Chapter 5

Overview
Linksys recommends using the Setup CD-ROM for firsttime installation of the Router. If you do not wish to run the Setup Wizard on the Setup CD-ROM, then follow the steps in this chapter and use the Routers Web-based Utility to configure the Router. For advanced users, you may configure the Routers advanced settings through the Web-based Utility. This chapter will describe each web page in the Utility and each pages key functions. The Utility can be accessed via your web browser through use of a computer connected to the Router. For a basic network setup, most users only have to use the following screens of the Utility:
Basic Setup. On the Basic Setup screen, enter the
Configuring the Wireless-G Router
Advanced Wireless Settings. For advanced users, you
can alter data transmission settings on this screen. (WDS).
WDS. This tab is used for Wireless Distribution System

Firewall

General. On this screen, you can configure a variety of
filters to enhance the security of your network.
Port Forwarding. To set up public services or other
specialized Internet applications on your network, click this tab.
Port Triggering. To set up triggered ranges and
forwarded ranges for Internet applications, click this tab. to the Internet for use of special-purpose services.
DMZ. Click this tab to allow one local user to be exposed Access Restriction. This tab allows you to block or
allow specific kinds of Internet usage and traffic during specific days and times. Filtering policy.
settings provided by your ISP.
URL Filtering. This tab allows you to create an URL
Management. Click the Administration tab and then
the Management tab. The Routers default password is admin. To secure the Router, change the Password from its default.
VPN Client Access. Use this screen to designate VPN
clients and their passwords.
There are seven main tabs: Setup, Wireless, Firewall, VPN, QoS, Administration, and Status. Additional tabs will be available after you click one of the main tabs.

Automatic Configuration - DHCP
By default, the Routers Configuration Type is set to Automatic Configuration - DHCP, and it should be kept only if your ISP supports DHCP or you are connecting through a dynamic IP address.

Static IP

If your connection uses a permanent IP address to connect to the Internet, then select Static IP.
IP Address This is the Routers IP address, when seen from the WAN, or the Internet. Your ISP will provide you with the IP Address you need to specify here. Subnet Mask This is the Routers Subnet Mask, as seen by external users on the Internet (including your ISP). Your ISP will provide you with the Subnet Mask. Default Gateway Your ISP will provide you with the Default Gateway Address, which is the ISP servers IP address. Primary DNS (Required) and Secondary DNS (Optional) Your ISP will provide you with at least one DNS (Domain Name System) Server IP Address. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes.
Point-to-Point Tunneling Protocol (PPTP) is a service that applies to connections in Europe and Israel only.
IP Address This is the Routers IP address, when seen from the WAN, or the Internet. Your ISP will provide you with the IP Address you need to specify here. Subnet Mask This is the Routers Subnet Mask, as seen by external users on the Internet (including your ISP). Your ISP will provide you with the Subnet Mask. Default Gateway Your ISP will provide you with the Default Gateway Address. PPTP Server IP Enter the IP address of the PPTP server.
Some DSL-based ISPs use PPPoE (Point-to-Point Protocol over Ethernet) to establish Internet connections. If you are connected to the Internet through a DSL line, check with your ISP to see if they use PPPoE. If they do, you will have to enable PPPoE.
User Name and Password Enter the User Name and Password provided by your ISP. Connect on Demand: Max Idle Time You can configure the Router to cut the Internet connection after it has been inactive for a specified period of time (Max Idle Time), and then automatically re-establish the connection as soon as you attempt to access the Internet again. To activate Connect on Demand, select the Connect on Demand option and enter in the Max Idle Time field the number of seconds of inactivity that must elapse before your Internet connection is terminated automatically. Keep Alive If you select this option, the Router will periodically check your Internet connection. If you are disconnected, then the Router will automatically reestablish your connection. To use this option, click the radio button next to Keep Alive. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes.

LAN Setup

The LAN Setup section allows you to change the Routers local network settings.

LAN IP

The Routers Local IP Address and Subnet Mask are shown here. In most cases, you can keep the defaults. Local IP Address The default value is 192.168.1.1. Subnet Mask The default value is 255.255.255.0.
Network Address Server Settings (DHCP)
The Router can be used as your networks DHCP (Dynamic Host Configuration Protocol) server, which automatically
assigns an IP address to each PC on your network. Unless you already have one, it is highly recommended that you leave the Router enabled as a DHCP server. Local DHCP Server DHCP is already enabled by factory default. If you already have a DHCP server on your network, set the Routers DHCP option to Disabled. If you disable DHCP, assign a static IP address to the Router. Start IP Address Enter a value for the DHCP server to start with when issuing IP addresses. This value must be 192.168.1. 2 or greater, but smaller than 192.168.1.254, because the default IP address for the Router is 192.168.1.1, and 192.168.1.255 is the broadcast IP address. Number of Address Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. This number cannot be greater than 253. In order to determine the DHCP IP Address range, add the starting IP address (e.g., 100) to the number of DHCP users. IP Address Range The range of DHCP addresses is displayed here. Client Lease Time This is the amount of time a DHCP client can keep the assigned IP address before it sends a renewal request to the DHCP server. The Static IP Table shows the mapping of MAC addresses to IP addresses. To use this feature, click Static IP Table, then enter the Static IP Address and MAC address in the fields, then click Add. To edit an entry, highlight the entry in the table, click Edit, make your changes in the fields, then click Add. To remove an entry, highlight the entry, then click Remove. Manual DNS Setting To enter the DNS IP addresses manually, check the box, then enter up to two IP addresses in the fields provided.
Automatically Select your time zone from the Time Zone drop-down menu. If you want to enable the Auto Daylight Savings feature, click Enabled. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes.

is more difficult for intruders to work their way into your network. Click the checkbox to block anonymous Internet requests. Block Multicast Multicasting allows a transmission to be forwarded automatically to multiple recipients at the same time. When Block Multicast is disabled (multicasting is permitted), the Router allows IP multicast packets to be forwarded to the appropriate computers in the LAN. Click the checkbox to filter out multicasting.

Web Block

Proxy Use of WAN proxy servers may compromise the Routers security. Denying Filter Proxy will disable access to any WAN proxy servers. To enable proxy filtering, click the checkbox next to this option. Java Java is a programming language for websites. If you deny Java applets, you run the risk of not having access to Internet sites created using this programming language. To enable Java applet filtering, click the checkbox next to this option. ActiveX ActiveX is a programming language for websites. If you deny ActiveX, you run the risk of not having access to Internet sites created using this programming language. To enable ActiveX filtering, click the checkbox next to this option. Cookies A cookie is data stored on your PC and used by Internet sites when you interact with them. To enable cookie filtering, click the checkbox next to this option. SIP Application Layer Gateway This option allows VoIP phones to operate behind a NAT router. To enable this feature, select Enable from the drop-down menu. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes. For help information, click More.
The Firewall tab is used to control access to the Internet by users of your internal network.

Firewall > General

The Routers firewall enhances the security of your network. You can implement a Stateful Packet Inspection (SPI) firewall, block anonymous Internet requests, and enable block mechanisms.
Firewall > Port Forwarding
DoS Prevention Denial of Service (DoS) Prevention checks incoming packets before allowing them to enter your network. To use this feature, select Enabled from the drop-down menu. If you do not want DoS Prevention, select Disabled.

Internet Block

Block Anonymous Internet Requests This keeps your network from being pinged or detected and reinforces your network security by hiding your network ports, so it
Wireless-G VPN Router with RangeBooster Firewall > Port Forwarding
The Port Forwarding screen sets up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications. (Specialized Internet applications are any applications that use Internet access to perform functions such as videoconferencing or online gaming. Some Internet applications may not require any forwarding.) When users send this type of request to your network via the Internet, the Router will forward those requests to the appropriate PC. Any PC whose port is being forwarded must have its DHCP client function disabled and must have a new static IP address assigned to it because its IP address may change when using the DHCP function. Application Name Enter the name you wish to give the application. Each name can be up to 12 characters. Port Range Start/End This is the port range. Enter the number that starts the port range under Start and the number that ends the range under End. Protocol Enter the protocol used for this application, either TCP or UDP, or Both. IP Address For each application, enter the IP Address of the PC running the specific application. Enabled Click the Enabled checkbox to enable port forwarding for the relevant application. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes. For help information, click More.

Firewall > URL Filtering
URL filtering is used to block access to specific sites on the Internet.
To create a URL filtering policy: 1. Select a number from the URL Filtering Policy dropdown menu. 2. Enter a Policy Name in the field provided. 3. To enable this policy, select Enabled from the Status menu. 4. Enter the Start IP Address and End IP Address that will be affected by the policy. After making your changes, click Save Settings to apply your changes. 5. In the URL String field, enter the URL of the Internet site that this policy will block access to. 6. Click Save Settings to save the policys settings. To cancel the policys settings, click Cancel Changes. Click Save Settings to save the policy settings you have entered. Click Cancel Changes to cancel any changes you have entered. For help information, click More.
Internet Access Policy Access can be managed by a policy. Use the settings on this screen to establish an access policy (after Save Settings is clicked). Selecting a policy from the drop-down menu will display that policys settings. To delete a policy, select that policys number and click Delete. To view all the policies, click Summary. Status Policies are disabled by default. To enable a policy, select the policy number from the drop-down menu, and click the radio button beside Enable. To create an Internet Access Policy: 1. Select a number from the Internet Access Policy dropdown menu. 2. To enable this policy, click the Enable radio button. 3. Enter a Policy Name in the field provided. 4. Decide which days and what times you want this policy to be enforced. Select the individual days during which the policy will be in effect. Then enter a range of hours and minutes during which the policy will be in effect, or select 24 Hours. 5. You can block access to various services accessed over the Internet, such as FTP or telnet, by specifying the TCP/UDP port or the protocol number. Click Save Settings to save the policy settings you have entered. Click Cancel Changes to cancel any changes you have entered. For help information, click More.
Virtual Private Networking (VPN) is a security measure that creates a secure connection between two remote locations. The security is created by the very specific settings for the connection. The VPN Tab allows you to configure your VPN settings to make your network more secure.

this setting. Use Port Range Forwarding to direct traffic to the correct computer. Refer to the Firewall > Port Range Forwarding screen.

Remote Secure Group

The Remote Secure Group is the computer(s) on the remote end of the tunnel that can access the tunnel. Type From the drop-down menu, select Subnet, to include the entire network for the tunnel; select IP address if you want a specific computer; select Host, if
the VPN will terminate at the Router, instead of the PC; or Any, to allow any computer to access the tunnel. The screen will change depending on the selected option. The options are described below.
Subnet Enter the IP Address and Mask of the remote
same type of encryption that is being used by the VPN device at the other end of the tunnel. ISAKMP Authentication Method There are two types of authentication: MD5 and SHA (SHA is recommended because it is more secure). As with encryption, either of these may be selected, provided that the VPN device at the other end of the tunnel is using the same type of authentication. ISAKMP DH Group This is for Diffie-Hellman key negotiation. There are 7 groups available for ISAKMP SA establishment. Group 1024, 1536, 2048, 3072, 4096, 6144, and 8192 represent different bits used in Diffie-Hellman mode operation. The default value is 1024. ISAKMP Key Lifetime(s) This field specifies how long an ISAKMP key channel should be kept, before being renegotiated. The default is 28800 seconds. PFS PFS (Perfect Forward Secrecy) ensures that the initial key exchange and IKE proposals are secure. To use PFS, click the Enabled radio button. IPSec Encryption Method Using encryption also helps make your connection more secure. There are four different types of encryption: 3DES, AES-128, AES-192, or AES-256. You may choose any of these, but it must be the same type of encryption that is being used by the VPN device at the other end of the tunnel. IPSec Authentication Method Authentication acts as another level of security. There are two types of authentication: MD5 and SHA (SHA is recommended because it is more secure). As with encryption, either of these may be selected, provided that the VPN device at the other end of the tunnel is using the same type of authentication. Or, both ends of the tunnel may choose to disable authentication. IPSec DH Group This is the same as the ISAKMP DH Group setting. IPSec Key Lifetime(s) In this field, you may optionally select to have the key expire at the end of a time period of your choosing. Enter the number of seconds youd like the key to be used until a re-key negotiation between each endpoint is completed. The default is 3600 seconds. Pre-shared Key Enter a series of numbers or letters in the Pre-shared Key field. Based on this word, which MUST be entered at both ends of the tunnel, a key is generated to scramble (encrypt) the data being transmitted over the tunnel, where it is unscrambled (decrypted). You may use any combination of up to 24 numbers or letters in this field. No special characters or spaces are allowed.

commanded to start/stop connection here. VPN Summary can help an administrator to manage and examine all IPSec tunnels status. Tunnel Name The field displays the name of the tunnel. Remote Gateway The field displays the remote gateway. If the pre-configured type is IP Addr., the field displays the IP address of remote gateway. If the pre-configured type of remote gateway is Any, the field displays ANY. If the pre-configured type is FQDN, the field displays the FQDN string directly. Remote Group The field displays the remote peer that is designated for VPN communication after a IPSec VPN tunnel is established. If the pre-configured type of the remote group is IP Addr., the field displays the IP address of the remote peer. If the pre-configured type of the remote group is Subnet, the field displays the subnet type IP Address/Mask. If the pre-configured type of remote group is Host or Any, the field displays the Host or Any directly. Local Group The field displays the local peer that is designated for VPN communication after an IPSec VPN tunnel is established. If the pre-configured type of local group is IP Addr., the field displays the IP address of the local peer. If the pre-configured type of local group is Subnet, the field displays the subnet type IP Address/ Mask. If the pre-configured type of local group is Host, the field displays the Host directly. Key Methods The field displays the IPSec authentication and encryption key methods of the Key exchange Method that is followed with the setting value of the Password Forward Secrecy. Tunnel Status The field displays the status of IPSec Tunnel as follows.
C The Tunnel is Connected. T Try to Connect to Remote Peer. Stop The Tunnel is Stopped. D The Tunnel is Disabled. Any The Tunnel always waits for the connection from

VPN > VPN Summary

the remote initiator.
NAT-T The Tunnel enables the NAT-Traversal to allow
the remote initiator that is behind the NAT to construct this IPSec Tunnel.
This page summarizes the comprehensive details of IPSec VPN Tunnels that include Tunnel Name, Remote Gateway, Remote Group, Local Group, Key Methods, Tunnel Status, and Start/Stop/Detail Connection. Each field displays information according to a pre-configured value of IPSec tunnel separately, and each IPSec tunnel can be easily
Start/Stop/Restart Connection You can manually start/ stop IPSec connection according to pre-configured tunnel settings. If the pre-configured type of remote gateway or remote group is either Any or NAT-Traversal, the Detail button can also examine Remote Security Gateway information.

Detail Each Tunnel has a Detail button. This button will become available when a Tunnel Status reveals a C, T, Any, and NAT-T. When you press the Detail button, a VPN Advanced Tunnel Information screen appears. This feature provides more detailed information for advanced configuration and management. VPN Advanced Tunnel Information will show Advanced Tunnel Information and Remote Security Gateway. VPN Log Button Use to check the overall related VPN behaviors and contact messages of a VPN Tunnel and VPN Client. Click this button to view the VPN operation situation. If you want to clear this log information, click Clear Log Now. Click the Refresh button to update the on-screen information.
put into High or Low Priority Queue for the egress port of WAN according to your settings. Specific Port # You can add up to thirteen additional applications by entering their respective application port numbers in the Specific Port # field.

Bandwidth Allocation

Quality of Service (QoS) ensures better service to highpriority service. The QoS tab allows you to configure the Routers QoS settings.
QoS > Application Based QoS - Bandwidth Allocation
QoS > Application-Based QoS
Application-based QoS involves Internet traffic, which may involve demanding, real-time applications, such as videoconferencing. To enable Application-based QoS, you can select either Priority Queue or Bandwidth Allocation. The remaining fields in the screen depend on the selection.
For each of the three Application Level Gateways (ALGs), you can choose a Bandwidth Allocation Policy from Guaranteed and Spare with a specified percentage value to control the bandwidth utilization from LAN to WAN. It depends on the specified policy to let the bandwidth be reserved or shared with the applications. Guaranteed will reserve specific bandwidth for the applications and Spare will use the remaining bandwidth for other applications. User Define Button You can define the policies regarding source or destination IP, protocol and port number. You also can mark the DSCP field with specific value to egress packets. The bandwidth utilization could be controlled from LAN to WAN. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes. For help information, click More.

Priority Queue

in one network cannot see the computers in the remote network from Windows Explorer. The WRV200 does not support NetBIOS Broadcast over a Gateway-to-Gateway IPSec VPN tunnel. To access the computers or shared drives on the remote network, users are advised to use the IP address to identify the resource.
Does the Router support ICQ send file? Yes, with the following fix: click ICQ menu => preference => connections tab=>, and check I am behind a firewall or proxy. Then set the firewall time-out to 80 seconds in the firewall setting. The Internet user can then send a file to a user behind the Router. I set up an Unreal Tournament Server, but others on the LAN cannot join. What do I need to do? If you have a dedicated Unreal Tournament server running, you need to create a static IP for each of the LAN computers and forward ports 7777, 7778, 7779, 7780, 7781, and 27900 to the IP address of the server. You can also use a port forwarding range of 7777 to 27900. If you want to use the UT Server Admin, forward another port (8080 usually works well but is used for remote admin; you may have to disable this), and then in the [UWeb.WebServer] section of the server.ini file, set the ListenPort to 8080 (to match the mapped port above) and ServerName to the IP assigned to the Router from your ISP. Can multiple gamers on the LAN get on one game server and play simultaneously with just one public IP address? It depends on which network game or what kind of game server you are using. For example, Unreal Tournament supports multi-login with one public IP. How do I get Half-Life: Team Fortress to work with the Router? The default client port for Half-Life is 27005. The computers on your LAN need to have +clientport 2700x added to the HL shortcut command line; the x would be 6, 7, 8, and on up. This lets multiple computers connect to the same server. One problem: Version 1.0.1.6 wont let multiple computers with the same CD key connect at the same time, even if on the same LAN (not a problem with 1.0.1.3). As far as hosting games, the HL server does not need to be in the DMZ. Just forward port 27015 to the local IP address of the server computer. How can I block corrupted FTP downloads? If you are experiencing corrupted files when you download a file with your FTP client, try using another FTP program. The web page hangs; downloads are corrupt, or nothing but junk characters are being displayed on the screen. What do I need to do? Force your Ethernet adapter to 10Mbps or half duplex mode, and turn off the Auto-negotiate feature of your Ethernet adapter as a temporary measure. (Please look at the Network Control Panel in your Ethernet adapters Advanced Properties tab.) Make sure that your proxy

General Network Security Guidelines
Wireless network security is useless if the underlying network is not secure.
Password protect all computers on the network and individually password protect sensitive files. Change passwords on a regular basis. Install anti-virus software and personal firewall software. Disable file sharing (peer-to-peer). Some applications may open file sharing without your consent and/or knowledge.
2. Change the default password
For wireless products such as access points, routers, and gateways, you will be asked for a password when you want to change their settings. These devices have a default password set by the factory. The Linksys default password is admin. Hackers know these defaults and may try to use them to access your wireless device and change your network settings. To thwart any unauthorized changes, customize the devices password so it will be hard to guess.

Additional Security Tips

Keep wireless routers, access points, or gateways away from exterior walls and windows. Turn wireless routers, access points, or gateways off when they are not being used (at night, during vacations). Use strong passphrases that are at least eight characters in length. Combine letters and numbers to avoid using standard words that can be found in the dictionary.
3. Enable MAC address filtering
Linksys routers and gateways give you the ability to enable Media Access Control (MAC) address filtering. The MAC address is a unique series of numbers and letters assigned to every networking device. With MAC address filtering enabled, wireless network access is provided solely for wireless devices with specific MAC addresses. For example, you can specify the MAC address of each

Appendix C

Using Linksys QuickVPN for Windows 2000, XP, or Vista
This appendix explains how to install and use the Linksys QuickVPN software that can be downloaded from www. linksys.com. QuickVPN works with computers running Windows 2000, XP, or Vista. (Computers using other operating systems will have to use third-party VPN software.) For Windows Vista, QuickVPN Client version 1.2.5 or later is required.
Go to the Start menu and then click Run. In the field provided, enter D:\VPN_Client.exe (if D is the letter of your CD-ROM drive). 2. The License Agreement screen appears. Click Yes to accept the agreement and the appropriate files are copied to the computer.

License Agreement

Before You Begin
QuickVPN only works with a Linksys WirelessG VPN Router with RangeBooster that is properly configured to accept a QuickVPN connection. Follow these instructions to configure the Routers VPN client settings: 1. Open the Web-based utility. 2. Click VPN > VPN Client Access.

Copying Files

Finished Installing Files
3. Click Finished to complete the installation. Proceed to the section, Using the Linksys QuickVPN Software.

NOTE: You can change your password only if you have been granted that privilege by your system administrator.
Version Number of the QuickVPN Client
To display the version number of the QuickVPN Client: 1. Right-click the QuickVPN tray icon, then select About. 2. The About screen displays the QuickVPN Client version number. 3. Click OK to close the About screen.
QuickVPN Tray Icon Connection
QuickVPN Client Version Number
Distributing Certificates to QuickVPN Users
The following explains how to export a certificate from the WRV200 for distribution to QuickVPN users, as well as how to install the certificate on the QuickVPN users PCs. 1. Generate the Certificate as follows: a. Log on to the Web-based Utility. b. Select VPN, then VPN Client Access. c. Click Generate to generate a new certificate. d. Click Export for Client and save the certificate as a.PEM file. 2. Distribute the certificate to all QuickVPN users. 3. Each QuickVPN user must then install the certificate as follows: a. Save the certificate into the directory where the QuickVPN Client is installed. For example: C:\Program Files\Linksys\QuickVPN Client\ b. Launch the QuickVPN Client and specify the User Name, Password, and Server Address (IP address or domain name). c. Click Connect. For more information on certificate management, go to section VPN > VPN Client Access in Chapter 5: Configuring the Wireless-G Router.

Appendix D

Configuring IPSec with a Windows 2000 or XP Computer
This appendix explains how to establish a secure IPSec tunnel using preshared keys to join a private network inside the Router and a Windows 2000 or XP computer. You can find detailed information on configuring the Windows 2000 server at the Microsoft website: Microsoft KB Q252735How to Configure IPSec Tunneling in Windows 2000: http://support.microsoft.com/support/kb/articles/ Q252/7/35.asp Microsoft KB Q257225Basic IPSec Troubleshooting in Windows 2000: http://support.microsoft.com/support/kb/articles/ Q257/2/25.asp NOTE: Keep a record of any changes you make. Those changes will be identical in the Windows secpol application and the Routers Webbased Utility.
How to Establish a Secure IPSec Tunnel
Step 1: Create an IPSec Policy
1. Click Start, select Run, and type secpol.msc in the Open field. The Local Security Settings screen appears.

Local Security Settings

2. Right-click IP Security Policies on Local Computer (Windows XP) or IP Security Policies on Local Machine (Windows 2000), and click Create IP Security Policy. 3. Click the Next button, and then enter a name for your policy (for example, to_Router). Then, click Next. 4. Deselect the Activate the default response rule check box, and then click Next. 5. Click Finish, making sure the Edit check box is checked.
Step 2: Build Filter Lists
NOTE: Throughout the following section the term win refers to both Windows 2000 and Windows XP.

WRV200 Key Management Settings
Follow similar instructions for the RV082. 1. Launch the web browser for a networked computer, designated PC 2. 2. Access the Web-based Utility of the RV082. (Refer to the User Guide of the RV082 for details.) 3. Click the IPSec VPN tab. 4. Click the Gateway to Gateway tab. 5. Enter a name in the Tunnel Name field. 6. For the VPN Tunnel setting, select Enable. 7. The WAN IP address (B.B.B.B) of the RV082 will be automatically detected.
For the Local Security Group Type, select Subnet. Enter the RV082s local network settings in the IP Address and Subnet Mask fields.
IP address, refer to Configuration when the Remote Gateway Uses a Dynamic IP.
Dynamic IP: A.A.A.A with Domain Name: www.xyz.com LAN: 192.168.5.1
8. For the Remote Security Gateway Type, select IP address. Enter the WRV200s WAN IP address in the IP Address field. 9. For the Remote Security Group Type, select Subnet. Enter the WRV200s local network settings in the IP Address and Subnet Mask fields. 10. In the IPSec Setup section, select the appropriate encryption, authentication, and other key management settings. (These should match the settings of the WRV200.) 11. In the Preshared Key field, enter a string for this key, for example, test1234.
Gateway-to-Gateway IPSec VPN Tunnel - Both Gateways Using Dynamic IP
Configuration when Both Gateways Use Dynamic IP Addresses
This example assumes both Gateways are using dynamic IP addresses. If only the Remote Gateway uses a dynamic
8. For the Remote Secure Group Type, select Subnet. Enter the RV082s local network settings in the IP Address and Mask fields. 9. For the Remote Secure Gateway Type, select FQDN. Enter the RV082s domain name in the field provided. 10. In the Key Management section, select the appropriate encryption, authentication, and other key management settings. 11. In the Preshared Key field, enter a string for this key, for example, test1234.
8. For the Remote Security Gateway Type, select IP by DNS Resolved. Enter the WRV200s domain name in the field provided. 9. For the Remote Security Group Type, select Subnet. Enter the WRV200s local network settings in the IP Address and Subnet Mask fields. 10. In the IPSec Setup section, select the appropriate encryption, authentication, and other key management settings. (These should match the settings of the WRV200.)
11. In the Preshared Key field, enter a string for this key, for example, test1234.
Follow similar instructions for the RV082. 1. Launch the web browser for a networked computer, designated PC 2. 2. Access the Web-based Utility of the RV082. (Refer to the User Guide of the RV082 for details.) 3. Click the IPSec VPN tab. 4. Click the Gateway to Gateway tab. 5. Enter a name in the Tunnel Name field. 6. For the VPN Tunnel setting, select Enable. 7. The WAN IP address (B.B.B.B) of the RV082 will be automatically detected. For the Local Security Group Type, select Subnet. Enter the RV082s local network settings in the IP Address and Subnet Mask fields.

original purchase when returning your product. Products received without a RMA number and dated proof of original purchase will be rejected. Do not include any other items with the product you are returning to Linksys. Defective product covered by this limited warranty will be repaired or replaced and returned to you without charge. Customers outside of the United States of America and Canada are responsible for all shipping and handling charges, custom duties, VAT and other associated taxes and charges. Repairs or replacements not covered under this limited warranty will be subject to charge at Linksys then-current rates.

Technical Support

This limited warranty is neither a service nor a support contract. Information about Linksys current technical support offerings and policies (including any fees for support services) can be found at: www.linksys.com/support. This limited warranty is governed by the laws of the jurisdiction in which the Product was purchased by you. Please direct all inquiries to: Linksys, P.O. Box 18558, Irvine, CA 92623.

Appendix I

FCC Statement
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which is found by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Regulatory Information

Safety Notices
Caution: To reduce the risk of fire, use only No.26 AWG or larger telecommunication line cord. Do not use this product near water, for example, in a wet basement or near a swimming pool. Avoid using this product during an electrical storm. There may be a remote risk of electric shock from lightning. WARNING: This product contains lead, known to the State of California to cause cancer, and birth defects or other reproductive harm. Wash hands after handling.