Connect the Router

Before you begin, make sure that you have the setup information for your specific type of Internet connection. The installation technician from your ISP should have left this information with you after installing your broadband connection. If not, you can call your ISP to request the settings. Make sure that all of your networks hardware is powered off, including the Router, PCs, and cable or DSL modem. Connect one end of an Ethernet network cable to one of the LAN ports (labeled 1-4) on the back of the Router, and the other end to an Ethernet port on a PC. Repeat step C to connect more PCs, a switch, or other network devices to the Router. Connect a different Ethernet network cable from your cable or DSL modem to the Internet port on the Routers back panel. Power on the cable or DSL modem.
Connect the power adapter to the Routers Power port, and then plug the other end into an electrical outlet. The Power and Internet LEDs on the front panel will light up green as soon as the power adapter is connected properly. Power on the PCs. The Routers hardware installation is now complete.
4-Port Gigabit Security Router with VPN

Package Contents

User Guide on CD-ROM Network Cable Power Adapter Stands Registration Card Quick Install Guide
NOTE: Before setting up the

QUICK INSTALLATION

Router, make sure your PCs are configured to obtain an IP (or TCP/IP) address automatically from the Router.

BUSINESS SERIES

Model Model No. RVS4000 Model No. No.

Configure the Router E

For the Connection Type setting, six connection types are offered through the drop-down menu. Each Setup screen and available features will vary depending on which connection type you select. Internet Connection Type Automatic Configuration DHCP: If you are connecting through DHCP or a dynamic IP address from your ISP, keep this default setting. Static IP: If your ISP assigns you a static IP address, select Static IP from the drop-down menu. Complete the Internet IP Address, Subnet Mask, Default Gateway, and DNS fields. You need to enter at least one DNS address. PPPoE: If you are connecting through PPPoE, select PPPoE from the drop-down menu. Complete the User Name and Password fields. PPTP: PPTP is a service used in Europe only. If you are using a PPTP connection, check with your ISP for the necessary setup information. Heartbeat Signal. Heartbeat Signal is used primarily in Australia. Check with your ISP for the necessary setup information.
These instructions will show you how to configure the Router. You only need to configure the Router once using any computer you have set up.
Open your web browser. Enter http://192.168.1.1 in its Address field. Press the Enter key. A password request screen will appear. Enter the default user name and password, admin, in lowercase letters in the User Name and Password fields. (For added security, you should later set a new password, using the Administration tabs Management screen of the web-based utility). Then click the OK button. The web-based utility will appear with the Setup tab and IP Mode selected. Click on the WAN option under the Setup tab. If requested by your ISP (usually cable ISPs), complete the Host Name and Domain Name fields, and the MTU and MTU Size fields. Otherwise, leave the defaults.

Automatic - DHCP

L2TP. L2TP is used mostly in Europe. Check with your ISP for the necessary setup information.

Heartbeat Signal

When you are finished entering your Internet connection settings, click the Save Settings button to save your changes. Restart or power on your PCs so they can obtain the router's new settings. Test the setup by opening your web browser from any computer and entering http://www.linksys.com/ registration.

Static IP

For additional information or troubleshooting help, refer to the User Guide on the CD-ROM. You can also call or e-mail for further support. 24-hour Technical Support 800-326-7114 (toll-free from US or Canada) E-mail Support support@linksys.com Website http://www.linksys.com or http://support.linksys.com RMA (Return Merchandise Authorization) http://www.linksys.com/support FTP Site ftp://ftp.linksys.com Sales Information 800-546-5797 (800-LINKSYS) Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright 2006 Cisco Systems, Inc. All rights reserved.

RVS4000-QI-60524NC RR

Congratulations! The installation of the Router is complete.

NOTE: For more advanced

settings and security options, refer to the User Guide on the RVS4000 CD-ROM.

IPS Scenarios

Chapter 3

Why do I need a VPN?

Computer networking provides a flexibility not available when using an archaic, paper-based system. With this flexibility, however, comes an increased risk in security. This is why firewalls were first introduced. Firewalls help to protect data inside of a local network. But what do you do once information is sent outside of your local network, when e-mails are sent to their destination, or when you have to connect to your companys network when you are out on the road? How is your data protected? That is when a VPN can help. VPNs are called Virtual Private Networks because they secure data moving outside of your network as if it were still within that network. When data is sent out across the Internet from your computer, it is always open to attacks. You may already have a firewall, which will help protect data moving around or held within your network from being corrupted or intercepted by entities outside of your network, but once data moves outside of your networkwhen you send data to someone via e-mail or communicate with an individual over the Internetthe firewall will no longer protect that data. At this point, your data becomes open to hackers using a variety of methods to steal not only the data you are transmitting but also your network login and security data. Some of the most common methods are as follows:
Planning Your Virtual Private Network (VPN)
3) Man in the middle attacks
Once the hacker has either sniffed or spoofed enough information, he can now perform a man in the middle attack. This attack is performed, when data is being transmitted from one network to another, by rerouting the data to a new destination. Even though the data is not received by its intended recipient, it appears that way to the person sending the data. These are only a few of the methods hackers use and they are always developing more. Without the security of your VPN, your data is constantly open to such attacks as it travels over the Internet. Data travelling over the Internet will often pass through many different servers around the world before reaching its final destination. Thats a long way to go for unsecured data and this is when a VPN serves its purpose.

What is a VPN?

A VPN, or Virtual Private Network, is a connection between two endpointsa VPN Router, for instancein different networks that allows private data to be sent securely over a shared or public network, such as the Internet. This establishes a private network that can send data securely between these two locations or networks. This is done by creating a tunnel. A VPN tunnel connects the two PCs or networks and allows data to be transmitted over the Internet as if it were still within those networks. Not a literal tunnel, it is a connection secured by encrypting the data sent between the two networks. VPN was created as a cost-effective alternative to using a private, dedicated, leased line for a private network. Using industry standard encryption and authentication techniquesIPSec, short for IP SecurityVPN creates a secure connection that, in effect, operates as if you were directly connected to your local network. VPN can be used to create secure networks linking a central office with branch offices, telecommuters, and/or professionals on the road (travelers can connect to a VPN Router using any computer with the Linksys VPN client software.) There are two basic ways to create a VPN connection:

IP Address This is the Routers IP address, when seen from the WAN, or the Internet. Your ISP will provide you with the IP Address you need to specify here. Subnet Mask This is the Routers Subnet Mask, as seen by external users on the Internet (including your ISP). Your ISP will provide you with the Subnet Mask.
Default Gateway Your ISP will provide you with the Default Gateway Address. PPTP Server Enter the IP address of the PPTP server. User Name and Password Enter the User Name and Password provided by your ISP. Connect on Demand: Max Idle Time You can configure the Router to cut the Internet connection after it has been inactive for a specified period of time (Max Idle Time), and then automatically re-establish the connection as soon as you attempt to access the Internet again. To activate Connect on Demand, select the Connect on Demand option and enter in the Max Idle Time field the number of minutes of inactivity that must elapse before your Internet connection is terminated automatically. Keep Alive: Redial period If you select this option, the Router will periodically check your Internet connection. If you are disconnected, then the Router will automatically re-establish your connection. To use this option, click the radio button next to Keep Alive. In the Redial Period field, specify how often you want the Router to check the Internet connection. The default Redial Period is 30 seconds. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes.
User Name and Password Enter the User Name and Password provided by your ISP. Connect on Demand: Max Idle Time You can configure the Router to cut the Internet connection after it has been inactive for a specified period of time (Max Idle Time), and then automatically re-establish the connection as soon as you attempt to access the Internet again. To activate Connect on Demand, select the Connect on Demand option and enter in the Max Idle Time field the number of minutes of inactivity that must elapse before your Internet connection is terminated automatically. Keep Alive: Redial period If you select this option, the Router will periodically check your Internet connection. If you are disconnected, then the Router will automatically re-establish your connection. To use this option, click the radio button next to Keep Alive. In the Redial Period field, specify how often you want the Router to check the Internet connection. The default Redial Period is 30 seconds. When you have finished making changes to the screen, click Save Settings to save the changes, or click Cancel Changes to undo your changes.

To enable the DHCP v6 feature, select Enable. To disable DHCP v6, select Disable. Lease time Enter the lease time in minutes. DHCP6 address range start Enter the starting DHCP v6 IP address. DHCP6 address range end Enter the ending DHCP v6 IP address. Primary DNS Enter the Primary DHCP v6 DNS server address. Secondary DNS Enter the Secondary DHCP v6 DNS server address. Click Save Settings to save your changes, or click Cancel Changes to undo your changes.

Setup > DMZ

The DMZ screen allows one local PC to be exposed to the Internet for use of a special-purpose service such as Internet gaming and videoconferencing. Whereas Port Range Forwarding can only forward a maximum of 10 ranges of ports, DMZ hosting forwards all the ports for one PC at the same time.

Static IP Mapping

Static IP Mapping is used to bind a specific IP address to a specific MAC address. This helps external (WAN) users to access LAN servers that are advertised through NAPT port forwarding. You can define up to 50 entries. Static IP Address Enter the IP address to be mapped. MAC Address Enter the MAC address to be mapped. Host Name Enter the host name to be mapped. Click Add to create the entry and add it to the list. To modify an existing entry, select it from the list, edit the appropriate field(s), and then click Modify. To delete an entry, select it and click Remove.
DMZ Hosting This feature allows one local PC to be exposed to the Internet for use of a special-purpose service such as Internet gaming and videoconferencing. To use this feature, select Enable. To disable the DMZ feature, select Disable. DMZ Host IP Address To expose one PC, enter the computers IP address.
Click Save Settings to save your changes, or click Cancel Changes to undo your changes.

Operating Mode

Operation Mode Select the Operating mode in which this Router will function.:
Gateway This is the normal mode of operation. This
Setup > MAC Address Clone
Some ISPs require that you register a MAC address. This feature clones your network adapters MAC address onto the Router, and prevents you from having to call your ISP to change the registered MAC address to the Routers MAC address. The Routers MAC address is a 12-digit code assigned to a unique piece of hardware for identification.
allows all devices on your LAN to share the same WAN (Internet) IP address. In Gateway mode, the NAT (Network Address Translation) mechanism is enabled.
Router You either need another Router to act as the
Internet Gateway, or all PCs on your LAN must be assigned (fixed) Internet IP addresses. In Router mode, the NAT mechanism is disabled.

Dynamic Routing

The Routers dynamic routing feature can be used to automatically adjust to physical changes in the networks layout. The Router can use the dynamic RIP protocol to calculate the most efficient route for the networks data packets to travel between the source and the destination, based upon the shortest paths. The RIP protocol regularly broadcasts routing information to other routers on the network. RIP (Routing Information Protocol) If you want the Router to use the RIP protocol, select Enabled; otherwise, keep the default setting, Disabled. RIP Send Packet Version Choose the TX protocol you want for transmitting data on the network: RIPv1 or RIPv2. This should match the version supported by other Routers on your LAN. RIP Recv Packet Version Choose the RX protocol you want for receiving data from the network: RIPv1 or RIPv2. This should match the version supported by other Routers on your LAN.

Edit IP ACL Rule

Action Select the desired action, Allow or Deny, from the drop-down menu. Service Select the service types to which the rule will apply. You can either select one of the predefined services in the drop-down menu; select ALL to allow or deny all types of IP traffic; or define a new service by clicking Service Management to bring up the Service Management screen, then the new services Name, select the Type (TCP, UDP, or TCP/UDP), enter the Start Port and Finish Port, then click Save. The new service will then appear in the drop-down menu on the Edit IP ACL Rule screen. Log Select this option to log all traffic that is filtered by this rule. Log Prefix Enter a text string that will be prepended to each matched event in the log. Source Interface Select the source interface, WAN, LAN, or ANY, from the drop-down menu. Source IP To apply the rule to one source IP address, select Single from the drop-down menu, then enter the address in the field. To apply the rule to all source IP addresses, select ANY from the drop-down menu. To apply the rule to a range of IP addresses, select Range and enter the starting and ending IP addresses. To apply the rule to a subnet, select Net and enter the IP address and subnet mask. Destination IP To apply the rule to one destination IP address, select Single from the drop-down menu, then enter the address in the field. To apply the rule to all destination IP addresses, select ANY from the drop-down menu. To apply the rule to a range of IP addresses, select Range and enter the starting and ending IP addresses. To apply the rule to a subnet, select Net and enter the IP address and subnet mask. Days To make the rule apply on a daily basis, select Everyday. To make the rule apply on specific days of the week only, select the desired days.
Time To make the rule apply for an entire day, select 24 Hours. To make the rule apply only during a specific period of the day, enter the starting time in the From field and the ending time in the To field. Click Save Settings to save your settings. Click Cancel Changes to cancel your changes. Click Return to return to the IP-Based ACL screen.
Firewall > Internet Access Policy

Internet Policy Summary

List of PCs
On the List of PCs popup, you can define PCs by MAC Address or IP Address. You can also enter a range of IP Addresses if you want this policy to affect a group of PCs.
To create an Internet Access policy: 1. Select the desired policy number from the Internet Access Policy drop-down menu. 2. Enter a Policy Name in the field provided. 3. To enable this policy, set the Status option to Enable. 4. Click Edit List of PCs to select which PCs will be affected by the policy. The List of PCs popup will appear. You can select a PC by MAC Address or IP Address. You can also enter a range of IP Addresses if you want this policy to affect a group of PCs. After making your changes, click Save Settings to apply your changes. 5. Click the appropriate option, Deny or Allow, depending on whether you want to block or allow Internet access for the PCs you listed on the List of PCs popup. 6. Decide which Days and what Times you want this

QoS > Bandwidth Management

Priority

QoS > Bandwidth Management - Priority
Service Select the service from the drop-down menu. If it does not contain the service you need, click Service Management to add the service. Direction Select Upstream for outbound traffic or Downstream for inbound traffic from the drop-down menu.
QoS > Bandwidth Management - Rate Control

Bandwidth

This section lets you specify the maximum bandwidth provided by the ISP on the WAN interface, for both the upstream and downstream directions.
Priority Select High, Medium, Normal, or Low priority for the service. The default is Medium. Enable Check this box to enable this Priority Rule. Add to list After a rule is set up, click this button to add it to the list. The list can contain a maximum of 15 entries. Delete selected application Click this button to delete a rule from the list. Click Save Settings to save your settings. Click Cancel Changes to cancel any changes you have entered.
Bandwidth Management Type
Type The desired type of bandwidth management, either Rate Control (default) or Priority. Depending on your selection, the lower portion of the screen displays either the Rate Control section or the Priority section.

QoS > QoS Setup

The QoS Setup screen allows users to configure QoS Trust Mode for each LAN port.

Rate Control

Service Select the service from the drop-down menu. If it does not contain the service you need, click Service Management to add the service. IP Enter the IP address or IP range you need to control. The default is zero which includes all internal IP addresses.

Administration

The Administration tab provides access to system administration settings and tools. It includes the following screens:
Administration > Management
Port ID The number of the LAN port. Trust Mode Select either Port, CoS, or DSCP. The default is Port. Default CoS/Port Priority If Trust Mode is set to Port, select the port priority from 1 to 4 from the drop-down menu. If Trust Mode is set to CoS, select the default CoS priority from 0 to 7 from the drop-down menu.

CoS Setup

Priority The CoS priority from 0 to 7. Queue Select the traffic forwarding queue, 1 to 4, to which the CoS priority is mapped. Click Save Settings to save your settings. Click Cancel Changes to cancel any changes you have entered.

Local Gateway Access

Gateway Userlist Select the desired Gateway User List. Gateway Username Enter the user name here. Gateway Password Enter the password. Re-enter to Confirm Retype the password in this field.

Gateway-to-Gateway IPSec VPN Tunnel - Remote Gateway Using Static IP
NOTE: Each computer must have a network adapter installed.
10.In the IPSec Setup section, select the appropriate encryption, authentication, and other key management settings. 11.In the Preshared Key field, enter a string for this key, for example, 13572468.
8. For the Remote Security Gateway Type, select IP address. Enter the RVS4000s WAN IP address in the IP Address field. 9. For the Remote Security Group Type, select Subnet. Enter the RVS4000s local network settings in the IP Address and Subnet Mask fields. 10.In the IPSec Setup section, select the appropriate encryption, authentication, and other key management settings. (These should match the settings of the RVS4000.) 11.In the Preshared Key field, enter a string for this key, for example, 13572468.
RVS4000 IPSec Setup Settings
12.If you need more detailed settings, click Advanced Settings. Otherwise, click Save Settings and proceed to the next section, Configuration of the RV082.
Configuration of the RV082
Follow similar instructions for the RV082. 1. Launch the web browser for a networked computer, designated PC 2. 2. Access the web-based utility of the RV082. (Refer to the User Guide of the RV082 for details.) 3. Click the IPSec VPN tab. 4. Click the Gateway to Gateway tab. 5. Enter a name in the Tunnel Name field. 6. For the VPN Tunnel setting, select Enable. 7. The WAN IP address (B.B.B.B) of the RV082 will be automatically detected. For the Local Security Group Type, select Subnet. Enter the RV082s local network settings in the IP Address and Subnet Mask fields.
RV082 IPSec Setup Settings
12.If you need more detailed settings, click Advanced Settings. Otherwise, click Save Settings.
Configuration of PC 1 and PC 2
Verify that PC 1 and PC 2 can ping each other (refer to Windows Help for more information). If the computers can ping each other, then you know the VPN tunnel is configured correctly.
RV082 VPN Settings 4-Port Gigabit Security Router with VPN 51
Configuration when the Remote Gateway Uses a Dynamic IP Address
This example assumes the Remote Gateway is using a dynamic IP address. If the Remote Gateway uses a static IP address, refer to Configuration when the Remote Gateway Uses a Static IP.

URL Overflow Control

Specify the behavior you want if there are more URL requests than the service can handle. Temporarily block URL requests (This is the recommended setting) If there are too many URL requests, the overflow will be held back until they can be processed. This is the default setting. Temporarily bypass Trend Micro URL verification for requested URLs If there are too many URL requests, the overflow will be allowed without verification. Click Save Settings to save your changes, or click Cancel Changes to undo them.

ProtectLink > License

The license for the Trend Micro ProtectLink Gateway service (Email Protection and Web Protection) is valid for one year from the time the activation code for Web Protection is generated. If you do not provide the necessary information to activate Email Protection during registration, please provide that information as soon as possible because Email Protection and Web Protection will expire at the same time. NOTE: For example, if you provide the information needed for Email Protection one month after receiving the activation code for Web Protection, then you will receive only 11 months of Email Protection. On the License screen, license information is displayed. Use this screen to renew your license, add seats, or view license information online.
The Email Protection features are provided by an online service called IMHS, which stands for InterScan Messaging Hosted Security. It checks your e-mail messages so spam, viruses, and inappropriate content are filtered out. After you have configured the IMHS settings, your email messages will be checked online before appropriate messages are forwarded to your network.

License

Update Information To refresh the license information displayed on-screen, click Update Information.

License Information

View detailed license online To view license information online, click this link. Status The status of your license, Activated or Expired, is displayed. Platform The platform type, Gateway Service, is automatically displayed. License expires on The date and time your license expires are displayed. Renew To renew your license, click Renew. Then follow the on-screen instructions. Add Seats Each seat allows an e-mail account to use Email Protection. To add seats to your license, click Add Seats. Then follow the on-screen instructions.

Appendix F

Appendix F: Specifications

Specifications

Model Standards Ports Buttons Cabling Type LEDs Operating System RVS4000 IEEE 802.3, 802.3u, 802.1x, RFC791 (IP Protocol), RFC2460 Ethernet, Power Reset UTP CAT 5 Power, Diag, IPS, LAN 1-4, Internet Linux 800 Mb/s Built-in Web UI for easy browser-based configuration (HTTP/HTTPS) SNMP version 1, 2c Local, Syslog, E-mail Alerts Firmware Upgradable Through Web Browser LEDs for Flash and RAM failure; Ping Test and Traceroute for network diagnostics Access Control List (ACL) Capability: MAC-based, IP-based SPI stateful packet inspection firewall URL blocking, keyword blocking IP Sweep Detection, Application Anomaly Detection (HTTP, FTP, Telnet, RCP), P2P Control, Instant Messenger Control, L3-L4 Protocol (IP, TCP, UDP, ICMP) Normalization, L7 Signature Matching Manual download from the Web Secure Management 802.1X

HTTPS, Username/Password Port-based RADIUS Authentication (EAP-MD5, EAP-PEAP) Service-based Bandwidth Management supports Rate Control and Priority 802.1p, DSCP, and Port-based 4 queues 802.1Q VLAN DHCP Server, DHCP Client, DHCP Relay Agent DNS Relay, Dynamic DNS (DynDNS, TZO) PAT, NAPT One PC in the LAN can be configured as a DMZ Host 5 QuickVPN Tunnels for remote client access; 5 IPSec Gateway-to-Gateway Tunnels for branch office connectivity; 3DES Encryption; MD5/SHA1 Authentication; IPSec NAT-T; VPN Passthrough of PPTP, L2TP, IPSec Static and RIP v1, v2 Inter-VLAN Routing Supports four 802.1Q VLANs One of the five WAN/LAN ports can be mirrored to a selected LAN port Supports Rapid Spanning Tree Protocol for loop detection and faster reconfiguration
Service-based Prioritization Types Queues

Performance

NAT Throughput

Network

VLAN Support DHCP DNS NAT DMZ

Setup/Config

Web User Interface

Management

SNMP Version Event Logging Firmware Upgrade Diagnostics

Security Features

Access Control Firewall Content Filtering IPS (Intrusion Prevention System) Signature Update

Routing

Layer 2
VLAN Port Mirroring RSTP

Environmental

Dimensions WxHxD Unit Weight Power Certification Operating Temp. Storage Temp. Operating Humidity Storage Humidity 6.69" x 1.61" x 6.69" (170 x 41 x 170 mm) 0.84 lb (0.38 kg) 12V 1A FCC Class B, CE, ICES-to 104F (0 to 40C) -4 to 158F (-20 to 70C) 10 to 85% Noncondensing 5 to 90% Noncondensing
Specifications are subject to change without notice.

Appendix G

Appendix G: Warranty Information
Linksys warrants this Linksys hardware product against defects in materials and workmanship under normal use for the Warranty Period, which begins on the date of purchase by the original end-user purchaser and lasts for the period specified for this product at www.linksys.com/warranty. The internet URL address and the web pages referred to herein may be updated by Linksys from time to time; the version in effect at the date of purchase shall apply. This limited warranty is non-transferable and extends only to the original end-user purchaser. Your exclusive remedy and Linksys entire liability under this limited warranty will be for Linksys, at its option, to (a) repair the product with new or refurbished parts, (b) replace the product with a reasonably available equivalent new or refurbished Linksys product, or (c) refund the purchase price of the product less any rebates. Any repaired or replacement products will be warranted for the remainder of the original Warranty Period or thirty (30) days, whichever is longer. All products and parts that are replaced become the property of Linksys.

Warranty Information

service offerings. This limited warranty shall not apply to such third party software or service offerings. This limited warranty does not guarantee any continued availability of a third partys service for which this products use or operation may require. TO THE EXTENT NOT PROHIBITED BY LAW, ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY OR FITNESS FOR A PARTICULAR PURPOSE ARE LIMITED TO THE DURATION OF THE WARRANTY PERIOD. ALL OTHER EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF NON-INFRINGEMENT, ARE DISCLAIMED. Some jurisdictions do not allow limitations on how long an implied warranty lasts, so the above limitation may not apply to you. This limited warranty gives you specific legal rights, and you may also have other rights which vary by jurisdiction. TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT WILL LINKSYS BE LIABLE FOR ANY LOST DATA, REVENUE OR PROFIT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, REGARDLESS OF THE THEORY OF LIABILITY (INCLUDING NEGLIGENCE), ARISING OUT OF OR RELATED TO THE USE OF OR INABILITY TO USE THE PRODUCT (INCLUDING ANY SOFTWARE), EVEN IF LINKSYS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL LINKSYS LIABILITY EXCEED THE AMOUNT PAID BY YOU FOR THE PRODUCT. The foregoing limitations will apply even if any warranty or remedy provided under this limited warranty fails of its essential purpose. Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so the above limitation or exclusion may not apply to you.

Software Licenses:

The software Licenses applicable to software from Linksys are made available at the Linksys public web site at: www. linksys.com and www.linksys.com/gpl/ respectively. For your convenience of reference, a copy of the Linksys Software License Agreement and the main open source code licenses used by Linksys in its products are contained in the Schedules below.
your Linksys product and/or the Software is being used in accordance with the terms of this Agreement; (iii) to provide improvements to the way Linksys delivers technology to you and to other Linksys customers; (iv) to enable Linksys to comply with the terms of any agreements it has with any third parties regarding your Linksys product and/or Software and/or (v) to enable Linksys to comply with all applicable laws and/or regulations, or the requirements of any regulatory authority or government agency. Linksys and/ or its affiliates may collect and process this information provided that it does not identify you personally. Your use of your Linksys product and/or the Software constitutes this consent by you to Linksys and/ or its affiliates collection and use of such information and, for EEA customers, to the transfer of such information to a location outside the EEA. Software Upgrades etc. If the Software enables you to receive Upgrades, you may elect at any time to receive these Upgrades either automatically or manually. If you elect to receive Upgrades manually or you otherwise elect not to receive or be notified of any Upgrades, you may expose your Linksys product and/or the Software to serious security threats and/or some features within your Linksys product and/or Software may become inaccessible. There may be circumstances where we apply an Upgrade automatically in order to comply with changes in legislation, legal or regulatory requirements or as a result of requirements to comply with the terms of any agreements Linksys has with any third parties regarding your Linksys product and/or the Software. You will always be notified of any Upgrades being delivered to you. The terms of this license will apply to any such Upgrade unless the Upgrade in question is accompanied by a separate license, in which event the terms of that license will apply. Open Source Software. The GPL or other open source code incorporated into the Software and the open source license for such source code are available for free download at http://www.linksys.com/gpl. If You would like a copy of the GPL or other open source code in this Software on a CD, Linksys will mail to You a CD with such code for $9.99 plus the cost of shipping, upon request. Term and Termination. You may terminate this License at any time by destroying all copies of the Software and documentation. Your rights under this License will terminate immediately without notice from Linksys if You fail to comply with any provision of this Agreement. Limited Warranty. The warranty terms and period specified in the applicable Linksys Product User Guide shall also apply to the Software. Disclaimer of Liabilities. IN NO EVENT WILL LINKSYS OR ITS SUPPLIERS BE LIABLE FOR ANY LOST DATA, REVENUE OR PROFIT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL,

TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The Program, below, refers to any such program or work, and a work based on the Program means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term modification.) Each licensee is addressed as you. Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Programs source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.
c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in

License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royaltyfree redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/ or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and any later version, you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be

Original SSLeay License ----------------------Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) All rights reserved. This package is an SSL implementation written by Eric Young (eay@cryptsoft.com). The implementation was written so as to conform with Netscapes SSL. This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft. com). Copyright remains Eric Youngs, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgement: This product includes cryptographic software written by Eric Young (eay@cryptsoft.com) The word cryptographic can be left out if the routines from the library being used are not cryptographic related :-). 4. If you include any Windows specific code (or a derivative thereof ) from the apps directory (application code) you must include an acknowledgement: This product includes software written by Tim Hudson (tjh@cryptsoft.com) THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL
THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The licence and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution licence [including the GNU Public Licence.] END OF SCHEDULE 3s

Appendix J

Linksys Contact Information
Website Support Site FTP Site Advice Line Support http://www.linksys.com http://www.linksys.com/support ftp.linksys.com 800-546-5797 (LINKSYS) 800-326-7114

Contact Information

RMA (Return Merchandise http://www.linksys.com/warranty Authorization)
NOTE: Details on warranty and RMA issues can be found in the Warranty section of this Guide.
7112610B-JL 4-Port Gigabit Security Router with VPN 76