Linksys LRT224 User manual

LRT214 / LRT224
User Guide

ii
Table of Contents
Linksys
ii
Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .I
Hardware Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
Ports 1
LED Indicators 2
Reset 2
Placement Tips 2
Wall Mounting Tips 2
Getting Started with the Router Configuration. . . . . . . . . . . .3
System Status 3
Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Host Name and Domain Name 8
IP Mode 8
LAN Setting (Device IP address and subnets) 8
WAN Setting/ DMZ Setting (Internet connection & DMZ) 9
Setting Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
DMZ Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Port Forwarding and Port Triggering. . . . . . . . . . . . . . . .16
Port Range Forwarding 16
Port Triggering 17
Port Address Translation . . . . . . . . . . . . . . . . . . . . . . . 18
One-to-One NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Setting MAC Clone . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Dynamic DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Advanced Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Dynamic Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Static Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Outgoing Mail Server . . . . . . . . . . . . . . . . . . . . . . . . . 23
IPv6 Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
DHCP Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
DHCP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Router Advertisement (IPv6) . . . . . . . . . . . . . . . . . . . . .26
IP & MAC Binding (for IPv4 Only) . . . . . . . . . . . . . . . . . . 27
DNS Local Database . . . . . . . . . . . . . . . . . . . . . . . . . . 28
System Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Dual WAN (LRT224 Only) / Network Service Detection 30
Dual WAN 30
Network Service Detection 30
Protocol Binding (Only Dual-WAN Mode supports this function) 31
Bandwidth Management 33
Session Control 34
SNMP 35
SSL Certificate 36
Port Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Port Setup 37
Port Status 38
802.1Q 39
802.1Q LAN Status 39
802.1Q LAN Configuration 40
Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Firewall General Settings 41
Access Rules 42
Content Filter 45
VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Summary 47
Gateway to Gateway 48
Table of Contents

iii
Table of Contents
Linksys
Client to Gateway 53
VPN Passthrough 58
PPTP Server 58
IP Address Range 58
PPTP Server 58
Connection List 59
EasyLink VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
Summary 60
EasyLink VPN Server Status 60
Inbound EasyLink VPN Status 60
Outbound EasyLink VPN Status 60
Inbound EasyLink VPN 61
Add a New Account 61
Outbound EasyLink VPN 61
Edit Account 61
OpenVPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Summary 62
OpenVPN Server Status 62
OpenVPN Client Status 62
OpenVPN Server 62
Global Configure Settings 63
OpenVPN Client 65
Certificate Setting 65
Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
System Log 67
Syslog 67
E-mail Alert 67
Log Setting 67
System Statistics 68
Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Diagnostic 70
DNS Name Lookup 70
Ping 70
Factory Default 70
Firmware Upgrade 71
Restart 71
Backup and Restore 71
Restore Startup Configuration 71
Backup Configuration File 71
Copy Configuration File 71
Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

I
Introduction
Linksys
I
Introduction
LRT214/LRT224
Linksys’s VPN Routers for Small Business, LRT214 Gigabit VPN Router and LRT224
Dual WAN Gigabit VPN Router, support site-to-site VPN, which allows branch
offices to connect with the central office, and client-to-site VPN, which allows
employees to securely connect back to their offices while they are away. The
dual-WAN model supports WAN Failover, which allows a business to continue its
network operation when one of its WAN connections to the Internet fails. With
dual-WAN load balancing, the dual-WAN model can aggregate the bandwidths
of both WAN connections to achieve a higher Internet bandwidth than what a
single WAN connection can provide.
Employees increasingly demand remote access to enterprise IT resources
through their mobile devices such as smartphones and tablets. LRT214/LRT224
support OpenVPN server, which allows OpenVPN clients running on employees’
laptops, smartphones, and tablets to connect to the offices using two-factor
authentication. Two-factor authentication typically requires pre-installed
certificates as part of the authentication of an OpenVPN connection, in addition
to username/password, for additional security.
The products come with an integrated firewall that supports URL filtering
and access rules that allow administrators to further regulate the traffic within
the business network based on the services (i.e. TCP/UDP ports) and source/
destination IP addresses.
LRT214/LRT224 routers support 802.1q, which provides separation between
resources in different SSIDs/VLANs. This allows them to work with modern
wireless access points that support multiple SSIDs.. With inter-VLAN routing,
the products allow specified traffic to traverse between VLANs. The products
support dual stack IPv4 and IPv6, as well as transition technologies such as 6to4.
Like other Linksys routers, the products have an intuitive Web administrative
interface that allows small business owners to deploy and manage the routers
without professional IT staff onsite. The operational health of the products
can be monitored through system logs and email alerts. Standard MIBs are
supported, which allows the products to be monitored by a SNMP-based
network management system.

1
Hardware Installation
Linksys
1
Hardware Installation
Ports
LRT214
In this chapter we are going to introduce hardware interface as well as
physical installation.
LRT224
•WAN: The WAN ports can be connected with DSL or cable modems,
provided by your internet service provider (ISP).
•DMZ: Use the DMZ (Demilitarized Zone) port to connect to a DMZ host,
such as a Web server or mail server. Inbound traffic can access the DMZ
host without exposing your intranet.
•WAN/DMZ (LRT224):LRT224 Dual WAN Gigabit VPN Router comes with
a port you can configure as a second WAN port or DMZ port based on
your network requirements.
NOTE
Dual WAN settings, such as link failover or load balance, will be
disabled when you configure the port as DMZ port.
LAN (1~4):Use the LAN ports to connect devices such as switching hubs,
computers, printer servers, etc., to the local network or intranet.

2
Hardware Installation
Linksys
LED Indicators
Reset
Action Description
Press Reset Button For
5 Secs
Warm start
DIAG indicator: Diag LED flashing slowly
Press Reset Button
Longer than 10 Secs
Factory default
DIAG indicator: Diag LED flashing quickly
Placement Tips
•Do not place anything on top of the router. The router could be damaged
by excessive weight.
•Do not obstruct heat dissipation holes on the sides of the router.
•Do not expose to direct sunlight or other heat source. Keep area around
router adequately ventilated.
•Place the router on a flat surface.
Wall Mounting Tips
The router has two wall-mount slots on its bottom panel. When mounting the
router on the wall, please ensure that the heat dissipation holes are facing
sideways as shown in the following picture for safety reasons. Linksys is not
responsible for damages incurred by insecure wall-mounting hardware.
LED Name Color Description
System Green On: Power On
Blinking: System booting up
DIAG Amber
On: System not ready
Off: System ready
Blinking: System is on self-test
WAN Green/ Amber
Amber On: 10/100M link
Amber Blinking: 10/100M activity
Green On: Gigabit link
Green Blinking: Gigabit activity
WAN/DMZ Green/ Amber
Amber On: 10/100M link
Amber Blinking: 10/100M activity
Green On: Gigabit link
Green Blinking: Gigabit activity
VPN Green On: Designated VPN tunnel up
Off: Designated VPN tunnel down
1~4
Ethernet Green/ Amber
Amber On: 10/100M link
Amber Blinking: 10/100M activity
Green On: Gigabit link
Green Blinking: Gigabit activity

3
Getting Started with the Router Configuration
Linksys
3
Follow the instructions to configure your router.
1. Be sure your computer is connected to a LAN port on the router and set
to receive an automatic IP address from the DHCP server.
2. Open a Web browser and type 192.168.1.1 in the address bar.
3. On the login screen, type in default username: admin, and default
password: admin. Click Log In.
4. Launch Setup Wizard – on the System Status or Quick Start tab – to
complete configuration. Allow blocked content if asked.
5. The Configuration tab allows more control of your network based on
your management needs.
NOTE:
Windows users can find the router IP address through the DOS
prompt. Click on the Start button, enter “CMD”in the search field,
and type “ipconfig” at the prompt. The IP address is the Default
Gateway.
System Status
After logging in to the Web GUI, you will be directed to system status page,
where you can glance how the router is configured. You can click on the System
Status tab to view the current status of the router later on.
System Information
This section includes the following information:
Serial Number: Serial number of this router.
Firmware Version: Current firmware version.
Model Number: Model name of the router.
MD5 Checksum: A value used for validation of the firmware installed on
the router.
LAN:
IPv4/Subnet Mask
IPv6/Prefix
Current LAN IP address of the router.
Working Mode: Current working mode as Gateway or Router mode.
System Up Time: How long since the last restart (or power-up) of the router.
Getting Started with the Router Configuration

4
Getting Started with the Router Configuration
Linksys
Configuration
You may click Setup Wizard button to launch wizard.
Port Statistics
Port ID: ID of physical port.
Interface: Type of the port: LAN, WAN or DMZ.
Status: Status of the port: Disabled, Enabled or Connected.
Clicking on a port’s status will launch a window with statistics on that port.
Type: 10Base-T / 100 Base-TX / 1000 Base-TX.
Interface: LAN/WAN/DMZ.
Link Status: Up or down.
Port Activity: Port Enabled, Port Disabled, or Port
Connected.
Priority: High or Normal.
Speed Status: 10Mbps, 100Mbps or 1000Mbps.
Duplex Status : Half or Full.
Auto Negotiation : On or Off.
VLAN : VLAN ID.
This table also gives you the counts for packets received and sent, packet bytes
received and sent, and packet errors.
WAN Status
This section displays information for the WAN and DMZ interface.
NOTE:
You should enable Dual-Stack IP first to view IPv6 status. Please go
to Configuration > Network.
IP Address: WAN IP address.
Default Gateway: Default gateway IP address.
DNS: IP address of the DNS server.
Dynamic DNS: (IPv4 Only) Enabled or disabled.
Release: If the WAN type is “Obtain an IP address
automatically(DHCP),”this buttonwill appear.
Click Release to release the IP address.
Renew: If the WAN type is “Obtain an IP address
automatically (DHCP),” this button will
appear. Click Renew to update the IP address.

5
Getting Started with the Router Configuration
Linksys
Connect/ Disconnect: If the WAN type is PPPoE or PPTP, this button
will appear. Click Disconnect to cut the
connection from ISP server. Click Connect to
re-dial to the server.
DMZ Status:
NOTE:
It is recommended to designate the configurable port on the
LRT224 as a DMZ port. Go to Device Configuration > Network and
check the Enable DMZ box.
IP Address: IP address of DMZ port.
DMZ Host: Private IP of DMZ host.
Firewall Settings
This section displays the current firewall settings:
SPI (Stateful Packet Inspection): Default configuration is On.
DoS (Denial of Service): Default configuration is On.
Block WAN Request: Default configuration is On.
Remote Management: Default configuration is Off.
Access Rule: The number of access rules configured
in the router.
VPN Settings
Tunnel(s) Used: Number of tunnels configured.
Tunnel(s) Available: Number of tunnels the router supports.
OpenVPN Status
Tunnel(s) Used: Number of OpenVPN tunnels configured.
Tunnel(s) Available: Number of OpenVPN tunnels the router supports.
Log Setting Status
This section displays the following information:
Syslog Server: Indicates whether Syslog server is activated.
Email Log: Indicates whether Email Log is activated.

6
Getting Started with the Router Configuration
Linksys
Quick Start (Setup Wizard)
Click the Quick Start tab to access Basic Setup Wizard. The setup wizard will
help you set up your network easily and finish basic network settings.
Basic Setup
Click Launch Now to run the Basic Setup Wizard. Refer to the information from
your ISP to enter the required settings for your connection.
You can configure Host and Domain, WAN setting, LAN setting, Time and
Password here. Click Finish button to leave the wizard.