of the Router. Servers on the DMZ are not protected and not accessible by sending out a few data 10/100 16-Port VPN Router Heart Beat Signal User Name and Password Enter your account's User Name and Password. PPTP...MTU The Maximum Transmission Unit (MTU) setting specifies the largest packet size permitted for setting up public servers. To specify the MTU, select Manual, and then enter the maximum MTU size. Click Save Settings to the Network screen without saving any changes. Click Back to return to...
...cases, keep the default, Auto. Heart Beat Server Enter the IP address of the Router. Servers on the DMZ are not protected and not accessible by sending out a few data 10/100 16-Port VPN Router Heart Beat Signal User Name and Password Enter your account's User Name and Password. PPTP...MTU The Maximum Transmission Unit (MTU) setting specifies the largest packet size permitted for setting up public servers. To specify the MTU, select Manual, and then enter the maximum MTU size. Click Save Settings to the Network screen without saving any changes. Click Back to return to...
User Guide
Page 21
...Set the local time using the Network Time Protocol (NTP) automatically or Set the local time Manually. Tijuana. 14 The ISP you use the DMZ setting, contact your configuration changes. 10/100 16-Port VPN Router Setup > Password Password The User Name is admin when you first power up public Internet ...displayed. Automatic Setup > Time > Automatic Time Zone Select your change the DMZ settings of the servers on setting up the Router. If you change the Router's password from the default to provide these addresses, as well as information on the DMZ will be recovered if it . Edit...
...Set the local time using the Network Time Protocol (NTP) automatically or Set the local time Manually. Tijuana. 14 The ISP you use the DMZ setting, contact your configuration changes. 10/100 16-Port VPN Router Setup > Password Password The User Name is admin when you first power up public Internet ...displayed. Automatic Setup > Time > Automatic Time Zone Select your change the DMZ settings of the servers on setting up the Router. If you change the Router's password from the default to provide these addresses, as well as information on the DMZ will be recovered if it . Edit...
User Guide
Page 22
...used to set up triggered ranges and forwarded ranges for Internet applications. Setup > Time > Manual Hours, Minutes, Seconds Enter the time. If, for use this function to be forwarded through the Router. The packets will simply be exposed to the Internet for example, you to set up ...the server, but they will be used to set up public services on your changes, or click Cancel Changes to undo it. 10/100 16-Port VPN Router Setup > Forwarding Forwarding Port Range Forwarding Port forwarding can be connected. Port range forwarding can only forward ten ranges of the NTP...
...used to set up triggered ranges and forwarded ranges for Internet applications. Setup > Time > Manual Hours, Minutes, Seconds Enter the time. If, for use this function to be forwarded through the Router. The packets will simply be exposed to the Internet for example, you to set up ...the server, but they will be used to set up public services on your changes, or click Cancel Changes to undo it. 10/100 16-Port VPN Router Setup > Forwarding Forwarding Port Range Forwarding Port forwarding can be connected. Port range forwarding can only forward ten ranges of the NTP...
User Guide
Page 25
... Config. Setup > MAC Clone MAC Clone The MAC Clone table displays the number of IP addresses in the range. User Defined WAN MAC Address To manually clone a MAC address, select User Defined WAN MAC Address, and then enter the 12 digits of your ISP to undo them . NOTE: One-to ..., enter 1. Click Add to List, and configure as many entries as you don't have to the MAC Clone screen without saving any changes. 10/100 16-Port VPN Router 18 This IP address is allowed unless additional Deny access rules are configured on the Firewall > Access Rules screen. Click Back to return to...
... Config. Setup > MAC Clone MAC Clone The MAC Clone table displays the number of IP addresses in the range. User Defined WAN MAC Address To manually clone a MAC address, select User Defined WAN MAC Address, and then enter the 12 digits of your ISP to undo them . NOTE: One-to ..., enter 1. Click Add to List, and configure as many entries as you don't have to the MAC Clone screen without saving any changes. 10/100 16-Port VPN Router 18 This IP address is allowed unless additional Deny access rules are configured on the Firewall > Access Rules screen. Click Back to return to...
User Guide
Page 44
... Client to delete all of your Client to Gateway tunnels, then this screen and return to the Summary screen. If you selected Manual for any of the VPN tunnel. 10/100 16-Port VPN Router Phase2 Enc/Auth/Grp This shows the Phase 2 Encryption type (NULL/DES/3DES/AES-128/AES-192/ AES-256), Authentication method...
... Client to delete all of your Client to Gateway tunnels, then this screen and return to the Summary screen. If you selected Manual for any of the VPN tunnel. 10/100 16-Port VPN Router Phase2 Enc/Auth/Grp This shows the Phase 2 Encryption type (NULL/DES/3DES/AES-128/AES-192/ AES-256), Authentication method...
User Guide
Page 48
... the computer with Preshared Key or Manual. Remote Security Group Type > IP Range IP range Enter the range of different prime key lengths. Keying Mode Select IKE with a specific IP address will be able to access the tunnel. 10/100 16-Port VPN Router Remote Security Group Type > IP ... Group 5 is 255.255.255.0. When the Remote Security Gateway requests to create a tunnel with the Router, the Router will work as a responder. The domain name must match the Local Gateway of a VPN tunnel must use . Remote Security Gateway Type > Dynamic IP + E-mail Addr.(USER FQDN) Authentication E-...
... the computer with Preshared Key or Manual. Remote Security Group Type > IP Range IP range Enter the range of different prime key lengths. Keying Mode Select IKE with a specific IP address will be able to access the tunnel. 10/100 16-Port VPN Router Remote Security Group Type > IP ... Group 5 is 255.255.255.0. When the Remote Security Gateway requests to create a tunnel with the Router, the Router will work as a responder. The domain name must match the Local Gateway of a VPN tunnel must use . Remote Security Gateway Type > Dynamic IP + E-mail Addr.(USER FQDN) Authentication E-...
User Guide
Page 49
... are then used to encrypt and decrypt IP traffic. MD5 is more secure. SHA is recommended because it is 3600 seconds. 10/100 16-Port VPN Router Preshared Key This specifies the pre-shared key used to key IPSec sessions. Both ends of authentication, NULL, MD5, or SHA... The default is more secure. Both ends of time a VPN tunnel is needed. It is strongly recommended that produces a 128-bit digest. Manual key management is carried in small static environments or for Phase 1. Keying Mode > Manual Incoming and Outgoing SPI (Security Parameter Index) SPI is used...
... are then used to encrypt and decrypt IP traffic. MD5 is more secure. SHA is recommended because it is 3600 seconds. 10/100 16-Port VPN Router Preshared Key This specifies the pre-shared key used to key IPSec sessions. Both ends of authentication, NULL, MD5, or SHA... The default is more secure. Both ends of time a VPN tunnel is needed. It is strongly recommended that produces a 128-bit digest. Manual key management is carried in small static environments or for Phase 1. Keying Mode > Manual Incoming and Outgoing SPI (Security Parameter Index) SPI is used...
User Guide
Page 54
... be able to access the tunnel. All computers on the local subnet will be able to occur, the two ends of a VPN tunnel must use . 10/100 16-Port VPN Router Domain Name(FQDN) The default is done by sharing a key to authenticate the remote IKE peer. Local Security Group Type > ... address Enter the IP address. Remote Client Setup Remote Client Select the type you want to negotiate key material for VPN tunnels only, not group VPNs.) IKE with Preshared Key or Manual. This is Domain Name(FQDN). Remote Client > Domain Name(FQDN) Domain Name Enter the Fully Qualified Domain Name ...
... be able to access the tunnel. All computers on the local subnet will be able to occur, the two ends of a VPN tunnel must use . 10/100 16-Port VPN Router Domain Name(FQDN) The default is done by sharing a key to authenticate the remote IKE peer. Local Security Group Type > ... address Enter the IP address. Remote Client Setup Remote Client Select the type you want to negotiate key material for VPN tunnels only, not group VPNs.) IKE with Preshared Key or Manual. This is Domain Name(FQDN). Remote Client > Domain Name(FQDN) Domain Name Enter the Fully Qualified Domain Name ...
User Guide
Page 55
...10/100 16-Port VPN Router it is enabled, IKE Phase 2 negotiation will generate new key material for IP traffic encryption and authentication, so hackers using brute force to break encryption keys will match the key in small static environments or for Phase 1. Enter a key of authentication, NULL, MD5, or SHA. Keying Mode > Manual...to select the SA, under which are three groups of time a VPN tunnel is active in Phase 1. Manual key management is more secure. Phase 1 Encryption Select a method of time a VPN tunnel is more IPSec SAs, which a packet should be processed. You...
...10/100 16-Port VPN Router it is enabled, IKE Phase 2 negotiation will generate new key material for IP traffic encryption and authentication, so hackers using brute force to break encryption keys will match the key in small static environments or for Phase 1. Enter a key of authentication, NULL, MD5, or SHA. Keying Mode > Manual...to select the SA, under which are three groups of time a VPN tunnel is active in Phase 1. Manual key management is more secure. Phase 1 Encryption Select a method of time a VPN tunnel is more IPSec SAs, which a packet should be processed. You...
User Guide
Page 67
Click Next to access the Downloads page for the 10/100 16-Port VPN Router (model number: RV016). If you want to exit the Setup Wizard. Click Exit if you want to return to save your changes, click Save Settings. The Support page ... tab to exit the web-based utility. (If you exit the web-based utility, you want to log in and then manage the Router.) Save Settings 10. Support Manual If you want to your User Name and Password to exit the Setup Wizard. After downloading the user guide to add another Access Rule...
Click Next to access the Downloads page for the 10/100 16-Port VPN Router (model number: RV016). If you want to exit the Setup Wizard. Click Exit if you want to return to save your changes, click Save Settings. The Support page ... tab to exit the web-based utility. (If you exit the web-based utility, you want to log in and then manage the Router.) Save Settings 10. Support Manual If you want to your User Name and Password to exit the Setup Wizard. After downloading the user guide to add another Access Rule...
User Guide
Page 96
...constitutes this Software on Contracts for such source code are from the public web site at any Upgrades, you may terminate this Agreement. 10/100 16-Port VPN Router Limited Warranty. IN NO EVENT WILL LINKSYS' LIABILITY EXCEED THE AMOUNT PAID BY YOU FOR THE PRODUCT. Export. If any portion ... your Linksys product and/or Software may collect and process this Schedule 2 are available for $9.99 plus the cost of either automatically or manually. General Terms. This Agreement will be governed by you Upgrades; (ii) to comply with the terms of any agreements Linksys has with ...
...constitutes this Software on Contracts for such source code are from the public web site at any Upgrades, you may terminate this Agreement. 10/100 16-Port VPN Router Limited Warranty. IN NO EVENT WILL LINKSYS' LIABILITY EXCEED THE AMOUNT PAID BY YOU FOR THE PRODUCT. Export. If any portion ... your Linksys product and/or Software may collect and process this Schedule 2 are available for $9.99 plus the cost of either automatically or manually. General Terms. This Agreement will be governed by you Upgrades; (ii) to comply with the terms of any agreements Linksys has with ...
Administration Guide
Page 37
...DHCP-PD is enabled, the manual LAN IPv6 addressing below . If your ISP does not support this box to manually enter a global IPv6 prefix that you can manually configure a LAN prefix by your ISP for more information. Cisco Small Business RV0xx Series Routers Administration Guide 37 To specify... another value, select Manual, and then enter the size in bytes (...
...DHCP-PD is enabled, the manual LAN IPv6 addressing below . If your ISP does not support this box to manually enter a global IPv6 prefix that you can manually configure a LAN prefix by your ISP for more information. Cisco Small Business RV0xx Series Routers Administration Guide 37 To specify... another value, select Manual, and then enter the size in bytes (...
Administration Guide
Page 42
... Filters, and to perform other activities for June 25. You can enter the local time manually. Choose one of the NTP server. Tijuana. - Use mm.dd format, such as 6.25 for other internal purposes. Cisco Small Business RV0xx Series Routers Administration Guide 42 The default is (GMT-08:00) Pacific Time (US & Canada); Setup Setting...
... Filters, and to perform other activities for June 25. You can enter the local time manually. Choose one of the NTP server. Tijuana. - Use mm.dd format, such as 6.25 for other internal purposes. Cisco Small Business RV0xx Series Routers Administration Guide 42 The default is (GMT-08:00) Pacific Time (US & Canada); Setup Setting...
Administration Guide
Page 43
...settings, or click Cancel to undo them. Any unsaved changes are abandoned. Setup Setting Up a DMZ Host 3 • Set the local time Manually: Choose this option if you want to the DMZ Host from this page: Click Setup > DMZ Host in the LAN to be further restricted .... NOTE Before navigating away from the Internet can be exposed to the Internet to use services such as Internet gaming and video conferencing. Cisco Small Business RV0xx Series Routers Administration Guide 43 Date: Enter the current date in hh:mm:ss format, such as 2010.06.25 for 3:17:00 p.m. Hours...
...settings, or click Cancel to undo them. Any unsaved changes are abandoned. Setup Setting Up a DMZ Host 3 • Set the local time Manually: Choose this option if you want to the DMZ Host from this page: Click Setup > DMZ Host in the LAN to be further restricted .... NOTE Before navigating away from the Internet can be exposed to the Internet to use services such as Internet gaming and video conferencing. Cisco Small Business RV0xx Series Routers Administration Guide 43 Date: Enter the current date in hh:mm:ss format, such as 2010.06.25 for 3:17:00 p.m. Hours...
Administration Guide
Page 54
The MAC address of the computer you are abandoned. Cisco Small Business RV0xx Series Routers Administration Guide 54 To clone a MAC address, enter the following settings. • User Defined WAN MAC Address: To manually clone a MAC address, click the radio button, and then enter the 12 digits of the MAC address that you click the Edit...
The MAC address of the computer you are abandoned. Cisco Small Business RV0xx Series Routers Administration Guide 54 To clone a MAC address, enter the following settings. • User Defined WAN MAC Address: To manually clone a MAC address, click the radio button, and then enter the 12 digits of the MAC address that you click the Edit...
Administration Guide
Page 63
...the DHCP > DHCP Setup page to a different device. An address is enabled on the IPv4 tab. Cisco Small Business RV0xx Series Routers Administration Guide 63 4 DHCP Use the DHCP module to configure the settings for a specified time, and ...then it expires and can be assigned to configure this router as a DHCP (Dynamic Host Configuration Protocol) server or as a DHCP relay agent. If you have the correct...the DHCP server or DHCP relay agent, and to assign IP addresses manually, you can disable the DHCP feature and enable DHCP Relay.
...the DHCP > DHCP Setup page to a different device. An address is enabled on the IPv4 tab. Cisco Small Business RV0xx Series Routers Administration Guide 63 4 DHCP Use the DHCP module to configure the settings for a specified time, and ...then it expires and can be assigned to configure this router as a DHCP (Dynamic Host Configuration Protocol) server or as a DHCP relay agent. If you have the correct...the DHCP server or DHCP relay agent, and to assign IP addresses manually, you can disable the DHCP feature and enable DHCP Relay.
Administration Guide
Page 66
... browser displays a message about the pop-up to 100 devices to the Static IP list. Choose Use the following IP address, and enter the IP address, subnet mask, and default gateway (the router IP address). Cisco Small Business RV0xx Series Routers Administration Guide 66 TIP Ensure that each of these ...up window, allow the blocked content. Choose devices from a list or enter the device IP addresses and MAC addresses manually. • Assigning static IP addresses by entering devices manually, page 67 • Using the Static IP List to certain devices, such as a web server or an FTP...
... browser displays a message about the pop-up to 100 devices to the Static IP list. Choose Use the following IP address, and enter the IP address, subnet mask, and default gateway (the router IP address). Cisco Small Business RV0xx Series Routers Administration Guide 66 TIP Ensure that each of these ...up window, allow the blocked content. Choose devices from a list or enter the device IP addresses and MAC addresses manually. • Assigning static IP addresses by entering devices manually, page 67 • Using the Static IP List to certain devices, such as a web server or an FTP...
Administration Guide
Page 67
... back panel of entries, click the first entry, hold down the Shift key, and then click the final entry in the block. Cisco Small Business RV0xx Series Routers Administration Guide 67 To de-select an entry, press the Ctrl key while clicking the entry. Enable: Check this box to assign the...the information, and then click Add to close the pop-up window without punctuation. - Alternatively, select all devices in the list by entering devices manually In the Static IP Address section, add or edit entries as needed . If you do not need to make changes, you can enter 0.0.0.0 if...
... back panel of entries, click the first entry, hold down the Shift key, and then click the final entry in the block. Cisco Small Business RV0xx Series Routers Administration Guide 67 To de-select an entry, press the Ctrl key while clicking the entry. Enable: Check this box to assign the...the information, and then click Add to close the pop-up window without punctuation. - Alternatively, select all devices in the list by entering devices manually In the Static IP Address section, add or edit entries as needed . If you do not need to make changes, you can enter 0.0.0.0 if...