Q87-HGA5S-3Wireless-G VPN Broadband Router

A Division of Cisco Systems, Inc. ® Model No. VPN Broadband Router Wireless-G WRV54G User Guide GHz 2.4 54Mbps WIRELESS Wireless-G VPN Broadband Router Copyright and Trademarks Specifications are subject to change without notice. Instant Etherfast, Linksys, and the Linksys logo are registered trademarks of Linksys Group, Inc. Other brands and product names are trademarks or registered trademarks of their respective holders. Copyright © 2003 Linksys. All rights reserved. How to Use this Guide Your Guide to the Wireless-G VPN Broadband Router has been designed to make understanding networking with the Router easier than ever. Look for the following items when reading this User Guide: In addition to these symbols, there are definitions for technical terms that are presented like this: Also, each figure (diagram, screenshot, or other image) is provided with a figure number and description, like this: Figure numbers and descriptions can also be found in the "List of Figures" section in the “Table of Contents”. WRV54G-QI-30801NC BW This exclamation point means there is a Caution or Warning and is something that could damage your property or the Router. word: definition. This checkmark means there is a Note of interest and is something you should pay special attention to while using the Router. This question mark provides you with a reminder about something you might need to do while using the Router. Figure 0-1: Sample Figure Description Wireless-G VPN Broadband Router Table of Contents Chapter 1: Introduction 1 Welcome 1 What’s in this Guide? 2 Chapter 2: Planning your Wireless Network 4 The Router’s Functions4 IP Addresses 4 Why do I need a VPN? 5 What is a VPN? 6 Chapter 3: Getting to Know the Wireless-G VPN Broadband Router 9 The Back Panel 9 The Front Panel 10 Chapter 4: Connecting the Wireless-G Broadband Router 11 Overview 11 Wired Connection to a PC 12 Wireless Connection to a PC 12 Chapter 5: Configuring the PCs 14 Overview 14 Configuring Windows 98 and Millennium PCs 14 Configuring Windows 2000 PCs 15 Configuring Windows XP PCs 16 Chapter 6: Configuring the Router 18 Overview 18 How to Access the Web-based Utility 20 The Setup Tab 20 The Wireless Tab 27 The Security Tab 31 The Access Restrictions Tab 36 The Applications and Gaming Tab 38 The Administration Tab 42 Status 46 Appendix A:Troubleshooting 49 Common Problems and Solutions 49 Wireless-G VPN Broadband Router Frequently Asked Questions 57 Appendix B: Wireless Security 64 A Brief Overview 64 What Are The Risks? 64 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router 71 Introduction 71 Environment 71 How to Establish a Secure IPSec Tunnel72 Windows 98 or Me Instructions 82 Windows 2000 or XP Instructions 83 Appendix D: Finding the MAC Address and IP Address for Your Ethernet Adapter 84 Appendix E: SNMP Functions 84 Appendix F: Upgrading Firmware 85 Appendix G: Windows Help 86 Appendix H: Glossary 87 Appendix I: Specifications 93 Appendix J: Warranty Information 95 Appendix K: Regulatory Information 96 Appendix L: Contact Information 98 1 Chapter 1: Introduction Welcome Wireless-G Broadband VPN Router Chapter 1: Introduction Welcome Wireless-G is the upcoming 54Mbps wireless networking standard that’s almost five times faster than the widely deployed Wireless-B (802.11b) products found in homes, businesses, and public wireless hotspots around the country—but since they share the same 2.4GHz radio band, Wireless-G devices can also interoperate with existing 11Mbps Wireless-B equipment. Since both standards are built in, you can protect your investment in existing 802.11b infrastructure, and migrate to the new screaming fast Wireless-G standard as your needs grow. The Linksys Wireless-G Broadband VPN Router is really three devices in one box. First, there’s the Wireless Access Point, which lets you connect Wireless-G or Wireless-B devices to the network. There’s also a built-in 4- port full-duplex 10/100 Switch to connect your wired-Ethernet devices. Connect four PCs directly, or daisy-chain out to more hubs and switches to create as big a network as you need. Finally, the Router function ties it all together and lets your whole network share a high-speed cable or DSL Internet connection. To protect your data and privacy, the Wireless-G Broadband VPN Router can encrypt all wireless transmissions. The Router can serve as a DHCP Server, has NAT technology to protect against Internet intruders, supports VPN pass-through, and can be configured to filter internal users’ access to the Internet. Configuration is a snap with the web browser-based configuration utility. With the Linksys Wireless-G Broadband VPN Router at the center of your home or office network, you can share a high-speed Internet connection, files, printers, and multi-player games with the flexibility, speed, and security you need! 2 Chapter 1: Introduction What’s in this Guide? Wireless-G Broadband VPN Router What’s in this Guide? This user guide covers the steps for setting up and using the Wireless-G VPN Broadband Router. • Chapter 1: Introduction This chapter describes the Wireless-G VPN Broadband Router applications and this User Guide. • Chapter 2: Planning your Wireless Network This chapter describes the basics of wireless networking. • Chapter 3: Getting to Know the Wireless-G VPN Broadband Router This chapter describes the physical features of the Router. • Chapter 4: Connecting the Wireless-G VPN Broadband Router This chapter instructs you on how to connect the Router to your network. • Chapter 5: Configuring the PCs This chapter explains how to configure the PCs for your network. • Chapter 6: Configuring the Router This chapter explains how to use the Web-Based Utility to configure the settings on the Router. • Appendix A: Troubleshooting This appendix describes some problems and solutions, as well as frequently asked questions, regarding installation and use of the Wireless-G VPN Broadband Router. • Appendix B: Wireless Security This appendix…

Text truncated - open the document above for the full version.

17 Chapter 5: Configuring the PCs Configuring Windows XP PCs Wireless-G VPN Broadband Router Figure 5-8: IP Address 18 Chapter 6: Configuring the Router Overview Wireless-G VPN Broadband Router Chapter 6: Configuring the Router Overview Linksys recommends using the Setup CD-ROM for first-time installation of the Router and setting up additional computers. If you do not wish to run the Setup Wizard on the Setup CD-ROM, then follow the steps in this chapter and use the Router’s web-based utility to configure the Router. This chapter will describe each web page in the Utility and each page’s key functions. The utility can be accessed via your web browser through use of a computer connected to the Router. For a basic network setup, most users only have to use the following screens of the Utility: • Basic Setup. On the Basic Setup screen, enter the settings provided by your ISP. • Management. Click the Administration tab and then the Management tab. The Router’s default password is admin. To secure the Router, change the Password from its default. There are seven main tabs: Setup, Wireless, Security, Access Restrictions, Applications & Gaming, Administration, and Status. Additional tabs will be available after you click one of the main tabs. Setup • Basic Setup. Enter the Internet connection and network settings on this screen. • DDNS. To enable the Router’s Dynamic Domain Name System (DDNS) feature, complete the fields on this screen. • MAC Address Clone. If you need to clone a MAC address onto the Router, use this screen. • Advanced Routing. On this screen, you can alter Network Address Translation (NAT), Dynamic Routing, and Static Routing configurations. • Hot Spot. Register with your Hot Spot service provider on this screen. Wireless • Basic Wireless Settings. You can choose your Wireless Network Mode and Wireless Security on this screen. • Wireless Network Access. This screen displays your network access list. Note: For added security, you should change the password through the Administration screen of the web-based utility. NAT (Network Address Translation): NAT technology translates IP addresses of a local area network to a different IP address for the Internet. Have You: Enabled TCP/IP on your PCs? PCs communicate over the network with this protocol. Refer to Appendix D: Windows Help for more information on TCP/IP. Note: The Router is designed to function properly after connecting the Router to your network. This chapter is provided solely for those who wish to perform more advanced 19 Chapter 6: Configuring the Router Overview Wireless-G VPN Broadband Router • Advanced Wireless Settings. On this screen you can access the Advanced Wireless features of Authentication Type, Basic Data Rates, Control Tx Rates, Beacon Interval, DTIM Interval, RTS Threshold, and Fragmentation Threshold. Security • Filter. To block specific users from Internet access, you can set up IP address, port, and MAC address filtering on the Filter screen. • VPN. To enable or disable IPSec, L2TP, and/or PPTP Pass-through, and set up VPN tunnels, use this screen. • 802.1x. Use this screen to set up RADIUS authentication. Access Restrictions • Access Restriction. This screen allows you to prevent or permit only certain users from attaching to your network. Applications & Gaming • Port Range Forwarding. To set up public services or other specialized Internet applications on your network, click this tab. • Port Triggering. To set up triggered ranges and forwarded ranges for Internet applications, click this tab. • UPnP Forwarding. Use this screen to alter UPnP forwarding settings. • DMZ. To allow one local user to be exposed to the Internet for use of special-purpose services, use this screen. Administration • Management. On this screen, alter router access privileges and UPnP settings. • Log. If you want to view or save activity logs, click this tab. • Diagnostics. Use this screen to check the connection between your Router and PC. • Factory Defaults. If you want to restore the Router’s factory defaults, then use this screen. • Firmware Upgrade. Click this tab if you want to upgrade the Router’s firmware. DTIM (Delivery Traffic Indication Message): A message included in data packets that can increase wireless efficiency. Beacon Interval :The frequency interval of the beacon, which is a packet broadcast by a router to synchronize a wireless network. RTS (Request To Send): A packet sent when a computer has data to transmit. The computer will wait for a CTS (Clear To Send) message before sending data. Fragmentation: Breaking a packet into smaller units when transmitting over a network medium that cannot support the original size of the packet. 20 Chapter 6: Configuring the Router How to Access the Web-based Utility Wireless-G VPN Broadband Router Status • Router. This screen provides status information about the Router. • Local Network. This provides status information about the local network. How to Access the Web-based Utility To access the web-based utility, launch Internet Explorer or Netscape Navigator, and enter the Router’s default IP address, 192.168.1.1, in the Address field. Then press Enter. A password request page, shown in Figure 6-1 will appear. (non-Windows XP users will see a similar screen.) Enter admin (the default user name) in the User Name field, and enter admin (the default password) in the Password field. Then click the OK button. The Setup Tab The Basic Setup Tab The first screen that appears is the Basic Setup tab. (See Figure 6-2.) This tab allows you to change the Router's general settings. Change these settings as described here and click the Save Settings button to save your changes or Cancel Changes to cancel your changes. Internet Setup • Internet Connection Type. The Router supports four connection types: Automatic Configuration - DHCP (the default connection type), PPPoE, Static IP, and PPTP. Each Basic Setup screen and available features will differ depending on what kind of connection t…

Text truncated - open the document above for the full version.

32 Chapter 6: Configuring the Router The Security Tab Wireless-G VPN Broadband Router VPN Virtual Private Networking (VPN) is a security measure that basically creates a secure connection between two remote locations. This connection is very specific as far as its settings are concerned; this is what creates the security. The VPN screen, shown in Figure 6-17, allows you to configure your VPN settings to make your network more secure. VPN PassThrough • IPSec Passthrough. Internet Protocol Security (IPSec) is a suite of protocols used to implement secure exchange of packets at the IP layer. To allow IPSec Passthrough, click the Enabled button. To disable IPSec Passthrough, click the Disabled button. • PPTP Pass Through. Point-to-Point Tunneling Protocol Passthrough is the method used to enable VPN sessions to a Windows NT 4.0 or 2000 server. To allow PPTP Passthrough, click the Enabled button. To disable PPTP Passthrough, click the Disabled button. • L2TP Pass Through. Layering 2 Tunneling Protocol Passthrough is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by to enable the operation of a virtual private network (VPN) over the Internet.To allow L2TP Passthrough, click the Enabled button. To disable L2TP Passthrough, click the Disabled button. VPN Tunnel The VPN Router creates a tunnel or channel between two endpoints, so that the data or information between these endpoints is secure. • To establish this tunnel, select the tunnel you wish to create in the Select Tunnel Entry drop-down box. It is possible to create up to 50 simultaneous tunnels. Then click Ena bled to enable the tunnel. Once the tunnel is enabled, enter the name of the tunnel in the Tunnel Name field. This is to allow you to identify multiple tunnels and does not have to match the name used at the other end of the tunnel. • Local Secure Group and Remote Secure Group. The Local Secure Group is the computer(s) on your LAN that can access the tunnel. The Remote Secure Group is the computer (s) on the remote end of the tunnel that can access the tunnel. Enter the IP Address and Subnet Mask of the local VPN Router in the fields. To allow access to the entire IP subnet, enter 0 for the last set of IP Addresses. (e.g. 192.168.1.0). • Remote Security Gateway. The Remote Security Gateway is the VPN device, such as a second VPN Router, on the remote end of the VPN tunnel. Enter the IP Address of the VPN device at the other end of the tunnel. The remote VPN device can be another VPN Router, a VPN Server, or a computer with VPN client software that supports IPSec. The IP Address may either be static (permanent) or dynamic (changing), depending on the Figure 6-17: VPN 33 Chapter 6: Configuring the Router The Security Tab Wireless-G VPN Broadband Router settings of the remote VPN device. Make sure that you have entered the IP Address correctly, or the connection cannot be made. Remember, this is NOT the IP Address of the local VPN Router, but the IP Address of the remote VPN Router or device with which you wish to communicate. • Encryption. Using Encryption also helps make your connection more secure. There are two different types of encryption: DES or 3DES (3DES is recommended because it is more secure). You may choose either of these, but it must be the same type of encryption that is being used by the VPN device at the other end of the tunnel. Or, you may choose not to encrypt by selecting Disable. In Figure 6-18, DES (which is the default) has been selected. • Authentication. Authentication acts as another level of security. There are two types of authentication: MD5 and SHA (SHA is recommended because it is more secure). As with encryption, either of these may be selected, provided that the VPN device at the other end of the tunnel is using the same type of authentication. Or, both ends of the tunnel may choose to Disable authentication. In Figure 6-18, MD5 (the default) has been selected. • Key Management. Key Exchange Method. Select Auto (IKE) or Manual for the Key Exchange Method. The two methods are described below. Auto (IKE) Select Auto (IKE) and enter a series of numbers or letters in the Pre-shared Key field. Check the box next to PFS (Perfect Forward Secrecy) to ensure that the initial key exchange and IKE proposals are secure. Based on this word, which MUST be entered at both ends of the tunnel if this method is used, a key is generated to scramble (encrypt) the data being transmitted over the tunnel, where it is unscrambled (decrypted). You may use any combination of up to 24 numbers or letters in this field. No special characters or spaces are allowed. In the Key Lifetime field, you may optionally select to have the key expire at the end of a time period of your choosing. Enter the number of seconds you’d like the key to be useful, or leave it blank for the key to last indefinitely. Manual (See Figure 6-18.) Select Manual, then select the Encryption Algorithm from the drop-down menu. Enter the Encryption Key in the field (If, for your Encryption Algorithm, you chose DES, enter 16 hexadecimal characters. If you chose 3DES, enter 48 hexadecimal characters.) Select the Authentication Algorithm from the drop-down menu. Enter the Authentication Key in the field (If, for your Authentication Algorithm, you chose MD5, enter 32 hexadecimal characters. If you chose SHA1, enter 40 hexadecimal characters.) . Enter the Inbound and Outbound SPIs in the respective fields. • Status. Click the Advanced VPN Tunnel Setup key and the Advanced VPN Tunnel Setup screen will appear. See Figure 6-20. Figure 6-18: Manual Key Management 34 Chapter 6: Configuring the Router The Security Tab Wireless-G VPN Broadband Router When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. Advanced VPN Tunnel Setup From the Advance VPN Tunnel Setup screen, shown in Figure 6-19, you can adjust the settings for specific VPN tunnels. Phase 1 • …

Text truncated - open the document above for the full version.

47 Chapter 6: Configuring the Router Status Wireless-G VPN Broadband Router Local Network The Local Network information that is displayed is the IP Address, Subnet Mask, DHCP Server, and DHCP Client Lease Info. To view the DHCP Clients Table, click the DHCP Clients button. See Figure 6-36. The DHCP Active IP Table, Figure 6-37, displays the computer name, IP Address, MAC Address and the expiration time. Click the Close button to return to the Local Network screen. Figure 6-37: DHCP Active IP Table Figure 6-36: Local Network 48 Chapter 6: Configuring the Router Status Wireless-G VPN Broadband Router Wireless The Wireless Network information that is displayed is the MAC Address, Mode, SSID, Channel, and Encryption Function. (See Figure 6-38.) Click the Refresh button if you want to Refresh your screen. System Performance The System Peformance information that is displayed is the Wireless, Internet, and/or LAN information for the IP Address, MAC Address, Connection Status, Packets Received, Packets Sent, Bytes Received, Bytes Sent, Error Packes Received, and Dropped Packets Received. (See Figure 6-39.) Click the Refresh button if you want to Refresh your screen. Figure 6-39: System Performance Figure 6-38: Wireless 49 Appendix A: Troubleshooting Common Problems and Solutions Wireless-G VPN Broadband Router Appendix A: Troubleshooting This appendix consists of two parts: “Common Problems and Solutions” and “Frequently Asked Questions.” Provided are possible solutions to problems that may occur during the installation and operation of the Router. Read the descriptions below to help you solve your problems. If you can’t find an answer here, check the Linksys website at www.linksys.com. Common Problems and Solutions 1. I need to set a static IP address on a PC. You can assign a static IP address to a PC by performing the following steps: •For Windows 98 and Me: 1. Click Start, Settings, and Control Panel. Double-click Network. 2. In The following network components are installed box, select the TCP/IP-> associated with your Ethernet adapter. If you only have one Ethernet adapter installed, you will only see one TCP/IP line with no association to an Ethernet adapter. Highlight it and click the Properties button. 3. In the TCP/IP properties window, select the IP address tab, and select Specify an IP address. Enter a unique IP address that is not used by any other computer on the network connected to the Router. Make sure that each IP address is unique for each PC or network device. 4. Click the Gateway tab, and in the New Gateway prompt, enter 192.168.1.1, which is the default IP address of the Router. Click the Add button to accept the entry. 5. Click the DNS tab, and make sure the DNS Enabled option is selected. Enter the Host and Domain names (e.g., John for Host and home for Domain). Enter the DNS entry provided by your ISP. If your ISP has not provided the DNS IP address, contact your ISP to get that information or go to its website for the information. 6. Click the OK button in the TCP/IP properties window, and click Close or the OK button for the Network window. 7. Restart the computer when asked. •For Windows 2000: 1. Click Start, Settings, and Control Panel. Double-click Network and Dial-Up Connections. 2. Right-click the Local Area Connection that is associated with the Ethernet adapter you are using, and select the Properties option. 3. In the Components checked are used by this connection box, highlight Internet Protocol (TCP/IP), and click the Properties button. Select Use the following IP address option. 4. Enter a unique IP address that is not used by any other computer on the network connected to the Router. 5. Enter the Subnet Mask, 255.255.255.0. 6. Enter the Default Gateway, 192.168.1.1 (Router’s default IP address). 50 Appendix A: Troubleshooting Common Problems and Solutions Wireless-G VPN Broadband Router 7. Toward the bottom of the window, select Use the following DNS server addresses, and enter the Preferred DNS server and Alternative DNS server (provided by your ISP). Contact your ISP or go on its website to find the information. 8. Click the OK button in the Internet Protocol (TCP/IP) Properties window, and click the OK button in the Local Area Connection Properties window. 9. Restart the computer if asked. •For Windows XP: The following instructions assume you are running Windows XP with the default interface. If you are using the Classic interface (where the icons and menus look like previous Windows versions), please follow the instructions for Windows 2000. 1. Click Start and Control Panel. 2. Click the Network and Internet Connections icon and then the Network Connections icon. 3. Right-click the Local Area Connection that is associated with the Ethernet adapter you are using, and select the Properties option. 4. In the This connection uses the following items box, highlight Internet Protocol (TCP/IP). Click the Properties button. 5. Enter a unique IP address that is not used by any other computer on the network connected to the Router. 6. Enter the Subnet Mask, 255.255.255.0. 7. Enter the Default Gateway, 192.168.1.1 (Router’s default IP address). 8. Toward the bottom of the window, select Use the following DNS server addresses, and enter the Preferred DNS server and Alternative DNS server (provided by your ISP). Contact your ISP or go on its website to find the information. 9. Click the OK button in the Internet Protocol (TCP/IP) Properties window. Click the OK button in the Local Area Connection Properties window. 2. I want to test my Internet connection. ACheck your TCP/IP settings. For Windows 98, Me, 2000, and XP: •Refer to “Chapter 4: Configure the PCs” for details. Make sure Obtain IP address automatically is selected in the settings. For Windows NT 4.0: •Click Start, Settings, and Control Panel. Double-click the Network icon. •Click the Protocol tab, and double-click on TCP/IP Protocol. •When the window appears, make sure you have selected the correct Adapt…

Text truncated - open the document above for the full version.

73 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 3. The IP Filter List screen should appear, as shown in Figure C-4. Enter an appropriate name, such as win- >router, for the filter list, and de-select the Use Add Wizard check box. Then, click the Add button. 4. The Filters Properties screen will appear, as shown in Figure C-5. Select the Addressing tab. In the Source address field, select My IP Address. In the Destination address field, select A specific IP Subnet, and fill in the IP Address: 192.168.1.0 and Subnet mask: 255.255.255.0. (These are the Router’s default settings. If you have changed these settings, enter your new values.) 5. If you want to enter a description for your filter, click the Description tab and enter the description there. 6. Click the OK button. Then, click the OK (for Windows XP) or Close (for Windows 2000) button on the IP Filter List window. Filter List 2: router=>win 7. The New Rule Properties screen will appear, as shown in Figure C-6. Select the IP Filter List tab, and make sure that win -> router is highlighted. Then, click the Add button. Figure C-4: IP Filter List Figure C-5: Filters Properties Figure C-6: New Rule Properties 74 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 8. The IP Filter List screen should appear, as shown in Figure C-7. Enter an appropriate name, such as router- >win for the filter list, and de-select the Use Add Wizard check box. Click the Add button. 9. The Filters Properties screen will appear, as shown in Figure C-8. Select the Addressing tab. In the Source address field, select A specific IP Subnet, and enter the IP Address: 192.168.1.0 and Subnet mask: 255.255.255.0. (Enter your new values if you have changed the default settings.) In the Destination address field, select My IP Address. 10. If you want to enter a description for your filter, click the Description tab and enter the description there. 11. Click the OK button and the New Rule Properties screen should appear with the IP Filer List tab selected, as shown in Figure C-9. There should now be a listing for “router -> win” and “win -> router”. Click the OK (for WinXP) or Close (for Win2000) button on the IP Filter List window. Figure C-7: IP Filter List Figure C-8: Filters Properties Figure C-9: New Rule Properties 75 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router Step 3: Configure Individual Tunnel Rules Tunnel 1: win->router 1. From the IP Filter List tab, shown in Figure C-10, click the filter list win->router. 2. Click the Filter Action tab (as in Figure C-11), and click the filter action Require Security radio button. Then, click the Edit button. 3. From the Security Methods tab, shown in Figure C-12, verify that the Negotiate security option is enabled, and deselect the Accept unsecured communication, but always respond using IPSec check box. Select Session key Perfect Forward Secrecy, and click the OK button. Figure C-12: Security Methods Tab Figure C-11: Filter Action Tab Figure C-10: IP Filter List Tab 76 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 4. Select the Authentication Methods tab, shown in Figure C-13, and click the Edit button. 5. Change the authentication method to Use this string to protect the key exchange (preshared key), as shown in Figure C-14, and enter the preshared key string, such as XYZ12345. Click the OK button. 6. This new Preshared key will be displayed in Figure C-15. Click the OK or Close button to continue. Figure C-14: Preshared Key Figure C-13: Authentication Methods Figure C-15: New Preshared Key 77 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 7. Select the Tunnel Setting tab, shown in Figure C-16, and click The tunnel endpoint is specified by this IP Address radio button. Then, enter the Router’s WAN IP Address. 8. Select the Connection Type tab, as shown in Figure C-17, and click All network connections. Then, click the OK or Close button to finish this rule. Tunnel 2: router->win 9. In the new policy’s properties screen, shown in Figure C-18, make sure that “win -> router” is selected and deselect the Use Add Wizard check box. Then, click the Add button to create the second IP filter. Figure C-16: Tunnel Setting Tab Figure C-17: Connectin Type Tab Figure C-18: Properties Screen 78 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 10. Go to the IP Filter List tab, and click the filter list router->win, as shown in Figure C-19. 11. Click the Filter Action tab, and select the filter action Require Security, as shown in Figure C-20. Then, click the Edit button. 12. Click the Authentication Methods tab, and verify that the authentication method Kerberos is selected, as shown in Figure C-21. Then, click the Edit button. Figure C-19: IP Filter List Tab Figure C-20: Filter Action Tab Figure C-21: Authentication Methods Tab 79 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 13. Change the authentication method to Use this string to protect the key exchange (preshared key), and enter the preshared key string, such as XYZ12345, as shown in Figure C-22. (This is a sample key string. Yours should be a key that is unique but easy to remember.) Then click the OK button. 14. This new Preshared key will be displayed in Figure C-23. Click the OK button to continue. 15. From the Tunnel Setting tab, shown in Figure C-24, click the radio button for The tunnel endpoint is specified by this IP Ad…

Text truncated - open the document above for the full version.