Linksys LRT224 User manual

LRT214 / LRT224

User Guide

Table of Contents

Linksys

Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .I

Hardware Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . .1

Ports 1

LED Indicators 2

Reset 2

Placement Tips 2

Wall Mounting Tips 2

Getting Started with the Router Conﬁguration. . . . . . . . . . . .3

System Status 3

Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8

Host Name and Domain Name 8

IP Mode 8

LAN Setting (Device IP address and subnets) 8

WAN Setting/ DMZ Setting (Internet connection & DMZ) 9

Setting Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

DMZ Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Port Forwarding and Port Triggering. . . . . . . . . . . . . . . .16

Port Range Forwarding 16

Port Triggering 17

Port Address Translation . . . . . . . . . . . . . . . . . . . . . . . 18

One-to-One NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Setting MAC Clone . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Dynamic DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Advanced Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Dynamic Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Static Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Outgoing Mail Server . . . . . . . . . . . . . . . . . . . . . . . . . 23

IPv6 Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

DHCP Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

DHCP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Router Advertisement (IPv6) . . . . . . . . . . . . . . . . . . . . .26

IP & MAC Binding (for IPv4 Only) . . . . . . . . . . . . . . . . . . 27

DNS Local Database . . . . . . . . . . . . . . . . . . . . . . . . . . 28

System Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Dual WAN (LRT224 Only) / Network Service Detection 30

Dual WAN 30

Network Service Detection 30

Protocol Binding (Only Dual-WAN Mode supports this function) 31

Bandwidth Management 33

Session Control 34

SNMP 35

SSL Certiﬁcate 36

Port Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Port Setup 37

Port Status 38

802.1Q 39

802.1Q LAN Status 39

802.1Q LAN Conﬁguration 40

Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41

Firewall General Settings 41

Access Rules 42

Content Filter 45

VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Summary 47

Gateway to Gateway 48

Table of Contents

iii

Table of Contents

Linksys

Client to Gateway 53

VPN Passthrough 58

PPTP Server 58

IP Address Range 58

PPTP Server 58

Connection List 59

EasyLink VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Summary 60

EasyLink VPN Server Status 60

Inbound EasyLink VPN Status 60

Outbound EasyLink VPN Status 60

Inbound EasyLink VPN 61

Add a New Account 61

Outbound EasyLink VPN 61

Edit Account 61

OpenVPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Summary 62

OpenVPN Server Status 62

OpenVPN Client Status 62

OpenVPN Server 62

Global Conﬁgure Settings 63

OpenVPN Client 65

Certiﬁcate Setting 65

Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

System Log 67

Syslog 67

E-mail Alert 67

Log Setting 67

System Statistics 68

Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Diagnostic 70

DNS Name Lookup 70

Ping 70

Factory Default 70

Firmware Upgrade 71

Restart 71

Backup and Restore 71

Restore Startup Conﬁguration 71

Backup Conﬁguration File 71

Copy Conﬁguration File 71

Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

Introduction

Linksys

Introduction

LRT214/LRT224

Linksys’s VPN Routers for Small Business, LRT214 Gigabit VPN Router and LRT224

Dual WAN Gigabit VPN Router, support site-to-site VPN, which allows branch

offices to connect with the central office, and client-to-site VPN, which allows

employees to securely connect back to their offices while they are away. The

dual-WAN model supports WAN Failover, which allows a business to continue its

network operation when one of its WAN connections to the Internet fails. With

dual-WAN load balancing, the dual-WAN model can aggregate the bandwidths

of both WAN connections to achieve a higher Internet bandwidth than what a

single WAN connection can provide.

Employees increasingly demand remote access to enterprise IT resources

through their mobile devices such as smartphones and tablets. LRT214/LRT224

support OpenVPN server, which allows OpenVPN clients running on employees’

laptops, smartphones, and tablets to connect to the offices using two-factor

authentication. Two-factor authentication typically requires pre-installed

certificates as part of the authentication of an OpenVPN connection, in addition

to username/password, for additional security.

The products come with an integrated firewall that supports URL filtering

and access rules that allow administrators to further regulate the traffic within

the business network based on the services (i.e. TCP/UDP ports) and source/

destination IP addresses.

LRT214/LRT224 routers support 802.1q, which provides separation between

resources in different SSIDs/VLANs. This allows them to work with modern

wireless access points that support multiple SSIDs.. With inter-VLAN routing,

the products allow specified traffic to traverse between VLANs. The products

support dual stack IPv4 and IPv6, as well as transition technologies such as 6to4.

Like other Linksys routers, the products have an intuitive Web administrative

interface that allows small business owners to deploy and manage the routers

without professional IT staff onsite. The operational health of the products

can be monitored through system logs and email alerts. Standard MIBs are

supported, which allows the products to be monitored by a SNMP-based

network management system.

Hardware Installation

Linksys

Hardware Installation

Ports

LRT214

In this chapter we are going to introduce hardware interface as well as

physical installation.

LRT224

•WAN: The WAN ports can be connected with DSL or cable modems,

provided by your internet service provider (ISP).

•DMZ: Use the DMZ (Demilitarized Zone) port to connect to a DMZ host,

such as a Web server or mail server. Inbound traffic can access the DMZ

host without exposing your intranet.

•WAN/DMZ (LRT224):LRT224 Dual WAN Gigabit VPN Router comes with

a port you can configure as a second WAN port or DMZ port based on

your network requirements.

NOTE

Dual WAN settings, such as link failover or load balance, will be

disabled when you configure the port as DMZ port.

LAN (1~4):Use the LAN ports to connect devices such as switching hubs,

computers, printer servers, etc., to the local network or intranet.

Hardware Installation

Linksys

LED Indicators

Reset

Action Description

Press Reset Button For

5 Secs

Warm start

DIAG indicator: Diag LED flashing slowly

Press Reset Button

Longer than 10 Secs

Factory default

DIAG indicator: Diag LED flashing quickly

Placement Tips

•Do not place anything on top of the router. The router could be damaged

by excessive weight.

•Do not obstruct heat dissipation holes on the sides of the router.

•Do not expose to direct sunlight or other heat source. Keep area around

router adequately ventilated.

•Place the router on a flat surface.

Wall Mounting Tips

The router has two wall-mount slots on its bottom panel. When mounting the

router on the wall, please ensure that the heat dissipation holes are facing

sideways as shown in the following picture for safety reasons. Linksys is not

responsible for damages incurred by insecure wall-mounting hardware.

LED Name Color Description

System Green On: Power On

Blinking: System booting up

DIAG Amber

On: System not ready

Off: System ready

Blinking: System is on self-test

WAN Green/ Amber

Amber On: 10/100M link

Amber Blinking: 10/100M activity

Green On: Gigabit link

Green Blinking: Gigabit activity

WAN/DMZ Green/ Amber

Amber On: 10/100M link

Amber Blinking: 10/100M activity

Green On: Gigabit link

Green Blinking: Gigabit activity

VPN Green On: Designated VPN tunnel up

Off: Designated VPN tunnel down

1~4

Ethernet Green/ Amber

Amber On: 10/100M link

Amber Blinking: 10/100M activity

Green On: Gigabit link

Green Blinking: Gigabit activity

Getting Started with the Router Configuration

Linksys

Follow the instructions to configure your router.

1. Be sure your computer is connected to a LAN port on the router and set

to receive an automatic IP address from the DHCP server.

2. Open a Web browser and type 192.168.1.1 in the address bar.

3. On the login screen, type in default username: admin, and default

password: admin. Click Log In.

4. Launch Setup Wizard – on the System Status or Quick Start tab – to

complete configuration. Allow blocked content if asked.

5. The Configuration tab allows more control of your network based on

your management needs.

NOTE:

Windows users can find the router IP address through the DOS

prompt. Click on the Start button, enter “CMD”in the search field,

and type “ipconfig” at the prompt. The IP address is the Default

Gateway.

System Status

After logging in to the Web GUI, you will be directed to system status page,

where you can glance how the router is configured. You can click on the System

Status tab to view the current status of the router later on.

System Information

This section includes the following information:

Serial Number: Serial number of this router.

Firmware Version: Current firmware version.

Model Number: Model name of the router.

MD5 Checksum: A value used for validation of the firmware installed on

the router.

LAN:

IPv4/Subnet Mask

IPv6/Prefix

Current LAN IP address of the router.

Working Mode: Current working mode as Gateway or Router mode.

System Up Time: How long since the last restart (or power-up) of the router.

Getting Started with the Router Configuration

Linksys

Configuration

You may click Setup Wizard button to launch wizard.

Port Statistics

Port ID: ID of physical port.

Interface: Type of the port: LAN, WAN or DMZ.

Status: Status of the port: Disabled, Enabled or Connected.

Clicking on a port’s status will launch a window with statistics on that port.

Type: 10Base-T / 100 Base-TX / 1000 Base-TX.

Interface: LAN/WAN/DMZ.

Link Status: Up or down.

Port Activity: Port Enabled, Port Disabled, or Port

Connected.

Priority: High or Normal.

Speed Status: 10Mbps, 100Mbps or 1000Mbps.

Duplex Status : Half or Full.

Auto Negotiation : On or Off.

VLAN : VLAN ID.

This table also gives you the counts for packets received and sent, packet bytes

received and sent, and packet errors.

WAN Status

This section displays information for the WAN and DMZ interface.

NOTE:

You should enable Dual-Stack IP first to view IPv6 status. Please go

to Configuration > Network.

IP Address: WAN IP address.

Default Gateway: Default gateway IP address.

DNS: IP address of the DNS server.

Dynamic DNS: (IPv4 Only) Enabled or disabled.

Release: If the WAN type is “Obtain an IP address

automatically(DHCP),”this buttonwill appear.

Click Release to release the IP address.

Renew: If the WAN type is “Obtain an IP address

automatically (DHCP),” this button will

appear. Click Renew to update the IP address.

Getting Started with the Router Configuration

Linksys

Connect/ Disconnect: If the WAN type is PPPoE or PPTP, this button

will appear. Click Disconnect to cut the

connection from ISP server. Click Connect to

re-dial to the server.

DMZ Status:

NOTE:

It is recommended to designate the configurable port on the

LRT224 as a DMZ port. Go to Device Configuration > Network and

check the Enable DMZ box.

IP Address: IP address of DMZ port.

DMZ Host: Private IP of DMZ host.

Firewall Settings

This section displays the current firewall settings:

SPI (Stateful Packet Inspection): Default configuration is On.

DoS (Denial of Service): Default configuration is On.

Block WAN Request: Default configuration is On.

Remote Management: Default configuration is Off.

Access Rule: The number of access rules configured

in the router.

VPN Settings

Tunnel(s) Used: Number of tunnels configured.

Tunnel(s) Available: Number of tunnels the router supports.

OpenVPN Status

Tunnel(s) Used: Number of OpenVPN tunnels configured.

Tunnel(s) Available: Number of OpenVPN tunnels the router supports.

Log Setting Status

This section displays the following information:

Syslog Server: Indicates whether Syslog server is activated.

Email Log: Indicates whether Email Log is activated.

Getting Started with the Router Configuration

Linksys

Quick Start (Setup Wizard)

Click the Quick Start tab to access Basic Setup Wizard. The setup wizard will

help you set up your network easily and finish basic network settings.

Basic Setup

Click Launch Now to run the Basic Setup Wizard. Refer to the information from

your ISP to enter the required settings for your connection.

You can configure Host and Domain, WAN setting, LAN setting, Time and

Password here. Click Finish button to leave the wizard.

This manual suits for next models

Table of contents

Popular Network Router manuals by other brands

Allnet

Allnet ALL0333AU user guide

HomeSeer

HomeSeer HT-SEL Getting started guide

Sercomm

Sercomm Genesis OC3505D Quick installation guide

Billion

Billion BIPAC 5102 Series user manual

TP-Link

TP-Link TD-8817 QIG

Motorola

Motorola MR1900 user guide

Digi

Digi IX14 user guide

Cisco

Cisco NCS 540 Hardware installation guide

XAVi

XAVi X8821e user manual

BEC

BEC 6200WZL Quick installation guide

MikroTik

MikroTik hAP ac3 Series quick start

Korenix

Korenix JetNet 5428G Series user manual

NETGEAR

NETGEAR FS526T - Switch installation guide

Korenix

Korenix JetNet 5710G Series user manual

Automated Logic

Automated Logic ZN551 Technical instructions

Cisco

Cisco ASR 1000 Series Installation and configuration guide

EnGenius

EnGenius ESR-9710 quick start guide

Cisco

Cisco 805 Series Product overview