Cisco 4-Port SSL/IPSec VPN Router RVL200 User Manual

USER GUIDEBUSINESS SERIES4-Port SSL/IPSec VPN RouterModel: RVL200

2Introduction4-Port SSL/IPSec VPN RouterChapter 1InternetCentral OfficeHomeVPN RouterVPN RouterVPN Router to VPN RouterComputer (using SSL VPN client

92Configuration of Multiple Subnets4-Port SSL/IPSec VPN RouterAppendix KSetup > NetworkIn the LAN Setting section, select Multiple Subnet.Click Add

93Configuration of Multiple Subnets4-Port SSL/IPSec VPN RouterAppendix KEnter 192.168.1.2 in the Default Gateway field.Enter 1 in the Hop Count field.

94Multiple VLANs with Computers4-Port SSL/IPSec VPN RouterAppendix LPort 4: Trunking PortRVL200192.168.4.xDefault VLAN1VLAN2 VLAN3 VLAN4192.168.3.x192

95Multiple VLANs with Computers4-Port SSL/IPSec VPN RouterAppendix LSelect Enable VLAN.Enter 2 in the VLAN ID field.To create VLAN2, click Add VLAN.En

96Multiple VLANs and Subnets4-Port SSL/IPSec VPN RouterAppendix MAppendix M: Multiple VLANs and SubnetsOverviewThe 4-Port SSL/IPSec VPN Router (model

97Multiple VLANs and Subnets4-Port SSL/IPSec VPN RouterAppendix MSubnet Mask Select 255.255.255.0.Range Start Enter 100.Range End Enter 149.For VLA

98Access of Multiple VLANs over a SSL VPN Tunnel4-Port SSL/IPSec VPN RouterAppendix NAppendix N: Access of Multiple VLANs over a SSL VPN TunnelOvervi

99Firmware Upgrade4-Port SSL/IPSec VPN RouterAppendix OAppendix O: Firmware UpgradeOverviewThis appendix explains how to upgrade the firmware of the

100Firmware Upgrade4-Port SSL/IPSec VPN RouterAppendix OWhen you or another user logs out, a Warning screen will appear. It will ask you to confirm th

101Battery Replacement4-Port SSL/IPSec VPN RouterAppendix PAppendix P: Battery ReplacementOverviewThe Router has a lithium battery, type CR203

3Product Overview4-Port SSL/IPSec VPN RouterChapter 2Chapter 2: Product OverviewFront PanelPower (Green) The Power LED lights up green and stays on

102Specifications4-Port SSL/IPSec VPN RouterAppendix QAppendix Q: SpecificationsSpecicationsModel RVL200Standards IEEE 802.3, IEEE 802.3u, IEEE 80

1034-Port SSL/IPSec VPN RouterAppendix RWarranty InformationAppendix R: Warranty InformationLimited WarrantyLinksys warrants to You that, for a

104Regulatory Information4-Port SSL/IPSec VPN RouterAppendix SAppendix S: Regulatory InformationFCC StatementThis product has been tested and c

105Regulatory Information4-Port SSL/IPSec VPN RouterAppendix SUser Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Elect

106Regulatory Information4-Port SSL/IPSec VPN RouterAppendix SEesti (Estonian) - Keskkonnaalane informatsioon Euroopa Liidus asuvatele klientidele

107Regulatory Information4-Port SSL/IPSec VPN RouterAppendix SLietuvškai (Lithuanian) - Aplinkosaugos informacija, skirta Europos Sąjungos vartoto

108Regulatory Information4-Port SSL/IPSec VPN RouterAppendix SPortuguês (Portuguese) - Informação ambiental para clientes da União EuropeiaA Directiv

109Contact Information4-Port SSL/IPSec VPN RouterAppendix TAppendix T: Contact InformationLinksys Contact InformationWebsite http://www.linksys.comFT

4Installation4-Port SSL/IPSec VPN RouterChapter 3Chapter 3: Installation Physical InstallationThere are three ways to place the Router. The first way

5Installation4-Port SSL/IPSec VPN RouterChapter 3Cable ConnectionTo connect network devices to the Router, follow these instructions:Before yo

Chapter 4Advanced Configuration64-Port SSL/IPSec VPN RouterChapter 4: Advanced ConfigurationOverviewFor your convenience, use the Router’s web-based

Chapter 4Advanced Configuration74-Port SSL/IPSec VPN RouterSelect Allow cookies.Select Enable JavaScript.Click Advanced.Select Enable ActiveX.Netscape

Chapter 4Advanced Configuration84-Port SSL/IPSec VPN RouterClick to Install the Web Cache CleanerOn the Security Warning screen, click Yes.Click Yes t

Chapter 4Advanced Configuration94-Port SSL/IPSec VPN RouterSystem Up Time This is the length of time in days, hours, and minutes that the Router has

Chapter 4Advanced Configuration104-Port SSL/IPSec VPN RouterIf you have not set up the e-mail server on the Log tab, the message, “E-mail cannot be

Chapter 4Advanced Configuration114-Port SSL/IPSec VPN Routersubscribers use this connection type.) Your ISP assigns these values.Obtain an IP A

iiAbout This Guide4-Port SSL/IPSec VPN RouterAbout This GuideIcon DescriptionsWhile reading through the User Guide you may see various icons t

Chapter 4Advanced Configuration124-Port SSL/IPSec VPN RouterKeep Alive: Interval If you select the Keep Alive option, the Router will send keep-a

Chapter 4Advanced Configuration134-Port SSL/IPSec VPN RouterSetup > PasswordPasswordThe User Name is admin; it cannot be changed.Old Password Ent

Chapter 4Advanced Configuration144-Port SSL/IPSec VPN RouterClick Save Settings to save your change, or click Cancel Changes to undo it.Setup Tab >

Chapter 4Advanced Configuration154-Port SSL/IPSec VPN RouterSome Internet applications or games use alternate ports to communicate between the server

Chapter 4Advanced Configuration164-Port SSL/IPSec VPN RouterUPnP Forwarding Table ListClick Refresh to update the on-screen information. Click Close t

Chapter 4Advanced Configuration174-Port SSL/IPSec VPN RouterSetup > MAC CloneMAC CloneUser Defined WAN MAC Address To manually clone a MAC ad

Chapter 4Advanced Configuration184-Port SSL/IPSec VPN Routerother routers on the network. It determines the route that the network packets take based

Chapter 4Advanced Configuration194-Port SSL/IPSec VPN RouterDHCP > SetupSetupEnable DHCP Server To use the Router as your network’s DHCP server, s

Chapter 4Advanced Configuration204-Port SSL/IPSec VPN RouterNOTE: To support NetBIOS for DHCP and Virtual Passage clients, the Router uses two methods

Chapter 4Advanced Configuration214-Port SSL/IPSec VPN Routerto configure the Device IP Address and Subnet Mask settings.)Subnet1-4 The subnet

iTable of Contents4-Port SSL/IPSec VPN RouterChapter 1: Introduction 1Introduction to the Router. . . . . . . . . . . . . . . . . .

Chapter 4Advanced Configuration224-Port SSL/IPSec VPN RouterSystem Management > Diagnostic > PingPing host or IP address Enter the IP address o

Chapter 4Advanced Configuration234-Port SSL/IPSec VPN Routerfrom the Restart screen, then the Router will send out your log file before it is reset.Sy

Chapter 4Advanced Configuration244-Port SSL/IPSec VPN RouterSystem Management > IGMP SnoopingEnable IGMP Snooping Select this option to use IGMP S

Chapter 4Advanced Configuration254-Port SSL/IPSec VPN RouterPort Receive Packet Count The number of packets received is displayed.Port Receive

Chapter 4Advanced Configuration264-Port SSL/IPSec VPN RouterPort Management > VLAN MembershipVLAN MembershipVLAN ID Select the VLAN ID number that

Chapter 4Advanced Configuration274-Port SSL/IPSec VPN RouterRate ControlService Select the Service you want.If the Service you need is not lis

Chapter 4Advanced Configuration284-Port SSL/IPSec VPN RouterService ManagementService Name Enter a name.Protocol Select the protocol it uses. Port R

Chapter 4Advanced Configuration294-Port SSL/IPSec VPN RouterNoneIf the None option is selected, then the Router prioritizes each packet based on t

Chapter 4Advanced Configuration304-Port SSL/IPSec VPN Routerbased QoS in Layer 3, the Router can use the priority bits in the Type of Service (To

Chapter 4Advanced Configuration314-Port SSL/IPSec VPN RouterNOTE: SSL VPN has higher priority than Port Forwarding when HTTPS is enabled.HTTP

iiTable of Contents4-Port SSL/IPSec VPN RouterSetup > One-to-One NAT. . . . . . . . . . . . . . . . . . . . . . . . . . .

Chapter 4Advanced Configuration324-Port SSL/IPSec VPN RouterTime The time interval to which the access rule applies is displayed.Day The days to

Chapter 4Advanced Configuration334-Port SSL/IPSec VPN RouterSource Select the Source IP address(es) for the access rule. If it can be any IP a

Chapter 4Advanced Configuration344-Port SSL/IPSec VPN RouterGroup Name Enter a name for the new group.Show unknown IP/MAC addresses If you do not kn

Chapter 4Advanced Configuration354-Port SSL/IPSec VPN RouterSummaryTunnel Used The number of VPN tunnels being used is displayed.Tunnel Available T

Chapter 4Advanced Configuration364-Port SSL/IPSec VPN RouterFQDN) Authentication, Dynamic IP + Domain Name(FQDN) Authentication, or Dynamic I

Chapter 4Advanced Configuration374-Port SSL/IPSec VPN RouterNOTE: The Remote Security Gateway Type you select should match the Local Security Gateway

Chapter 4Advanced Configuration384-Port SSL/IPSec VPN RouterSubnetThe default is Subnet. All computers on the remote subnet will be able to access the

Chapter 4Advanced Configuration394-Port SSL/IPSec VPN RouterManualIncoming and Outgoing SPI (Security Parameter Index) SPI is carried in the

Chapter 4Advanced Configuration404-Port SSL/IPSec VPN Routerthe Router will disconnect the tunnel so the connection can be re-established. Specify

Chapter 4Advanced Configuration414-Port SSL/IPSec VPN RouterGenerate New Certificate Click this option to generate a new certificate. It will re

iiiTable of Contents4-Port SSL/IPSec VPN RouterQoS > QoS Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chapter 4Advanced Configuration424-Port SSL/IPSec VPN RouterNOTE: If your users are unable to connect via Active Directory, verify the following:The

Chapter 4Advanced Configuration434-Port SSL/IPSec VPN RouterSSL VPN > Virtual PassageVirtual PassageClient Address RangeDefine the range of IP

Chapter 4Advanced Configuration444-Port SSL/IPSec VPN RouterSNMP > ViewsConfigure this screen to allow or deny access to SNMP features.SNM

Chapter 4Advanced Configuration454-Port SSL/IPSec VPN RouterSecurity Model Select the version of SNMP the group uses: SNMPv1, SNMPv2, or SNMPv

Chapter 4Advanced Configuration464-Port SSL/IPSec VPN RouterSelect how you want to define the access control of this community.BasicAccess Mode This

Chapter 4Advanced Configuration474-Port SSL/IPSec VPN RouterSNMPv3Select this option if you want to use SNMPv3. Then configure the following:

Chapter 4Advanced Configuration484-Port SSL/IPSec VPN Routere-mailed at the same time. The default is Severity0_ Emergency.Click E-mail Log No

Chapter 4Advanced Configuration494-Port SSL/IPSec VPN RouterLog > System StatisticsClick Refresh to update the statistics.WizardUse this tab to acc

Chapter 4Advanced Configuration504-Port SSL/IPSec VPN RouterDepending on which connection type you have selected, the appropriate screen wil

Chapter 4Advanced Configuration514-Port SSL/IPSec VPN Routeryour Internet access disconnects. The default is 5 minutes.If you select the Keep a

ivTable of Contents4-Port SSL/IPSec VPN RouterWizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chapter 4Advanced Configuration524-Port SSL/IPSec VPN RouterSelect the service you want from the Service pull-down menu. Click Next to continue. Click

Chapter 4Advanced Configuration534-Port SSL/IPSec VPN RouterDecide when you want this Access Rule to be enforced. Select Always if you want the Access

Chapter 4Advanced Configuration544-Port SSL/IPSec VPN Routersession. (If you end the session, you will need to re-enter your User Name and Password to

55Troubleshooting4-Port SSL/IPSec VPN RouterAppendix AAppendix A: TroubleshootingThe rmware upgrade has failed.A firmware upgrade takes approximatel

56Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BAppendix B: Virtual Passage SSL VPN ClientOverviewThe Router’s SSL VPN Portal in

57Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BDeselect (remove the checkmark from) Override automatic cookie handling.Inte

58Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BLogin for the SSL VPN Portal (Windows OS)Follow these instructions to log in:Ente

59Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BOn the Security Warning screen, click Yes.Click Yes to InstallA second Security W

60Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BWindows Vista UsageIf you use Windows Vista to establish an SSL VPN conn

61Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BA screen may appear indicating that the certificate cannot be verified.

vTable of Contents4-Port SSL/IPSec VPN RouterAppendix H: Deployment in an Existing Network 80Overview. . . . . . . . . . . . . . . .

62Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BBefore You Begin (Linux OS)Make sure you have administrative rights on you

63Virtual Passage SSL VPN Client4-Port SSL/IPSec VPN RouterAppendix BOn the Warning screen, click Run.Click RunAfter the software is installed, you wi

64Bandwidth Management4-Port SSL/IPSec VPN RouterAppendix CAppendix C: Bandwidth ManagementOverviewThis appendix explains how to ensure Quality of Se

65Bandwidth Management4-Port SSL/IPSec VPN RouterAppendix CCreation of New Bandwidth Management RulesCreate four new rules: Vonage VoIP (Upstream),

66Active Directory Server4-Port SSL/IPSec VPN RouterAppendix DAppendix D: Active Directory ServerNOTE: Windows Server 2000 and 2003 support the Activ

67Active Directory Server4-Port SSL/IPSec VPN RouterAppendix DClick Next.Welcome to the Active Directory Installation WizardClick Next.Operating Syste

68Active Directory Server4-Port SSL/IPSec VPN RouterAppendix DEnter a domain name, and then click Next.New Domain NameEnter a domain NetBIOS name, and

69Active Directory Server4-Port SSL/IPSec VPN RouterAppendix DSelect I will correct the problem later by configuring DNS manually (Advanced), and then

70Active Directory Server4-Port SSL/IPSec VPN RouterAppendix DTroubleshootingIf your users are unable to connect via Active Directory, check the foll

71User for the Active Directory Server4-Port SSL/IPSec VPN RouterAppendix EAppendix E: User for the Active Directory ServerNOTE: Windows Server 2000

viTable of Contents4-Port SSL/IPSec VPN RouterAppendix M: Multiple VLANs and Subnets 96Overview. . . . . . . . . . . . . . . . . .

72User for the Active Directory Server4-Port SSL/IPSec VPN RouterAppendix EClick Finish to create the new user.New Object > User > Summary9.

73Internet Authentication Service (IAS) Server4-Port SSL/IPSec VPN RouterAppendix FAppendix F: Internet Authentication Service (IAS) ServerNOTE: Wind

74Internet Authentication Service (IAS) Server4-Port SSL/IPSec VPN RouterAppendix FClick Next.Welcome to the New Remote Access Policy WizardSelect Se

75Internet Authentication Service (IAS) Server4-Port SSL/IPSec VPN RouterAppendix FMake sure a policy has been added, and then click Next.Pol

76Internet Authentication Service (IAS) Server4-Port SSL/IPSec VPN RouterAppendix FOn the Encryption tab, select Basic encryption, Strong encry

77Internet Authentication Service (IAS) Server4-Port SSL/IPSec VPN RouterAppendix FClick Next.Welcome to the New Connection Request Policy WizardSelec

78Internet Authentication Service (IAS) Server4-Port SSL/IPSec VPN RouterAppendix FMake sure a policy has been added, and then click Next.Pol

79Lightweight Directory Access Protocol (LDAP) Server4-Port SSL/IPSec VPN RouterAppendix GAppendix G: Lightweight Directory Access Protocol (LDAP) Se

80Deployment in an Existing Network4-Port SSL/IPSec VPN RouterAppendix HAppendix H: Deployment in an Existing NetworkOverviewIf you have a current VP

81Deployment in an Existing Network4-Port SSL/IPSec VPN RouterAppendix HWAN-to-LAN ConnectionLANCorporate NetworkBranch OfficeRV082LANWANWAN2WAN1RVL20

1Introduction4-Port SSL/IPSec VPN RouterChapter 1Chapter 1: IntroductionIntroduction to the RouterThank you for choosing the Linksys 4-Port SS

82Gateway-to-Gateway VPN Tunnel4-Port SSL/IPSec VPN RouterAppendix IAppendix I: Gateway-to-Gateway VPN TunnelOverviewThis appendix explains how t

83Gateway-to-Gateway VPN Tunnel4-Port SSL/IPSec VPN RouterAppendix IIn the IPSec Setup section, select the appropriate encryption, authenticati

84Gateway-to-Gateway VPN Tunnel4-Port SSL/IPSec VPN RouterAppendix IConfiguration when the Remote Gateway Uses a Dynamic IP AddressThis example assu

85Gateway-to-Gateway VPN Tunnel4-Port SSL/IPSec VPN RouterAppendix IThe WAN IP address (B.B.B.B) of the RV082 will be automatically detected.

86Gateway-to-Gateway VPN Tunnel4-Port SSL/IPSec VPN RouterAppendix IRVL200 IPSec VPN SettingsFor the Remote Security Gateway Type, select IP by

87IPSec NAT Traversal4-Port SSL/IPSec VPN RouterAppendix JAppendix J: IPSec NAT TraversalOverviewNetwork Address Translation (NAT) traversal is a tec

88IPSec NAT Traversal4-Port SSL/IPSec VPN RouterAppendix JThe WAN IP address of Router A will be automatically detected.For the Local Security Group T

89IPSec NAT Traversal4-Port SSL/IPSec VPN RouterAppendix JConfiguration of the One-to-One NAT RulesThe one-to-one NAT rules must be configured

90IPSec NAT Traversal4-Port SSL/IPSec VPN RouterAppendix JFor the Remote Security Group Type, select Subnet. Enter Router A’s local network setti

91Configuration of Multiple Subnets4-Port SSL/IPSec VPN RouterAppendix KAppendix K: Configuration of Multiple SubnetsOverviewThe 4-Port SSL/IPSec VPN