User Guide
Page 2
... Resources Website addresses in this document are trademarks or registered trademarks of their respective holders. 4-Port SSL/IPSec VPN Router Open Source This product may contain material licensed to add http:// in front of Cisco Systems, Inc. Copyright © 2007 Cisco Systems, Inc. All rights reserved. Resource Website Linksys www.linksys.com Linksys International www.linksys...
... Resources Website addresses in this document are trademarks or registered trademarks of their respective holders. 4-Port SSL/IPSec VPN Router Open Source This product may contain material licensed to add http:// in front of Cisco Systems, Inc. Copyright © 2007 Cisco Systems, Inc. All rights reserved. Resource Website Linksys www.linksys.com Linksys International www.linksys...
User Guide
Page 3
Table of Contents 4-Port SSL/IPSec VPN Router Chapter 1: Introduction 1 Introduction to the Router 1 Introduction to Virtual Private Networks (VPNs 1 VPN Router to VPN Router 1 Computer (using SSL VPN client software) to VPN Router 2 Chapter 2: Product Overview 3 Front Panel 3 Back Panel 3 Chapter 3: Installation 4 ... Utility 7 System Summary 8 System Information 8 Port Statistics 9 Network Setting Status 9 Firewall Setting Status 9 IPSec VPN Setting Status 9 SSL VPN Setting Status 9 Log Setting Status 9 Setup Tab > Network 10 Network 10 Setup > Password 12 Password ...
Table of Contents 4-Port SSL/IPSec VPN Router Chapter 1: Introduction 1 Introduction to the Router 1 Introduction to Virtual Private Networks (VPNs 1 VPN Router to VPN Router 1 Computer (using SSL VPN client software) to VPN Router 2 Chapter 2: Product Overview 3 Front Panel 3 Back Panel 3 Chapter 3: Installation 4 ... Utility 7 System Summary 8 System Information 8 Port Statistics 9 Network Setting Status 9 Firewall Setting Status 9 IPSec VPN Setting Status 9 SSL VPN Setting Status 9 Log Setting Status 9 Setup Tab > Network 10 Network 10 Setup > Password 12 Password ...
User Guide
Page 6
... the Virtual Passage Client (Mac OS X 60 Removal of the Virtual Passage Client (Mac OS X 61 Before You Begin (Linux OS 62 Login for the SSL VPN Portal (Linux OS 62 Installation of the Virtual Passage Client (Linux OS 62 Removal of the Virtual Passage Client (Linux OS 63 Appendix C: Bandwidth Management... 70 Appendix E: User for the Active Directory Server 71 Appendix F: Internet Authentication Service (IAS) Server 73 Appendix G: Lightweight Directory Access Protocol (LDAP) Server 79 4-Port SSL/IPSec VPN Router
... the Virtual Passage Client (Mac OS X 60 Removal of the Virtual Passage Client (Mac OS X 61 Before You Begin (Linux OS 62 Login for the SSL VPN Portal (Linux OS 62 Installation of the Virtual Passage Client (Linux OS 62 Removal of the Virtual Passage Client (Linux OS 63 Appendix C: Bandwidth Management... 70 Appendix E: User for the Active Directory Server 71 Appendix F: Internet Authentication Service (IAS) Server 73 Appendix G: Lightweight Directory Access Protocol (LDAP) Server 79 4-Port SSL/IPSec VPN Router
User Guide
Page 7
...SSL/IPSec VPN Router Appendix H: Deployment in an Existing Network 80 Overview 80 LAN-to-LAN Connection 80 WAN-to-LAN Connection 81 Appendix I: Gateway-to-Gateway VPN Tunnel 82 Overview 82 Before You Begin 82 Configuration when the Remote Gateway Uses a Static IP Address 82 Configuration of the RVL200... 85 Configuration of the RVL200 85 Configuration of the RV082 86 Configuration of PC 1 and PC 2 86 Appendix J: IPSec NAT Traversal 87 Overview 87 Before You Begin 87 Configuration of Scenario 1 87 Configuration of Router A 87 Configuration of Router B 88 Configuration of ...
...SSL/IPSec VPN Router Appendix H: Deployment in an Existing Network 80 Overview 80 LAN-to-LAN Connection 80 WAN-to-LAN Connection 81 Appendix I: Gateway-to-Gateway VPN Tunnel 82 Overview 82 Before You Begin 82 Configuration when the Remote Gateway Uses a Static IP Address 82 Configuration of the RVL200... 85 Configuration of the RVL200 85 Configuration of the RV082 86 Configuration of PC 1 and PC 2 86 Appendix J: IPSec NAT Traversal 87 Overview 87 Before You Begin 87 Configuration of Scenario 1 87 Configuration of Router A 87 Configuration of Router B 88 Configuration of ...
User Guide
Page 8
Table of Contents Appendix M: Multiple VLANs and Subnets 96 Overview 96 RVL200 Configuration 96 Basic Instructions 96 Inter-VLAN Routing Option 97 Appendix N: Access of Multiple VLANs over a SSL VPN Tunnel 98 Overview 98 SSL VPN Connection 98 Static Route 98 Windows Operating System (OS 98 Mac OS X 98 Linux OS 98 Appendix O: Firmware Upgrade 99... User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE 106 Appendix T: Contact Information 110 4-Port SSL/IPSec VPN Router vii
Table of Contents Appendix M: Multiple VLANs and Subnets 96 Overview 96 RVL200 Configuration 96 Basic Instructions 96 Inter-VLAN Routing Option 97 Appendix N: Access of Multiple VLANs over a SSL VPN Tunnel 98 Overview 98 SSL VPN Connection 98 Static Route 98 Windows Operating System (OS 98 Mac OS X 98 Linux OS 98 Appendix O: Firmware Upgrade 99... User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE 106 Appendix T: Contact Information 110 4-Port SSL/IPSec VPN Router vii
User Guide
Page 9
... five Secure Sockets Layer (SSL) Virtual Private Network (VPN) tunnels gives your small business needs. Use the browser-based utility to configure settings and run convenient wizards that data transmissions between them are two basic ways to create a VPN connection: • VPN Router to VPN Router • computer (using IPSec (Windows Vista uses a similar utility). A VPN tunnel uses industrystandard encryption and...
... five Secure Sockets Layer (SSL) Virtual Private Network (VPN) tunnels gives your small business needs. Use the browser-based utility to configure settings and run convenient wizards that data transmissions between them are two basic ways to create a VPN connection: • VPN Router to VPN Router • computer (using IPSec (Windows Vista uses a similar utility). A VPN tunnel uses industrystandard encryption and...
User Guide
Page 10
... her Internet Service Provider (ISP). Her notebook computer has VPN client software that is not a factor. She accesses the VPN client software and connects to the central office's network, as if she were physically connected. VPN Router Central Office VPN Router VPN Router to VPN Router Computer (using SSL VPN client software) to VPN Router The following is an example of a computer-to VPN Router 4-Port SSL/IPSec VPN Router
... her Internet Service Provider (ISP). Her notebook computer has VPN client software that is not a factor. She accesses the VPN client software and connects to the central office's network, as if she were physically connected. VPN Router Central Office VPN Router VPN Router to VPN Router Computer (using SSL VPN client software) to VPN Router The following is an example of a computer-to VPN Router 4-Port SSL/IPSec VPN Router
User Guide
Page 11
...flash slowly during a reset to Factory Defaults If you connect the power adapter. 4-Port SSL/IPSec VPN Router Ethernet 1, 2, 3, 4 These Ethernet ports (1, 2, 3, 4) connect the Router to pressing the power button on the Router's back panel, serve two purposes. This is similar to wired computers and other troubleshooting ...indicate network activity over the Internet port. It flashes to reboot it. Internet (Green) The Internet LED lights up when the Router is not ready for use . You can be used in one of two ways, warm reset and reset to factory defaults...
...flash slowly during a reset to Factory Defaults If you connect the power adapter. 4-Port SSL/IPSec VPN Router Ethernet 1, 2, 3, 4 These Ethernet ports (1, 2, 3, 4) connect the Router to pressing the power button on the Router's back panel, serve two purposes. This is similar to wired computers and other troubleshooting ...indicate network activity over the Internet port. It flashes to reboot it. Internet (Green) The Internet LED lights up when the Router is not ready for use . You can be used in one of two ways, warm reset and reset to factory defaults...
User Guide
Page 12
... near an electrical outlet. The distance between the two slots is to mount the Router. The second way is 64.4 mm (2.535 inches). Insert the Router into the wall-mount slots. 64.4 mm 4-Port SSL/IPSec VPN Router Print this page at 100% size. The third way is to mount it on...place it horizontally on a wall. WARNING: Do not place excessive weight on a flat surface near an electrical outlet. Set the Router on top of the Router with the two screws. 5. NOTE: Linksys is not responsible for damages incurred by insecure wall-mounting hardware. Follow these instructions: 1....
... near an electrical outlet. The distance between the two slots is to mount the Router. The second way is 64.4 mm (2.535 inches). Insert the Router into the wall-mount slots. 64.4 mm 4-Port SSL/IPSec VPN Router Print this page at 100% size. The third way is to mount it on...place it horizontally on a wall. WARNING: Do not place excessive weight on a flat surface near an electrical outlet. Set the Router on top of the Router with the two screws. 5. NOTE: Linksys is not responsible for damages incurred by insecure wall-mounting hardware. Follow these instructions: 1....
User Guide
Page 13
Connect your computers and other network devices. 4-Port SSL/IPSec VPN Router Installation Connect one end of the numbered ports on the front panel will light up as soon as a computer or switch. Connect to the Router. Repeat this step to connect more computers or other end to one of an Ethernet ...cable or DSL modem. 4. Connect the Power 6. The Power LED on the back of your hardware is connected properly. 7. Connect to the Router, follow these instructions: 1. Connect the other network devices to the Internet Port 3. Before you begin, make sure that all of the...
Connect your computers and other network devices. 4-Port SSL/IPSec VPN Router Installation Connect one end of the numbered ports on the front panel will light up as soon as a computer or switch. Connect to the Router. Repeat this step to connect more computers or other end to one of an Ethernet ...cable or DSL modem. 4. Connect the Power 6. The Power LED on the back of your hardware is connected properly. 7. Connect to the Router, follow these instructions: 1. Connect the other network devices to the Internet Port 3. Before you begin, make sure that all of the...
User Guide
Page 14
...utility: System Summary, Setup, DHCP, System Management, Port Management, QoS, Firewall, IPSec VPN, SSL VPN, SNMP, Log, Wizard, Support, and Logout. Internet Explorer > Tools > Internet Options > Advanced 4-Port SSL/IPSec VPN Router 6. Select Enable for your web browser. Click Advanced. 13. Internet Explorer > ... 7. Click the Security tab. 8. Additional tabs will explain all of the main tabs. Before You Begin The Router's web-based utility and SSL VPN Portal support Internet Explorer 6.0 (or higher) and Netscape Communicator 8.0 (or higher) running in this utility. Internet ...
...utility: System Summary, Setup, DHCP, System Management, Port Management, QoS, Firewall, IPSec VPN, SSL VPN, SNMP, Log, Wizard, Support, and Logout. Internet Explorer > Tools > Internet Options > Advanced 4-Port SSL/IPSec VPN Router 6. Select Enable for your web browser. Click Advanced. 13. Internet Explorer > ... 7. Click the Security tab. 8. Additional tabs will explain all of the main tabs. Before You Begin The Router's web-based utility and SSL VPN Portal support Internet Explorer 6.0 (or higher) and Netscape Communicator 8.0 (or higher) running in this utility. Internet ...
User Guide
Page 15
...Login. This will prompt any user of the Router's web-based utility, launch your User Name and Password. Select Allow cookies. 8. Click Advanced. 10. Click OK. How to install the Web Cache Cleaner. 4-Port SSL/IPSec VPN Router Netscape Communicator > Options > Advanced > Security... 15. Login Screen 3. Select Enable ActiveX. Click OK. 12. Select Use SSL 2.0 and Use SSL 3.0. A login screen prompts you for your web browser, and enter the Router's default IP address, ...
...Login. This will prompt any user of the Router's web-based utility, launch your User Name and Password. Select Allow cookies. 8. Click Advanced. 10. Click OK. How to install the Web Cache Cleaner. 4-Port SSL/IPSec VPN Router Netscape Communicator > Options > Advanced > Security... 15. Login Screen 3. Select Enable ActiveX. Click OK. 12. Select Use SSL 2.0 and Use SSL 3.0. A login screen prompts you for your web browser, and enter the Router's default IP address, ...
User Guide
Page 16
...you click a hyperlink, the related setup screen will appear. Underlined text is the current version number of the processor installed on the Router. Firmware version Displayed here is hyperlinked to Install the Web Cache Cleaner 4. On the Security Warning screen, click Yes. When you or...size of DRAM installed on the Router's board. Flash Displayed here is the size of flash memory installed on the Router's motherboard. It will ask you want to the rest of the utility's tabs. Then, click the desired tab. 4-Port SSL/IPSec VPN Router Site Map System Information Serial ...
...you click a hyperlink, the related setup screen will appear. Underlined text is the current version number of the processor installed on the Router. Firmware version Displayed here is hyperlinked to Install the Web Cache Cleaner 4. On the Security Warning screen, click Yes. When you or...size of DRAM installed on the Router's board. Flash Displayed here is the size of flash memory installed on the Router's motherboard. It will ask you want to the rest of the utility's tabs. Then, click the desired tab. 4-Port SSL/IPSec VPN Router Site Map System Information Serial ...
User Guide
Page 17
...Time or get a new IP address. Information about the selected port will be black. Click Release to release the IP address, and 4-Port SSL/IPSec VPN Router click Renew to the Summary screen of the Setup tab. If the WAN port is disabled, it hyperlinks to Obtain an IP automatically, two... tab. Mode It shows the Router's Working Mode (Gateway or Router), and it will appear in days, hours, and minutes that the Router has been active. If the port is Disabled. Tunnel(s) Used It shows the number of the Setup tab. SSL VPN Setting Status SSL VPN Summary It hyperlinks to the Summary...
...Time or get a new IP address. Information about the selected port will be black. Click Release to release the IP address, and 4-Port SSL/IPSec VPN Router click Renew to the Summary screen of the Setup tab. If the WAN port is disabled, it hyperlinks to Obtain an IP automatically, two... tab. Mode It shows the Router's Working Mode (Gateway or Router), and it will appear in days, hours, and minutes that the Router has been active. If the port is Disabled. Tunnel(s) Used It shows the number of the Setup tab. SSL VPN Setting Status SSL VPN Summary It hyperlinks to the Summary...
User Guide
Page 18
... Exit to return to enable the Multiple Subnet feature. WAN Connection Type WAN There are 192.168.1.1 for the Router's local IP address and 255.255.255.0 for the Router. Setup > Network Network Host Name and Domain Name Enter a host and domain name for the subnet mask. ... settings, the message, "E-mail settings have been configured," will be displayed. Some ISPs require these fields blank. 4-Port SSL/IPSec VPN Router LAN Setting The MAC Address of the Router's basic setup functions. If you have set up the e-mail server on which connection type you select, you will see...
... Exit to return to enable the Multiple Subnet feature. WAN Connection Type WAN There are 192.168.1.1 for the Router's local IP address and 255.255.255.0 for the Router. Setup > Network Network Host Name and Domain Name Enter a host and domain name for the subnet mask. ... settings, the message, "E-mail settings have been configured," will be displayed. Some ISPs require these fields blank. 4-Port SSL/IPSec VPN Router LAN Setting The MAC Address of the Router's basic setup functions. If you have set up the e-mail server on which connection type you select, you will see...
User Guide
Page 19
... the subnet mask of minutes you select Use the Following DNS Server Addresses, enter your account's User Name and Password. Enter the number of the Router. 4-Port SSL/IPSec VPN Router PPPoE User Name and Password Enter your DNS server IP address(es) (enter at least one ). To manually set a value, select Manual and enter...
... the subnet mask of minutes you select Use the Following DNS Server Addresses, enter your account's User Name and Password. Enter the number of the Router. 4-Port SSL/IPSec VPN Router PPPoE User Name and Password Enter your DNS server IP address(es) (enter at least one ). To manually set a value, select Manual and enter...
User Guide
Page 20
..., so your DNS server IP address(es) (enter at least one). The maximum number of the default gateway. this will remove all of the Router. The default Redial Period is 60. If the password is lost or forgotten. Chapter 4 Advanced Configuration Keep Alive: Interval If you select the Keep...a value, select Manual and enter the value desired in the 1200 to its factory default settings; Subnet Mask Enter the subnet mask of the Router. 4-Port SSL/IPSec VPN Router Default Gateway Address Enter the IP address of characters is 30 seconds. If you have to reset the...
..., so your DNS server IP address(es) (enter at least one). The maximum number of the default gateway. this will remove all of the Router. The default Redial Period is 60. If the password is lost or forgotten. Chapter 4 Advanced Configuration Keep Alive: Interval If you select the Keep...a value, select Manual and enter the value desired in the 1200 to its factory default settings; Subnet Mask Enter the subnet mask of the Router. 4-Port SSL/IPSec VPN Router Default Gateway Address Enter the IP address of characters is 30 seconds. If you have to reset the...
User Guide
Page 21
...Time > Manual Time Zone Select your change, or click Cancel Changes to the Internet for the Router. Setup > DMZ Host The DMZ (Demilitarized Zone) Host feature allows one computer at the ...admin when you want to save your time zone (the default Time Zone is Pacific Time). 4-Port SSL/IPSec VPN Router Setup > DMZ Host DMZ Host DMZ Private IP Address Enter the local IP address of 0 deactivates the DMZ... Host. 13 Setup > Time The Router uses the time settings to undo them. Time To set the local time, select Set the local ...
...Time > Manual Time Zone Select your change, or click Cancel Changes to the Internet for the Router. Setup > DMZ Host The DMZ (Demilitarized Zone) Host feature allows one computer at the ...admin when you want to save your time zone (the default Time Zone is Pacific Time). 4-Port SSL/IPSec VPN Router Setup > DMZ Host DMZ Host DMZ Private IP Address Enter the local IP address of 0 deactivates the DMZ... Host. 13 Setup > Time The Router uses the time settings to undo them. Time To set the local time, select Set the local ...
User Guide
Page 22
... to establish a static IP address in the menu, click Service Management to add the new service. NOTE: You must disable the Router's DHCP function to use this service. Service Select the Service you would like, up to a maximum of IP address and port mapping ..., or click Cancel Changes to the Forwarding screen. Enable SelectEnabletoenablethisportrangeforwarding entry. The IP address of the server that you want . 4-Port SSL/IPSec VPN Router Service Management Service Name Enter a name. You may need is pulled back to IP address 192.168.1.2, then all HTTP requests from ...
... to establish a static IP address in the menu, click Service Management to add the new service. NOTE: You must disable the Router's DHCP function to use this service. Service Select the Service you would like, up to a maximum of IP address and port mapping ..., or click Cancel Changes to the Forwarding screen. Enable SelectEnabletoenablethisportrangeforwarding entry. The IP address of the server that you want . 4-Port SSL/IPSec VPN Router Service Management Service Name Enter a name. You may need is pulled back to IP address 192.168.1.2, then all HTTP requests from ...
User Guide
Page 23
...Port Range Forwarding Select this option to see the details of the incoming port range. Click Close to undo them . Setup > UPnP 4-Port SSL/IPSec VPN Router Service Management Service Name Enter a name. Click Add to the UPnP screen. Click Save Settings to save your changes, or click Cancel Changes ...or click Cancel Changes to save your entries. If the Service you want to use alternate ports to the Forwarding screen. Then the Router will forward the incoming packets to the UPnP screen. Click Exit to return to the LAN host. Enable Select Enable to enable this ...
...Port Range Forwarding Select this option to see the details of the incoming port range. Click Close to undo them . Setup > UPnP 4-Port SSL/IPSec VPN Router Service Management Service Name Enter a name. Click Add to the UPnP screen. Click Save Settings to save your changes, or click Cancel Changes ...or click Cancel Changes to save your entries. If the Service you want to use alternate ports to the Forwarding screen. Then the Router will forward the incoming packets to the UPnP screen. Click Exit to return to the LAN host. Enable Select Enable to enable this ...