Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Use this guide to install: BEFSX41 User Guide
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2003 Linksys, All Rights Reserved. EtherFast, Instant Broadband, Linksys, and the Linksys logo are registered trademarks of Linksys Group, Inc. Microsoft, Windows, and the Windows logo are registered trademarks of Microsoft Corporation. All other trademarks and brand names are the property of their respective proprietors.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Table of Contents Chapter 1: Introduction The Linksys EtherFast Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Features An Introduction to LANs and WANs IP Addresses Network Setup Overview 1 Chapter 2: Your Virtual Private Network (VPN) Why Do I Need a VPN? What is a Virtual Private Network? 5 5 6 Chapter 3: Getting to Know the EtherFast Cable/DSL Firewall Router The Router’s Back Panel The Router
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Chapter 1: Introduction Appendix F: Installing the TCP/IP Protocol 120 Appendix G: Finding the MAC Address and IP Address for Your Ethernet Adapter 122 Appendix H: Glossary 126 Appendix I: Specifications Environmental 139 139 Appendix J: Warranty Information 140 Appendix K: Contact Information 141 The Linksys EtherFast Cable/DSL Firewall Router with ® The Linksys EtherFast Cable/DSL Router 4-Port Swi
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Simply put, a router is a network device that connects two networks together. Note: Since the Router is a device that connects two networks, it needs two IP addresses—one for the LAN side, and one for the WAN side. In this User Guide, you’ll see references to the “WAN IP address” and the “LAN IP address.
Instant Broadband® Series By default, a DHCP server (LAN side) is enabled on the Router. If you already have a DHCP server running on your network, you must disable one of the two DHCP servers. If you run more than one DHCP server on your network, you will experience network errors, such as conflicting IP addresses. To disable DHCP on the Router, see the DHCP section in “Chapter 7: The Cable/DSL Firewall Router’s Web-based Utility.
Instant Broadband® Series 2) Data Sniffing Data “sniffing” is a method used by hackers to obtain network data as it travels through unsecured networks, such as the Internet. Tools for just this kind of activity, such as protocol analyzers and network diagnostic tools, are often built into operating systems and allow the data to be viewed in clear text. 3) Man in the middle attacks Once the hacker has either sniffed or spoofed enough information, he can now perform a “man in the middle” attack.
Instant Broadband® Series Important: You must have at least one Firewall Router on one end of the VPN tunnel. At the other end of the VPN tunnel, you must have a second Firewall Router or a computer with VPN client software that supports IPSec.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint The Reset Button* WAN and LAN LEDs Briefly pressing the Reset Button will refresh the Cable/DSL Firewall Router’s connections, potentially clearing any jammed links. Link/Act Pressing the Reset Button and holding it in for a few seconds will clear all of the Cable/DSL Firewall Router’s data.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Chapter 4: Connect the Router Repeat the above step to connect more PCs or network devices to the Router. Overview Unlike a hub or a switch, the Router’s setup consists of more than simply plugging hardware together.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Chapter 5: Configure the PCs Configuring Windows 95, 98, and Millennium PCs Overview 1. Go to the Network screen by clicking the Start button. Click Settings and then Control Panel. From there, double-click the Network icon. The instructions in this chapter will help you configure each of your computers to be able to communicate with the Router.
Instant Broadband® Series 3. Click the IP Address tab and select Obtain an IP address automatically, as shown in Figure 5-2. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Configuring Windows 2000 PCs 1. Go to the Network screen by clicking the Start button. Click Settings and then Control Panel. From there, double-click the Network and Dial-up Connections icon. 2.
Instant Broadband® Series 3. Select Internet Protocol (TCP/IP), shown in Figure 5-4, and click the Properties button. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Configuring Windows XP PCs The following instructions assume you are running Windows XP with the default interface. If you are using the Classic interface (where the icons and menus look like previous Windows versions), please follow the instructions for Windows 2000. 1.
Instant Broadband® Series 3. Select Internet Protocol (TCP/IP), as shown in Figure 5-7, and click the Properties button. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Chapter 6: Configure the Router This chapter will show you how to configure the Router to function in your network and gain access to the Internet through your Internet Service Provider (ISP).
Instant Broadband® Series 3. The Router configuration screen will appear with the Setup tab selected. Based on the setup instructions from your ISP, you may need to provide the following information. Host Name and Domain Name: These fields allow you to provide a host name and domain name for the Router. These fields are usually left blank. If requested by your ISP (usually cable ISPs), complete these two fields.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint PPPoE PPTP If your DSL provider says that you are connecting through PPPoE or if you normally enter a user name and password to access the Internet, perform these steps: PPTP is a service used in Europe only. (Shown in Figure 6-8.) If you are using a PPTP connection, check with your ISP for the necessary setup information. When you are finished with the Setup tab, proceed to step 5. A.
Instant Broadband® Series 5. If you haven’t already done so, click the Apply button and then the Continue button to save your Setup settings. Close the web browser. 6. Reset the power on your cable or DSL modem. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Chapter 7: The Cable/DSL Firewall Router’s Web-based Utility 7. Restart your computers so that they can obtain the Router’s new settings.
Instant Broadband® Series An Enter Network Password window, shown in Figure 7-2, will appear (Windows XP users will see a Connect to 192.168.1.1 window, shown in Figure 7-3). Leave the User Name field blank, and enter admin in the Password field. Then click the OK button. Router EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint • Device IP Address and Subnet Mask The values for the Router’s IP Address and Subnet Mask are shown here. The default values are 192.168.1.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Static IP PPPoE If you are required to use a permanent IP address, then select Static IP, as shown in Figure 7-5. Some DSL-based ISPs use PPPoE (Point-to-Point Protocol over Ethernet) to establish Internet connections for end-users. If you are connected to the Internet through a DSL line, check with your ISP to see if they use PPPoE. If they do, select the PPPoE connection type, as shown in Figure 7-6.
Instant Broadband® Series RAS PPTP Remote Access Service (RAS) is a service that applies to connections in Singapore only (shown in Figure 77). For users in Singapore, check with Singtel for information on RAS. Point to Point Tunneling Protocol (PPTP) is a service that applies to connections in Europe only. Figure 7-8 shows a PPTP setup. Figure 7-7 User Name and Password Enter the User Name and Password supplied by Singtel. RAS Plan Select the type of plan you have.
Instant Broadband® Series HBS EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Firewall The HeartBeat Signal (HBS) is a service that applies to connections in Australia only. (Shown in Figure 7-9.) For users in Australia, check with your ISP for setup information. Figure 7-9 User Name and Password Enter the User Name and Password supplied by your ISP. Heart Beat Server Enter the IP address of the Heart Beat Server. This is supplied by your ISP.
Instant Broadband® Series Web Filter You can either enable or disable these four filtering methods by selecting Allow or Deny. • Proxy If local users have access to WAN proxy servers, they may be able to circumvent the Router’s content filters and access Internet sites blocked by the Router. Denying Proxy will block access to any WAN proxy servers. • Java Java is a programming language for websites.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Virtual Private Networking (VPN) is a security measure that basically creates a secure connection between two remote locations. This connection is very specific as far as its settings are concerned; this is what creates the security. The VPN screen, shown in Figure 7-11, allows you to configure your VPN settings to make your network more secure.
Instant Broadband® Series Local Secure Group and Remote Secure Group The Local Secure Group is the computer(s) on your LAN that can access the tunnel. The Remote Secure Group is the computer (s) on the remote end of the tunnel that can access the tunnel. Under Local Secure Group and Remote Secure Group, you may choose one of three options: Subnet, IP Address, and IP Range. Under Remote Secure Group, you have two additional options: Host and Any.
Instant Broadband® Series Under Remote Secure Group, you have two additional options: Host and Any. • Host - If you select Host for the Remote Secure Group, then the Remote Secure Group will be the same as the Remote Security Gateway setting: IP Address, FQDN (Fully Qualified Domain Name), or Any. (Remote Security Gateway settings are explained on the following page.) In the example shown in Figure 7-15, the Remote Secure Group is the same as the Remote Security Gateway, set to a specific IP Address.
Instant Broadband® Series • Any - If you select Any for the Remote Security Gateway, as shown in Figure 7-19, the VPN device at the other end of the tunnel will accept a request from any IP address. The remote VPN device can be another Firewall Router, a VPN Server, or a computer with VPN client software that supports IPSec. If the remote user has an unknown or dynamic IP address (such as a professional on the road or a telecommuter using DHCP or PPPoE), then Any should be selected.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint The Inbound SPI and Outbound SPI fields are different, however. The Inbound SPI value set here must match the Outbound SPI value at the other end of the tunnel. The Outbound SPI here must match the Inbound SPI value at the other end of the tunnel. In the example (see Figure7-21), the Inbound SPI and Outbound SPI values shown would be opposite on the other end of the tunnel.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint To get more details concerning your tunnel connection, click the View Logs button. The screen in Figure 7-24 will appear: Figure 7-24 Select the log you wish to view: All (to view all logs), System Log, Access Log, Firewall Log, or VPN Log. The System Log screen displays a list of cold and warm starts, web login successes and failures, and packet filtering policies.
Instant Broadband® Series Phase 2 EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Password Group There are two Diffie-Hellman Groups to choose from: 768-bit and 1024-bit. Diffie-Hellman refers to a cryptographic technique that uses public and private keys for encryption and decryption. Key Lifetime In the Key Lifetime field, you may optionally select to have the key expire at the end of a time period of your choosing.
Instant Broadband® Series Do not restore the factory defaults unless you are having difficulties with the Router and have exhausted all other troubleshooting measures. Once the Router is reset, you will have to re-enter all of your configuration data. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Status UPnP Function Universal Plug and Play (UPnP) allows Windows XP to automatically configure the Router for various Internet applications, such as gaming and videoconferencing.
Instant Broadband® Series Firmware Version This field shows the installed version and date of the firmware. Version dates are slightly more accurate than version numbers. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint DHCP Current Time Based upon the time zone selection made on the Setup tab, this field will display the current time. Login This indicates if you are using a dial-up style connection like PPPoE, RAS, PPTP, or HBS.
Instant Broadband® Series Number of DHCP Users (Optional) Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. This number cannot be greater than 253. In order to determine the DHCP IP Address range, add the starting IP address (e.g., 100) to the number of DHCP users. By default, as shown in Figure 7-28, add 100 to 50, and the range is 192.168.1.100 to 192.168.1.149.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Help Figure 7-30 From the drop-down menu, select the log you wish to view: All (to view all logs), System Log, Access Log, Firewall Log, or VPN Log. • System Log The System Log screen displays a list of cold and warm starts, web login successes and failures, and packet filtering policies. • Access Log The Access Log screen shows all incoming and outgoing traffic.
Instant Broadband® Series To upgrade the Router’s firmware: EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Filters Note: By upgrading the Router’s firmware, you may lose the Router’s configuration settings. 1. Select the Help tab (see Figure 7-31). 2. Click Upgrade Firmware to display the window shown in Figure 7-32. 3. Click the Browse button to find the firmware upgrade file that you downloaded from the Linksys website and then extracted. Figure 7-32 4.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint To see a summary of all Policies, click the Summary button. Figure 7-35 Figure 7-34 5. To block websites with specific URL addresses, enter each URL address in a Website Blocking by URL Address field. You can enter up to four URL addresses. The Policies are listed on this screen with their names and settings (see Figure 7-34).
Instant Broadband® Series b. To create a new service, enter the name of the service in the Service Name field. To edit a service’s settings, select the service from the box on the right of the screen. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Forwarding c. From the Protocol drop-down menu, select the protocol type for this service, such as TCP, UDP, or ICMP. d. In the Port Range fields, enter the range of ports for this service. e. To add a service, click the Add button.
Instant Broadband® Series If you need to forward all ports to one PC, see the “DMZ Host” section. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint • Telnet A terminal emulation protocol commonly used on Internet and TCP/IP-based networks. It allows a user at a terminal or computer to log onto a remote device and run a program. • SMTP (Simple Mail Transfer Protocol) The standard e-mail protocol on the Internet.
Instant Broadband® Series • HTTP (HyperText Transport Protocol) The communications protocol used to connect to servers on the World Wide Web. Its primary function is to establish a connection with a web server and transmit HTML pages to the client web browser. • POP3 (Post Office Protocol 3) A standard mail server commonly used on the Internet. It provides a message store that holds incoming e-mail until users log on and download it. POP3 is a simple system with little selectivity.
Instant Broadband® Series Dynamic Routing EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Static Routing Figure 7-40 From the Dynamic Routing screen, shown on Figure 7-40, you can enable the Router to automatically adjust to physical changes in the network’s layout. The Router, using the RIP protocol, determines the network packets’ route based on the fewest number of hops between the source and the destination.
Instant Broadband® Series 2. Enter the following data to create a new static route. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint DMZ Host Destination LAN IP: The Destination LAN IP is the address of the remote network or host to which you want to assign a static route. Enter the IP address of the host for which you wish to create a static route here. If you are building a route to an entire network, be sure that the network portion of the IP address is set to 0.
Instant Broadband® Series Specify an IP Address behind the DMZ Port: If you have multiple PCs connected to Port 4/DMZ via a hub or switch, you can specify which PC is the DMZ host. To expose a computer with a specific IP address, enter that computer’s IP address in this field. To get the IP address of a computer, refer to “Appendix G: Finding the MAC Address and IP Address for Your Ethernet Adapter.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint DynDNS.org DDNS Figure 7-44 The Router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP address. It is useful when you are hosting your own website, FTP server, or other server behind the Router. To order DynDNS service, click the appropriate link at the top of the DDNS screen.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Appendix A: Troubleshooting TZO.com Common Problems and Solutions This appendix consists of two parts: “Common Problems and Solutions” and “Frequently Asked Questions.” Provided are possible solutions to problems regarding the installation and operation of the Router. If your situation is described here, the problem should be solved by applying the corresponding solution.
Instant Broadband® Series For Windows 2000: For Windows XP: A. Click Start, Settings, and Control Panel. Double-click Network and Dial-Up Connections. B. Right-click the Local Area Connection that is associated with the Ethernet adapter you are using, and select the Properties option. C. In the Components checked are used by this connection box, highlight Internet Protocol (TCP/IP), and click the Properties button. Select Use the following IP address option. D.
Instant Broadband® Series that Obtain an IP address automatically and Obtain DNS server address automatically are selected. • Click the OK button in the Internet Protocol (TCP/IP) Properties window, and click the OK button in the Local Area Connection Properties window. • Restart the computer if asked. For Windows XP: The following instructions assume you are running Windows XP with the default interface.
Instant Broadband® Series F. Turn off the computer, Router, and cable/DSL modem. Wait 30 seconds, and then turn on the Router, cable/DSL modem, and computer. Check the Status tab of the Router’s web-based utility to see if you get an IP address. Your VPN may require port 500/UDP packets to be passed to the computer that is connecting to the IPSec server. Refer to “Problem #7, I need to set up online game hosting or use other Internet applications” for details. 4.
Instant Broadband® Series 7. I need to set up online game hosting or use other Internet applications. If you want to play online games or use Internet applications, most will work without doing any port forwarding or DMZ hosting. There may be cases when you want to host an online game or Internet application. This would require you to set up the Router to deliver incoming packets or data to a specific computer. This also applies to the Internet applications you are using.
Instant Broadband® Series 10. I am a PPPoE user, and I need to remove the proxy settings or the dial-up popup window. If you have proxy settings, you need to disable these on your computer. Because the Router is the gateway for the Internet connection, the computer does not need any proxy settings to gain access. Please follow these directions to verify that you do not have any proxy settings and that the browser you use is set to connect directly to the LAN. For Microsoft Internet Explorer 5.
Instant Broadband® Series 15. I can't access my email, web, or VPN, or I am getting corrupted data from the Internet. The Maximum Transmission Unit (MTU) setting may need to be adjusted. By default, the MTU is set at 1500. For most DSL users, it is strongly recommended to use MTU 1492. If you are having some difficulties, perform the following steps: A. To connect to the Router, go to the web browser, and enter http://192.168.1.1 or the IP address of the Router. B. Enter the password, if asked.
Instant Broadband® Series Frequently Asked Questions What is the maximum number of IP addresses that the Router will support? The Router will support up to 253 IP addresses. Is IPSec Pass-Through supported by the Router? Yes, it is a built-in feature that the Router automatically enables. Where is the Router installed on the network? In a typical environment, the Router is installed between the cable/DSL modem and the LAN. Plug the Router into the cable/DSL modem’s Ethernet port.
Instant Broadband® Series How will I be notified of new Router firmware upgrades? All Linksys firmware upgrades are posted on the Linksys website at www.linksys.com, where they can be downloaded for free. The Router’s firmware can be upgraded with TFTP programs. If the Router’s Internet connection is working well, there is no need to download a newer firmware version, unless that version contains new features that you would like to use.
Instant Broadband® Series Appendix B: Maximizing VPN Security Just as you maximized your network security with a firewall, you should also maximize security for your data with the Firewall Router. IPSec is compatible with most VPN endpoints and ensures privacy and authentication for data, while authenticating user identification. With IPSec, authentication is based upon the PC's IP Address.
Instant Broadband® Series Appendix C: Configuring IPSec between a Windows 2000 or XP PC and the Firewall Router Introduction EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Note: Keep a record of any changes you make. Those changes will be identical in the Windows “secpol” application and the Router’s WebBased Utility. Step One: Create an IPSec Policy 1. Click the Start button, select Run, and type secpol.msc in the Open field.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 3. The IP Filter List screen should appear, as shown in Figure C-4. Enter an appropriate name, such as win->router, for the filter list, and de-select the Use Add Wizard check box. Then, click the Add button. Step Two: Build Filter Lists Filter List 1: win->router Note: The references in this section to “win” are references to Windows 2000 and XP. 1.
Instant Broadband® Series 5. If you want to enter a description for your filter, click the Description tab and enter the description there. 6. Click the OK button. Then, click the OK (for Windows XP) or Close (for Windows 2000) button on the IP Filter List window. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 8. The IP Filter List screen should appear, as shown in Figure C-7.
Instant Broadband® Series 10. If you want to enter a description for your filter, click the Description tab and enter the description there. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Step Three: Configure Individual Tunnel Rules Tunnel 1: win->router 11. Click the OK button and the New Rule Properties screen should appear with the IP Filer List tab selected, as shown in Figure C-9. There should now be a listing for “router -> win” and “win -> router”.
Instant Broadband® Series 3. From the Security Methods tab, shown in Figure C-12, verify that the Negotiate security option is enabled, and deselect the Accept unsecured communication, but always respond using IPSec check box. Select Session key Perfect Forward Secrecy, and click the OK button. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 5.
Instant Broadband® Series 7. Select the Tunnel Setting tab, shown in Figure C-16, and click The tunnel endpoint is specified by this IP Address radio button. Then, enter the Router’s WAN IP Address. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Tunnel 2: router->win 9. In the screen, shown in Figure C-18, make sure that “win -> router” is select and deselect the Use Add Wizard check box. Then, click the Add button to create the second IP filter. Figure C-16 Figure C-18 8.
Instant Broadband® Series 11. Click the Filter Action tab, and select the filter action Require Security, as shown in Figure C-20. Then, click the Edit button. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 13. Change the authentication method to Use this string to protect the key exchange (preshared key), and enter the preshared key string, such as XYZ12345, as shown in Figure C22. (This is a sample key string. Yours should be a key that is unique but easy to remember.
Instant Broadband® Series 15. From the Tunnel Setting tab, shown in Figure C-24, click the radio button for The tunnel endpoint is specified by this IP Address, and enter the Windows 2000/XP computer’s IP Address. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 17. From the Rules tab, shown in Figure C26, click the Close button to return to the secpol screen. Figure C-24 16. Click the Connection Type tab, shown in Figure C-25, and select All network connections.
Instant Broadband® Series Step Five: Create a Tunnel Through the Web-based Utility Note: Further details on this step can be found in the VPN Tab section in “Chapter 7: The Cable/DSL Firewall Router’s Web-based Utility”. 1. Open your web browser, and enter 192.168.1.1 in the Address field. Press the Enter key. 2. When the User name and Password field appears, skip the user name and enter the default password admin. Press the Enter key. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 8.
Instant Broadband® Series Appendix D: SNMP Functions SNMP (Simple Network Management Protocol) is a widely-used network monitoring and control protocol. Data is passed from a SNMP agent, such as the EtherFast Cable/DSL Firewall Router with 4-Port 10/100 Switch/VPN Endpoint to the workstation console used to oversee the network.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Step One: Pinging an IP Address Step Two: Pinging for a Web Address The first step to determining your ISP’s web and e-mail server address is to ping its IP address. While the IP address returned above would work as your e-mail server address, it may not be permanent. IP addresses change all the time. Web addresses, however, usually don’t.
Instant Broadband® Series Appendix F: Installing the TCP/IP Protocol EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 6. Find and double-click TCP/IP in the list to the right (see Figure F-2). Follow these instructions to install the TCP/IP protocol on one of your PCs only after a network card has been successfully installed inside the PC. These instructions are for Windows 95, Windows 98, and Windows Me.
Instant Broadband® Series Appendix G: Finding the MAC Address and IP Address for Your Ethernet Adapter EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint 3. Write down the Adapter Address as shown on your computer screen (see Figure G-3). This is the MAC address for your Ethernet adapter and will be shown as a series of numbers and letters. The MAC address/Adapter Address is what you will use for MAC Address Cloning.
Instant Broadband® Series 2. In the command prompt, enter ipconfig /all. Then press the Enter key. EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint When entering information for MAC Address Cloning, type the 12-digit MAC address (see Figure G-6). Figure G-6 Figure G-5 3. Write down the Physical Address as shown on your computer screen; it is the MAC address for your Ethernet adapter. This will appear as a series of letters and numbers.
Instant Broadband® Series Appendix H: Glossary 3DES - 3DES is a variation on DES that uses a 168-bit key. Adapter - Printed circuit board that plugs into a PC to add to capabilities or connectivity to a PC. AppleTalk - An Apple Computer networking system that supports Apple's proprietary local talk. Backbone - The part of a network that connects most of the systems and networks together and handles the most data. Bit - A binary digit. The value - 0 or 1-used in the binary numbering system.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint encrypt and decrypt the data, or to generate and verify a message authentication code. Linksys DES encryption uses a 56-bit key. employing unused bandwidth, still allows for normal phone usage. DSL provides "always-on" operation, eliminating the need to dial in to the service.
Instant Broadband® Series Firmware - Code that is written onto read-only memory (ROM) or programmable read-only memory (PROM). Once firmware has been written onto the ROM or PROM, it is retained even when the device is turned off. FTP (File Transfer Protocol) - A protocol used to transfer files over a TCP/IP network (Internet, UNIX, etc.). For example, after developing the HTML pages for a Web site on a local machine, they are typically uploaded to the Web server using FTP.
Instant Broadband® Series e-mail address you're sending a note to. At the other end, the recipient can see the IP address of the Web page requestor or the e-mail sender and can respond by sending another message using the IP address it received. IPSec (Internet Protocol Security) - A suite of protocols used to implement secure exchange of packets at the IP layer. IPSec supports two basic modes: Transport and Tunnel.
Instant Broadband® Series Packet - A unit of data routed between an origin and a destination in a network. Packet Filtering - Discarding unwanted network traffic based on its originating address or range of addresses or its type (e-mail, file transfer, etc.). Ping (Packet INternet Groper) - An Internet utility used to determine whether a particular IP address is online. It is used to test and debug a network by sending out a packet and waiting for a response.
Instant Broadband® Series et than just its source and destination information. It is called "stateful" because verifies that the stated destination computer has previously requested the current communication. In this way, it verifies that all communications are initiated by the recipient computer and are taking place only with sources that are known and trusted from previous interactions.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint phone (DSL) or cable systems, or through leased lines or satellites. In its most basic definition, the Internet could be considered a WAN. Appendix I: Specifications WINIPCFG - Configuration utility based on the Win32 API for querying, defining and managing IP addresses within a network. A commonly used utility for configuring networks with static IP addresses.
Instant Broadband® Series EtherFast® Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint Appendix J: Warranty Information Appendix K: Contact Information BE SURE TO HAVE YOUR PROOF OF PURCHASE AND A BARCODE FROM THE PRODUCT'S PACKAGING ON HAND WHEN CALLING. RETURN REQUESTS CANNOT BE PROCESSED WITHOUT PROOF OF PURCHASE. For help with the installation or operation of the EtherFast Cable/DSL Firewall Router, contact Linksys Technical Support at one of the phone numbers or Internet addresses below.
www.linksys.com © Copyright 2003 Linksys, All Rights Reserved.
