Linksys BEFSX41 manual Establishing a Tunnel, Vpn

Page 23

	Instant Broadband® Series		EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint
			Virtual Private Networking (VPN) is a security measure that basically creates
	VPN
			a secure connection between two remote locations. This connection is very

			specific as far as its settings are concerned; this is what creates the security.
			The VPN screen, shown in Figure 7-11, allows you to configure your VPN set-
			tings to make your network more secure.

				Note: Network security, while a desirable and often necessary
				aspect of networking, is complex and requires a thorough under-
				standing of networking principles.

			Establishing a Tunnel
			The Firewall Router creates a tunnel or channel between two endpoints, so that
			the data or information between these endpoints is secure. To establish this tun-
			nel, select the tunnel you wish to create in the (Select Tunnel Entry) drop-
			down box. It is possible to create up to two simultaneous tunnels.
			Then check the box next to Enable to enable the tunnel.
			Once the tunnel is enabled, enter the name of the tunnel in the Tunnel Name
			field. This is to allow you to identify multiple tunnels and does not have to
			match the name used at the other end of the tunnel.
			Click the Delete This Tunnel button to delete any tunnel entry. Click the
			Summary button to view information about the selected tunnel, after the tun-
			nel has been connected.

Figure 7-11

38

39

Image 23

Contents User Guide Copyright & Trademarks Table of Contents Environmental 139 FeaturesIntroduction IP Addresses An Introduction to LANs and WANsYour Virtual Private Network VPN Network Setup OverviewWhy Do I Need a VPN? Firewall Router to Firewall Router What is a Virtual Private Network?Ports PowerRouter’s Back Panel Modem connection will not work from any other portProceed to Connect the Router WAN and LAN LEDsRouter’s Front Panel LEDs Overview Connecting Your Hardware Together and Booting UpRouter’s hardware installation is now complete Connect the RouterConfiguring Windows 95, 98, and Millennium PCs Configure the PCsConfiguring Windows 2000 PCs Go to Configure the RouterConfiguring Windows XP PCs Configure the Router Enter the Gateway Address Obtain an IP Address AutomaticallyStatic IP Address Advanced Proxies. Click Direct Connection to the InternetRAS PPPoECable/DSL Firewall Router’s Web-based Utility Quick and Easy Router AdministrationSetup Static IP User Name and PasswordWAN IP Firewall IPSec Pass Through Remote UpgradeBlock WAN Request Multicast Pass ThroughVPN Establishing a TunnelLocal Secure Group and Remote Secure Group Remote Security Gateway Key Management AuthenticationEncryption Instant Broadband Series Phase Advanced Settings for Selected IPSec TunnelPassword Other SettingsStatus Dhcp Log Help Filters AdvancedInstant Broadband Series Forwarding UPnP Forwarding Port Triggering Static Routing Dynamic RoutingDMZ Host Address DMZ HostDMZ Port MAC Address Clone Current DMZ HostDdns DynDNS.orgTZO.com Appendix a TroubleshootingCommon Problems and Solutions For Windows 95, 98, and Me For Windows NTFor Windows XP For Windows XP Am not able to access the Router’s web interface Setup Can’t get the Internet game, server, or application to work To start over, I need to set the Router to factory default Need to use port triggering Click the Advanced = Filter tabFrequently Asked Questions TCP/IP is compatible with the Router Appendix B Maximizing VPN Security Step One Create an IPSec Policy IntroductionEnvironment Windows 2000 or Windows XPIP Address Filter List 1 win-routerStep Two Build Filter Lists Figure C-6 Filter List 2 router=winTunnel 1 win-router Step Three Configure Individual Tunnel RulesAccept Respond Using IPSec XYZ12345. ClickString to Protect Negotiate Security Key exchange pre Shared key, as shownTunnel 2 router-win XYZ12345 Action Require Security This string to protectKey Exchange Preshared key,Step Four Assign New IPSec Policy Figure C-24Figure C-28 Step Five Create a Tunnel Through the Web-based UtilityAppendix D Snmp Functions Appendix E How to Ping Your ISP’s E-mail & Web AddressesFigure E-1 TCP/IP installation is now complete Appendix F Installing the TCP/IP ProtocolFor Windows NT, 2000, and XP Figure G-1Figure G-5 Appendix H Glossary 129 131 133 135 137 Environmental Appendix I SpecificationsWeb FTP Site Appendix J Warranty InformationAppendix K Contact Information Sales InformationCopyright 2003 Linksys, All Rights Reserved