Linksys BEFSX41 manual Step Five Create a Tunnel Through the Web-based Utility, Figure C-28

Page 61

Instant Broadband® Series

Step Five: Create a Tunnel Through the Web-based Utility

Note: Further details on this step can be found in the VPN Tab section

in “Chapter 7: The Cable/DSL Firewall Router’s Web-based Utility”.

1.Open your web browser, and enter 192.168.1.1 in the Address field. Press the Enter key.

2.When the User name and Password field appears, skip the user name and enter the default password admin. Press the Enter key.

3.From the Setup tab, shown in Figure C- 28, click the VPN tab.

Figure C-28

4.From the VPN tab, shown in Figure C-29, select Enable beside This Tunnel.

5.Enter a Tunnel Name. This name should be unique for this particular tun- nel.

6.Select Subnet from the pull-down menu beside Local Secure Group. Then, enter the IP Address for this group. This would be the IP Address of the local endpoint, your endpoint.

7.Select IP Addr. from the pull-down menu beside Remote Secure Group. Then, enter the IP Address for this group. This would be the IP Address of the remote endpoint, the endpoint on the other side of the tunnel.

EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

8.Select IP Addr. from the pull-down menu beside Remote Security Gateway. This would be the IP Address of your Internet connection as seen from the Internet. Enter this IP Address here.

9.Select a type of encryption and authentication for the tunnel your are establishing.

10.Check PFS (Perfect Forward Secrecy) and enter the Pre-Shared Key and Key Lifetime.

11.Click the Apply button followed by the Continue button.

12.Click the Connect button.

Your tunnel should now be established.

Figure C-29

114

115

Image 61

Contents User Guide Copyright & Trademarks Table of Contents Introduction FeaturesEnvironmental 139 IP Addresses An Introduction to LANs and WANsWhy Do I Need a VPN? Network Setup OverviewYour Virtual Private Network VPN Firewall Router to Firewall Router What is a Virtual Private Network?Router’s Back Panel PowerModem connection will not work from any other port PortsRouter’s Front Panel LEDs WAN and LAN LEDsProceed to Connect the Router Router’s hardware installation is now complete Connecting Your Hardware Together and Booting UpConnect the Router OverviewConfiguring Windows 95, 98, and Millennium PCs Configure the PCsConfiguring Windows 2000 PCs Go to Configure the RouterConfiguring Windows XP PCs Configure the Router Static IP Address Obtain an IP Address AutomaticallyAdvanced Proxies. Click Direct Connection to the Internet Enter the Gateway AddressRAS PPPoECable/DSL Firewall Router’s Web-based Utility Quick and Easy Router AdministrationSetup Static IP User Name and PasswordWAN IP Firewall Block WAN Request Remote UpgradeMulticast Pass Through IPSec Pass ThroughVPN Establishing a TunnelLocal Secure Group and Remote Secure Group Remote Security Gateway Encryption AuthenticationKey Management Instant Broadband Series Phase Advanced Settings for Selected IPSec TunnelPassword Other SettingsStatus Dhcp Log Help Filters AdvancedInstant Broadband Series Forwarding UPnP Forwarding Port Triggering Static Routing Dynamic RoutingDMZ Port DMZ HostDMZ Host Address MAC Address Clone Current DMZ HostDdns DynDNS.orgCommon Problems and Solutions Appendix a TroubleshootingTZO.com For Windows XP For Windows NTFor Windows 95, 98, and Me For Windows XP Am not able to access the Router’s web interface Setup Can’t get the Internet game, server, or application to work To start over, I need to set the Router to factory default Need to use port triggering Click the Advanced = Filter tabFrequently Asked Questions TCP/IP is compatible with the Router Appendix B Maximizing VPN Security Environment IntroductionWindows 2000 or Windows XP Step One Create an IPSec PolicyStep Two Build Filter Lists Filter List 1 win-routerIP Address Figure C-6 Filter List 2 router=winTunnel 1 win-router Step Three Configure Individual Tunnel RulesString to Protect Negotiate Security Key exchange pre Respond Using IPSec XYZ12345. ClickShared key, as shown AcceptTunnel 2 router-win Key Exchange Action Require Security This string to protectPreshared key, XYZ12345Step Four Assign New IPSec Policy Figure C-24Figure C-28 Step Five Create a Tunnel Through the Web-based UtilityAppendix D Snmp Functions Appendix E How to Ping Your ISP’s E-mail & Web AddressesFigure E-1 TCP/IP installation is now complete Appendix F Installing the TCP/IP ProtocolFor Windows NT, 2000, and XP Figure G-1Figure G-5 Appendix H Glossary 129 131 133 135 137 Environmental Appendix I SpecificationsAppendix K Contact Information Appendix J Warranty InformationSales Information Web FTP SiteCopyright 2003 Linksys, All Rights Reserved