Linksys BEFVP41 - EtherFast Cable/DSL VPN Router User Manual

Etherfast cable/dsl vpn router with 4-port switch
Hide thumbs Also See for BEFVP41 - EtherFast Cable/DSL VPN Router:

Advertisement

USER GUIDE
EtherFast
Cable/DSL VPN Router
®
with 4-Port Switch
BEFVP41
Model:

Advertisement

Table of Contents
loading

Summary of Contents for Linksys BEFVP41 - EtherFast Cable/DSL VPN Router

  • Page 1 USER GUIDE EtherFast Cable/DSL VPN Router ® with 4-Port Switch BEFVP41 Model:...
  • Page 2: About This Guide

    Network Security www.linksys.com/security Copyright and Trademarks Linksys, EtherFast, Cisco, and the Cisco Logo are registered trademarks or trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright © 2008 Cisco Systems, Inc. All rights reserved.
  • Page 3: Table Of Contents

    Table of Contents Chapter 1: Introduction Introduction to VPNs ......... . . 1 VPN Examples.
  • Page 4 Software in Linksys Products ........
  • Page 5: Chapter 1: Introduction

    The following are examples of a VPN tunnel between two VPN routers and a VPN tunnel between a computer using VPN client software and a VPN router. Thank you for choosing the Linksys by Cisco EtherFast VPN Router to VPN Router Cable/DSL VPN Router with 4-Port Switch. The Router...
  • Page 6: Vpn Security

    For additional information and instructions about creating periodically. your own VPN, refer to “Appendix B: VPN Tunnel” or visit the Linksys website at www.linksys.com. VPN Security IPSec is compatible with most VPN endpoints and ensures privacy and authentication for data, while authenticating user identification.
  • Page 7: Chapter 2: Product Overview

    Product Overview Chapter 2 Chapter 2: Back Panel Product Overview Front Panel Reset There are two ways to reset the Router to its factory default settings. Use a straightened paper clip or similar object to press and hold the Reset button for approximately five seconds. You can also restore the defaults from the Power (Green) The Power LED lights up and...
  • Page 8: Chapter 3: Advanced Configuration

    Advanced Configuration Chapter 3 Chapter 3: Advanced Configuration After setting up the Router with the Setup Wizard (located on the CD-ROM), the Router will be ready for use. However, if you’d like to change its advanced settings, use the Router’s web-based utility. This chapter describes each web page of the utility and each page’s key functions.
  • Page 9 Advanced Configuration Chapter 3 Static IP before your Internet connection terminates. The default Max Idle Time is 5 minutes. If you are required to use a permanent IP address to Keep Alive: Redial Period If you select this option, connect to the Internet, select Static IP. the Router will periodically check your Internet connection.
  • Page 10 Advanced Configuration Chapter 3 PPTP Point-to-Point Tunneling Protocol (PPTP) is a service that applies to connections in Europe only. Connection Type > Heart Beat Signal User Name and Password Enter the User Name and Password provided by your ISP. Heart Beat Server Enter the IP address of your ISP’s Heart Beat server.
  • Page 11: Setup > Ddns

    Advanced Configuration Chapter 3 Router select the best MTU for your Internet connection, amount of time, in minutes, that the user will be “leased” keep the default setting, Automatic. this dynamic IP address. After the time is up, the user will be automatically assigned a new dynamic IP address.
  • Page 12: Setup > Mac Address Clone

    Advanced Configuration Chapter 3 Setup > MAC Address Clone Advanced Routing A MAC address is a 12-digit code assigned to a unique Dynamic Routing piece of hardware for identification. Some ISPs will require If this Router is hosting your network’s connection to you to register a MAC address in order to access the the Internet, keep the default, Enabled.
  • Page 13: Security > Firewall

    Advanced Configuration Chapter 3 Block WAN Requests Routing Table Block Anonymous Internet Requests For each route, the Destination LAN IP address, Subnet This feature Mask, Gateway, Hop Count, and Interface are displayed. makes it more difficult for outside users to work their Click Refresh to update the information.
  • Page 14 Advanced Configuration Chapter 3 VPN Tunnel IP Address Only the computer with a specific IP address will be able The Router creates a tunnel between two endpoints, to access the tunnel. so that the data traveling between these endpoints is secure.
  • Page 15 Advanced Configuration Chapter 3 for a specific computer on the Internet (for example: encryption keys will not be able to obtain future IPSec keys. vpn.myvpnserver.com). Select Enabled to ensure that the initial key exchange and IKE proposals are secure. Pre-shared Key This specifies the pre-shared key used The remote VPN Router will accept a request from any to authenticate the remote IKE peer.
  • Page 16: Access Restrictions

    Advanced Configuration Chapter 3 Key Lifetime Enter the number of seconds you want the key to last before a re-key negotiation between each endpoint is completed. The default is 3600 seconds. Phase 2 The Encryption, Authentication, and PFS settings are automatically displayed.
  • Page 17: Applications And Gaming > Port Range Forwarding

    Advanced Configuration Chapter 3 Select any Blocked Services and enter a range of ports in the fields provided. If the service you want to block is not listed or you want to edit a service’s settings, then click Add/Edit Service. If you want to block websites with specific URL addresses, enter each URL in a separate field next to Website Blocking by URL Address.
  • Page 18: Applications & Gaming > Port Triggering

    Advanced Configuration Chapter 3 Start and End Enter the number or range of port(s) Click Save Settings to apply your changes, or click Cancel used by the server or Internet applications. Check Changes to cancel your changes. with the Internet application documentation for more information.
  • Page 19: Applications And Gaming > Dmz

    Advanced Configuration Chapter 3 Applications and Gaming > DMZ TFTP (Trivial File Transfer Protocol) - A version of the TCP/IP FTP protocol that has no directory or password capability. The DMZ feature allows one network computer to be Finger - A UNIX command widely used on the Internet exposed to the Internet for use of a special-purpose to find out information about a particular user, such as a service such as Internet gaming or videoconferencing.
  • Page 20: Administration > Log

    Advanced Configuration Chapter 3 Data is passed from an SNMP agent, such as the Router, to the workstation console used to oversee the network. The Router then returns information contained in a Management Information Base (MIB), a data structure that defines what is obtainable from the device and what can be controlled.
  • Page 21: Administration > Diagnostics

    Cancel Changes to return these settings to logs, the Logviewer software must be used. Download their previous configuration. this software from the Linksys website, www.linksys.com. Administration > Factory Defaults The Logviewer software saves all incoming and outgoing activity in a permanent file on your computer’s hard drive.
  • Page 22: Administration > Firmware Upgrade

    This section shows the current network information Before upgrading the firmware, download the Router’s stored in the Router. The information varies depending on firmware upgrade file from the Linksys website, the Internet connection type selected on the Basic Setup www.linksys.com. Then extract the file.
  • Page 23 Advanced Configuration Chapter 3 Local Network Local MAC Address The MAC address of the Router’s local interface is displayed. IP Address The local IP address of the Router is displayed. Subnet Mask The Subnet Mask of the Router is displayed. DHCP Server The status of the Router’s DHCP server function is displayed.
  • Page 24: Appendix A: Troubleshooting

    Internet. WEB: If your questions are not addressed here, refer to the Linksys website, www.linksys.com. After you have installed the Router, it will automatically connect to your Internet Service Provider (ISP), so you no longer need to connect manually.
  • Page 25: Appendix B: Vpn Tunnel

    VPN Tunnel Appendix B Appendix B: VPN Tunnel Overview This appendix describes an example of how to set up a VPN tunnel between two VPN Routers. Refer to “Chapter 3: Advanced Configuration” for more information. Instructions 192.168.1.1 in the Open your web browser, and enter Address field.
  • Page 26: Appendix C: Specifications

    Specifications Appendix C Appendix C: Specifications Model BEFVP41 Standards IEEE 802.3 (10BaseT), IEEE 802.3u (100BaseTX) VPN Encryption DES (56-bit), 3DES (168-bit) VPN Authentication MD5, SHA Ports Internet: One 10/100 RJ-45 Port Local Network: Four 10/100 RJ-45 Ports Cabling Type UTP Category 5 or Better LEDs Power, Ethernet (1-4), Internet Environmental...
  • Page 27: Appendix D: Warranty Information

    Linksys’ entire liability under this limited warranty jurisdiction. will be for Linksys, at its option, to (a) repair the product TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT with new or refurbished parts, (b) replace the product...
  • Page 28 This limited warranty is governed by the laws of the jurisdiction in which the Product was purchased by you. Please direct all inquiries to: Linksys, P.O. Box 18558, Irvine, CA 92623. EtherFast Cable/DSL VPN Router with 4-Port Switch...
  • Page 29: Appendix E: Regulatory Information

    Regulatory Information Appendix E Appendix E: Industry Canada Statement Regulatory Information This Class B digital apparatus complies with Canadian ICES-003. Operation is subject to the following two conditions: FCC Statement This device may not cause interference and This product has been tested and complies with the This device must accept any interference, including specifications for a Class B digital device, pursuant to Part interference that may cause undesired operation of...
  • Page 30: User Information For Consumer Products Covered By Eu Directive 2002/96/Ec On Waste Electric And Electronic Equipment (Weee)

    úřady. Správná likvidace a recyklace pomáhá předcházet Linksys products. Consumers are required to comply with potenciálním negativním dopadům na životní prostředí a lidské this notice for all electronic products bearing the following zdraví.
  • Page 31 Regulatory Information Appendix E Eesti (Estonian) - Keskkonnaalane informatsioon Français (French) - Informations environnementales Euroopa Liidus asuvatele klientidele pour les clients de l’Union européenne Euroopa Liidu direktiivi 2002/96/EÜ nõuete kohaselt on La directive européenne 2002/96/CE exige que l’équipement seadmeid, millel on tootel või pakendil käesolev sümbol sur lequel est apposé...
  • Page 32 Regulatory Information Appendix E Lietuvškai (Lithuanian) - Aplinkosaugos informacija, Nederlands (Dutch) - Milieu-informatie voor klanten skirta Europos Sąjungos vartotojams in de Europese Unie Europos direktyva 2002/96/EC numato, kad įrangos, kuri ir De Europese Richtlijn 2002/96/EC schrijft voor dat apparatuur die kurios pakuotė...
  • Page 33 ľudí. Ak máte záujem o podrobnejšie informácie o likvidácii starého zariadenia, obráťte sa, prosím, na WEB: For additional information, please visit miestne orgány, organizácie zaoberajúce sa likvidáciou odpadov www.linksys.com alebo obchod, v ktorom ste si produkt zakúpili. EtherFast Cable/DSL VPN Router with 4-Port Switch...
  • Page 34: Software In Linksys Products

    Schedules 2, 3 or 4 below as applicable. “Software” includes, and this Agreement will apply to BY DOWNLOADING OR INSTALLING THE SOFTWARE, (a) the software of Linksys or its suppliers provided in or OR USING THE PRODUCT CONTAINING THE SOFTWARE, with the applicable Linksys product, excluding technology...
  • Page 35 Schedule 2 are from the public web site at of the GPL or other open source code in this Software on a http://www.gnu.org/copyleft/gpl.html CD, Linksys will mail to You a CD with such code for $9.99 plus the cost of shipping, upon request. GNU GENERAL PUBLIC LICENSE Term and Termination.
  • Page 36 Software License Agreement Appendix F GNU General Public License is intended to guarantee your TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND freedom to share and change free software–to make sure MODIFICATION the software is free for all its users. This General Public This License applies to any program or other work License applies to most of the Free Software Foundation’s which contains a notice placed by the copyright...
  • Page 37 Software License Agreement Appendix F If the modified program normally reads commands Accompany it with the information you received as interactively when run, you must cause it, when to the offer to distribute corresponding source code. started running for such interactive use in the most (This alternative is allowed only for noncommercial ordinary way, to print or display an announcement distribution and only if you received the program...
  • Page 38 General Public License from time to time. Such new versions will be similar in If this Linksys product contains open source software spirit to the present version, but may differ in detail to licensed under Version 2.1 of the “GNU Lesser General Public address new problems or concerns.
  • Page 39 Software License Agreement Appendix F GNU LESSER GENERAL PUBLIC LICENSE To protect each distributor, we want to make it very clear that there is no warranty for the free library. Also, if the Version 2.1, February 1999 library is modified by someone else and passed on, the recipients should know that what they have is not the Copyright (C) 1991, 1999 Free Software Foundation, Inc.
  • Page 40 Software License Agreement Appendix F freedom and the wherewithal to run that program using a You may copy and distribute verbatim copies of the modified version of the Library. Library’s complete source code as you receive it, in any medium, provided that you conspicuously and The precise terms and conditions for copying, distribution appropriately publish on each copy an appropriate and modification follow.
  • Page 41 Software License Agreement Appendix F Thus, it is not the intent of this section to claim When a “work that uses the Library” uses material from rights or contest your rights to work written entirely a header file that is part of the Library, the object code by you;...
  • Page 42 Software License Agreement Appendix F Use a suitable shared library mechanism for linking You may not copy, modify, sublicense, link with, or with the Library. A suitable mechanism is one that distribute the Library except as expressly provided (1) uses at run time a copy of the library already under this License.
  • Page 43 If you wish to incorporate parts of the Library into other free programs whose distribution conditions are If this Linksys product contains open source software incompatible with these, write to the author to ask for licensed under the OpenSSL license: permission.
  • Page 44 Software License Agreement Appendix F OpenSSL License Original SSLeay License Copyright © 1998-2007 The OpenSSL Project. All rights Copyright © 1995-1998 Eric Young (eay@cryptsoft.com) reserved. All rights reserved. Redistribution and use in source and binary forms, with This package is an SSL implementation written by Eric or without modification, are permitted provided that the Young (eay@cryptsoft.com).
  • Page 45 Software License Agreement Appendix F DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Table of Contents