EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Table of Contents Chapter 1: Introduction Welcome What’s in this Guide? Chapter 2: Your Virtual Private Network (VPN) Why do I need a VPN? What is a Virtual Private Network? Computer (using VPN client software that supports IPSec) to VPN Router Chapter 3: Getting to Know the Router The Back Panel The Front Panel...
Page 4
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch The Status tab Appendix A: Troubleshooting Common Problems and Solutions Frequently Asked Questions Appendix B: Upgrading Firmware Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter 60 Windows 98 or Me Instructions Windows 2000 or XP Instructions For the Router’s Web-based Utility Appendix D: Windows Help...
Page 5
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch List of Figures Figure 2-1: VPN Router to VPN Router Figure 2-2: Computer to VPN Router Figure 3-1: Back Panel Figure 3-2: Front Panel Figure 4-1: Example of a Typical Network Figure 4-2: Connect a PC Figure 4-3: Connect the Internet Figure 4-4: Connect the Power Figure 5-1: Router’s IP Address for Basic Setup...
Internet connection At the core of this Router, is a standard, Linksys Router, providing you the ability to share your broadband, Internet access within your network. This also comes with the protection of a firewall and the easy setup and firewall: a set of related programs located at a configuration you’ve come to expect from a Linksys Router.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch What’s in this Guide? This user guide covers everything you’ll need to know about the Router. In addition to giving directions in the Chapters about how to set it up and use it, serveral Appendices are provided for further information. •...
Page 9
• Appendix K: Regulatory Information This appendix supplies the regulatory information regarding the Router. • Appendix L: Contact Information This appendix provides contact information for a variety of Linksys resources, including Technical Support. Chapter 1: Introduction What’s in this Guide?
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Chapter 2: Your Virtual Private Network (VPN) Why do I need a VPN? vpn (Virtual Private Network): a security Computer networking provides a flexibility not available when using an archaic, paper-based system. With this measure to protect data as it leaves one flexibility, however, comes an increased risk in security.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch data to a new destination. Even though the data is not received by its intended recipient, it appears that way to the person sending the data. These are only a few of the methods hackers use and they are always developing more. Without the security of your VPN, your data is constantly open to such attacks as it travels over the Internet.
For additional information and instructions about creating your own VPN, please visit Linksys’s website at www.linksys.com or refer to “Appendix F: Configuring IPSec between a Windows 2000 or XP PC and the VPN Router.”...
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Chapter 3: Getting to Know the Router The Back Panel The Router’s ports and the Reset button are located on the back panel of the Router. Figure 3-1: Back Panel Internet This Internet port connects to your cable or DSL modem. port: the connection point on a computer or networking device used for plugging in cables or adapters These four Ethernet ports connect to network devices, such as PCs, print servers, or...
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch The Front Panel The Router’s LEDs, which inform you about network activities, are located on the front panel. Figure 3-2: Front Panel Power Green. The Power LED lights up when the Router is powered on. If the LED is flashing, the Router is running a diagnostic test.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Chapter 4: Connecting the Router Overview To set up your network, do the following: • Connect the Router to one of your PCs. IP Address: the address used to identify a • If necessary, configure your PCs to obtain an IP address automatically from the Router. (By default, Windows computer or device on a network 98, 2000, Millennium, and XP computers are set to obtain an IP address automatically, so unless you have changed the default setting, then you will not need to configure your PCs.)
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Connection Instructions 1. Before you begin, make sure that all of your hardware is powered off, including the Router, PCs, hubs, switches, and cable or DSL modem. 2. Connect one end of an Ethernet network cable to one of the numbered ports on the back of the Router. Connect the other end to an Ethernet port on a network device, e.g., a PC, print server, hub, or switch.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Chapter 5: Configuring the Router Note: The directions included in this Chapter are meant for quick configuration of the Router and do not include all you need to know to use all of the Router’s functions. Complete directions on all of the Router’s functions, configured through the Web-based Utility, can be found in Chapter 6: Using the Router’s Web-based Utility.
Page 18
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch 3. The Router configuration screen will appear with the Setup tab selected. Based on the setup instructions from your ISP, you may need to provide the following information. Host Name and Domain Name: These fields allow you to provide a host name and domain name for the domain: a specific name for a network of computers Router.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Obtain an IP Automatically - DHCP If your ISP says that you are connecting through DHCP or a dynamic IP address from your ISP, perform these steps: A. Select Obtain an IP automatically as the Connection Type. B.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch PPPoE If your DSL provider says that you are connecting through PPPoE or if you normally enter a user name and password to access the Internet, perform these steps: A. Select PPPoE as the Connection Type. B.
7. Restart your computers so that they can obtain the Router’s new settings. If you need advanced setting information, please refer to “Chapter 6: Using the Router’s Web-based Utility” or the Linksys support website at support.linksys.com. Congratulations! You’ve successfully configured the Router. Test the setup by opening your web browser from any computer and entering www.linksys.com/registration.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Chapter 6: Using The Router’s Web-based Utility Overview For your convenience, use the Router’s Web-based Utility to administer it. This chapter will explain all of the functions in this Utility. The Utility can be accessed via Microsoft Internet Explorer or Netscape Navigator through use of a computer connected with an Ethernet cable to the Router.
Page 23
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch • VPN. To enable and setup VPN Passthrough and configure up to 50 VPN tunnels, use this screen. Access Restrictions • Internet Access. From this screen, you will be able to manage Internet access, blocking websites, from your network.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Accessing the Utility To access the Web-based Utility of the Router, launch Internet Explorer or Netscape Navigator, and enter the Router’s default IP address, 192.168.1.1, in the Address field. Press the Enter key. Figure 6-1: The Router’s IP Address A screen will appear asking you for your User name and Password.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Basic Setup Internet Setup This section allows you to select the type of Internet setup and connection your network employs. The Router supports six connection types: Obtain an IP automatically (DHCP), Static IP, PPPoE, RAS, PPTP, and Heart Beat Signal.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Primary DNS and Secondary DNS. Your ISP will provide you with at least one DNS (Domain Name System) Server IP Address. Host Name/Domain Name. Enter a Host Name and Domain Name if required by your ISP. MTU.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Connection Type: RAS (for SingTel) Remote Access Service (RAS) is a service that applies to connections in Singapore only. For users in Singapore, check with Singtel for information on RAS. User Name and Password. Enter the User Name and Password supplied by Singtel. RAS Plan.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Connection Type: PPTP Point to Point Tunneling Protocol (PPTP) is a service that applies to connections in Europe and Israel only. IP Address. This is the IP address that the Router has, when seen from the Internet. Your ISP will provide you with the IP Address you need to specify here.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Connection Type: Heart Beat Signal Heart Beat Signal is a service used in Australia only. If you are using a Heart Beat Signal connection, check with your ISP for the necessary setup information. User Name and Password.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Network Setup Router IP The values for the Router’s Local IP Address and Subnet Mask are shown here. In most cases, keeping the default values will work. Local IP Address. The default value is 192.168.1.1. Subnet Mask.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch DDNS The Router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP address. It is useful when you are hosting your own website, FTP server, or other server behind the Router.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Advanced Routing The Advanced Routing screen allows you to configure the Network Address Translation (NAT), dynamic routing, and static routing settings. Dynamic Routing NAT. NAT is a security feature that is enabled by default. It enables the Router to translate IP addresses of your local area network to a different IP address for the Internet.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Subnet Mask. The Subnet Mask (also known as the Network Mask) determines which portion of an IP address is the network portion, and which portion is the host portion. Take, for example, a network in which the Subnet Mask is 255.255.255.0.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch The Security tab The Security tab is the second tab listed atop the Web-based Utility. This tab is divided into two screens: Firewall and VPN. Each of these screens is described in detail below. Firewall When you click Security, you will see the Firewall screen.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch PPTP Pass Through. Point-to-Point Tunneling Protocol Passthrough is the method used to enable VPN sessions to a Windows 2000 server. To allow PPTP Passthrough, click the Enabled button. To disable PPTP Passthrough, click the Disabled button. When finished making your changes on this screen, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Any. If you select Any for the Remote Security Group, the local VPN Router will accept a request from any IP address. This setting should be chosen when the other endpoint is using DHCP or PPPoE on the Internet side. Remote Security Gateway The Remote Security Gateway is the VPN device, such as a second VPN Router, on the remote end of the VPN tunnel.
Page 37
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Key Management In order for any encryption to occur, the two ends of the tunnel must agree on the type of encryption and the way the data will be decrypted. This is done by sharing a “key” to the encryption code. Under Key Management, you may choose automatic or manual key management.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Advanced VPN Tunnel Setup From the Advanced Settings screen you can adjust the settings for specific VPN tunnels. Phase 1. Phase 1 is used to create a security association (SA), often called the IKE SA. After Phase 1 is completed, Phase 2 is used to create one or more IPSec SAs, which are then used to key IPSec sessions.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Unauthorized IP Blocking. Check this box to block unauthorized IP addresses. Complete the on-screen sentence to specify how many times IKE must fail before blocking that unauthorized IP address for a length of time that you specify (in seconds).
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch The Applications & Gaming tab The Applications & Gaming tab allows you to manage ports that are used for various applications and gaming over the Internet. Port Range Forwarding When you click the Applications & Gaming tab, you will see the Port Range Forwarding screen. Port Range Forwarding sets up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Port Triggering The Port Triggering screen allows the Router to watch outgoing data for specific port numbers. The IP address of the computer that sends the matching data is remembered by the Router, so that when the requested data returns through the Router, the data is pulled back to the proper computer by way of IP address and port mapping rules.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch UPnP Forwarding The UPnP Forwarding screen displays preset application settings as well as options to customize port services for other applications. UPnP Forwarding Application. This provides ten preset applications. You can specify up to five additional applications in the available fields.
Page 43
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch NNTP (Network News Transfer Protocol). The protocol used to connect to Usenet groups on the Internet. nntp (Network News Transfer Protocol): The protocol used Usenet newsreaders support the NNTP protocol. to connect to Usenet groups on the Internet SNMP (Simple Network Management Protocol).
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch The DMZ screen allows one local user to be exposed to the Internet for use of a special-purpose service such as Internet gaming and videoconferencing. Whereas Port Range Forwarding can only forward a maximum of 10 ranges of ports, DMZ hosting forwards all the ports for one PC at the same time.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch The Administration tab Management When you click the Administration tab, you will see the Management screen. This screen allows you to change the Router’s access settings as well as configure the UPnP (Universal Plug and Play) features. Gateway Password Local Gateway Access To ensure the Router’s security, you will be asked for your password when you access the Router’s Web-...
Figure 6-27: Administration tab - Log is downloadable from the Linksys website, www.linksys.com. The Logviewer saves all incoming and outgoing activity in a permanent file on your PC’s hard drive. In the Logviewer IP Address field, enter the fixed IP address of the PC running the Logviewer software.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Diagnostics Diagnostics allow you to check the connections of your network components as well as locations outside your network via the Internet. Ping Target IP. This is the IP Address of the PC or network component, or location outside of your network, that you wish to test.
Firmware Upgrade The Firmware Upgrade screen allows you to upgrade the Router’s firmware. Before upgrading the firmware, download the Router’s firmware upgrade file from the Linksys website, www.linksys.com. Then extract the file. File Path. In the field provided, enter the name of the extracted firmware upgrade file, or click the Browse button to find this file.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch The Status tab When you click the Status tab, you will see the Gateway screen. It displays information about the Router and its settings. Gateway Gateway Information Hardware Version. This displays the Router’s model number. Software Version.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Local Network The Local Network screen displays information about the local network. Local MAC Address. The MAC Address of the Router’s LAN (local area network) interface is displayed here. IP Address. The Router’s local IP Address is shown here. Subnet Mask.
Provided are possible solutions to problems regarding the installation and operation of the Router. If your situation is described here, the problem should be solved by applying the corresponding solution. If you can’t find an answer here, check the Linksys website at www.linksys.com. Common Problems and Solutions 1.
Page 52
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch For Windows 2000: A. Click Start, Settings, and open the Control Panel. Double-click Network and Dial-Up Connections. B. Right-click the Local Area Connection that is associated with the Ethernet adapter you are using, and select the Properties option.
Page 53
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch 2. I want to test my Internet connection. A. Check your TCP/IP settings. If you do not know how to do this, refer to Appendix D: Windows Help. B. Open a command prompt. •...
Page 54
Refer to “Problem #7, I need to set up online game hosting or use other Internet applications” for details. Check the Linksys website for more information at www.linksys.com. 6. I need to set up a server behind my Router.
Page 55
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch A. Access the Router’s Web-based Utility by going to http://192.168.1.1 or the IP address of the Router. Go to the Applications & Gaming => Port Range Forwarding tab. B. Enter any name you want to use for the Application. C.
Page 56
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch E. Enter the IP address of the PC or network device that you want the port server to go to. For example, if the web server’s Ethernet adapter IP address is 192.168.1.100, you would enter 100 in the field provided. Check “Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter”...
Page 57
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch 9. I forgot my password, or the password prompt always appears when saving settings to the Router. Reset the Router to factory default by pressing the Reset button for 30 seconds and then releasing it. If you are still getting prompted for a password when saving settings, then perform the following steps: A.
Page 58
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch 12. I need to upgrade the firmware. In order to upgrade the firmware with the latest features, you need to go to the Linksys website and download the latest firmware at www.linksys.com. Follow these steps: A.
Page 59
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch 15. I can't access my email, web, or VPN, or I am getting corrupted data from the Internet. The Maximum Transmission Unit (MTU) setting may need to be adjusted. By default, the MTU is set at 1500. Most DSL users should use MTU 1492.
MIB (Management Information Base) is a data file that works in tangent with third-party SNMP software in managing the Router. To use MIB files in tangent with third-party SNMP software, follow the instructions that come with the thirty-party SNMP software. MIB data files will be available on the Linksys web site: www.linksys.com.
Page 61
ISP. Does the Router support any operating system other than Windows 98, Windows 2000,or Windows XP? Yes, but Linksys does not, at this time, provide technical support for setup, configuration or troubleshooting of any non-Windows operating systems.
Page 62
Force your Ethernet adapter to 10Mbps, and turn off the “Auto-negotiate” feature of your Ethernet adapter as a temporary measure. (Please look at the Network Control Panel in your Ethernet adapter’s Advanced Properties tab.) Make sure that your proxy setting is disabled in the browser. Check our website at www.linksys.com for more information.
Page 63
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch I am not able to access the Router’s Web-based Utility. What can I do? You may have to remove the proxy settings on your Internet browser, e.g., Netscape Navigator or Internet Explorer. Or remove the dial-up settings on your browser. Check with your browser documentation, and make sure that your browser is set to connect directly and that any dial-up is disabled.
Page 64
Internet Relay Chat program that runs under Windows Under the Port Range Forwarding tab, set port forwarding to 113 for the PC on which you are using mIRC. If your questions are not addressed here, refer to the Linksys website, www.linksys.com. Appendix A: Troubleshooting...
Router. To upgrade the Router’s firmware, follow these instructions: 1. Download the Router’s firmware upgrade file from the Linksys website, www.linksys.com. 2. Extract the file on your computer. 3. Click the Administration tab and then the Firmware Upgrade tab of the Router’s Web-based Utility.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter This section describes how to find the MAC address for your computer’s Ethernet adapter so you can use the MAC filtering and/or MAC address cloning feature of the Router.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch 3. Write down the Physical Address as shown on your computer screen; it is the MAC address for your Ethernet adapter. This appears as a series of numbers and letters. The MAC address/Physical Address is what you will use for MAC address cloning or MAC filtering. Note: The MAC address is also called the Physical Address.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Appendix D: Windows Help All networking products require Microsoft Windows. Windows is the most used operating system in the world and comes with many features that help make networking easier. These features can be accessed through Windows Help and are described in this appendix.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Appendix E: Maximizing VPN Security Just as you maximized your network security with a firewall router, you should also maximize security for your data with the VPN Router. IPSec is compatible with most VPN endpoints and ensures privacy and authentication for data, while authenticating user identification.
Page 70
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch 4. Maximize encryption and authentication. Use 3DES encryption and SHA authentication whenever possible. 5. Manage your pre-shared keys. Change pre-shared keys regularly. Data transmission over the Internet is a hole in network security that is often overlooked. With VPN maximized, along with the use of a firewall router and wireless security, you can secure your data even when it leaves your network.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Appendix F: Creating a VPN Tunnel between two VPN Routers NOTE: Further details on this step can be found in the VPN Tab section in “Chapter 6: Using the Router’s Web-Based Utility”. 1.
EtherFast Cable/DSL WPN Router with 4-Port 10/100 Switch Appendix G: SNMP Functions SNMP (Simple Network Management Protocol) is a widely-used network monitoring and control protocol. Data is passed from a SNMP agent, such as the VPN Router, to the workstation console used to oversee the network. The Router then returns information contained in a MIB (Management Information Base), which is a data structure that defines what is obtainable from the device and what can be controlled (turned off, on, etc.).
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Appendix H: Glossary Adapter - A device that adds network functionality to your PC. Bit - A binary digit. Boot - To start a device and cause it to start executing instructions. Bridge - A device that interconnects different networks together.
Page 74
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch DSL (Digital Subscriber Line) - An always-on broadband connection over traditional phone lines. Dynamic IP Address - A temporary IP address assigned by a DHCP server. Encryption - Encoding data transmitted in a network. Ethernet - IEEE standard network protocol that specifies how data is placed on and retrieved from a common transmission medium.
Page 75
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Mbps (MegaBits Per Second) - One million bits per second; a unit of measurement for data transmission. mIRC - An Internet Relay Chat program that runs under Windows. Multicasting - Sending data to a group of destinations at once. NAT (Network Address Translation) - NAT technology translates IP addresses of a local area network to a different IP address for the Internet.
Page 76
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Static Routing - Forwarding data in a network via a fixed path. Subnet Mask - An address code that determines the size of the network. Switch - 1. A data switch that connects computing devices to host computers, allowing a large number of devices to share a limited number of ports.
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Appendix I: Specifications Model Number: BEFVP41 Standards: IEEE 802.3 (10BaseT), IEEE 802.3u (100BaseTX) Protocol: CSMA/CD VPN Encryption: DES (56-bit), 3DES (168-bit) VPN Authentication: MD5, SHA Ports: Internet: One 10Base-T RJ-45 Port Local Network: Four 10/100 RJ-45 Ports Cabling Type: 10BaseT:...
Page 78
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Dimensions: 7.31" x 6.06" x 1.88" (186 mm x 154 mm x 48 mm) Unit Weight: 12.8 oz. (0.36 kg) Power: External, 5V DC, 2.1 A Certifications: FCC Class B, CE Mark Operating Temp.: 0ºC to 45ºC (32ºF to 113ºF) Storage Temp.:...
Your exclusive remedy and Linksys' entire liability under this warranty will be for Linksys at its option to repair or replace the Product or refund Your purchase price less any rebates.
Canadian regulations. EC DECLARATION OF CONFORMITY (EUROPE) Linksys declares that the Wireless-G ADSL Gateway conforms to the specifications listed below, following the provisions of the European R&TTE directive 1999/5/EC: EN 301 489-1, 301 489-17 General EMC requirements for Radio equipment.
Page 81
Linksys vakuuttaa täten että Wireless-G ADSL Gateway tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien näiden direktiivien muiden ehtojen mukainen. Linksys Group déclare la Passerelle ADSL sans fil-G est conforme aux conditions essentielles et aux dispositions relatives à la directive 1999/5/EC.
Page 82
EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch An FCC compliant telephone cord and modular plug is provided with this equipment. This equipment is designed to be connected to the telephone network or premises wiring using a compatible modular jack, which is FCC Part 68 compliant.
Can't find information about a product you want to buy on the web? Do you want to know more about networking with Linksys products? Give our advice line a call at: 800-546-5797 (LINKSYS) Or fax your request in to:...