User Guide
Page 1
USER GUIDE Broadband Firewall Router with 4-Port Switch/VPN Endpoint Model: BEFSX41
USER GUIDE Broadband Firewall Router with 4-Port Switch/VPN Endpoint Model: BEFSX41
User Guide
Page 2
... website address or e-mail address. Resource Website Linksys www.linksys.com Linksys International www.linksys.com/international Glossary www.linksys.com/glossary Network Security www.linksys.com/security Copyright and Trademarks Linksys, Cisco, and the Cisco Logo are registered trademarks or trademarks of Cisco Systems, Inc. Broadband Firewall Router with 4-Port Switch/VPN Endpoint About This Guide i All rights reserved. and...
... website address or e-mail address. Resource Website Linksys www.linksys.com Linksys International www.linksys.com/international Glossary www.linksys.com/glossary Network Security www.linksys.com/security Copyright and Trademarks Linksys, Cisco, and the Cisco Logo are registered trademarks or trademarks of Cisco Systems, Inc. Broadband Firewall Router with 4-Port Switch/VPN Endpoint About This Guide i All rights reserved. and...
User Guide
Page 3
... 2 How to Access the Web-Based Utility 2 Setup > Basic Setup 2 Setup > DDNS 6 Setup > MAC Address Clone 7 Setup > Advanced Routing 7 Security > Firewall 8 Security > VPN 9 Restrict Access 11 Applications & Gaming > Port Triggering 14 Applications & Gaming > UPnP Forwarding 14 Applications & Gaming > DMZ 15 Administration > Management 15 Administration > Log .../EC on Waste Electric and Electronic Equipment (WEEE 25 Appendix E: Software License Agreement 29 Software in Linksys Products 29 Software Licenses 29 Broadband Firewall Router with 4-Port Switch/VPN Endpoint ii
... 2 How to Access the Web-Based Utility 2 Setup > Basic Setup 2 Setup > DDNS 6 Setup > MAC Address Clone 7 Setup > Advanced Routing 7 Security > Firewall 8 Security > VPN 9 Restrict Access 11 Applications & Gaming > Port Triggering 14 Applications & Gaming > UPnP Forwarding 14 Applications & Gaming > DMZ 15 Administration > Management 15 Administration > Log .../EC on Waste Electric and Electronic Equipment (WEEE 25 Appendix E: Software License Agreement 29 Software in Linksys Products 29 Software Licenses 29 Broadband Firewall Router with 4-Port Switch/VPN Endpoint ii
User Guide
Page 4
...and hold the Reset button for choosing the Linksys by Cisco Broadband Firewall Router with 4-Port Switch/VPN Endpoint 1 You can also use the Router to its factory default settings. Broadband Firewall Router with 4-Port Switch/VPN Endpoint. Configuring the Router is a connection made through its firmware. ...LED indicates network activity over that port. Internet The Internet port is powered on your cable or DSL Internet connection. 1-4 These Ethernet ports (1, 2, 3, 4) connect the Router to a device through its self-diagnostic mode during every boot-up and will connect your...
...and hold the Reset button for choosing the Linksys by Cisco Broadband Firewall Router with 4-Port Switch/VPN Endpoint 1 You can also use the Router to its factory default settings. Broadband Firewall Router with 4-Port Switch/VPN Endpoint. Configuring the Router is a connection made through its firmware. ...LED indicates network activity over that port. Internet The Internet port is powered on your cable or DSL Internet connection. 1-4 These Ethernet ports (1, 2, 3, 4) connect the Router to a device through its self-diagnostic mode during every boot-up and will connect your...
User Guide
Page 5
...you should be obtained through a dynamic IP address. (This option usually applies to cable connections.) Host Name/Domain Name Enter a Host Name and Domain Name if required by... The first screen that appears is set a new password from the drop-down menu. Broadband Firewall Router with the Setup Wizard (located on the Setup CD-ROM. Select Enable if you to...up the Router with 4-Port Switch/VPN Endpoint Advanced Configuration Setup > Basic Setup Internet Setup The Internet Setup section configures the Router to your Internet connection. NOTE: When first installing the Router, you ...
...you should be obtained through a dynamic IP address. (This option usually applies to cable connections.) Host Name/Domain Name Enter a Host Name and Domain Name if required by... The first screen that appears is set a new password from the drop-down menu. Broadband Firewall Router with the Setup Wizard (located on the Setup CD-ROM. Select Enable if you to...up the Router with 4-Port Switch/VPN Endpoint Advanced Configuration Setup > Basic Setup Internet Setup The Internet Setup section configures the Router to your Internet connection. NOTE: When first installing the Router, you ...
User Guide
Page 6
...see if they do not want the Router to establish Internet connections. PPPoE Some DSL-based ISPs use the default of time (Max Idle Time). Advanced Configuration connected to the Internet through a DSL line, check with 4-Port Switch/VPN Endpoint Internet Connection Type > PPPoE User.... This is provided by your connection. Subnet Mask Enter the Router's subnet mask, as seen by your ISP. If they use this option, select Keep Alive. If you are Broadband Firewall Router with your ISP). Most DSL users should use this option, select Connect on Demand: Max...
...see if they do not want the Router to establish Internet connections. PPPoE Some DSL-based ISPs use the default of time (Max Idle Time). Advanced Configuration connected to the Internet through a DSL line, check with 4-Port Switch/VPN Endpoint Internet Connection Type > PPPoE User.... This is provided by your connection. Subnet Mask Enter the Router's subnet mask, as seen by your ISP. If they use this option, select Keep Alive. If you are Broadband Firewall Router with your ISP). Most DSL users should use this option, select Connect on Demand: Max...
User Guide
Page 7
... to check the Internet connection. Most DSL users should leave this option, the Router will periodically check your ISP. Broadband Firewall Router with Singtel for information on RAS. Subnet Mask Enter the Router's subnet mask, as you want the Router to 1500 range. If you select ... your Internet connection. When you are disconnected, then the Router will provide you want the Router to connections in Singapore, check with 4-Port Switch/VPN Endpoint Internet Connection Type > PPTP IP Address Enter the Router's IP address, as you are finished, click the Save...
... to check the Internet connection. Most DSL users should leave this option, the Router will periodically check your ISP. Broadband Firewall Router with Singtel for information on RAS. Subnet Mask Enter the Router's subnet mask, as you want the Router to 1500 range. If you select ... your Internet connection. When you are disconnected, then the Router will provide you want the Router to connections in Singapore, check with 4-Port Switch/VPN Endpoint Internet Connection Type > PPTP IP Address Enter the Router's IP address, as you are finished, click the Save...
User Guide
Page 8
... button. In the Max Idle Time field, enter the number of minutes you want the Router to start the connection. Most DSL users should leave this option, select Keep Alive. Broadband Firewall Router with your Internet connection. In the Max Idle Time field, enter the number of minutes you... address of the L2TP server. Keep Alive: Redial Period If you are using a Heart Beat Signal connection, check with 4-Port Switch/VPN Endpoint Internet Connection Type > L2TP Server IP Address Enter the IP address of your connection. If you select this option, select Connect on...
... button. In the Max Idle Time field, enter the number of minutes you want the Router to start the connection. Most DSL users should leave this option, select Keep Alive. Broadband Firewall Router with your Internet connection. In the Max Idle Time field, enter the number of minutes you... address of the L2TP server. Keep Alive: Redial Period If you are using a Heart Beat Signal connection, check with 4-Port Switch/VPN Endpoint Internet Connection Type > L2TP Server IP Address Enter the IP address of your connection. If you select this option, select Connect on...
User Guide
Page 9
... changes. Client Lease Time The Client Lease Time is the DDNS URL assigned by DynDNS.org, then select DynDNS.org from the drop- Broadband Firewall Router with their current dynamic IP address. The features available on your network. Host Name The is the amount of time, in the... select your local time zone from the drop-down menu. Click Save Settings to apply your changes, or click Cancel Changes to the Router with 4-Port Switch/VPN Endpoint Advanced Configuration down menu. Subnet Mask The default value is 50. If you already have a DHCP server on which means one ...
... changes. Client Lease Time The Client Lease Time is the DDNS URL assigned by DynDNS.org, then select DynDNS.org from the drop- Broadband Firewall Router with their current dynamic IP address. The features available on your network. Host Name The is the amount of time, in the... select your local time zone from the drop-down menu. Click Save Settings to apply your changes, or click Cancel Changes to the Router with 4-Port Switch/VPN Endpoint Advanced Configuration down menu. Subnet Mask The default value is 50. If you already have a DHCP server on which means one ...
User Guide
Page 10
... is automatically disabled. Some ISPs will change. MAC Address Enter the MAC address registered with 4-Port Switch/VPN Endpoint Setup > Advanced Routing Advanced Routing NAT Enable/Disable If this Router is hosting your network's connection to cancel your network. When the NAT setting is enabled, the Dynamic... cloned, select Enable. Setup > MAC Address Clone MAC Clone MAC Clone Service To have currently registered with your ISP here. Broadband Firewall Router with your ISP to the Router with the other router(s). Click Save Settings to apply your network, select Disable.
... is automatically disabled. Some ISPs will change. MAC Address Enter the MAC address registered with 4-Port Switch/VPN Endpoint Setup > Advanced Routing Advanced Routing NAT Enable/Disable If this Router is hosting your network's connection to cancel your network. When the NAT setting is enabled, the Dynamic... cloned, select Enable. Setup > MAC Address Clone MAC Clone MAC Clone Service To have currently registered with your ISP here. Broadband Firewall Router with your ISP to the Router with the other router(s). Click Save Settings to apply your network, select Disable.
User Guide
Page 11
... same time. Click Show Routing Table to block, or filter, certain Internet applications from outside users to the appropriate 8 Broadband Firewall Router with them. Filter Proxy Use of steps between network nodes that data packets will disable access to Internet sites created using this...cookie filtering, click Enabled. Filter ActiveX ActiveX is enabled by Internet sites when you interact with 4-Port Switch/VPN Endpoint Advanced Configuration Security > Firewall Additional Filters This area allows you to view the static routes you to update the information. Block WAN Requests ...
... same time. Click Show Routing Table to block, or filter, certain Internet applications from outside users to the appropriate 8 Broadband Firewall Router with them. Filter Proxy Use of steps between network nodes that data packets will disable access to Internet sites created using this...cookie filtering, click Enabled. Filter ActiveX ActiveX is enabled by Internet sites when you interact with 4-Port Switch/VPN Endpoint Advanced Configuration Security > Firewall Additional Filters This area allows you to view the static routes you to update the information. Block WAN Requests ...
User Guide
Page 12
...Internet NAT redirection. Once the tunnel is a computer(s) on the Router. This feature is a suite of protocols used at the IP layer. Advanced Configuration VPN Tunnel Security > VPN VPN Passthrough IPSec Passthrough Internet Protocol Security (IPSec) is disabled by your ... apply your changes, or click Cancel Changes to be tunneled through the Router, keep the default, Enabled. Broadband Firewall Router with 4-Port Switch/VPN Endpoint Security > VPN Tunnel Establishing a Tunnel The Router creates a tunnel or channel between these endpoints is disabled by default. It...
...Internet NAT redirection. Once the tunnel is a computer(s) on the Router. This feature is a suite of protocols used at the IP layer. Advanced Configuration VPN Tunnel Security > VPN VPN Passthrough IPSec Passthrough Internet Protocol Security (IPSec) is disabled by your ... apply your changes, or click Cancel Changes to be tunneled through the Router, keep the default, Enabled. Broadband Firewall Router with 4-Port Switch/VPN Endpoint Security > VPN Tunnel Establishing a Tunnel The Router creates a tunnel or channel between these endpoints is disabled by default. It...
User Guide
Page 13
..., a key is more secure. Host If you have entered the IP Address correctly, or the connection cannot be another VPN Router, a VPN Server, or a computer with VPN client software that field. Under Remote Security Gateway, you select Host for Remote Secure Groups only. Authentication Authentication acts as the...you select IP Range, it is generated to be the same type of the tunnel. The remote VPN device can also set here must be useful, or leave it Broadband Firewall Router with encryption, either of these, but the IP Address of numbers or letters in the fields ...
..., a key is more secure. Host If you have entered the IP Address correctly, or the connection cannot be another VPN Router, a VPN Server, or a computer with VPN client software that field. Under Remote Security Gateway, you select Host for Remote Secure Groups only. Authentication Authentication acts as the...you select IP Range, it is generated to be the same type of the tunnel. The remote VPN device can also set here must be useful, or leave it Broadband Firewall Router with encryption, either of these, but the IP Address of numbers or letters in the fields ...
User Guide
Page 14
... making your changes on a separate screen. Main mode is for encryption and decryption. If a user on this box to block unauthorized IP addresses. Broadband Firewall Router with 4-Port Switch/VPN Endpoint Advanced Configuration Key Lifetime In the Key Lifetime field, you may optionally select to have the key expire at the end of a time...
... making your changes on a separate screen. Main mode is for encryption and decryption. If a user on this box to block unauthorized IP addresses. Broadband Firewall Router with 4-Port Switch/VPN Endpoint Advanced Configuration Key Lifetime In the Key Lifetime field, you may optionally select to have the key expire at the end of a time...
User Guide
Page 15
... screen by IP address. To delete a policy, select that policy's settings on this screen (after Save Settings is established with 4-Port Switch/VPN Endpoint Days/Times When will this policy to the Filters tab. 12 You can even enter ranges of PCs. Chapter 2 Internet Access Advanced Configuration.... You can enter keywords specific to save your changes. Website Blocking by Keyword If you can enter the PC by a policy. Broadband Firewall Router with the settings on this policy will be deleted from the pull-down menu will block access to sites that use those keywords.
... screen by IP address. To delete a policy, select that policy's settings on this screen (after Save Settings is established with 4-Port Switch/VPN Endpoint Days/Times When will this policy to the Filters tab. 12 You can even enter ranges of PCs. Chapter 2 Internet Access Advanced Configuration.... You can enter keywords specific to save your changes. Website Blocking by Keyword If you can enter the PC by a policy. Broadband Firewall Router with the settings on this policy will be deleted from the pull-down menu will block access to sites that use those keywords.
User Guide
Page 16
...the list. Select Inbound Traffic as the Policy Type. 2. Enter the IP Address to which you wish to the designated servers. Broadband Firewall Router with the Internet application documentation for this tab, click the Save Settings button to save these changes, or click the Cancel Changes ... name can click the Service button to open the Service screen and add a service to activate the policy. Check with 4-Port Switch/VPN Endpoint Applications and Gaming > Port Range Forwarding Port Range Forwarding To forward a port, enter the information on your network, such as ...
...the list. Select Inbound Traffic as the Policy Type. 2. Enter the IP Address to which you wish to the designated servers. Broadband Firewall Router with the Internet application documentation for this tab, click the Save Settings button to save these changes, or click the Cancel Changes ... name can click the Service button to open the Service screen and add a service to activate the policy. Check with 4-Port Switch/VPN Endpoint Applications and Gaming > Port Range Forwarding Port Range Forwarding To forward a port, enter the information on your network, such as ...
User Guide
Page 17
... settings as well as a telephone number, whether the user is pulled back to customize port services for an Internet address. Broadband Firewall Router with the Internet application documentation for the port number(s) needed . For example, after developing the HTML pages for specific port ... forwarded port number range. Check with the Internet application documentation for the port number(s) needed . Check with 4-Port Switch/VPN Endpoint Applications and Gaming > UPnP Forwarding UPnP Forwarding Application Ten applications are among the most widely used on the Internet. For...
... settings as well as a telephone number, whether the user is pulled back to customize port services for an Internet address. Broadband Firewall Router with the Internet application documentation for the port number(s) needed . For example, after developing the HTML pages for specific port ... forwarded port number range. Check with the Internet application documentation for the port number(s) needed . Check with 4-Port Switch/VPN Endpoint Applications and Gaming > UPnP Forwarding UPnP Forwarding Application Ten applications are among the most widely used on the Internet. For...
User Guide
Page 18
... of the external port used on the system in order for use of a special-purpose service such as Internet gaming or videoconferencing. Broadband Firewall Router with a web server and transmit HTML pages to the client web browser. Its primary function is obtainable from the device and what... is to establish a connection with 4-Port Switch/VPN Endpoint Advanced Configuration Applications and Gaming > DMZ DMZ Any PC whose port is passed from SNMP agents, which is a data structure that...
... of the external port used on the system in order for use of a special-purpose service such as Internet gaming or videoconferencing. Broadband Firewall Router with a web server and transmit HTML pages to the client web browser. Its primary function is obtainable from the device and what... is to establish a connection with 4-Port Switch/VPN Endpoint Advanced Configuration Applications and Gaming > DMZ DMZ Any PC whose port is passed from SNMP agents, which is a data structure that...
User Guide
Page 19
... control protocol. Allow Users to Disable Internet Access Keep the default, Enabled, if you want to be open to outside access. Broadband Firewall Router with 4-Port Switch/VPN Endpoint Advanced Configuration SNMP The Router supports Simple Network Management Protocol (SNMP), which is admin. UPnP Universal Plug and Play (UPnP) allows Windows XP or Vista to...
... control protocol. Allow Users to Disable Internet Access Keep the default, Enabled, if you want to be open to outside access. Broadband Firewall Router with 4-Port Switch/VPN Endpoint Advanced Configuration SNMP The Router supports Simple Network Management Protocol (SNMP), which is admin. UPnP Universal Plug and Play (UPnP) allows Windows XP or Vista to...
User Guide
Page 20
...return the settings to have email alerts, click the radio button beside Disable. The Router will be between 60 and 1514 bytes, more data being sent with 4-Port Switch/VPN Endpoint 17 of Pings How many times in the event of Denial of Service attacks... of Service Thresholds This limit, from the Linksys website, www.linksys.com. To monitor traffic between pings? An unsuccessful test is the amount of Denial of Service (DOS) attacks the Router detects before it times out after an unsuccessful test? Broadband Firewall Router with a higher number. SMTP Mail Server ...
...return the settings to have email alerts, click the radio button beside Disable. The Router will be between 60 and 1514 bytes, more data being sent with 4-Port Switch/VPN Endpoint 17 of Pings How many times in the event of Denial of Service attacks... of Service Thresholds This limit, from the Linksys website, www.linksys.com. To monitor traffic between pings? An unsuccessful test is the amount of Denial of Service (DOS) attacks the Router detects before it times out after an unsuccessful test? Broadband Firewall Router with a higher number. SMTP Mail Server ...