Linksys BEFVP41 User Manual page 17

Establishing a Tunnel
The VPN Router creates a tunnel or channel between two endpoints, so that the
data or information between these endpoints is secure. To establish this tunnel,
select the tunnel you wish to create in the Select Tunnel Entry drop-down box.
It is possible to create up to 70 simultaneous tunnels.
Then check the box next to Enable to enable the tunnel.
Once the tunnel is enabled, enter the name of the tunnel in the Tunnel Name
field. This is to allow you to identify multiple tunnels and does not have to
match the name used at the other end of the tunnel.
Local Secure Group and Remote Secure Group
The Local Secure Group is the computer(s) on your LAN that can access the
tunnel. The Remote Secure Group is the computer (s) on the remote end of
the tunnel that can access the tunnel. Under Local Secure Group and Remote
Secure Group, you may choose one of three options: Subnet, IP Address, and
IP Range. Under Remote Secure Group, you have two additional options: Host
and Any.
Note: The IP Addresses and Subnet Mask values used here are for example
only. Do not try to use them for your actual setup. Obtain the relevant infor-
mation from your own network to accurately configure the Router.
• Subnet - If you select Subnet (which is the default), this will allow all
computers on the local subnet to access the tunnel. In the example shown
in Figure 6-9, all Local Secure Group computers with IP Addresses
192.168.1.xxx will be able to access the tunnel. All Remote Secure Group
computers with IP Addresses 192.168.2.xxx will be able to access the tun-
nel (in your settings, use the IP Addresses appropriate for your VPN).
When using the Subnet setting, the default values of 0 should remain in
the last fields of the IP and Mask settings.
26
Instant Broadband
Figure 6-9
® Series EtherFast
Note: It is possible to set up the VPN Router using any combination of the
three settings under Local Secure Group and the five settings under
Remote Secure Group. For instance, when Subnet is chosen on the local
end of the tunnel, Subnet does not have to be chosen at the remote end. So
a single IP Address could be chosen to access the tunnel on the local end
and a range of IP Addresses could be set at the remote end of the tunnel.
• IP Address - If you select IP Address, only the computer with the spe-
cific IP Address that you enter will be able to access the tunnel. In the
example shown in Figure 6-10, only the computer with IP Address
192.168.1.10 can access the tunnel from this end. Only the computer with
IP Address 192.168.2.12 can access the tunnel from the remote end (in
your settings, use the IP Addresses appropriate for your VPN).
• IP Range - If you select IP Range, it will be a combination of Subnet and
IP Address. You can specify a range of IP Addresses within the Subnet
which will have access to the tunnel. In the example shown in Figure 6-
11, all computers on this end of the tunnel with IP Addresses between
192.168.1.1 and 192.168.1.20 can access the tunnel from the local end.
Only computers assigned an IP Address between 192.168.2.1 and
192.168.2.100 can access the tunnel from the remote end (in your set-
tings, use the IP Ranges appropriate for your VPN).
® Cable/DSL VPN Router with 4-Port 10/100 Switch
Figure 6-10
Figure 6-11
27