DeWalt WRVS4400N User Manual
Wireless-N Gigabit Security
Router with VPN
User Guide
Model: WRVS4400N
BUSINESS SERIES
Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.
Copyright © 2008 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered
trademarks of their respective holders.
WRVS4400N Wireless-N Gigabit Security Router with VPN User Guide 2
Table of Contents
Chapter 1: Getting Started . . . . . . . . . . . . . . . . . . . . . . . 1
Welcome 1
How to Use this Guide 2
Document Style Conventions 2
Finding Information in Your PDF Documents 2
Finding Text in a PDF 3
Finding Text in Multiple PDFs 3
What’s in this Guide? 4
Chapter 2: Networking and Security Basics . . . . . . . . . . . . . . . 6
An Introduction to LANs 6
The Use of IP Addresses 7
The Intrusion Prevention System (IPS) 9
Chapter 3: Planning Your Virtual Private Network (VPN) . . . . . . . 10
Why do I need a VPN? 10
What is a VPN? 11
VPN Router to VPN Router 12
Computer (using the Linksys VPN client software) to VPN Router 12
Chapter 4: Getting to Know the Router . . . . . . . . . . . . . . . . 13
The Front Panel 13
The Back Panel 15
Antennas and Positions 16
Chapter 5: Connecting the Router . . . . . . . . . . . . . . . . . . 18
Overview 18
Connection Instructions 19
Placement Options 20
Stand Option 20
Wall-Mount Option 21
Chapter 6: Setting Up and Configuring the Router . . . . . . . . . . 23
Overview 23
Basic Setup 23
How to Access the Web-based Utility 23
How to Navigate the Utility 24
Setup 24
Wireless 25
Firewall 25
ProtectLink 26
VPN 26
QoS 26
Administration 26
IPS 27
L2 Switch 27
Status 27
Setup Tab 28
Summary 28
WAN 29
WRVS4400N User Guide 1
Table of Contents
DDNS 36
LAN 38
DMZ 40
MAC Address Clone 40
Advanced Routing 42
Time 44
IP Mode 45
Wireless Tab 46
Basic Wireless Settings 46
Wireless Security 47
Wireless Connection Control 54
Connection Control 54
Connection Control List 54
Advanced Wireless Settings 55
Firewall Tab 57
Basic Settings 58
IP Based ACL 59
Edit IP ACL Rule 61
Internet Access Policy 62
Single Port Forwarding 64
Port Range Forwarding 66
Port Range Triggering 67
ProtectLink Tab 68
VPN Tab 68
Summary 68
IPSec VPN 70
IPSec VPN Tunnel 70
Local Group Setup 70
Remote Group Setup 71
IPSec Setup 72
Status 73
Buttons 73
Advanced Button 73
VPN Client Accounts 74
VPN Passthrough 76
QoS Tab 77
Bandwidth Management 77
QoS Setup 79
DSCP Setup 80
Administration Tab 81
Management 81
Log 82
Diagnostics 86
Backup & Restore 88
Factory Defaults 89
Reboot 89
Firmware Upgrade 90
IPS Tab 91
Configuration 91
P2P/IM 92
Report 93
WRVS4400N User Guide 2
Table of Contents
Information 94
L2 Switch Tab 94
VLAN 94
VLAN & Port Assignment 96
RADIUS 98
Port Settings 99
Statistics Overview 100
Port Mirroring 100
RSTP 101
Status Tab 102
WAN / Gateway 102
Local Network 103
Wireless LAN 105
System Performance 106
Chapter 7: VPN Setup Wizard . . . . . . . . . . . . . . . . . . . 107
Before You Begin 107
Running the VPN Router Software Wizard 108
Building Your VPN Connection Remotely 115
Appendix A: Troubleshooting . . . . . . . . . . . . . . . . . . . 121
Common Problems and Solutions 121
Frequently Asked Questions 131
Appendix B: Linksys QuickVPN Software . . . . . . . . . . . . . . 135
Overview 135
Before You Begin 135
Installing the Linksys QuickVPN Software 136
Installing from the CD-ROM 136
Downloading and Installing from the Internet 136
Using the Linksys QuickVPN Software 137
Appendix C: Configuring a Gateway-to-Gateway IPSec Tunnel . . . 140
Overview 140
Before You Begin 140
Configuring the VPN Settings for the VPN Routers 140
Configuring VPN Router 1 140
Configuring VPN Router 2 142
Configuring the Key Management Settings 143
Configuring VPN Router 1 143
Configuring VPN Router 2 144
Configuring PC 1 and PC 2 144
Appendix D: MAC Address and IP Address . . . . . . . . . . . . . 145
Windows 98 or Me Instructions 145
Windows 2000 or XP Instructions 146
For the Router’s Web-based Utility 147
Appendix E: Glossary . . . . . . . . . . . . . . . . . . . . . . . . 148
WRVS4400N User Guide 3
Table of Contents
Appendix F: Specifications . . . . . . . . . . . . . . . . . . . . . 153
Appendix G: Warranty Information. . . . . . . . . . . . . . . . . 156
LIMITED WARRANTY 156
Exclusions and Limitations 156
Obtaining Warranty Service 157
Technical Support 157
Appendix H: Regulatory Information . . . . . . . . . . . . . . . . 158
FCC Statement 158
FCC Caution 158
FCC Radiation Exposure Statement 158
Generic Discussion on RF Exposure 158
Explosive Environment, Medical and FAA Device Information 160
Safety Notices 160
Industry Canada (Canada) 160
User Information for Consumer Products Covered by EU Directive 2002/96/EC on
Waste Electric and Electronic Equipment (WEEE) 161
Appendix I: Contact Information . . . . . . . . . . . . . . . . . . 169
US/Canada Contacts 169
EU Contacts 169
Appendix J: Trend Micro ProtectLink Gateway Service . . . . . . . 170
ProtectLink 170
How to Use the Service 171
ProtectLink > Web Protection 171
Web Protection 171
URL Filtering 171
Business Hour Setting 172
Web Reputation 172
Approved URLs 172
Approved Clients 172
URL Overflow Control 172
ProtectLink > Email Protection 173
Email Protection 173
ProtectLink > License 173
License 173
License Information 174
WRVS4400N User Guide 4
Getting Started
Welcome
Getting Started
Welcome
Thank you for choosing the Wireless-N Gigabit Security Router with VPN. The Wireless-N
Gigabit Security Router with VPN is an advanced Internet-sharing network solution for your
small business needs. The Router features a built-in 4-Port full-duplex 10/100/1000 Ethernet
switch to connect four PCs directly, or you can connect more hubs and switches to create as big
a network as you need. Like any wireless router, it lets multiple computers in your office share
an Internet connection through both wired and wireless connections. It can also be used as an
intranet router to aggregate traffic to a company backbone network.
The Router has a built-in access point that supports the latest 802.11n draft specification by
IEEE. It also supports 802.11g and 802.11b clients in a mixed environment. The access point can
support an 11n data rate of up to 300 Mbps. Besides having a higher data rate, 802.11n
technology also promises longer coverage by using multiple antennas to transmit and receive
data streams in different directions. Users are encouraged to upgrade their firmware through
www.linksys.com when 802.11n specification is finalized by IEEE to ensure compatibility with
all the wireless-N devices.
The Wireless-N Gigabit Security Router with VPN is equipped with advanced security
technologies like Intrusion Prevention System (IPS), Stateful Packet Inspection (SPI) Firewall, IP
based Access List (IP ACL), and Network Address Port Translation (NAPT, also called NAT as a
more generic term). These technologies work together by providing self-defensive strategy.
Malicious attack traffic is identified, classified, and stopped in real time while passing through
the Router. Users are encouraged to update their IPS signature file to stay current on stopping
malicious worms. The SPI Firewall provides deep packet inspection to analyze packets in
network layer (IP) and transport layer (TCP, UDP) to block illegal packet transactions. Users can
also use IP based ACL to limit traffic to a specific source, destination and protocol. NAPT allows
users to open specific TCP/UDP port numbers to the Internet to provide limited service while
minimizing harmful traffic at the same time.
The Virtual Private Network (VPN) capability is another security feature that creates encrypted
“tunnels” through the Internet, allowing up to five remote offices and five traveling users to
securely connect into your office network from off-site. Users connecting through a VPN tunnel
are attached to your company's network with secure access to files, e-mail, and your intranet as
if they were in the building. You can also use the VPN capability to allow users on your small
office network to securely connect out to a corporate network. The QoS features provide
consistent voice and video quality throughout your business.
This user guide will give you all the information you need to connect, set up, and configure your
Router.
WRVS4400N User Guide 1
Getting Started
How to Use this Guide
How to Use this Guide
This User Guide has been designed to make understanding networking with the camera easier
than ever. Look for the following items when reading this guide:
WAR NI NG: This graphic means there is a Warning and is
something that could damage your self, property, or the
camera.
NOTE: This checkmark means there is a Note of interest
and is something you should pay special attention to
while using the camera.
CAUTION: This exclamation point means that caution
should be used when performing a step or a serious error
may occur.
Document Style Conventions
The following style conventions are used in this document.
• Menus, Tabs, and Buttons: Bold type is used to indicate the name of a button, menu,
or tab in an application.
Example: Click Submit All Changes to save your entries.
• Screens, Page Areas, and Fields: Italic type is used to indicate the name of screens,
page areas, and fields.
Example: Scroll down to the PBX Parameters area of the screen.
• Data Input: The Courier font is used to indicate characters that you should type into
a field exactly as printed in this guide.
Example: In the Mailbox Subscribe Expires field, type 30.
In this example, you would type the number 30 in the field.
• Parameters: Angle brackets and italic type indicate parameters that you must replace
with the appropriate data.
Example: Type 800@<IP address of device>:5090
In this example, you would type the characters 800@, followed by the IP address of your
device, followed by a colon and the number 5090.
Finding Information in Your PDF Documents
The PDF Find/Search tool lets you find information quickly and easily online. You can:
WRVS4400N User Guide 2
Getting Started
Finding Information in Your PDF Documents
• Search an individual PDF
• Search multiple PDFs at once (for example, all PDFs in a specific folder or disk drive)
• Perform advanced searches
Finding Text in a PDF
By default, the Find toolbar is open. If it has been closed, choose Edit > Find.
Use Find to search for text in an open PDF:
1. Enter your search terms in the Find box on the toolbar.
2. Optionally click the arrow next to the Find text box to refine your search (such as Whole
words only).
3. Press Enter. Acrobat jumps to the first instance of the search term. Pressing Enter again
continues to more instances of the term.
Finding Text in Multiple PDFs
The Search window lets you search for terms in multiple PDFs. The PDFs do not need to be
open. Either:
• Choose Edit > Search
or
• Click the arrow next to the Find box and choose Open Full Acrobat Search. The Search
window appears.
In the Search window:
1. Enter the text you want to find.
2. Choose All PDF Documents in.
3. From the drop-down box, choose Browse for Location.
4. Choose the location you want to search, either on your computer or on a network, then
click OK.
5. If you want to specify additional search criteria, click Advanced Search Options, and
choose the options you want.
6. Click Search.
For more information about the Find and Search functions, see the Adobe Acrobat online help.
WRVS4400N User Guide 3
Getting Started
What’s in this Guide?
What’s in this Guide?
This user guide covers the steps for setting up and using the Wireless-N Gigabit Security Router
with VPN.
• Chapter 1, "Getting Started"
This chapter describes the Wireless-N Gigabit Security Router with VPN applications and
this User Guide. It also contains information on how to use this guide.
•
Chapter 2, "Networking and Security Basics"
This chapter describes the basics of networking and network security.
•
Chapter 3, "Planning Your Virtual Private Network (VPN)"
This chapter describes a VPN and its various applications.
•
Chapter 4, "Getting to Know the Router"
This chapter describes the physical features of the Router.
•
Chapter 5, "Connecting the Router"
This chapter instructs you on how to connect the Router to your network.
•
Chapter 6, "Setting Up and Configuring the Router"
This chapter explains how to use the Web-Based Utility to perform basic setup and
configure its advanced settings.
•
Chapter 7, "VPN Setup Wizard"
This chapter instructs you on using the VPN Setup Wizard running on Microsoft
products in order to setup VPN tunnels.
•
Appendix A, "Troubleshooting"
This appendix describes some problems and solutions, as well as frequently asked
questions, regarding installation and use of the Wireless-N Gigabit Security Router with
VPN.
•
Appendix B, "Linksys QuickVPN Software"
This appendix instructs you on how to use the Linksys QuickVPN software if you are
using a Windows 2000 or XP PC.
•
Appendix C, "Configuring a Gateway-to-Gateway IPSec Tunnel"
This appendix describes how to configure an IPSec VPN Tunnel between two VPN
Routers.
•
Appendix D, "MAC Address and IP Address"
This appendix describes how to find the MAC address for your computer’s Ethernet
adapter so you can use the MAC filtering and/or MAC address cloning feature of the
Router. It also explains how to find the IP address for your computer.
•
Appendix E, "Glossary"
This appendix gives a brief glossary of terms frequently used in networking.
•
Appendix F, "Specifications"
This appendix provides the technical specifications for the Router.
WRVS4400N User Guide 4
Getting Started
What’s in this Guide?
• Appendix G, "Warranty Information"
This appendix supplies the warranty information for the Router.
•
Appendix H, "Regulatory Information"
This appendix supplies the regulatory information regarding the Router.
•
Appendix I, "Contact Information"
This appendix provides contact information for a variety of Linksys resources, including
Technical Support.
•
Appendix J, "Trend Micro ProtectLink Gateway Service"
This appendix provides detailed information on how to configure the ProtectLink
Service.
WRVS4400N User Guide 5
Networking and Security Basics
An Introduction to LANs
Networking and Security Basics
An Introduction to LANs
A Router is a network device that connects multiple networks together and forward traffic
based on IP destination of each packet.
The Wireless-N Gigabit Security Router can connect your local area network (LAN) or a group of
PCs interconnected in your home or office to the Internet. You can use one public IP address
from the ISP through WAN port and use the router’s Network Address Translation (NAT)
technology to share this single IP address among all the users.
The Router’s Network Address Port Translation (NAPT or NAT) technology protects your
network of PCs so users on the Internet cannot “see” your PCs. This is how your LAN remains
private. The Router protects your network by inspecting the first packet coming in through the
Internet port before delivery to the final destination on one of the Ethernet ports. The Router
inspects Internet port services like the web server, ftp server, or other Internet applications,
and, if allowed, it will forward the packet to the appropriate PC on the LAN side.
Multiple Wireless-N Gigabit Security Routers can also be used to connect multiple LANs
together. This usually applies to a medium-sized or larger company where you want to divide
your network into multiple IP subnets to increase the intranet throughput and reduce the size
of the IP broadcast domain and its interference. In this case, you need one WRVS4400Nv2 for
each subnetwork and you can connect all the WAN ports to a second level Router or switch to
the Internet. Note that the second level Router only forwards data packets through a wired
network so you don’t have to use the Wireless-N Gigabit Security Router. You can use any wired
router in the Linksys family, e.g. RVS4000, which has 4 LAN ports and 1 WAN port.
The following diagram shows an example that consists of two levels of routers and multiple
LANs inter-connected together. The wireless network is only available at the first level of router
to provide end user connections. The second level router can connect to dedicated Server PCs
or routers that aggregates traffic from different LANs.
WRV S440 0N Us er Guid e 6
Networking and Security Basics
The Use of IP Addresses
Example network
The Use of IP Addresses
IP stands for Internet Protocol. Every device in an IP-based network, including PCs, print servers,
and routers, requires an IP address to identify its location, or address, on the network. This
applies to both the Internet and LAN connections.
NOTE: Since the Router is a device that connects two
networks, it needs two IP addresses—one for the LAN,
and one for the Internet. In this User Guide, you’ll see
references to the “Internet IP address” and the “LAN IP
address.”
NOTE: Since the Router uses NAT technology, the only IP
address that can be seen from the Internet for your
network is the Router’s Internet IP address. However, even
this Internet IP address can be hidden on the Internet by
suppressing PING response.
There are two ways of assigning IP addresses to your network devices.
A static IP address is a fixed IP address that you assign manually to a PC or other device on the
network. Since a static IP address remains valid until you disable it, static IP addressing ensures
that the device assigned it will always have that same IP address until you change it. Static IP
addresses are commonly used with dedicated network devices such as server PCs or print
servers. Since a user’s PC is moving around in a network and is being powered on or off, it does
not require a dedicated IP address that could be a precious resource in your network.
WRV S440 0N Us er Guid e 7
Networking and Security Basics
The Use of IP Addresses
If you use the Router to share your cable or DSL Internet connection, contact your ISP to find
out if they have assigned a static IP address to your account. If so, you will need that static IP
address when configuring the Router. You can get the information from your ISP.
A dynamic IP address is automatically assigned to a device on the network. This IP address is
called dynamic because it is only temporarily assigned to the PC or other device. After a certain
time period, it expires and may change. If a PC logs onto the network (or the Internet) and its
dynamic IP address has expired, the DHCP server will assign it a new dynamic IP address. Most
ISPs use dynamic IP addresses for their customers. By default, the Router’s Internet Connection
Type is Obtain an IP automatically (DHCP).
For DSL users, many ISPs may require you to log on with a user name and password to gain
access to the Internet. This is a dedicated, high-speed connection type called Point-to-Point
Protocol over Ethernet (PPPoE). PPPoE is similar to a dial-up connection, which establishes a
PPP session with an ISP server through the DSL connection. The server will also provide the
Router with a dynamic IP address to establish a connection to the Internet.
A DHCP server can either be located on a designated PC on the network or another network
device, such as the Router. The PC or network device obtaining an IP address is called the DHCP
client. DHCP frees you from having to assign IP addresses manually every time a new user is
added to your network. For this Wireless-N Router, a DHCP client is running on a WAN port for
most configurations. A DHCP server is running on the LAN side to provide services.
By default, a DHCP server is enabled on the Router. If you already have a DHCP server running
on your network, you MUST disable one of the two DHCP servers. If you run more than one
DHCP server on your network, you will experience network errors, such as conflicting IP
addresses. To disable DHCP on the Router, refer to the Basic Setup section in “Chapter 6: Setting
Up and Configuring the Router.”
WRV S440 0N Us er Guid e 8
Networking and Security Basics
The Intrusion Prevention System (IPS)
The Intrusion Prevention System (IPS)
IPS is an advanced technology to protect your network from malicious attacks. IPS works
together with your SPI Firewall, IP Based Access List (IP ACL), Network Address Port Translation
(NAPT), and Virtual Private Network (VPN) to achieve the highest amount of securities.
IPS Scenarios
IPS works by providing real-time detection and prevention as an in-line module in a router. The
Wireless-N Security Router has hardware-based acceleration for real-time pattern matching for
malicious attacks. It actively filters and drops malicious TCP/UDP/ICMP/IGMP packets and can
reset TCP connections. This protects your client PCs and servers running various operating
systems including Windows, Linux, and Solaris from network worm attacks. However, this
system does not prevent viruses attached emails.
The P2P (peer to peer) and IM (instant messaging) control allows the system administrator to
prevent network users from using those protocols to communicate with people over the
Internet. This helps the administrators to set up company policies on how to use their Internet
bandwidth wisely.
The signature file is the heart of the IPS system. It is similar to the Virus definition files on your
PC’s Anti-Virus programs. IPS uses this file to match against packets coming in to the Router and
performs actions accordingly. As of today, the Wireless-N Router is shipped with signature file
version 1.3.8 and with a total of 1101 rules. The rules cover the following categories: DDoS,
Buffer Overflow, Access Control, Scan, Trojan Horse, Misc., P2P, IM, Virus, Worm, and Web
Attacks.
Customers are encouraged to update their IPS signature file regularly to prevent any new type
of attacks on the Internet.
WRV S440 0N Us er Guid e 9
Planning Your Virtual Private Network (VPN)
Why do I need a VPN?
Planning Your Virtual Private Network
(VPN)
Why do I need a VPN?
Computer networking provides a flexibility not available when using an archaic, paper-based
system. With this flexibility, however, comes an increased risk in security. This is why firewalls
were first introduced. Firewalls help to protect data inside of a local network. But what do you
do once information is sent outside of your local network, when e-mails are sent to their
destination, or when you have to connect to your company's network when you are out on the
road? How is your data protected?
That is when a VPN can help. VPNs are called Virtual Private Networks because they secure data
moving outside of your network as if it were still within that network.
When data is sent out across the Internet from your computer, it is always open to attacks. You
may already have a firewall, which will help protect data moving around or held within your
network from being corrupted or intercepted by entities outside of your network, but once
data moves outside of your network—when you send data to someone via e-mail or
communicate with an individual over the Internet—the firewall will no longer protect that
data.
At this point, your data becomes open to hackers using a variety of methods to steal not only
the data you are transmitting but also your network login and security data. Some of the most
common methods are as follows:
1) MAC Address Spoofing
Packets transmitted over a network, either your local network or the Internet, are preceded by a
packet header. These packet headers contain both the source and destination information for
that packet to transmit efficiently. A hacker can use this information to spoof (or fake) a MAC
address allowed on the network. With this spoofed MAC address, the hacker can also intercept
information meant for another user.
2) Data Sniffing
Data “sniffing” is a method used by hackers to obtain network data as it travels through
unsecured networks, such as the Internet. Tools for just this kind of activity, such as protocol
analyzers and network diagnostic tools, are often built into operating systems and allow the
data to be viewed in clear text.
3) Man in the middle attacks
Once the hacker has either sniffed or spoofed enough information, he can now perform a “man
in the middle” attack. This attack is performed, when data is being transmitted from one
network to another, by rerouting the data to a new destination. Even though the data is not
received by its intended recipient, it appears that way to the person sending the data.
These are only a few of the methods hackers use and they are always developing more. Without
the security of your VPN, your data is constantly open to such attacks as it travels over the
WRV S440 0N Us er Guid e 10
Planning Your Virtual Private Network (VPN)
What is a VPN?
Internet. Data travelling over the Internet will often pass through many different servers around
the world before reaching its final destination. That's a long way to go for unsecured data and
this is when a VPN serves its purpose.
What is a VPN?
A VPN, or Virtual Private Network, is a connection between two endpoints—a VPN Router, for
instance—in different networks that allows private data to be sent securely over a shared or
public network, such as the Internet. This establishes a private network that can send data
securely between these two locations or networks.
This is done by creating a “tunnel”. A VPN tunnel connects the two PCs or networks and allows
data to be transmitted over the Internet as if it were still within those networks. Not a literal
tunnel, it is a connection secured by encrypting the data sent between the two networks.
There are two popular ways to establish a secured tunnel over the Internet — IPsec (IP Security)
and SSL (Secure Sockets Layer). IPsec runs on top of the IP layer and SSL runs over HTTP
sessions. IPsec provides better data throughput and SSL offers ease of use without the need of
VPN client applications. The Wireless-N Gigabit Security Router supports IPsec VPN for
maximum throughput on data security.
VPN was created as a cost-effective alternative to using a private, dedicated, leased line for a
private network. Using industry standard encryption and authentication techniques—IPsec,
short for IP Security—the VPN creates a secure connection that, in effect, operates as if you
were directly connected to your local network. Virtual Private Networking can be used to create
secure networks linking a central office with branch offices, telecommuters, and/or
professionals on the road (travelers can connect to a VPN Router using any computer with the
Linksys VPN client software.)
NOTE: You must have at least one VPN Router on one end
of the VPN tunnel. At the other end of the VPN tunnel, you
must have a second VPN Router or a computer with the
Linksys VPN client
There are two basic ways to create a VPN connection:
• VPN Router to VPN Router
• Computer (using the Linksys VPN client software) to VPN Router
The VPN Router creates a “tunnel” or channel between two endpoints, so that data
transmissions between them are secure. A computer with the Linksys VPN client software can
be one of the two endpoints (refer to “Appendix C: Using the Linksys QuickVPN Software for
Windows 2000 or XP”). If you choose not to run the VPN client software, any computer with the
built-in IPsec Security Manager (Microsoft 2000 and XP) allows the VPN Router to create a VPN
tunnel using IPsec (refer to “Appendix C: Configuring IPsec between a Windows 2000 or XP PC
and the Router”). Other versions of Microsoft operating systems require additional, third-party
VPN client software applications that support IPsec to be installed.
WRV S440 0N Us er Guid e 11
Planning Your Virtual Private Network (VPN)
What is a VPN?
VPN Router to VPN Router
An example of a VPN Router-to-VPN Router VPN would be as follows. At home, a telecommuter
uses his VPN Router for his always-on Internet connection. His router is configured with his
office's VPN settings. When he connects to his office's router, the two routers create a VPN
tunnel, encrypting and decrypting data. As VPNs utilize the Internet, distance is not a factor.
Using the VPN, the telecommuter now has a secure connection to the central office's network,
as if he were physically connected. For more information, refer to “Appendix C: Configuring a
Gateway-to-Gateway IPsec Tunnel.”
VPN Router to VPN Router
Computer (using the Linksys VPN client software) to VPN Router
The following is an example of a computer-to-VPN Router VPN. In her hotel room, a traveling
businesswoman dials up her ISP. Her notebook computer has the Linksys VPN client software,
which is configured with her office's IP address. She accesses the Linksys VPN client software
and connects to the VPN Router at the central office. As VPNs utilize the Internet, distance is not
a factor. Using the VPN, the businesswoman now has a secure connection to the central office's
network, as if she were physically connected.
VPN Router to VPN Computer
For additional information and instructions about creating your own VPN, please visit Linksys’s
website at www.linksys.com. You can also refer to “Appendix B: Using the Linksys QuickVPN
Software for Windows 2000 or XP” and “Appendix C: Configuring a Gateway-to-Gateway IPsec
Tunnel.”
WRV S440 0N Us er Guid e 12
Getting to Know the Router
Getting to Know the Router
The Front Panel
The Router’s LEDs are located on the front panel of the Router.
The Front Panel
Front of Router
Status LED/Color Description
Power/
Green
Diag/
Red
IPS/
Green/Red
Wireless/
Green
The POWER LED lights up when the Router is powered on.
The LED flashes when the Router runs a diagnostic test.
The DIAG LED lights up when the system is not ready. The
LED light goes off when the system is ready. The Diag LED
blinks during Firmware upgrades.
The IPS LED lights up when the IPS function is enabled. The
LED light is off when the IPS functions are disabled. The IPS
LED flashes green when an external attack is detected. The
IPS LED flashes red when an internal attack is detected.
The WIRELESS LED lights up when the wireless module is
enabled. The LED is off when the wireless module is disabled.
The WIRELESS LED flashes green when the data is
transmitting or receiving on the wireless module.
WRV S440 0N Us er Guid e 13
Status LED/Color Description
Getting to Know the Router
The Front Panel
1-4 (ETHERNET)/
Green
INTERNET/
Green
For each port, there are three LEDs. If the corresponding LED
is continuously lit, the Router is connected to a device at the
speed indicated through the corresponding port (1, 2, 3, or
4). The LED flashes when the Router is actively sending or
receiving data.
The INTERNET LED lights up the appropriate LED depending
upon the speed of the device that is attached to the Internet
port. If the Router is connected to a cable or DSL modem,
typically the 10 LED will be the only LED lit up (i.e. 10Mbps).
The LED Flashes during activity.
WRV S440 0N Us er Guid e 14
Getting to Know the Router
The Back Panel
The Router’s ports and Reset button are located on the back panel of the Router.
The Back Panel
Back of Router
Port/Button Description
Reset Button The Reset button can be used in one of two ways:
If the Router is having problems connecting to the Internet,
press the Reset button for just a second with a paper clip or a
pencil tip. This is similar to pressing the Reset button on your
PC to reboot it.
If you are experiencing extreme problems with the Router
and have tried all other troubleshooting measures, press and
hold in the Reset button for 10 seconds. This will restore the
factory defaults and clear all of the Router’s settings, such as
port forwarding or a new password.
Internet Port The INTERNET port connects to a cable or DSL modem.
Port 1-4 (ETHERNET) The four ETHERNET ports connect to network devices, such
as PCs, print servers, or additional switches.
POWER The POWER port is where you will connect the included AC
power cable.
WRV S440 0N Us er Guid e 15
Getting to Know the Router
Antennas and Positions
Antennas and Positions
The Access Point can be placed in three different positions. It can be either stackable,
standalone, or wall-mount.
Standalone Mount
WRV S440 0N Us er Guid e 16
Getting to Know the Router
Antennas and Positions
With Mounting Feet
The Access Point has three non-detachable 1.8dBi omni-directional antennas. The three
antennas have a base that can rotate 90 degrees when in the standing position. The three
antennas will all be used to support 2X3 MIMO diversity in wireless-N mode.
WRV S440 0N Us er Guid e 17
Connecting the Router
Notebook with
Ethernet Adapter
PC with Ethernet
Adapter
Cable or DSL
Modem
Wireless-N Gigabit
Security Router
Internet
Connecting the Router
Overview
• To set up your network, you will do the following:
• Connect the Router to one of your PCs according to the instructions in this chapter.
• By default, Windows 98, 2000, Millennium, and XP computers are set to obtain an IP
address automatically, so unless you have changed the default setting, then you will not
need to configure your PCs. (If you do need to configure your PCs, refer to Windows
Help for more information.)
• Set up and configure the Router with the setting(s) provided by your Internet Service
Provider (ISP) according to
Chapter 6, "Setting Up and Configuring the Router".
Overview
The installation technician from your ISP should have left the setup information with you after
installing your broadband connection. If not, you can call your ISP to request the information.
Once you have the setup information for your specific type of Internet connection, then you
can begin installation and setup of the Router.
WRV S440 0N Us er Guid e 18
Connecting the Router
Connection Instructions
Connection Instructions
1. Before you begin, make sure that all of your hardware is powered off, including the Router,
PCs, hubs, switches, and cable or DSL modem.
2. Connect one end of an Ethernet network cable to one of the numbered ports on the back of
the Router. Connect the other end to an Ethernet port on a network device, e.g., a PC, print
server, hub, or switch.
3. Repeat this step to connect more PCs or other network devices to the Router.
4. Connect your cable or DSL modem’s Ethernet cable to the Router’s Internet port.
WRV S440 0N Us er Guid e 19
Connecting the Router
Placement Options
5. Power on the cable or DSL modem and the other network device if using one.
6. Connect the included AC power cable to the Router’s Power port on the side of the Router,
and then plug the power adapter into an electrical outlet.
The Power LED on the front panel will light up as soon as the power adapter is connected
properly.
Placement Options
There are three ways to place the Wireless-N Router. The first way is to place it horizontally on a
surface, so it sits on its four rubber feet. The second way is to stand the Wireless Router
vertically on a surface. The third way is to mount it on a wall. The stand and wall-mount options
are explained in further detail below.
Stand Option
1. Locate the Router’s left side panel.
2. The Router includes two stands. With the two large prongs facing outward, insert the short
prongs into the little slots in the Router, and push the stand upward until it snaps into place.
Repeat this step with the other stand.
WRV S440 0N Us er Guid e 20
Connecting the Router
Placement Options
Wall-Mount Option
You will need two suitable screws to mount the Router. Make sure the screw size can fit into the
criss-cross wall-mount slots.
1. On the Wireless Router’s back panel are two criss-cross wall-mount slots.
2. Determine where you want to mount the Wireless Router, and install two screws that are 29/16 in (64.5mm) apart.
3. Line up the Wireless Router so that the wall-mount slots line up with the two screws.
WRV S440 0N Us er Guid e 21
Connecting the Router
Placement Options
4. Place the wall-mount slots over the screws and slide the Wireless Router down until the
screws fit snugly into the wall-mount slots.
WRV S440 0N Us er Guid e 22
Setting Up and Configuring the Router
Overview
Setting Up and Configuring the Router
Overview
The Wireless Router has been designed to be functional right out of the box with the default
settings. However, if you'd like to change these settings, the Wireless Router can be configured
through your web browser with the Web-based Utility. This chapter explains how to use the
Utility to perform the most basic settings.
The Utility can be accessed via web browsers, such as Microsoft Internet Explorer or Mozilla
Firefox through the use of a computer that is networked with the Wireless Router.
Basic Setup
For a basic network setup, most users only need to use the following screens of the Utility:
• Setup->WAN
Click the Setup tab and then select the WAN screen. Select the appropriate Internet
Connection Type according to your ISP if connecting your WAN port to the WAN (DSL or
cable modem). Otherwise, most cases can leave the default setting to get a WAN port IP
address from a DHCP server.
• Setup->Advanced Routing
Click the Setup tab and then select the Advanced Routing screen. If you are
connecting the Router to the Internet, leave the default setting. Otherwise, choose the
Router Operation Mode to disable NAT (Network Address Translation).
• Management
Click the Administration tab and then select the Management screen. Change the
access password for the Router’s Web-based Utility. The default username and password
are admin.
Most users will also customize their wireless settings:
• Wireless
On the Wireless screen, change the default SSID on the Basic Settings Tab. Select the
level of security under the Security Settings Tab and complete the options for the
selected security mode. When the appropriate security mode is configured, disable
SSID Broadcast on the Basic Settings Tab.
How to Access the Web-based Utility
There are two ways to connect to your Wireless Router for the first time.
1. Connect your PC to one of the four LAN ports on the Router. (Refer to "Chapter 5:
Connecting the Router.") Then, configure your PC to obtain IP address automatically
through a DHCP server.
2. Although it is not recommended, you can also connect your PC wirelessly to the Wireless
Router. Then, configure the wireless interface of your PC to obtain IP address automatically
WRV S440 0N Us er Guid e 23
Setting Up and Configuring the Router
How to Navigate the Utility
through a DHCP server. It is not recommended, because you can easily lose your
connection through wireless configuration changes.
To access the Web-based Utility of the Router:
1. Launch a web browser, such as Internet Explorer or Mozilla Firefox, and enter the Router’s
default IP address, 192.168.1.1, in the Address field. Press the Enter key.
2. The Connect To screen appears asking you for your User name and Password. Enter admin
in the User Name field, and enter your password (default password is admin) in the
Password field. Then click the OK button.
How to Navigate the Utility
The Web-based Utility consists of the following ten main tabs: Setup, Wireless, Firewall,
ProtectLink, VPN, QoS, Administration, IPS, L2 Switch, and Status. Additional screens (sub tabs)
will be available from most of the main tabs.
The following briefly describes the main & sub tabs of the Utility.
Setup
You will use the Setup tabs to define the Router’s basic functionality.
• Summary—Displays a read-only summary of the Router's basic information.
• WAN —Internet connection settings are entered and displayed on this screen.
• LAN—Local Area Network (LAN) settings are entered and displayed on this screen.
• DMZ—The DMZ (Demilitarized Zone) Host feature allows one local user to be exposed
to the Internet to use a special-purpose service such as Internet gaming or video
conferencing.
• MAC Address Clone—Some ISPs require that you register a MAC address. This feature
clones your network adapter's MAC address onto the Router, which prevents you from
having to call your ISP to change the registered MAC address to the Router's MAC
address.
WRV S440 0N Us er Guid e 24
Loading...