router cisco rv016

8/8/2019 Router Cisco RV016

1/112

USER GUIDE

BUSINESS SERIE

10/100 16-Port

VPN Router

Model: RV016


2/112

i

About This Guide

10/100 16-Port VPN Router

About This Guide

Icon Descriptions

While reading through the User Guide you may seevarious icons that call attention to speciic items. Below isa description o these icons:

NOTE: This check mark indicates that there isa note o interest and is something that youshould pay special attention to while using theproduct.

WARNING: This exclamation point indicatesthat there is a caution or warning and it is

something that could damage your property orproduct.

WEB: This globe icon indicates a noteworthywebsite address or e-mail address.

Online Resources

Website addresses in this document are listed withouthttp:// in ront o the address because most current webbrowsers do not require it. I you use an older web browser,you may have to add http:// in ront o the web address.

Resource Website

Linksys www.linksys.com

Linksys International www.linksys.com/international

Glossary www.linksys.com/glossary

Network Security www.linksys.com/security

Copyright and Trademarks

Linksys, Cisco and the Cisco Logoare registered trademarks ortrademarks o Cisco Systems, Inc.and/or its ailiates in the U.S. andcertain other countries. Copyright 2008 Cisco Systems, Inc. All rightsreserved. Trend Micro, InterScan, andProtectLink are trademarks o TrendMicro Incorporated. Other brandsand product names are trademarksor registered trademarks o theirrespective holders.


3/112

ii

Table of Contents


Chapter 1: Introduction 1

Introduction to the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Introduction to VPNs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

VPN Examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1VPN Router to VPN Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Computer (using VPN client sotware) to VPN Router . . . . . . . . . . . . . . . . . . . . 2

Chapter 2: Product Overview 3

Front Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Let Side Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Chapter 3: Installation 4

Physical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Horizontal Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Wall-Mount Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Rack-Mount Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Cable Connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Chapter 4: Advanced Confguration 7

Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

How to Access the Web-Based Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

System Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

System Inormation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Network Setting Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Firewall Setting Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

VPN Setting Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Log Setting Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Setup > Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Setup > Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Setup > Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Setup > DMZ Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

DMZ Host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Setup > Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Setup > UPnP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16

UPnP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Setup > One-to-One NAT. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17


4/112

iii

Table of Contents


One-to-One NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

Setup > MAC Clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

MAC Clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

Setup > DDNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19

DDNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19

Setup > Advanced Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Advanced Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

DHCP > Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22

DHCP > Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

System Management > Multi-WAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Load Balance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

System Management > Bandwidth Management . . . . . . . . . . . . . . . . . . . . . . . . .26

Bandwidth Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

System Management > SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

System Management > Diagnostic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

Diagnostic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

System Management > Factory Deault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Factory Deault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

System Management > Firmware Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Firmware Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

System Management > Setting Backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31Import Conguration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

Export Conguration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

Port Management > Port Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

Basic Per Port Cong. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Port Management > Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Firewall > General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

Firewall > Access Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

Access Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34Add a New Access Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Firewall > Content Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

Content Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

ProtectLink. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

VPN > Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

VPN > Gateway to Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38

Add a New Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38

IPSec Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41


5/112

iv

Table of Contents


VPN > Client to Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

Add a New Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

IPSec Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47

VPN > VPN Client Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

VPN Client Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

VPN > VPN Pass Through . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

VPN Pass Through . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51

VPN > PPTP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51

PPTP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51

Connection List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51

Log > System Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51

System Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52

Log > System Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53

Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

Basic Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

Access Rule Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58

Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Linksys Web Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Logout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Appendix A: Troubleshooting 61

Appendix B: Linksys QuickVPN for Windows 2000, XP, or Vista 62

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62Computer (using VPN client sotware) to VPN Router . . . . . . . . . . . . . . . . . . . .62

Linksys QuickVPN Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62

Router Conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62

Export a Client Certicate rom the Router . . . . . . . . . . . . . . . . . . . . . . . . . . .62

Add VPN Client Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63

Linksys QuickVPN Client Installation and Conguration . . . . . . . . . . . . . . . . . . . . .63

Install rom the CD-ROM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63

Download rom the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

Install the Client Certicate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

Use o the Linksys QuickVPN Sotware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64Linksys QuickVPN Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

Version Number o Linksys QuickVPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

Appendix C: Gateway-to-Gateway VPN Tunnel 66

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66

Beore You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66

Conguration when the Remote Gateway Uses a Static IP Address . . . . . . . . . . . . . .66

Conguration o the RVL200. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66

Conguration o the RV016 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67


6/112

v

Table of Contents


Conguration o PC 1 and PC 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67

Conguration when the Remote Gateway Uses a Dynamic IP Address . . . . . . . . . . . .68




Conguration when Both Gateways Use Dynamic IP Addresses . . . . . . . . . . . . . . . .69




Appendix D: IPSec NAT Traversal 71

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71

Beore You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71

Conguration o Scenario 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71

Conguration o Router A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71Conguration o Router B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72

Conguration o Scenario 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73

Conguration o the One-to-One NAT Rules. . . . . . . . . . . . . . . . . . . . . . . . . .73

Conguration o Router B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74

Conguration o Router A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74

Appendix E: Bandwidth Management 76

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76

Creation o New Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76

Creation o New Bandwidth Management Rules. . . . . . . . . . . . . . . . . . . . . . . . . .77

Appendix F: Firmware Upgrade 78

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

How to Access the Web-Based Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Upgrade the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Alternative Firmware Upgrade Option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Appendix G: Trend Micro ProtectLink Gateway Service 80

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80

How to Access the Web-Based Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80

How to Purchase, Register, or Activate the Service. . . . . . . . . . . . . . . . . . . . . . . . .80

System Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

ProtectLink. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81

How to Use the Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

ProtectLink > Web Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82

ProtectLink > Email Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

ProtectLink > License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

Appendix H: Specifcations 85


7/112

vi

Table of Contents


Appendix I: Warranty Inormation 86

Exclusions and Limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

Obtaining Warranty Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87Appendix J: Sotware License Agreement 88

Sotware in Linksys Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Sotware Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Schedule 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Linksys Sotware License Agreement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

END OF SCHEDULE 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Schedule 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

GNU GENERAL PUBLIC LICENSE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

END OF SCHEDULE 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Schedule 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

GNU LESSER GENERAL PUBLIC LICENSE. . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

END OF SCHEDULE 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97

Schedule 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97

OpenSSL License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98

Original SSLeay License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98

END OF SCHEDULE 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .99

Appendix K: Regulatory Inormation 100

FCC Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

Saety Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Battery Recycling Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Industry Canada Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Avis dIndustrie Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

User Inormation or Consumer Products Covered by EU Directive 2002/96/EC on WasteElectric and Electronic Equipment (WEEE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101

Appendix L: Contact Inormation 105


8/112

1

Introduction


Chapter 1

Chapter 1:Introduction

Introduction to the RouterThank you or choosing the Linksys 10/100 16-Port VPNRouter. The Router lets multiple computers in your oiceshare an Internet connection, and its 16 ports oerversatility.

Two are dedicated Internet ports that let you connecta second Internet line as a backup, or you can use bothInternet ports at the same time, allowing the Router tomanage bandwidth demands or maximum eiciency.Up to ive o the 13, ull-duplex, 10/100 local ports canbe reconigured as Internet ports, or an up to seven-port

ailover or load balanced redundancy. A dedicated DMZport gives you a publicly accessible channel so you can setup a web or FTP server.

For remote connections, up to 50 remote oice or travelingusers can securely connect to your oice network usingthe Routers Virtual Private Network (VPN) capability.

Use the browser-based utility to conigure settings andrun convenient wizards that will help you set up theRouter and its access rules.

Introduction to VPNs

A VPN is a connection between two endpointsa VPNRouter, or instancein dierent networks that allowsprivate data to be sent securely over a shared or publicnetwork, such as the Internet. This establishes a privatenetwork that can send data securely between these twolocations or networks.

The private network is established by creating a tunnel.A VPN tunnel connects the two computers or networksand allows data to be transmitted over the Internetas i it were still within those networks. A VPN tunneluses industry-standard encryption and authenticationtechniques to secure the data sent between the twonetworks.

Virtual Private Networking was created as a cost-eectivealternative to using a private, dedicated, leased line or aprivate network. It can be used to create secure networkslinking a central oice with branch oices, telecommuters,and/or proessionals on the road.

There are two basic ways to create a VPN connection:

VPN Router to VPN Router

computer (using VPN client sotware) to VPN Router

The VPN Router creates a tunnel or channel between twoendpoints, so that data transmissions between them are

secure. A computer with VPN client sotware can be oneo the two endpoints.

For an IPSec VPN tunnel, the VPN Router and any computerwith the built-in IPSec Security Manager (Windows 2000

and XP) can create a VPN tunnel using IPSec (WindowsVista uses a similar utility). Other Windows operatingsystems require additional, third-party VPN client sotwareapplications that support IPSec to be installed.

NOTE: The 10/100 16-Port VPN Router supportsIPSec VPN client sotware, including the LinksysQuickVPN sotware. (For more inormation, reerto Appendix B: Linksys QuickVPN or Windows2000, XP, or Vista.)

For a PPTP VPN tunnel, the 10/100 16-Port VPN Router andany computer running Windows 2000 or XP can create a

VPN tunnel using PPTP.

VPN Examples

The ollowing are examples o a VPN tunnel between twoVPN routers and a VPN tunnel between a computer usingVPN client sotware and a VPN router.


For example, at home, a telecommuter uses his VPNRouter or his always-on Internet connection. His Routeris conigured with his oices VPN settings. When he

connects to his oices router, the two routers create aVPN tunnel, encrypting and decrypting data. As VPNs usethe Internet, distance is not a actor. Using the VPN, thetelecommuter now has a secure connection to the centraloices network, as i he were physically connected.


9/112

2

Introduction


Chapter 1

Internet

Central Oice

Home

VPN Router

VPN Router


Computer (using VPN client sotware) to

VPN Router

The ollowing is an example o a computer-to-VPN RouterVPN. In her hotel room, a traveling businesswomanconnects to her Internet Service Provider (ISP). Hernotebook computer has VPN client sotware that isconigured with her oices VPN settings. She accessesthe VPN client sotware and connects to the VPN Routerat the central oice. As VPNs use the Internet, distance isnot a actor. Using the VPN, the businesswoman now has asecure connection to the central oices network, as i shewere physically connected.

Internet

Central Oice

O-Site

Notebook with VPN

Client Sotware

VPNRouter

Computer to VPN Router

For additional inormation and instructions aboutcreating your own VPN, visit the Linksys website atwww.linksys.com.


10/112

3

Product Overview


Chapter 2

Chapter 2:Product Overview

Front Panel

Diag (Orange) The Diag LED lights up whenthe Router is not ready or use. It turns o whenthe Router is ready or use.

System (Green) The System LED lights upwhen the Router is powered on. It lashes when

the Router is running a diagnostic test.LAN/Act 1-13 (Green) These numberedLEDs correspond with the numbered ports(white print). The LED is solidly lit when theRouter is connected to a device through thecorresponding port. The LED lashes to indicatenetwork activity over that port.

LAN/Act LEDs 9-13 and Internet/Act LEDs 3-7represent the dual-unction ports, which can beused as LAN or Internet ports. These correspondwith the LAN ports 9-13 (white print) or Internetports 3-7 (dark print) on the Routers ront

panel.Internet/Act 1-7 (Green) These numberedLEDs correspond with the numbered ports(dark print). The LED lights up when the Routeris connected to a cable or DSL modem throughthe corresponding port. The LED lashes toindicate network activity over that port.

Internet/Act LEDs 1 and 2 are labeled Internetbecause they can be used only as Internetports.

DMZ (Orange) The DMZ LED lights up whenthe Router is connected to a DMZ host throughthe DMZ port. The LED lashes to indicatenetwork activity over the DMZ port.

1-13 (LAN) These Ethernet ports connect theRouter to wired computers and other Ethernetnetwork devices.

LAN ports 9-13 can also be used as Internetports.

Internet (1-7) These Ethernet ports connectthe Router to Internet devices, such as cable orDSL modems.

Internet ports 3-7 can also be used as LAN

ports.DMZ The DMZ port connects to a switch orpublic server.

Reset The Reset button can be used or a warmreset or a reset to actory deaults.

Warm Reset I the Router is havingproblems connecting to the Internet,press and hold in the Reset button or asecond using the tip o a pen. This is similarto pressing the power button on yourcomputer to reboot it.

Reset to Factory Deaults

I you areexperiencing extreme problems withthe Router and have tried all othertroubleshooting measures, press and holdin the Reset button or 30 seconds. This willrestore the actory deaults and clear all othe Routers custom settings.

You can also reset the Router to actorydeaults using the System Management >Factory Default screen o the Routersweb-based utility.

Back Panel

Power The Power port connects to the ACpower cord.

Let Side Panel

Security Slot You can attach a lock to thesecurity slot so the Router will be protectedrom thet.


11/112

4

Installation


Chapter 3

Chapter 3:Installation

Physical InstallationThere are three ways to place the Router. The irst way isto place the Router horizontally on a surace. The secondway is to mount the Router on a wall. The third way is tomount the Router in a standard-sized, 19-inch high rack.

Horizontal Placement

The Router has our rubber eet on its bottom panel. Setthe Router on a lat surace near an electrical outlet.

WARNING: Do not place excessive weight

on top o the Router; too much weight coulddamage it.

Wall-Mount Placement

The Router has two wall-mount slots on its bottompanel. The distance between the two slots is 94 mm(3.70 inches).

Two screws are needed to mount the Router.

Suggested Mounting Hardware

3-3.8mm

5-6 mm 1.6-2 mm

Note: Mounting hardware illustrations are nottrue to scale.

NOTE: Linksys is not responsible or damages

incurred by insecure wall-mounting hardware.

Follow these instructions:

Determine where you want to mount the Router. Make1.sure that the wall you use is smooth, lat, dry, andsturdy. Also make sure the location is within reach oan electrical outlet.

Drill two holes into the wall. Make sure the holes are2.94 mm (3.07 inches) apart.

Insert a screw into each hole and leave 2 mm3.(0.8 inches) below the head exposed.

Maneuver the Router so two o the wall-mount slots4.line up with the two screws.

94 mm

Wall Mounting Template

Print this page at 100% size. Cut along the dotted line,and place on the wall to drill precise spacing.


12/112

5

Installation


Chapter 3

Place the wall-mount slots over the screws and slide5.the Router down until the screws it snugly into thewall-mount slots.

Rack-Mount Placement

The Router includes two brackets and eight screws ormounting on a standard-sized, 19-inch high rack. Observethe ollowing guidelines:

Elevated Operating Ambient I installed in a closedor multi-unit rack assembly, the operating ambienttemperature o the rack environment may be greaterthan room ambient. Thereore, consideration shouldbe given to installing the equipment in an environmentcompatible with the maximum ambient temperature(Tma) speciied by the manuacturer.

Reduced Air Flow Installation o the equipment

in a rack should be such that the amount o air lowrequired or sae operation o the equipment is notcompromised.

Mechanical Loading Mounting o the equipment inthe rack should be such that a hazardous condition isnot achieved due to uneven mechanical loading.

Circuit Overloading Consideration should be givento the connection o the equipment to the supplycircuit and the eect that overloading o the circuitsmight have on overcurrent protection and supplywiring. Appropriate consideration o equipmentnameplate ratings should be used when addressing

this concern.Reliable Earthing Reliable earthing o rack-mountedequipment should be maintained. Particular attentionshould be given to supply connections other thandirect connections to the branch circuit (e.g., use opower strips).

To rack-mount the Router in any standard 19-inch rack,ollow these instructions.

Place the Router on a hard lat surace with the ront1.panel aced towards your ront side.

Attach a rackmount bracket to one side o the Router2.

with the supplied screws and secure the brackettightly.

12

34

56

78

910

1112

13

12

34

56

7

10/100 16-P

ortVPNRo

uter

LAN/Act

LAN/Ac

t

Internet /

Act

RV016

9

10

12

13

1

2

3

4

5

6

7

Internet

Internet

DMZ

11

RV01610/100

VPNRouter

Attach the Brackets

Repeat step 2 to attach the other bracket to the3.opposite side.

Ater the brackets are attached to the Router, use4.suitable screws to securely attach the brackets to any

standard 19-inch rack.

12

34

56

78

910

1112

13

12

34

56

7

10/100 16-P

ortVPNRo

uter

LAN/Act

LAN/Ac

t

Internet/

Act

RV016

9

10

12

13

1

2

3

4

5

6

7

Internet

Internet

DMZ

11

RV01610/10

0VPNRoute

r

Mount in Rack

Cable Connections

To connect network devices to the Router, ollow theseinstructions:

Beore you begin, make sure that all o your hardware1.

is powered o, including the Router, computers,switches, and cable or DSL modem.

Connect one end o an Ethernet network cable to one2.o the numbered local ports (white print). Connect theother end to an Ethernet port on a network device,such as a computer or switch.

Repeat this step to connect more computers or othernetwork devices to the Router.

Connect to LAN Port 1


13/112

6

Installation


Chapter 3

Connect your cable or DSL modems Ethernet3.cable to one o the Routers Internet ports.

Repeat this step to connect additional Internet devicesto the Routers other Internet ports.

Connect to Internet Port 1

I you are using the DMZ port, then connect an Ethernet4.cable to the DMZ port. Connect the other end to anappropriate network device, such as a public server.

Connect to DMZ Port

Power on the cable or DSL modem(s). I you have a5.network device connected to the DMZ port, power onthat network device.

Connect the included power cord to the Routers6.Power port, and then plug the power cord into an

electrical outlet.

Connect the Power

The System LED on the ront panel will light up as soon7.as the power adapter is connected properly.

Power on your computers and other network devices.8.


14/112

Chapter 4 Advanced Configuration


Chapter 4:Advanced Coniguration

OverviewThe Routers web-based utility allows you to set upthe Router and perorm advanced coniguration andtroubleshooting. This chapter will explain all o theunctions in this utility.

These are the main tabs o the utility: System Summary,Setup, DHCP, System Management, Port Management,Firewall, VPN, Log, Wizard, Support, and Logout. (TheProtectLink tab is available with upgraded irmware.)Additional tabs will be available ater you click one o themain tabs.

How to Access the Web-Based Utility

For local access o the Routers web-based utility,1.launch your web browser, and enter the Routersdeault IP address, 192.168.1.1, in the Address ield.Press the Enter key.

Address Bar

NOTE: I the Remote Management eature onthe Firewall > Generalscreen has been enabled,then users with administrative privileges canremotely access the web-based utility. Usehttp://, oruse https:// iyou have enabled the HTTPS eature.

A login screen prompts you or your User name and2.Password. Enter admin in the User name ield, andenter admin in the Password ield. (You can changethe Password on the Setup > Password screen.) ThenclickOK.

Login Screen

System Summary

The irst screen that appears is the System Summaryscreen, which displays the Routers current status andsettings. This inormation is read-only. Underlined text

is hyperlinked to related setup pages, so i you click ahyperlink, the related setup screen will appear. On theright-hand side o this screen and all other screens o theutility is a link to the Site Map, which has links to all o theutilitys tabs. Click Site Map to view the Site Map. Then,click the desired tab.

System Summary


15/112



System Summary (ProtectLink Available)

Site Map

System Inormation

Serial Number Displayed here is the serial number o theRouter.

Firmware version Displayed here is the current versionnumber o the irmware installed on the Router.

CPU Displayed here are the type and speed o theprocessor installed on the Router.

DRAM Displayed here is the size o DRAM installed onthe Routers motherboard.

Flash Displayed here is the size o lash memory installedon the Routers board.

System Up Time This is the length o time in days, hours,and minutes that the Router has been active. The current

time and date are also displayed.Trend Micro ProtectLink Gateway

The optional Trend Micro ProtectLink Gateway serviceprovides security or your network. It checks e-mailmessages, ilters website addresses (URLs), and blockspotentially malicious websites.

NOTE: I the Trend Micro ProtectLink Gatewayoptions are not displayed on the SystemSummaryscreen, you can upgrade the Routersirmware i you want to purchase and use thisoptional service. Reer to Appendix F: FirmwareUpgrade or instructions.

Go buy To purchase a license to use this service, clickGobuy. You will be redirected to a list o Linksys resellers on theLinksys website. Then ollow the on-screen instructions.

Register I you already have a license, clickRegister. Youwill be redirected to the Trend Micro ProtectLink Gatewaywebsite. Then ollow the on-screen instructions.

NOTE: To have your e-mail checked, you willneed to provide the domain name and IPaddress o your e-mail server. I you do notknow this inormation, contact your InternetService Provider (ISP).

Activate I you have registered, click Activate. You willbe redirected to the Trend Micro ProtectLink Gatewaywebsite. Follow the on-screen instructions.

For more inormation, reer to Appendix G: Trend MicroProtectLink Gateway Service.

Coniguration

I you need help to conigure the Router, click Setup

Wizard, and ollow the on-screen instructions. Foradditional inormation, reer to the Wizard section o thischapter.

Port Statistics

The image o the Routers ront panel displays the statuso each port. I a port is disabled, it will be red; i a port isenabled, it will be black. I a port is connected, it will begreen. Click any port to view the ports Summary table ina separate window.


16/112



The Summary table shows the settings o the selectedport, including Type, Interace, Link Status, Port Activity,Priority, Speed Status, Duplex Status, Auto negotiation,and VLAN.

Port 1 Inormation

For the selected port, the statistics table shows thisinormation: number o packets received, number opacket bytes received, number o packets transmitted,number o packet bytes transmitted, and number opacket errors.

To update the on-screen inormation, clickReresh

. Toexit this screen, clickClose.

Network Setting Status

LAN IP It shows the current LAN IP address o the Router,as seen by internal users on the network, and it hyperlinksto the LAN Setting section on the Networkscreen o theSetup tab.

WAN IP This shows the current WAN IP addresses othe Router, as seen by external users on the Internetand hyperlinks to the WAN Setting section on the Setup> Network screen. By deault, the Router provides two

WAN ports. On the Setup > Networkscreen, you can set upadditional WAN ports.

I the port is set to Obtain an IP automatically, two buttons,Release and Renew, will be available. Click Release torelease the IP address, and click Renew to update theDHCP Lease Time or get a new IP address. I the WANport is set to PPPoE or PPTP, two buttons, Connect andDisconnect, will be available.

DMZ IP This shows the DMZ IP address, as seen byexternal users on the Internet and hyperlinks to the DMZSetting section on the Setup >Networkscreen.

Mode It shows the Routers Working Mode (Gateway orRouter), and it hyperlinks to the Dynamic Routing sectionon the Setup > Advanced Routing screen.

DNS It shows all DNS server IP addresses and hyperlinks

to the WAN Connection Type settings on the Setup >Networkscreen.

Bandwidth Management It shows the BandwidthManagement settings o the Routers WAN port(s) andhyperlinks to the System Management > BandwidthManagement screen.

DDNS It shows the DDNS settings o the Routers WANport(s) and hyperlinks to the Setup > DDNS screen.

DMZ Host It shows the DMZ private IP address andhyperlinks to the Setup > DMZ Host screen. The deault isDisabled.

Firewall Setting StatusSPI (Stateul Packet Inspection) It shows the status(On/O) o the SPI setting and hyperlinks to the Firewall >Generalscreen.

DoS (Denial o Service) It shows the status (On/O) othe DoS setting and hyperlinks to the Firewall > Generalscreen.

Block WAN Request It shows the status (On/O) othe Block WAN Request setting and hyperlinks to theFirewall > Generalscreen.

VPN Setting StatusVPN Summary It hyperlinks to the VPN > Summaryscreen.

Tunnel(s) Used It shows the number o VPN tunnelsused.

Tunnel(s) Available It shows the number o VPN tunnelsavailable.

Current Connected (The Group Name o GroupVPN1)users It shows the number o users. (I the GroupVPNeature is disabled, the message, No Group VPN wasdeined, is displayed.)

Current Connected (The Group Name o GroupVPN2)users It shows the number o users.

PPTP Server It shows the status o the PPTP Servereature.

Log Setting Status

It hyperlinks to the Log > System Log screen o the Logtab.

I you have not set up the e-mail server on the Log tab,the message, E-mail cannot be sent because you have


17/112



not speciied an outbound SMTP server address, will bedisplayed.

I you have set up the mail server but the log has not beengenerated due to the Log Queue Length and Log Time

Threshold settings, the message, E-mail settings havebeen conigured, will be displayed.

I you have set up the e-mail server and the log has beensent to the e-mail server, the message, E-mail settingshave been conigured and sent out normally, will bedisplayed.

I you have set up the e-mail server and the log cannotbe sent to the e-mail server, the message, E-mail cannotbe sent out, probably use incorrect settings, will bedisplayed.

Setup > Network

The Networkscreen shows all o the Routers basic setupunctions. The Router can be used in most network setupswithout changing any o the deault values; however,you may need to enter additional inormation in order toconnect to the Internet through an ISP (Internet ServiceProvider) or broadband (DSL or cable) carrier. The setupinormation is provided by your ISP.

Setup > Network

Network

Host Name and Domain Name Enter a host and domainname or the Router. Some ISPs require these names asidentiication. You may have to check with your ISP to seei your broadband Internet service has been coniguredwith a host and domain name. In most cases, you canleave these ields blank.

LAN Setting

The LAN MAC address o the Router is displayed.

Device IP Address and Subnet Mask The deault valuesare 192.168.1.1 or the Routers local IP address and255.255.255.0 or the subnet mask.

Multiple Subnet You can add more Class C networks

to expand the network. Select this option to enable theMultiple Subnet eature. Then clickAdd/Edit to create ormodiy subnet(s). A new screen appears.

Create or Modiy a Subnet

LAN IP Address Enter the LAN IP address.

Subnet Mask Enter the subnet mask.

For example, the current LAN settings show the DeviceIP Address as 192.168.1.1 and the Subnet Mask as255.255.255.0. To add one more Class C network, enterthe ollowing:

LAN IP Address 192.168.2.1

Subnet Mask 255.255.255.0

ClickAdd to List. ClickSave Settings to save your changes,or clickCancel Changes to undo them. ClickExit to returnto the Networkscreen.


18/112



Add One More Class C Network

I you want to modiy a subnet you have created, selectit and make changes. Click Save Settings to save yourchanges, or click Cancel Changes to undo them. ClickExit to return to the Networkscreen.

I you want to delete a subnet you have created, select itand click Delete selected subnet. Click Save Settingsto save your changes, or click Cancel Changes to undothem. ClickExit to return to the Networkscreen.

You can also divide a Class C network into our subnets.For example, the current LAN settings show the DeviceIP Address as 192.168.1.1 and the Subnet Mask as

255.255.255.192.

LAN Settings Example

To get the other three subnets, enter the ollowing:

Subnet 1


Subnet Mask 255.255.255.192

Subnet 2


Subnet Mask 255.255.255.192

Subnet 3


Subnet Mask 255.255.255.192

ClickAdd to List. Then clickSave Settings.

Create Three Additional Subnets

WAN Setting

By deault, the Router allows you to simultaneouslyconnect two broadband connections to the Router;however, you can set up as many as seven broadbandconnections.

From the drop-down menu, select how many WAN portsyou want to use. The deault is 2. (You can also changethe number o WAN ports using the Port Management> Port Setup screen.) Make sure the physical networkconiguration matches the number o WAN port settings

on this screen.I you change the number o WAN ports, click SaveSettings to save your change. A conirmation messagewill appear. Then clickOK to save the new setting.

The WAN Setting table displays the WAN port numbersin the Interace column and their respective connectiontypes in the Connection Type column. Click Edit in theConig. column to change the WAN settings o the selectedWAN port. You must save the new number o WAN portsbeore you can click Edit to change the settings o anynew WAN ports.

The Connection Type column will display the wordUndeined i you changed the number o WAN portsbut did not click Save Settings. Ater you save this setting,the Connection Type column will display, Obtain an IPautomatically. The deault Connection Type o all WANports is Obtain an IP automatically.

Edit WAN Connection

Ater you clicked Edit, conigure the WAN settings or theselected WAN port.

Interace The selected WAN port will be displayed.


19/112



These are the available connection types: Obtain an IPautomatically, Static IP, PPPoE, PPTP, and Heart Beat Signal.Depending on which connection type you select, you willsee various settings.

Obtain an IP AutomaticallyI your ISP automatically assigns an IP address, selectObtain an IP automatically. (Most cable modemsubscribers use this connection type.) Your ISP assignsthese values.

Obtain an IP Automatically

Use the Following DNS Server Addresses I you want tospeciy DNS server IP addresses, select this option.

DNS Server (Required) 1/2 I you select Use the FollowingDNS Server Addresses, enter at least one DNS server IPaddress. Multiple DNS server IP settings are common. Inmost cases, the irst available DNS entry is used.

MTU The Maximum Transmission Unit (MTU) setting

speciies the largest packet size permitted or networktransmission. In most cases, keep the deault, Auto.To speciy the MTU, select Manual, and then enter themaximum MTU size.

ClickSave Settings to save your changes, or clickCancelChanges to undo them. Click Back to return to theNetworkscreen without saving any changes.

Static IP

I you are required to use a permanent IP address, selectStatic IP.

Static IP

Speciy WAN IP Address Enter the external IP address othe Router.

Subnet Mask Enter the subnet mask o the Router.

Deault Gateway Address Enter the IP address o the

deault gateway.DNS Server (Required) 1/2 Enter at least one DNS serverIP address. Multiple DNS server IP settings are common. Inmost cases, the irst available DNS entry is used.

MTU The Maximum Transmission Unit (MTU) settingspeciies the largest packet size permitted or networktransmission. In most cases, keep the deault, Auto.To speciy the MTU, select Manual, and then enter themaximum MTU size.

ClickSave Settings to save your changes, or clickCancelChanges to undo them. Click Back to return to the

Networkscreen without saving any changes.PPPoE (Point-to-Point Protocol over Ethernet)

Some DSL-based Internet Service Providers (ISPs) usePPPoE (Point-to-Point Protocol over Ethernet) to establishInternet connections or end-users. I you use a DSLline, check with your ISP to see i they use PPPoE, selectPPPoE.

PPPoE

User Name and Password Enter your accounts UserName and Password. The maximum number o charactersis 60.

Service Name Enter the Service Name, i provided byyour ISP.

Connect on Demand I you select the Connect onDemand option, the connection will be disconnectedater a speciied period o inactivity (Max Idle Time). I youhave been disconnected due to inactivity, Connect onDemand enables the Router to automatically re-establishyour connection as soon as you attempt to access theInternet again. Enter the number o minutes you want tohave elapsed beore your Internet access disconnects. Thedeault Max Idle Time is 5 minutes.


20/112



Keep Alive: Redial Period I you select the Keep Aliveoption, the Router will keep the connection alive bysending out a ew data packets periodically, so your ISPthinks that the connection is still active. This option keepsyour connection active indeinitely, even when it sits idle.

The deault Redial Period is 30 seconds.



PPTP (Point-to-Point Tunneling Protocol)

Point to Point Tunneling Protocol (PPTP) is a service usedin Europe, Israel, and other countries.

PPTP

Speciy WAN IP Address Enter the external IP address othe Router.

Subnet Mask Enter the subnet mask o the Router.

Deault Gateway Address Enter the IP address o thedeault gateway.

User Name and Password Enter your accounts UserName and Password. The maximum number o charactersis 60.

Connect on Demand I you select the Connect onDemand option, the connection will be disconnectedater a speciied period o inactivity (Max Idle Time). I youhave been disconnected due to inactivity, Connect onDemand enables the Router to automatically re-establishyour connection as soon as you attempt to access theInternet again. Enter the number o minutes you want tohave elapsed beore your Internet access disconnects. Thedeault Max Idle Time is 5 minutes.

Keep Alive I you select the Keep Alive option, the Routerwill keep the connection alive by sending out a ew data

packets periodically, so your ISP thinks that the connectionis still active. This option keeps your connection activeindeinitely, even when it sits idle. The deault RedialPeriod is 30 seconds.



Heart Beat Signal

Heart Beat Signal is a service used in Australia only.

Heart Beat Signal

User Name and Password Enter your accounts UserName and Password. The maximum number o characters

is 60.

Heart Beat Server Enter the IP address o the Heart Beatserver.



DMZ Setting

The Router comes with a special DMZ port, which is usedor setting up public servers. The DMZ port sits betweenthe local network ports and the Internet port. Servers onthe DMZ are publicly accessible. Use o the DMZ port isoptional; it may be let unconnected.

Using the DMZ is preerred and is, i practical, a stronglyrecommended alternative to using public LAN servers orputting these servers on WAN ports where they are notprotected and not accessible by users on the LAN.


21/112


22/112



Daylight Saving To use the daylight saving eature, selectEnabled. Enter the Month and Day o the start date, andthen enter the Month and Day o the end date.

NTP Server Enter the URL or IP address o the NTP server.

The deault is time.nist.gov.Manual

Setup > Time > Manual

Hours, Minutes, Seconds Enter the time.

Month, Day, Year Enter the date.

ClickSave Settings to save your changes, or clickCancelChanges to undo them.

Setup > DMZ Host

The DMZ (Demilitarized Zone) Host eature allows onelocal user to be exposed to the Internet or use o a

special-purpose service such as Internet gaming orvideoconerencing. Although Port Range Forwarding canonly orward ten ranges o ports maximum, DMZ hostingorwards all the ports to one computer at the same time.

Setup > DMZ Host

DMZ Host

DMZ Private IP Address Enter the local IP address othe computer you want to expose. The deault value o0deactivates the DMZ Host.

ClickSave Settings to save your change, or click CancelChanges to undo it.

Setup > Forwarding

The Forwarding screen allows you to set up port rangeorwarding and port triggering applications. Port rangeorwarding can be used to set up public services or other

specialized Internet applications on your network, whileport triggering can be used to set up triggered ranges andorwarded ranges or Internet applications.

Setup > Forwarding

Forwarding

Port Range ForwardingPort orwarding can be used to set up public services onyour network. When users rom the Internet make certainrequests on your network, the Router can orward thoserequests to computers equipped to handle the requests.I, or example, you set the port number 80 (HTTP) to beorwarded to IP address 192.168.1.2, then all HTTP requestsrom outside users will be orwarded to 192.168.1.2.

NOTE: You must disable the Routers DHCPunction to use port orwarding.

You may use this unction to establish a web server or FTPserver via an IP gateway. Make sure that you enter a validIP address. (You may need to establish a static IP addressin order to properly run an Internet server.) For addedsecurity, Internet users will be able to communicate withthe server, but they will not actually be connected. Thepackets will simply be orwarded through the Router.

Service Select the Service you want.

IP Address Enter the IP address o the server that youwant the Internet users to access.


23/112


24/112



Setup > UPnP

UPnP

UPnP Function Select Yes to enable the UPnP unction.Otherwise, keep the deault, No.


Name or IP Address Enter the name or IP address o theserver that you want the Internet users to access.

Enable Select Enable to enable this UPnP entry.

I the Service you need is not listed in the menu, clickService Management to add the new service. The ServiceManagement screen appears.

Service Management

Service Name Enter a name.

Protocol Select the protocol it uses.

External Port Enter the external port number.

Internal Port Enter the internal port number.

ClickAdd to List. ClickSave Settings to save your changes,or clickCancel Changes to undo them. ClickExit to returnto the UPnPscreen.

I you want to modiy a service you have created, select itand clickUpdate this service. Make changes. ClickSave

Settings to save your changes, or clickCancel Changesto undo them. ClickExit to return to the UPnPscreen.

I you want to delete a service you have created, select itand click Delete selected service. Click Save Settings

to save your changes, or click Cancel Changes to undothem. ClickExit to return to the UPnPscreen.

On the UPnP screen, click Add to List, and conigure asmany entries as you would like, up to a maximum o 30.To delete an entry, select it and click Delete selectedapplication.

ClickShow Tables to see the details o your entries. TheUPnP Forwarding Table List appears.

UPnP Forwarding Table List

ClickReresh to update the on-screen inormation. ClickClose to exit this screen and return to the UPnPscreen.

On the UPnP screen, click Save Settings to save yourchanges, or clickCancel Changes to undo them.

Setup > One-to-One NAT

One-to-One NAT (Network Address Translation) createsa relationship that maps valid external IP addresses tointernal IP addresses hidden by NAT. A device with an

internal IP address may be accessed at the correspondingexternal valid IP address.

To create this relationship, deine internal and externalIP address ranges o equal length. Once the relationshipis deined, the device with the irst internal IP address isaccessible at the irst IP address in the external IP addressrange, and so orth.

For example, you have a Local Area Network (LAN) or whichthe ISP has assigned the IP address range o 209.19.28.16to 209.19.28.31, with 209.19.28.16 used as the Wide AreaNetwork (WAN) or NAT public IP address o the Router.The address range o 192.168.168.1 to 192.168.168.255 is

used or the devices on the LAN. With One-to-One NAT,the devices with the internal IP addresses o 192.168.168.2to 192.168.168.15 may be accessed at the correspondingexternal IP addresses.

NOTE: The Routers WAN IP address should notbe included in the range you speciy.


25/112



Setup > One-to-One NAT

One-to-One NAT

One-to-One NAT Select Enable to use the One-to-One

NAT unction.Add Range

Private Range Begin Enter the starting IP address o theinternal IP address range. This is the IP address o the irstdevice that can be accessed rom the Internet.

Public Range Begin Enter the starting IP address o thepublic IP address range. This IP address is provided by theISP. (Do not include the Routers WAN IP Address.)

Range Length Enter the number o IP addresses in therange. The range length cannot exceed the number ovalid IP addresses. To map a single address, enter 1.

Click Add to List, and conigure as many entries as youwould like, up to a maximum o ten. To delete an entry,select it and clickDelete selected range.

NOTE: One-to-One NAT aects how the irewallunctions work. Access to LAN devices romthe Internet is allowed unless additional Denyaccess rules are conigured on the Firewall >Access Rulesscreen.


Setup > MAC Clone

Some ISPs require that you register a MAC address, whichis a 12-digit code assigned to a unique piece o hardwareor identiication. The MAC Clone eature clones yournetwork adapters MAC address onto the Router, so youdont have to call your ISP to change the registered MACaddress to the Routers MAC address.

Setup > MAC Clone

MAC Clone

The MAC Clone table displays the number o WAN portsand MAC addresses in the MAC Address column. ClickEditin the Conig. column to change the MAC Clone setting o

the selected WAN port.

Edit MAC Clone

Ater you clicked Edit, conigure the MAC Clone settingsor the selected WAN port.

Setup > MAC Clone > Edit MAC Clone


Enable/Disable Select the status o the MAC Cloneeature.

User Deined WAN MAC Address To manually clone aMAC address, select User Deined WAN MAC Address,and then enter the 12 digits o your adapters MACaddress.

MAC Address rom this PC To clone the MAC addresso the computer you are currently using to conigure theRouter, select MAC Address rom this PC.

ClickSave Settings to save your changes, or clickCancelChanges to undo them. ClickBackto return to the MACClone screen without saving any changes.


26/112


27/112



Status The status o the DDNS unction is displayed. Ithe status inormation indicates an error, make sure youhave correctly entered the inormation or your accountwith your DDNS service.

ClickSave Settings to save your changes, or clickCancelChanges to undo them. ClickBackto return to the DDNSscreen without saving any changes.

Oray.net PeanutHull DDNS

Setup > DDNS > Oray.net PeanutHull DDNS

User name Enter your PeanutHull account inormation.

Password Enter your PeanutHull account inormation.

Host Name Enter your host name in the three Host Nameields. For example, i your host name were myhouse.oray.net, then myhouse would go into the irst ield, oraywould go into the second ield, and net would go into thelast ield.

ClickSave Settings, and the status o the DDNS unctionwill be updated.

Internet IP Address The Routers current Internet IPaddress is displayed. Because it is dynamic, this willchange.

Status The status o the DDNS unction is displayed. Ithe status inormation indicates an error, make sure youhave correctly entered the inormation or your accountwith your DDNS service.

ClickSave Settings to save your changes, or clickCancelChanges to undo them. ClickBackto return to the DDNSscreen without saving any changes.

Setup > Advanced Routing

The Advanced Routing screen allows you to conigure thedynamic and static routing settings.

Setup > Advanced Routing

Advanced Routing

Dynamic Routing

The Routers dynamic routing eature can be used, sothe Router will automatically adjust to physical changesin the networks layout. Using the dynamic RIP protocol,the Router calculates the most eicient route or thenetworks data packets to travel between the source andthe destination, based upon the shortest paths. The RIPprotocol regularly broadcasts routing inormation to

other routers on the network. It determines the route thatthe network packets take based on the ewest number ohops between the source and the destination.

Working Mode Select Gateway mode i the Routeris hosting your networks connection to the Internet.Select Router mode i the Router exists on a networkwith other routers, including a separate network gatewaythat handles the Internet connection. In Router mode,any computer connected to the Router will not be ableto connect to the Internet unless you have another routerunction as the gateway.

RIP (Routing Inormation Protocol) To use dynamic

routing or communication o network data, selectEnabled. Otherwise, keep the deault, Disabled.

Receive RIP versions To use dynamic routing orreception o network data, select the protocol you want:None, RIPv1, RIPv2, or Both RIP v1 and v2.

Transmit RIP versions To use dynamic routing ortransmission o network data, select the protocol you want:None, RIPv1, RIPv2 - Broadcast, or RIPv2- Multicast.


28/112



Static Routing

I the Router is connected to more than one network orthere are multiple routers installed on your network, itmay be necessary to set up static routes. The static routing

unction determines the path that data ollows over yournetwork beore and ater it passes through the Router. Youcan use static routing to allow dierent IP domain users toaccess the Internet through the Router.

Static routing is a powerul eature that should be usedby advanced users only. In many cases, it is better touse dynamic routing because it enables the Router toautomatically adjust to physical changes in the networkslayout.

NOTE: Static routing is an advanced eature.Create these routes with care.

To create a static route entry, enter the ollowinginormation:

Destination IP Enter the network address o the remoteLAN segment. For a standard Class C IP domain, thenetwork address is the irst three ields o the DestinationLAN IP, while the last ield should be 0.

Subnet Mask Enter the subnet mask used on thedestination LAN IP domain. For Class C IP domains, thesubnet mask is 255.255.255.0.

Deault Gateway Enter the IP address o the router o the

network, or which this static route is created. For example,i this network is connected to the local routers LAN portthrough another router, use the WAN IP address o thatrouter.

Hop Count Enter the appropriate value (maximum is 15).This indicates the number o nodes that a data packetpasses through beore reaching its destination. A node isany device on the network, such as a computer or router.

Interace Select the appropriate interace. The Interacetells you whether your network is on the LAN or WAN.I the gateway router is on a LAN port, then select LAN.I you are connecting to another network through the

Internet, select the appropriate WAN port option.Click Add to List, and conigure as many entries as youwould like, up to a maximum o 30. To delete an entry,select it and clickDelete selected IP.

Click Show Routing Table to see the details o yourentries.

Routing Table Entry List

ClickReresh to update the on-screen inormation. ClickClose to exit this screen and return to the AdvancedRouting screen.

On the Advanced Routing screen, click Save Settingsto save your changes, or click Cancel Changes to undothem.

DHCP > Setup

The Router can be used as a DHCP (Dynamic HostConiguration Protocol) server on your network. A DHCP

server automatically assigns available IP addresses tocomputers on your network. I you choose to enable theDHCP server option, all o the computers on your LANmust be set to obtain an IP address automatically rom aDHCP server. (By deault, Windows computers are set toobtain an IP automatically.)

I the Routers DHCP server unction is disabled, do one othe ollowing:

Conigure the IP address, subnet mask, and DNSsettings o every computer on your network. (Makesure you do not assign the same IP address to dierentcomputers.)

Set up a stand-alone DHCP server with the Router asthe deault gateway.


29/112



DHCP > Setup

Setup

Enable DHCP Server To use the Router as your networksDHCP server, select Enable DHCP Server. I you alreadyhave a DHCP server on your network, remove the check

mark. Then conigure the Dynamic IP settings.Dynamic IP

Client Lease Time The Client Lease Time is the amounto time a network user will be allowed connection tothe Router with their current dynamic IP address. Enterthe amount o time, in minutes, that the user will beleased this dynamic IP address. The range is 5-43,200minutes. The deault is 1440 minutes.

Dynamic IP Range Start/End Enter a starting IPaddress and ending IP address to create a range oavailable IP addresses. The deault range is 100-149.

(Make sure the Routers LAN IP address is not in thisdynamic IP range.) For example, i the Router uses thedeault LAN IP address, 192.168.1.1, then the startingvalue must be 192.168.1.2 or greater.

Static IP

You can assign a static IP address to a speciic device basedon its MAC address.

Show unknown MAC addresses ClickShow unknownMAC addresses to view all devices IP addresses andcorresponding MAC addresses. The Unknown MACAddresses List appears.

Unknown MAC Addresses List

For each device, you can enter a descriptive name in theName ield. To add an IP address and MAC address set tothe Static IP list, select Enable, and then clickApply. Toadd all IP addresses and MAC addresses to the Static IP list,clickSelect All.

To update the on-screen inormation, clickReresh. To exitthis screen and return to the Setup screen, clickClose.

Static IP Address Enter the static IP address. You canenter 0.0.0.0 i you want the Router to assign a static IPaddress to the device.

MAC Address Enter the MAC address o the device.Name Enter a descriptive name or the device.

Enable Select Enable to assign the static IP address tothis device.

Click Add to List, and conigure as many entries as youwould like, up to a maximum o 100. To delete an entry,select it and clickDelete selected Entry.

Block MAC address on the list with wrong IP address Toblock traic rom devices with MAC addresses on the StaticIP list but using the wrong IP addresses, select this option.It prevents users rom changing device IP addresses

without your permission.Block MAC address not on the list To block traic romdevices using dynamic IP addresses, select this option. Itblocks all devices with MAC addresses not listed on theStatic IP list.

DNS

DNS Server 1-2 You can assign DNS server(s) to the DHCPclients so the Router will use the DNS server(s) or asteraccess to unctioning DNS server(s). Enter the IP addresso at least one DNS server.

WINSWINS Server Windows Internet Naming Service (WINS)is a service that resolves NetBIOS names to IP addresses.WINS is assigned i the computer (DHCP client) requestsone. I you do not know the IP address o the WINS server,keep the deault, 0.0.0.0.


30/112



NOTE: To support NetBIOS or DHCPclients, the Router uses two methods.

First, when the DHCP clients receive dynamicIP addresses rom the Router, it automaticallyincludes the inormation o the WINS server tosupport NetBIOS. Second, i a user sets up a staticIP address, then the IP address, subnet mask,deault gateway, and DNS server settings mustbe conigured on the Internet Protocol (TCP/IP)screen o the Windows operating system. Thenthe WINS IP address must be conigured on theadvanced TCP/IP screen. (For more inormation,reer to Windows Help.)


DHCP > Status

On the Status screen, view the status inormation or theDHCP server and its clients.

DHCP > Status

Status

For the DHCP server, the ollowing inormation is shown:

DHCP Server This is the IP address o the DHCP server.

Dynamic IP Used It shows the number o dynamic IPaddresses used.

Static IP Used It shows the number o static IP addressesused.

DHCP Available This indicates the number o dynamic IPaddresses available.

Total It shows the total number o dynamic IP addressesthat can be assigned by the DHCP server.

Client Table

For all network clients using the DHCP server, the ClientTable shows the current DHCP Client inormation:

Client Host Name This is the name assigned to a clienthost.

IP Address It is the dynamic IP address assigned to aclient.

MAC Address This indicates the MAC address o a client.Leased Time It displays the amount o time a networkuser will be allowed connection to the Router with theircurrent dynamic IP address.

Delete Click the Trash Can icon to delete a DHCP client,and the client hosts IP address will be released.

ClickReresh to update the on-screen inormation.

System Management > Multi-WAN

For the Load Balance eature, you have a choice oIntelligent Balancer (Auto Mode) and IP Group (By Users),except or WAN1. The Router reserves at least one WANport or non-IP Group users, so WAN1 will always be set toIntelligent Balancer (Auto Mode).

System Management > Multi-WAN > Intelligent Balancer (Auto Mode)

System Management > Multi-WAN > IP Group (By Users)

Load Balance

Mode

Intelligent Balancer (Auto Mode) Select this option iyou want all WAN ports to be in Auto Mode. The Routerwill automatically compute the maximum bandwidth o


31/112


32/112



Service Management

Service Name Enter a name. For IP Binding only, selectAll.


Port Range Enter its range.

ClickAdd to List. ClickSave Settings to save your changes,or clickCancel Changes to undo them. ClickExit to returnto the Multi-WANscreen.

I you want to modiy a service you have created, select itand clickUpdate this service. Make changes. ClickSaveSettings to save your changes, or clickCancel Changes toundo them. ClickExit to return to the Multi-WANscreen.

I you want to delete a service you have created, select it

and click Delete selected service. Click Save Settingsto save your changes, or click Cancel Changes to undothem. ClickExit to return to the Multi-WANscreen.

Source IP Enter the source IP address or range. I youneed Service Binding only, then you can keep the deault,which is 0.

Destination IP Enter the destination IP address or range.I you need Service Binding only, then you can keep thedeault, which is 0.

Enable Select Enable to use this Protocol Binding rule.

Click Add to List, and conigure as many rules as you

would like, up to a maximum o 100. To delete a rule, selectit and clickDelete selected application.


On the Edit Load Balance screen, click Save Settings tosave your changes, or clickCancel Changes to undo them.Click Back to return to the Multi-WAN screen withoutsaving any changes.

Edit Load Balance (IP Group)

Ater you clicked Edit, conigure the Load Balance settingsor the selected WAN port.

System Management > Multi-WAN > IP Group (By Users) > Edit LoadBalance

Bandwidth


The Max. Bandwidth provided by ISP

Upstream Enter the maximum upstream bandwidthprovided by your ISP. The deault is 512 kbit/sec.

Downstream Enter the maximum downstreambandwidth provided by your ISP. The deault is512 kbit/sec.

Network Service Detection

Network Service Detection can test a WAN ports networkconnectivity by pinging the Deault Gateway or a speciicIP address. This tool can detect the network connection

status o the ISP i you have set up the DNS server in theSetup > Network screen. I you did not set up the DNSserver, the checkbox will be grayed out, and then youcannot use the DNS lookup tool.

Network Service Detection Network Service Detectionhelps manage your connection and can report when yourconnection experiences problems. To use this service,select this option.

Retry Count Enter the number o times the Router willtry to reconnect i the connection ails.


33/112



Retry Timeout Enter the number o times the Router willtry to make a connection to your ISP beore it times out.

When Fail Should the connection be lost, set the Routerto perorm one o the ollowing actions, Remove the

Connection or Generate the Error Condition in theSystem Log.

Remove the Connection Failover will occur; thebackup will be used. When the WAN ports connectivityis restored, its traic will also be restored.

Generate the Error Condition in the SystemLog Failover will not occur; only an error conditionwill be logged.

Deault Gateway Select this option to ping the DeaultGateway.

ISP Host Select this option to ping the ISP Host. Then

enter the IP address.Remote Host Select this option to ping the Remote Host.Then enter the IP address.

DNS Lookup Host Select this option to ping the DNSLookup Host. Then enter the IP address.

IP Group

The IP Group settings allow you to speciy the IP Group,as well as the Service or Destination IP going through theselected WAN port.

These settings are not available or WAN1, which always

uses Intelligent Balancer (Auto Mode).Service Select the Service you want.


Service Management

Service Name Enter a name. For IP Binding only, selectAll.



ClickAdd to List. ClickSave Settings to save your changes,or clickCancel Changes to undo them. ClickExit to returnto the Multi-WANscreen.

I you want to modiy a service you have created, select itand clickUpdate this service. Make changes. ClickSaveSettings to save your changes, or clickCancel Changes toundo them. ClickExit to return to the Multi-WANscreen.

I you want to delete a service you have created, select itand click Delete selected service. Click Save Settingsto save your changes, or click Cancel Changes to undothem. ClickExit to return to the Multi-WANscreen.

Source IP Enter the source IP address or range. I you onlyneed to speciy the Service, then keep the deault, whichis 0 to 0.

Destination IP Enter the destination IP address or range.I you only need to speciy the Service, then keep thedeault, which is a series o zeroes.

Enable Select Enable to use this Protocol Binding rule.

Click Add to List, and conigure as many rules as youwould like, up to a maximum o 100. To delete a rule, selectit and clickDelete selected application.


On the Edit Load Balance screen, click Save Settings tosave your changes, or clickCancel Changes to undo them.

Click Back to return to the Multi-WAN screen withoutsaving any changes.

System Management > Bandwidth

Management

Quality o Service (QoS) eatures let you control howthe Router manages network traic. With BandwidthManagement (Layer 3), the Router can provide betterservice to selected types o network traic. There are twotypes o unctionality available, and only one type canwork at one time. Rate Control unctionality is or minimum(guaranteed) bandwidth and maximum bandwidth byservice or IP address, while Priority unctionality is orservices. Both types can control inbound or outboundtraic.


34/112



System Management > Bandwidth Management > Rate Control

Bandwidth Management

The Maximum Bandwidth provided by ISP

Upstream Enter the maximum upstream bandwidthprovided by your ISP. The deault is 512 kbit/sec.

Downstream Enter the maximum downstreambandwidth provided by your ISP. The deault is512 kbit/sec.

Bandwidth Management Type

Type Select the type o unctionality you want to use,Rate Control or Priority. Rate Control unctionality isor minimum (guaranteed) bandwidth and maximum(limited) bandwidth by service or IP address, whilePriority unctionality is or services. Then proceed to theinstructions or the type you selected.

Rate Control

Interace Select the appropriate WAN interace.

Service Select the Service you want.I the Service you need is not listed in the menu, clickService Management to add the new service. The ServiceManagement screen appears.

Service Management


Protocol Select the protocol it uses.Port Range Enter its range.

ClickAdd to List. ClickSave Settings to save your changes,or clickCancel Changes to undo them. ClickExit to returnto the Bandwidth Managementscreen.

I you want to modiy a service you have created, select itand clickUpdate this service. Make changes. ClickSaveSettings to save your changes, or clickCancel Changesto undo them. Click Exit to return to the BandwidthManagementscreen.

I you want to delete a service you have created, select it

and click Delete selected service. Click Save Settingsto save your changes, or click Cancel Changes to undothem. ClickExit to return to the Bandwidth Managementscreen.

IP Enter the IP address or range you need to control. Toinclude all internal IP addresses, keep the deault, 0.

Direction Select Upstream or outbound traic, or selectDownstream or inbound traic.

Min. Rate Enter the minimum rate or the guaranteedbandwidth.

Max. Rate Enter the maximum rate or the maximum

bandwidth.Enable Select Enable to use this Rate Control rule.

Click Add to List, and conigure as many rules as youwould like, up to a maximum o 100. To delete a rule, selectit and clickDelete selected application.

Click Summary to see a summary o the Rate Controlrules.


35/112



Summary (Rate Control Selected)

To change a rule, click Edit. To update the list, clickReresh. To return to the Bandwidth Managementscreen,clickClose.

On the Bandwidth Managementscreen, clickSave Settingsto save your changes, or click Cancel Changes to undothem.

Priority

System Management > Bandwidth Management > Priority

Interace Select the appropriate WAN interace.



Service Management




ClickAdd to List. ClickSave Settings to save your changes,or clickCancel Changes to undo them. ClickExit to returnto the Bandwidth Managementscreen.

I you want to modiy a service you have created, select itand clickUpdate this service. Make changes. ClickSaveSettings to save your changes, or clickCancel Changesto undo them. Click Exit to return to the BandwidthManagementscreen.

I you want to delete a service you have created, select itand click Delete selected service. Click Save Settingsto save your changes, or click Cancel Changes to undothem. ClickExit to return to the Bandwidth Management

screen.Direction Select Upstream or outbound traic, or selectDownstream or inbound traic.

Priority Select High, Middle, or Low. High priorityservices will share 30% o the total system bandwidth.Middle priority services will share 60% o the total systembandwidth. Low priority services will share 10% o thetotal bandwidth. The deault is Middle.

Enable Select Enable to use this Priority rule.

Click Add to List, and conigure as many rules as youwould like, up to a maximum o 50. To delete a rule, select

it and clickDelete selected application.ClickSummary to see a summary o the Priority rules. TheSummaryscreen appears.

Summary (Priority Selected)

To change a rule, click Edit. To update the list, clickReresh. To return to the Bandwidth Managementscreen,clickClose.

On the Bandwidth Managementscreen, clickSave Settingsto save your changes, or click Cancel Changes to undothem.

System Management > SNMP

SNMP, or Simple Network Management Protocol, is anetwork protocol that provides

router cisco rv016

Documents