Linksys BEFVP41 User Manual
Linksys BEFVP41 User Manual

Linksys BEFVP41 User Manual

Instant broadband series etherfast cable/dsl vpn router with 4-port 10/100 switch
Hide thumbs Also See for BEFVP41:

Advertisement

Instant Broadband™ Series
®
EtherFast
Cable/DSL
VPN Router with
4-Port 10/100 Switch
Use this guide to install: BEFVP41
User Guide

Advertisement

Table of Contents
loading

Summary of Contents for Linksys BEFVP41

  • Page 1 Instant Broadband™ Series ® EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Use this guide to install: BEFVP41 User Guide...
  • Page 2 Linksys reserves the right to revise or update its products, software, or documentation without obligation to notify any individ- ual or entity.
  • Page 3: Table Of Contents

    Chapter 2: Getting to Know the EtherFast ® Appendix C: Configuring IPsec between a Cable/DSL VPN Router with 4-Port 10/100 Switch Microsoft Windows 2000 or XP PC and a Linksys The Cable/DSL VPN Router’s Rear Panel Cable/DSL VPN Router The Reset Button Introduction The Cable/DSL VPN Router’s Front Panel LEDs...
  • Page 4: Chapter 1: Introduction

    Cable/DSL VPN Router with 4-Port 10/100 Switch. The Instant Broadband™ EtherFast ® Cable/DSL VPN Router from Linksys is the perfect solution for sharing a high-speed broadband Internet connection while still maintaining the ultimate in network security. Utilizing 56-bit DES and 168-bit 3DES encryption, header authentication, and IKE key exchange access control, the EtherFast ®...
  • Page 5: Chapter 2: Getting To Know The Etherfast

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® Important: The Reset Button Chapter 2: Getting to Know the The Reset button can be used in one of two ways. ® EtherFast Cable/DSL VPN Router 1. If your Router is having problems connecting to the Internet, with 4-Port 10/100 Switch press the Reset button for just a moment with a paper clip or a pencil tip.
  • Page 6: Chapter 3: Connecting The Cable/Dsl Vpn Router To Your Network

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® Full/Col Green. The Full/Col LED also serves two purposes. If this Chapter 3: Connecting the LED is continuously illuminated, the connection made through the corresponding port is successfully running in Cable/DSL VPN Router to Your Full Duplex mode.
  • Page 7: Connecting Everything Together & Booting Up

    If your Internet home page address is some- modem connection. thing very simple, such as “www”, rather than “www.linksys.com”, or your e-mail server’s address is something similar to “e-mail” or 5. Connect the power adapter to the Power port on the rear panel of the “pop3”, rather than “pop.mail.linksys.com”, you won’t be able to...
  • Page 8: Chapter 4: Planning Your Virtual Private Network (Vpn)

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® 6. Turn on the cable or DSL modem. Chapter 4: Planning Your Virtual 7. Press the Reset button on the Router’s front panel with a paper clip or a Private Network (VPN) pencil.
  • Page 9: Chapter 5: Configuring Your Network With The Cable/Dsl Vpn Router

    For additional information and instructions about creating your own VPN, associated with your network card/adapter. If there is no TCP/IP line listed, please visit Linksys’s website at www.linksys.com. go to the Appendix to install the TCP/IP Protocol now. *Distances are examples only; VPNs have no distance limitations.
  • Page 10: Configuring The Cable/Dsl Vpn Router

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® 4. Click the Properties button, and then choose the IP Address tab. Select Configuring the Cable/DSL VPN Router Obtain an IP address automatically. Click the OK button. You have com- pleted the client settings.
  • Page 11 Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® 3. The Cable/DSL VPN Router with 4-Port 10/100 Switch’s Setup page will WAN IP Address These values refer Important: If you have an appear. to the outside network you connect existing DHCP server on to every time you access your your LAN and you don’t...
  • Page 12: Chapter 5: The Cable/Dsl Vpn Router's Web-Based Utility

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® 7. Unless you already have a DHCP server on your internal network, choose Chapter 6: The Cable/DSL VPN Enable from the DHCP Server field. By choosing Enable, you will config- ure the Router to automatically assign IP addresses to each of your PCs.
  • Page 13: Setup

    • Firmware Version This entry shows the version of the firmware you are using. Future versions of the Router’s Firmware may be available on the Linksys website at www.linksys.com. • LAN IP Address The IP Address and Subnet Mask of the Router as it is seen on the internal LAN.
  • Page 14: Vpn

    Instant Broadband™ Series EtherFast ® Cable/DSL VPN Router with 4-Port 10/100 Switch Establishing a “Tunnel” The VPN Router creates a “tunnel” or channel between two end points, so that the data or information between these points is secure. To establish this tunnel, select the tunnel you wish to create in the Select Tunnel Entry drop-down box.
  • Page 15 Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® • IP Address - If you select IP Address, only the computer with the spe- cific IP Address that you enter will be able to access the tunnel. In the example shown in Figure 5-6, only the computer with IP Address 192.168.1.104 can access the tunnel from this end.
  • Page 16 EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Instant Broadband™ Series ® In order for any encryption to occur, the two ends of the tunnel must agree on Once your are satisfied with all your settings, click the Apply button. If you the type of encryption and the way the data will be decrypted.
  • Page 17: Password

    EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® Instant Broadband™ Series To get more details concerning your tunnel connection, click the View Log but- Password ton. The screen in Figure 5-12 will appear: Figure 6-12 The VPN Log screen displays successful connections, transmissions and recep- Figure 6-13 tions, and the types of encryptions used.
  • Page 18: Status

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® • SNMP Community allows a name to be assigned to any SNMP communi- The Status screen provides the current status of the device. All of the informa- ties that have been setup in the network. Four different communities can be tion provided is read-only.
  • Page 19: Dhcp

    IP address. Click the Apply button and then the Continue button being 253. when you’re done. You may download the Logview software at www.linksys.com. • DHCP Client Table Click on the Client Table button to show the current DHCP Client information. (This information is stored in temporary memo- •...
  • Page 20: Help

    Figure 6-18 4. Enter your Router’s administration password into the Password field. Clicking on the Linksys Website link in the center area will take you to Linksys’s website, provided you are connected to the Internet. If the link does 5. Click the Browse button and type the firmware upgrade file that you down- not take you to the Linksys website, you may alternately type www.linksys.com...
  • Page 21: Filters

    EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Instant Broadband™ Series ® Setting Up Filters Filters • To set up a filter using IP addresses, enter the range of IP addresses you wish to filter into the IP address fields. Users who have filtered IP address- es will not be able to access the Internet at all.
  • Page 22: Forwarding

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® Using IPSec Pass Through Forwarding • This feature lets you use IPSec Pass Through. To use this feature, select Enable next to IPSec Pass Through, and then click the Apply button and Continue button.
  • Page 23: Dynamic Routing

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® Using Port Triggering Dynamic Routing Figure 6-22 Figure 6-21 With Dynamic Routing you can automatically adjust to physical changes in the Port triggering allows the Router to watch outgoing data for specific port num- network’s layout.
  • Page 24: Static Routing

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® 2. Enter the following data to create a new static route: Static Routing Destination LAN IP The Destination LAN IP is the address of the remote network or host to which you want to assign a static route. Enter the IP address of the host for which you wish to create a static route here.
  • Page 25: Dmz Host

    EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch Instant Broadband™ Series ® DMZ Host MAC Address Cloning Figure 6-25 Figure 6-24 Your Router’s MAC address is a 12-digit code assigned to a unique piece of The DMZ Hosting feature allows one local user to be exposed to the Internet hardware for identification, like a social security number.
  • Page 26: Appendix A: Troubleshooting

    If you can’t find an answer here, be the Router’s IP Address, and DNS (in “More”.) check the Linksys website at www.linksys.com. • Make sure that the same values are in the Status screen of the Cable/DSL VPN Router with 4-Port 10/100 Switch’s web-based utility.
  • Page 27: Frequently Asked Questions

    95, Windows 98, Windows 2000, Windows NT, or Windows XP? Yes, but Linksys Can I use firmware for other routers with my BEFVP41? No. If you attempt to use does not, at this time, provide technical support for setup, configuration or other router's firmware, you could damage your router.
  • Page 28 “Auto-negotiate” feature of your NIC as a tem- Can I use the BEFVP41 without connecting it to a cable or DSL modem? Yes, the porary measure. (Please look at the Network Control Panel, in your Ethernet Adapter’s Advanced Properties tab.).
  • Page 29: Appendix B: Glossary

    Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® Is the Router cross-platform compatible? Any platform that supports Ethernet Chapter 7: Glossary and TCP/IP is compatible with the Router. 10BaseT - An Ethernet standard that uses twisted wire pairs. Will the Router allow me to use my own public IPs and Domain, or do I have to use the IPs provided by the Router? The router mode allows for customization of 100BaseTX - IEEE physical layer specification for 100 Mbps over two pairs of...
  • Page 30 Instant Broadband™ Series EtherFast ® Cable/DSL VPN Router with 4-Port 10/100 Switch CSMA/CD (Carrier Sense Multiple Access/Collision Detection) - The LAN DNS - The domain name system (DNS) is the way that Internet domain name access method used in Ethernet. When a device wants to gain access to the net- are located and translated into Internet Protocol (IP) addresses.
  • Page 31 Instant Broadband™ Series EtherFast ® Cable/DSL VPN Router with 4-Port 10/100 Switch Firmware - Programming that is inserted into programmable read-only mem- ing the development and application of electrotechnology and allied sciences ory (programmable read-only memory), thus becoming a permanent part of a for the benefit of humanity, the advancement of the profession, and the well- computing device.
  • Page 32 Instant Broadband™ Series EtherFast ® Cable/DSL VPN Router with 4-Port 10/100 Switch Mbps (MegaBits Per Second) - One million bits per second; unit of measure- RIP (Routing Information Protocol) - A simple routing protocol that is part of ment for data transmission. the TCP/IP protocol suite.
  • Page 33 Instant Broadband™ Series EtherFast ® Cable/DSL VPN Router with 4-Port 10/100 Switch Switch – 1. A data switch connects computing devices to host computers, UDP (User Datagram Protocol) - a communications protocol that offers a lim- allowing a large number of devices to share a limited number of ports. 2. A ited amount of service when messages are exchanged between computers in a device for making, breaking, or changing the connections in an electrical cir- network that uses the Internet Protocol (IP).
  • Page 34: Appendix C: Configuring Ipsec Between A Microsoft Windows 2000 Or Xp Pc And A Linksys Cable/Dsl Vpn Router

    This document demonstrates how to establish a secure IPsec tunnel using pre- 4. Deselect the Activate the default response rule check box and then click shared keys to join a private network inside a Linksys Cable/DSL VPN Router the Next button.
  • Page 35 1. In the new policy properties, deselect the Use Add Wizard check box and then click the Add button to create a new rule. Figure C-3 3. Type an appropriate name “WinXP=>BEFVP41” for the filter list, dese- lect the Use Add Wizard check box, and click the Add button. Figure C-2 2.
  • Page 36 5. In the Destination address field, select A specific IP Subnet, and fill in the IP Address 192.168.1.0 and Subnet mask 255.255.255.0. Figure C-6 9. Type an appropriate name “BEFVP41=>WinXP” for the filter list, dese- Figure C-5 lect the Use Add Wizard check box, and click the Add button.
  • Page 37 11. In the Destination address field, select My IP Address. button on the IP Filter List window. Figure C-8 Figure C-9 Configure Individual Rule of 2 Tunnels Tunnel 1: WinXP=>BEFVP41 1. From the IP Filter List tab, click the filter list WinXP=>BEFVP41.
  • Page 38 4. Select the Session key perfect forward secrecy (PFS) and remember to check the PFS option on the BEFVP41, and click the OK button. Figure C-10 2. From the Filter Action tab, click the filter action “Require Security”, and click the Edit button.
  • Page 39 6. Change the authentication method to Use this string (preshared key), this IP Address radio button and type the WAN IP Address 140.111.1.1 of enter the string “XYZ12345”, and click the OK button. BEFVP41. Figure C-14 Figure C-16 This new Preshared key will be displayed in Figure C-15. Click the OK button...
  • Page 40 9. In the new policy properties, deselect the Use Add Wizard check box and click the Add button to create the second IP Filter. Figure C-17 Figure C-18 10. From the IP filter List tab, click the filter list BEFVP41=>WinXP. Figure C-19...
  • Page 41 Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® 11. From the Filter Action tab, select the filter action Require Security. 13. Change the authentication method to Use this string (preshared key), enter the string “XYZ12345”, and then click the OK button. Figure C-20 Figure C-22 12.
  • Page 42 Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® 14. From the Tunnel Setting tab, click the radio button for The tunnel end- 16. From the Rules tab, click the OK button to back to the secpol screen. point is specified by this IP Address and type the Windows 2000/XP IP Address 140.111.1.2.
  • Page 43 Instant Broadband™ Series EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch ® [BEFVP41] VPN Screen Setup Screen Figure C-29 is a sample configuration for the Router’s VPN tab. 1. Open your web browser and enter 192.168.1.1 in the Address field and Once all these have been entered, click the Connect button to establish a VPN press the Enter key.
  • Page 44: Appendix D: Snmp Functions

    Reply from 24.53.32.4: bytes=32 time<10ms TTL=128 Internet. For example, www.linksys.com is actually 206.135.116.3. Type it into your web browser and you will wind up at the Linksys home page every time. Ping statistics for 24.53.32.4: Packets: Sent = 4, Received = 4, Lost = 0 (0% IP and web addresses, however, can sometimes be long and hard to remember.
  • Page 45: Appendix F: Installing The Tcp/Ip Protocol

    Instant Broadband™ Series EtherFast ® Cable/DSL VPN Router with 4-Port 10/100 Switch Step Two: Pinging for a Web Address Appendix F: Installing the TCP/ I P While the IP address returned above would work as your e-mail server address, Protocol it may not be permanent.
  • Page 46: Appendix G: Specifications

    EtherFast ® Cable/DSL VPN Router with 4-Port 10/100 Switch 6. Find and double-click TCP/IP in the list to the right in Figure F-2. Appendix G: Specifications Model Number: BEFVP41 Standards: IEEE 802.3 (10BaseT), IEEE 802.3u (100BaseTX) Protocol: CSMA/CD VPN Encryption:...
  • Page 47: Appendix H: Warranty Information

    Appendix I: Contact Information BE SURE TO HAVE YOUR PROOF OF PURCHASE AND A BARCODE For help with the installation or operation of this product, contact Linksys FROM THE PRODUCT’S PACKAGING ON HAND WHEN CALLING. Technical Support at one of the phone numbers or Internet addresses below.
  • Page 48 © Copyright 2002 Linksys, All Rights Reserved.

Table of Contents