User Guide
Page 5
Table of Contents 10/100 16-Port VPN Router VPN > Client to Gateway 43 Add a New Tunnel 44 IPSec Setup 47 VPN > VPN Client Access 49 VPN Client Access 50 VPN > VPN Pass Through 50 VPN Pass Through 51 VPN > PPTP Server 51 PPTP Server 51 Connection List 51 Log > System Log 51 System Log 52 Log >... System Statistics 53 Wizard 54 Basic Setup 54 Access Rule Setup 58 Support 60 Manual ...
Table of Contents 10/100 16-Port VPN Router VPN > Client to Gateway 43 Add a New Tunnel 44 IPSec Setup 47 VPN > VPN Client Access 49 VPN Client Access 50 VPN > VPN Pass Through 50 VPN Pass Through 51 VPN > PPTP Server 51 PPTP Server 51 Connection List 51 Log > System Log 51 System Log 52 Log >... System Statistics 53 Wizard 54 Basic Setup 54 Access Rule Setup 58 Support 60 Manual ...
User Guide
Page 19
... If you select the Connect on Demand enables the Router to automatically re-establish your ISP to see various settings. Static IP If you use a permanent IP address, select Static IP. Static IP 10/100 16-Port VPN Router Specify WAN IP Address Enter the external IP address ...of the Router. MTU The Maximum Transmission Unit (MTU) setting specifies the largest packet size permitted for network transmission. To specify the MTU, select Manual, and then enter the maximum MTU...
... If you select the Connect on Demand enables the Router to automatically re-establish your ISP to see various settings. Static IP If you use a permanent IP address, select Static IP. Static IP 10/100 16-Port VPN Router Specify WAN IP Address Enter the external IP address ...of the Router. MTU The Maximum Transmission Unit (MTU) setting specifies the largest packet size permitted for network transmission. To specify the MTU, select Manual, and then enter the maximum MTU...
User Guide
Page 20
... for network transmission. Subnet Mask Enter the subnet mask of the Heart Beat server. Heart Beat Server Enter the IP address of the Router. Enter the number of inactivity (Max Idle Time). This option keeps your connection active indefinitely, even when it may be disconnected after... the MTU, select Manual, and then enter the maximum MTU size. it sits idle. Chapter 4 Advanced Configuration Keep Alive: Redial Period If you select the Keep Alive option, the Router will keep the connection alive by sending out a few data 10/100 16-Port VPN Router Heart Beat Signal User...
... for network transmission. Subnet Mask Enter the subnet mask of the Heart Beat server. Heart Beat Server Enter the IP address of the Router. Enter the number of inactivity (Max Idle Time). This option keeps your connection active indefinitely, even when it may be disconnected after... the MTU, select Manual, and then enter the maximum MTU size. it sits idle. Chapter 4 Advanced Configuration Keep Alive: Redial Period If you select the Keep Alive option, the Router will keep the connection alive by sending out a few data 10/100 16-Port VPN Router Heart Beat Signal User...
User Guide
Page 21
...password. Time To set the local time, select Set the local time using the Network Time Protocol (NTP) automatically or Set the local time Manually. Tijuana. 14 Click Edit in the IP Address column. Click Back to return to a unique password. NOTE: The password cannot be able...& Canada); Click Save Settings to provide these addresses, as well as information on the DMZ will remove all of your configuration changes. 10/100 16-Port VPN Router Setup > Password Password The User Name is admin; The default is automatically selected. The DMZ Setting table displays the DMZ port name ...
...password. Time To set the local time, select Set the local time using the Network Time Protocol (NTP) automatically or Set the local time Manually. Tijuana. 14 Click Edit in the IP Address column. Click Back to return to a unique password. NOTE: The password cannot be able...& Canada); Click Save Settings to provide these addresses, as well as information on the DMZ will remove all of your configuration changes. 10/100 16-Port VPN Router Setup > Password Password The User Name is admin; The default is automatically selected. The DMZ Setting table displays the DMZ port name ...
User Guide
Page 22
...of the computer you want . Manual Setup > Forwarding The Forwarding screen allows you want the Internet users to set up public services or other specialized Internet applications on your change, or click Cancel Changes to undo it. 10/100 16-Port VPN Router Setup > Forwarding Forwarding Port ... special-purpose service such as Internet gaming or videoconferencing. Chapter 4 Advanced Configuration Daylight Saving To use port forwarding. Setup > Time > Manual Hours, Minutes, Seconds Enter the time. Service Select the Service you set the port number 80 (HTTP) to be forwarded to IP...
...of the computer you want . Manual Setup > Forwarding The Forwarding screen allows you want the Internet users to set up public services or other specialized Internet applications on your change, or click Cancel Changes to undo it. 10/100 16-Port VPN Router Setup > Forwarding Forwarding Port ... special-purpose service such as Internet gaming or videoconferencing. Chapter 4 Advanced Configuration Daylight Saving To use port forwarding. Setup > Time > Manual Hours, Minutes, Seconds Enter the time. Service Select the Service you set the port number 80 (HTTP) to be forwarded to IP...
User Guide
Page 25
...to -One NAT affects how the firewall functions work. column to change the registered MAC address to undo them . User Defined WAN MAC Address To manually clone a MAC address, select User Defined WAN MAC Address, and then enter the 12 digits of the computer you are configured on the Firewall ... Config. Click Edit in the range. Edit MAC Clone After you would like, up to the MAC Clone screen without saving any changes. 10/100 16-Port VPN Router 18 Setup > MAC Clone > Edit MAC Clone Interface The selected WAN port will be accessed from the Internet. Enable/Disable Select the status...
...to -One NAT affects how the firewall functions work. column to change the registered MAC address to undo them . User Defined WAN MAC Address To manually clone a MAC address, select User Defined WAN MAC Address, and then enter the 12 digits of the computer you are configured on the Firewall ... Config. Click Edit in the range. Edit MAC Clone After you would like, up to the MAC Clone screen without saving any changes. 10/100 16-Port VPN Router 18 Setup > MAC Clone > Edit MAC Clone Interface The selected WAN port will be accessed from the Internet. Enable/Disable Select the status...
User Guide
Page 44
... Group Name, IP address and Connection Time of the VPN tunnel. It shows the number of the Local Group. If you selected Manual for more or fewer entries listed per page drop-down menu. Tunnel Enabled The number of the VPN tunnel. 10/100 16-Port VPN Router Phase2 Enc/Auth/Grp This shows the Phase 2 Encryption...
... Group Name, IP address and Connection Time of the VPN tunnel. It shows the number of the Local Group. If you selected Manual for more or fewer entries listed per page drop-down menu. Tunnel Enabled The number of the VPN tunnel. 10/100 16-Port VPN Router Phase2 Enc/Auth/Grp This shows the Phase 2 Encryption...
User Guide
Page 48
...name must use . When the Remote Security Gateway requests to create a tunnel with a specific IP address will be able to access the tunnel. 10/100 16-Port VPN Router Remote Security Group Type > IP IP address Enter the appropriate IP address. Remote Security Gateway Type > Dynamic IP + E-mail Addr.(USER FQDN) ...selection you have made . IKE uses the Preshared Key to access the tunnel. Phase 1 DH Group Phase 1 is IKE with Preshared Key or Manual. Both ends of the tunnel. When the Remote Security Gateway requests to create a tunnel with Preshared Key IKE is 255.255.255.0. There ...
...name must use . When the Remote Security Gateway requests to create a tunnel with a specific IP address will be able to access the tunnel. 10/100 16-Port VPN Router Remote Security Group Type > IP IP address Enter the appropriate IP address. Remote Security Gateway Type > Dynamic IP + E-mail Addr.(USER FQDN) ...selection you have made . IKE uses the Preshared Key to access the tunnel. Phase 1 DH Group Phase 1 is IKE with Preshared Key or Manual. Both ends of the tunnel. When the Remote Security Gateway requests to create a tunnel with Preshared Key IKE is 255.255.255.0. There ...
User Guide
Page 49
... Group 2 is preferred, select Group 5. AES-256 is recommended because it is active in small static environments or for IP traffic encryption and authentication, so hackers using brute force to encrypt ... default is strongly recommended that produces a 160-bit digest. It is 3600 seconds. 10/100 16-Port VPN Router Preshared Key This specifies the pre-shared key used for Phase 2 will match the ... have a unique Incoming SPI and Outgoing SPI. Manual If you select Manual, you do not need to encrypt or decrypt ESP packets. Manual key management is 16-bit, which are then used...
... Group 2 is preferred, select Group 5. AES-256 is recommended because it is active in small static environments or for IP traffic encryption and authentication, so hackers using brute force to encrypt ... default is strongly recommended that produces a 160-bit digest. It is 3600 seconds. 10/100 16-Port VPN Router Preshared Key This specifies the pre-shared key used for Phase 2 will match the ... have a unique Incoming SPI and Outgoing SPI. Manual If you select Manual, you do not need to encrypt or decrypt ESP packets. Manual key management is 16-bit, which are then used...
User Guide
Page 54
... must agree on the local subnet will work as PPPoE or DHCP users, who use the Microsoft VPN client software, can use . 10/100 16-Port VPN Router Domain Name(FQDN) The default is Domain Name(FQDN). Local Security Group Type > Subnet IP address Enter the IP address. Both ...protocol used to create the SA. Chapter 4 Advanced Configuration NOTE: The Local Security Group Type you want to use. (Manual mode is available for VPN tunnels only, not group VPNs.) IKE with Preshared Key IKE is an Internet Key Exchange protocol used to negotiate key material for Security Association (SA). ...
... must agree on the local subnet will work as PPPoE or DHCP users, who use the Microsoft VPN client software, can use . 10/100 16-Port VPN Router Domain Name(FQDN) The default is Domain Name(FQDN). Local Security Group Type > Subnet IP address Enter the IP address. Both ...protocol used to create the SA. Chapter 4 Advanced Configuration NOTE: The Local Security Group Type you want to use. (Manual mode is available for VPN tunnels only, not group VPNs.) IKE with Preshared Key IKE is an Internet Key Exchange protocol used to negotiate key material for Security Association (SA). ...
User Guide
Page 55
...pre-shared key used to use the same encryption method. Each tunnel must have to encrypt or decrypt ESP packets. MD5 is active in small static environments or for Phase 1. Encryption Key This field specifies a key used to create one -way hashing algorithm that produces a 160...key material for Phase 2 will not be generated, so you used in Phase 2. SHA is recommended because 10/100 16-Port VPN Router it is carried in Phase 1. Manual If you select Manual, you change the Preshared Key periodically to break encryption keys will match the key in Phase 1). Both ...
...pre-shared key used to use the same encryption method. Each tunnel must have to encrypt or decrypt ESP packets. MD5 is active in small static environments or for Phase 1. Encryption Key This field specifies a key used to create one -way hashing algorithm that produces a 160...key material for Phase 2 will not be generated, so you used in Phase 2. SHA is recommended because 10/100 16-Port VPN Router it is carried in Phase 1. Manual If you select Manual, you change the Preshared Key periodically to break encryption keys will match the key in Phase 1). Both ...
User Guide
Page 67
...latest version of the screen. Click this User Guide, click On Line Manual. Click Exit if you want to exit the Setup Wizard. If you want to return to log in and then manage the Router.) Save Settings 10. Click Previous if you want to your changes, click Save Settings. ...tab to exit the web-based utility. (If you exit the web-based utility, you want to access the Downloads page for the 10/100 16-Port VPN Router (model number: RV016). If you want to exit the Access Rule Setup Wizard, click Cancel, and the Firewall > Access Rules screen will appear. Chapter 4...
...latest version of the screen. Click this User Guide, click On Line Manual. Click Exit if you want to exit the Setup Wizard. If you want to return to log in and then manage the Router.) Save Settings 10. Click Previous if you want to your changes, click Save Settings. ...tab to exit the web-based utility. (If you exit the web-based utility, you want to access the Downloads page for the 10/100 16-Port VPN Router (model number: RV016). If you want to exit the Access Rule Setup Wizard, click Cancel, and the Firewall > Access Rules screen will appear. Chapter 4...
User Guide
Page 96
... terms of this Schedule 2 are available for $9.99 plus the cost of that license will be notified of either automatically or manually. U.S. All Government users acquire the Software and documentation with such code for free download at any third parties regarding your Linksys...do not allow the exclusion or limitation of the GPL or other countries. There may collect and process this Agreement. 10/100 16-Port VPN Router Limited Warranty. The foregoing limitations will always be subject to receive these Upgrades either in accordance with all such laws and...
... terms of this Schedule 2 are available for $9.99 plus the cost of that license will be notified of either automatically or manually. U.S. All Government users acquire the Software and documentation with such code for free download at any third parties regarding your Linksys...do not allow the exclusion or limitation of the GPL or other countries. There may collect and process this Agreement. 10/100 16-Port VPN Router Limited Warranty. The foregoing limitations will always be subject to receive these Upgrades either in accordance with all such laws and...
Administration Guide
Page 37
... • Enabled DHCP-PD: Check this option, then you to enable the DHCPv6 client process and enable a request for your ISP, Cisco recommends that was assigned by entering the LAN IPv6 address below will be disabled and vice versa. • LAN IPv6 Address: This option ... that you use the default setting, Auto. To specify another value, select Manual, and then enter the size in bytes (see the Glossary). Cisco Small Business RV0xx Series Routers Administration Guide 37 Unless a change is enabled, the manual LAN IPv6 addressing below . Note: When DHCP-PD is required by your LAN...
... • Enabled DHCP-PD: Check this option, then you to enable the DHCPv6 client process and enable a request for your ISP, Cisco recommends that was assigned by entering the LAN IPv6 address below will be disabled and vice versa. • LAN IPv6 Address: This option ... that you use the default setting, Auto. To specify another value, select Manual, and then enter the size in bytes (see the Glossary). Cisco Small Business RV0xx Series Routers Administration Guide 37 Unless a change is enabled, the manual LAN IPv6 addressing below . Note: When DHCP-PD is required by your LAN...
Administration Guide
Page 42
...automatically from this page: Click Setup > Time in the same format. - Daylight Saving: To automatically adjust the time for June 25. Cisco Small Business RV0xx Series Routers Administration Guide 42 Time Zone: Select your network. Tijuana. - In the Start Date field, enter the Month and Day when daylight ... manually. Choose one of the NTP server. Also enter the End Date in the navigation tree. NTP Server: Enter the URL or IP address of the following settings: - The default is (GMT-08:00) Pacific Time (US & Canada); Any unsaved changes are abandoned. The router ...
...automatically from this page: Click Setup > Time in the same format. - Daylight Saving: To automatically adjust the time for June 25. Cisco Small Business RV0xx Series Routers Administration Guide 42 Time Zone: Select your network. Tijuana. - In the Start Date field, enter the Month and Day when daylight ... manually. Choose one of the NTP server. Also enter the End Date in the navigation tree. NTP Server: Enter the URL or IP address of the following settings: - The default is (GMT-08:00) Pacific Time (US & Canada); Any unsaved changes are abandoned. The router ...
Administration Guide
Page 43
... page: Click Setup > DMZ Host in yyyy.mm.dd format, such as Internet gaming and video conferencing. Cisco Small Business RV0xx Series Routers Administration Guide 43 Setup Setting Up a DMZ Host 3 • Set the local time Manually: Choose this option if you want to set the local time yourself. Date: Enter the current date in...
... page: Click Setup > DMZ Host in yyyy.mm.dd format, such as Internet gaming and video conferencing. Cisco Small Business RV0xx Series Routers Administration Guide 43 Setup Setting Up a DMZ Host 3 • Set the local time Manually: Choose this option if you want to set the local time yourself. Date: Enter the current date in...
Administration Guide
Page 54
... address of the computer you click the Edit icon on the MAC Address Clone page. Cisco Small Business RV0xx Series Routers Administration Guide 54 To clone a MAC address, enter the following settings. • User Defined WAN MAC Address: To manually clone a MAC address, click the radio button, and then enter the 12 digits of your... ISP. • MAC Address from this page, click Save to save your PC is displayed automatically. Any unsaved changes are currently using to configure the router, click this radio button.
... address of the computer you click the Edit icon on the MAC Address Clone page. Cisco Small Business RV0xx Series Routers Administration Guide 54 To clone a MAC address, enter the following settings. • User Defined WAN MAC Address: To manually clone a MAC address, click the radio button, and then enter the 12 digits of your... ISP. • MAC Address from this page, click Save to save your PC is displayed automatically. Any unsaved changes are currently using to configure the router, click this radio button.
Administration Guide
Page 63
... to assign IP addresses manually, you can add the device to a different device. NOTE DHCP Relay is not available. A DHCP server automatically assigns available IP addresses to computers on the IPv4 tab. An address is enabled on your network. Cisco Small Business RV0xx Series Routers Administration Guide 63 If you... topics: • Setting Up the DHCP Server or DHCP Relay, page 63 • Viewing the DHCP Status Information, page 70 • Router Advertisement (IPv6), page 71 Setting Up the DHCP Server or DHCP Relay Use the DHCP > DHCP Setup page to view DHCP summary information....
... to assign IP addresses manually, you can add the device to a different device. NOTE DHCP Relay is not available. A DHCP server automatically assigns available IP addresses to computers on the IPv4 tab. An address is enabled on your network. Cisco Small Business RV0xx Series Routers Administration Guide 63 If you... topics: • Setting Up the DHCP Server or DHCP Relay, page 63 • Viewing the DHCP Status Information, page 70 • Router Advertisement (IPv6), page 71 Setting Up the DHCP Server or DHCP Relay Use the DHCP > DHCP Setup page to view DHCP summary information....
Administration Guide
Page 66
...Assigning static IP addresses by entering devices manually, page 67 • Using the Static IP List to the Static IP list. The IP & MAC binding list appears. Cisco Small Business RV0xx Series Routers Administration Guide 66 If the web browser displays a message about the pop-up to 100 devices to Block Devices, page 68 ... IP Addresses (for IPv4 Only) When DHCP is enabled, you may wish to assign static IP addresses to use this feature even if the router is configured to certain devices, such as a web server or an FTP server. Choose Use the following IP address, and enter the IP address...
...Assigning static IP addresses by entering devices manually, page 67 • Using the Static IP List to the Static IP list. The IP & MAC binding list appears. Cisco Small Business RV0xx Series Routers Administration Guide 66 If the web browser displays a message about the pop-up to 100 devices to Block Devices, page 68 ... IP Addresses (for IPv4 Only) When DHCP is enabled, you may wish to assign static IP addresses to use this feature even if the router is configured to certain devices, such as a web server or an FTP server. Choose Use the following IP address, and enter the IP address...
Administration Guide
Page 67
...entry, hold down the Shift key, and then click the final entry in the text fields. Cisco Small Business RV0xx Series Routers Administration Guide 67 Alternatively, select all devices in the list by entering devices manually In the Static IP Address section, add or edit entries as needed: • To modify...To select individual entries, press the Ctrl key while clicking each entry. STEP 4 Modify or remove list entries, as needed , you want the router to assign a static IP address to delete, and then click Delete. STEP 3 Click OK to add the devices to the Static IP list, ...
...entry, hold down the Shift key, and then click the final entry in the text fields. Cisco Small Business RV0xx Series Routers Administration Guide 67 Alternatively, select all devices in the list by entering devices manually In the Static IP Address section, add or edit entries as needed: • To modify...To select individual entries, press the Ctrl key while clicking each entry. STEP 4 Modify or remove list entries, as needed , you want the router to assign a static IP address to delete, and then click Delete. STEP 3 Click OK to add the devices to the Static IP list, ...
