Linksys BEFSX41 manual Remote Security Gateway

Page 25

Instant Broadband® Series

Under Remote Secure Group, you have two additional options: Host and Any.

•Host - If you select Host for the Remote Secure Group, then the Remote Secure Group will be the same as the Remote Security Gateway setting: IP Address, FQDN (Fully Qualified Domain Name), or Any. (Remote Security Gateway settings are explained on the following page.) In the example shown in Figure 7-15, the Remote Secure Group is the same as the Remote Security Gateway, set to a specific IP Address.

Figure 7-15

•Any - If you select Any for the Remote Security Group, as shown in Figure 7-16, the local Firewall Router will accept a request from any IP address. This setting should be chosen when the other endpoint is using DHCP or PPPoE on the WAN side.

Figure 7-16

EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

Remote Security Gateway

The Remote Security Gateway is the VPN device, such as a second Firewall Router, on the remote end of the VPN tunnel. Under Remote Security Gateway, you have three options: IP Address, FQDN, and Any.

•IP Address - If you select IP Address, as shown in Figure 7-17, enter the IP Address of the VPN device at the other end of the tunnel. The remote VPN device can be another Firewall Router, a VPN Server, or a comput- er with VPN client software that supports IPSec. The IP Address may either be static (permanent) or dynamic (changing), depending on the set- tings of the remote VPN device. Make sure that you have entered the IP Address correctly, or the connection cannot be made. Remember, this is NOT the IP Address of the local Firewall Router, but the IP Address of the remote Firewall Router or device with which you wish to communicate.

Figure 7-17

•FQDN (Fully Qualified Domain Name) - If you select FQDN, as shown in Figure 7-18, enter the FQDN of the VPN device at the other end of the tunnel. The remote VPN device can be another Firewall Router, a VPN Server, or a computer with VPN client software that supports IPSec. The FQDN is the host name and domain name for a specific computer on the Internet, for example, vpn.myvpnserver.com.

Figure 7-18

42

43

Image 25

Contents User Guide Copyright & Trademarks Table of Contents Introduction FeaturesEnvironmental 139 IP Addresses An Introduction to LANs and WANsWhy Do I Need a VPN? Network Setup OverviewYour Virtual Private Network VPN Firewall Router to Firewall Router What is a Virtual Private Network?Router’s Back Panel PowerModem connection will not work from any other port PortsRouter’s Front Panel LEDs WAN and LAN LEDsProceed to Connect the Router Router’s hardware installation is now complete Connecting Your Hardware Together and Booting UpConnect the Router OverviewConfiguring Windows 95, 98, and Millennium PCs Configure the PCsConfiguring Windows 2000 PCs Go to Configure the RouterConfiguring Windows XP PCs Configure the Router Static IP Address Obtain an IP Address AutomaticallyAdvanced Proxies. Click Direct Connection to the Internet Enter the Gateway AddressRAS PPPoECable/DSL Firewall Router’s Web-based Utility Quick and Easy Router AdministrationSetup Static IP User Name and PasswordWAN IP Firewall Block WAN Request Remote UpgradeMulticast Pass Through IPSec Pass ThroughVPN Establishing a TunnelLocal Secure Group and Remote Secure Group Remote Security Gateway Encryption AuthenticationKey Management Instant Broadband Series Phase Advanced Settings for Selected IPSec TunnelPassword Other SettingsStatus Dhcp Log Help Filters AdvancedInstant Broadband Series Forwarding UPnP Forwarding Port Triggering Static Routing Dynamic RoutingDMZ Port DMZ HostDMZ Host Address MAC Address Clone Current DMZ HostDdns DynDNS.orgCommon Problems and Solutions Appendix a TroubleshootingTZO.com For Windows XP For Windows NTFor Windows 95, 98, and Me For Windows XP Am not able to access the Router’s web interface Setup Can’t get the Internet game, server, or application to work To start over, I need to set the Router to factory default Need to use port triggering Click the Advanced = Filter tabFrequently Asked Questions TCP/IP is compatible with the Router Appendix B Maximizing VPN Security Environment IntroductionWindows 2000 or Windows XP Step One Create an IPSec PolicyStep Two Build Filter Lists Filter List 1 win-routerIP Address Figure C-6 Filter List 2 router=winTunnel 1 win-router Step Three Configure Individual Tunnel RulesString to Protect Negotiate Security Key exchange pre Respond Using IPSec XYZ12345. ClickShared key, as shown AcceptTunnel 2 router-win Key Exchange Action Require Security This string to protectPreshared key, XYZ12345Step Four Assign New IPSec Policy Figure C-24Figure C-28 Step Five Create a Tunnel Through the Web-based UtilityAppendix D Snmp Functions Appendix E How to Ping Your ISP’s E-mail & Web AddressesFigure E-1 TCP/IP installation is now complete Appendix F Installing the TCP/IP ProtocolFor Windows NT, 2000, and XP Figure G-1Figure G-5 Appendix H Glossary 129 131 133 135 137 Environmental Appendix I SpecificationsAppendix K Contact Information Appendix J Warranty InformationSales Information Web FTP SiteCopyright 2003 Linksys, All Rights Reserved