Figure C-28 | Linksys BEFSX41 instruction

Instant Broadband® Series

Step Five: Create a Tunnel Through the Web-based Utility

Note: Further details on this step can be found in the VPN Tab section

in “Chapter 7: The Cable/DSL Firewall Router’s Web-based Utility”.

1.Open your web browser, and enter 192.168.1.1 in the Address field. Press the Enter key.

2.When the User name and Password field appears, skip the user name and enter the default password admin. Press the Enter key.

3.From the Setup tab, shown in Figure C- 28, click the VPN tab.

Figure C-28

4.From the VPN tab, shown in Figure C-29, select Enable beside This Tunnel.

5.Enter a Tunnel Name. This name should be unique for this particular tun- nel.

6.Select Subnet from the pull-down menu beside Local Secure Group. Then, enter the IP Address for this group. This would be the IP Address of the local endpoint, your endpoint.

7.Select IP Addr. from the pull-down menu beside Remote Secure Group. Then, enter the IP Address for this group. This would be the IP Address of the remote endpoint, the endpoint on the other side of the tunnel.

EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

8.Select IP Addr. from the pull-down menu beside Remote Security Gateway. This would be the IP Address of your Internet connection as seen from the Internet. Enter this IP Address here.

9.Select a type of encryption and authentication for the tunnel your are establishing.

10.Check PFS (Perfect Forward Secrecy) and enter the Pre-Shared Key and Key Lifetime.

11.Click the Apply button followed by the Continue button.

12.Click the Connect button.

Your tunnel should now be established.

Figure C-29

114

115

Image 61

Linksys BEFSX41 manual Step Five Create a Tunnel Through the Web-based Utility, Figure C-28

Contents

User Guide Copyright & Trademarks Table of Contents Introduction FeaturesEnvironmental 139 IP Addresses An Introduction to LANs and WANs Why Do I Need a VPN? Network Setup OverviewYour Virtual Private Network VPN Firewall Router to Firewall Router What is a Virtual Private Network? Router’s Back Panel PowerModem connection will not work from any other port Ports Router’s Front Panel LEDs WAN and LAN LEDsProceed to Connect the Router Router’s hardware installation is now complete Connecting Your Hardware Together and Booting UpConnect the Router Overview Configuring Windows 95, 98, and Millennium PCs Configure the PCs Configuring Windows 2000 PCs Go to Configure the Router Configuring Windows XP PCs Configure the Router Static IP Address Obtain an IP Address AutomaticallyAdvanced Proxies. Click Direct Connection to the Internet Enter the Gateway Address RAS PPPoE Cable/DSL Firewall Router’s Web-based Utility Quick and Easy Router Administration Setup Static IP User Name and Password WAN IP Firewall Block WAN Request Remote UpgradeMulticast Pass Through IPSec Pass Through VPN Establishing a Tunnel Local Secure Group and Remote Secure Group Remote Security Gateway Encryption AuthenticationKey Management Instant Broadband Series Phase Advanced Settings for Selected IPSec Tunnel Password Other Settings Status Dhcp Log Help Filters Advanced Instant Broadband Series Forwarding UPnP Forwarding Port Triggering Static Routing Dynamic Routing DMZ Port DMZ HostDMZ Host Address MAC Address Clone Current DMZ Host Ddns DynDNS.org Common Problems and Solutions Appendix a TroubleshootingTZO.com For Windows XP For Windows NTFor Windows 95, 98, and Me For Windows XP Am not able to access the Router’s web interface Setup Can’t get the Internet game, server, or application to work To start over, I need to set the Router to factory default Need to use port triggering Click the Advanced = Filter tab Frequently Asked Questions TCP/IP is compatible with the Router Appendix B Maximizing VPN Security Environment IntroductionWindows 2000 or Windows XP Step One Create an IPSec Policy Step Two Build Filter Lists Filter List 1 win-routerIP Address Figure C-6 Filter List 2 router=win Tunnel 1 win-router Step Three Configure Individual Tunnel Rules String to Protect Negotiate Security Key exchange pre Respond Using IPSec XYZ12345. ClickShared key, as shown Accept Tunnel 2 router-win Key Exchange Action Require Security This string to protectPreshared key, XYZ12345 Step Four Assign New IPSec Policy Figure C-24 Figure C-28 Step Five Create a Tunnel Through the Web-based Utility Appendix D Snmp Functions Appendix E How to Ping Your ISP’s E-mail & Web Addresses Figure E-1 TCP/IP installation is now complete Appendix F Installing the TCP/IP Protocol For Windows NT, 2000, and XP Figure G-1 Figure G-5 Appendix H Glossary 129 131 133 135 137 Environmental Appendix I Specifications Appendix K Contact Information Appendix J Warranty InformationSales Information Web FTP Site Copyright 2003 Linksys, All Rights Reserved