Q87-HGA7S-3Wireless-G VPN Broadband Router

Cisco-Linksys, LLC 121 Theory Drive Irvine, CA 92612 (USA) Phone: 949-823-3188 Fax: 949-823-3002 Date: June 23, 2004 FEDERAL COMMUNICATIONS COMMISSION DECLARATION OF CONFORMITY (DoC) Cisco-Linksys, LLC declares that the equipment described in this document is within the requirements of the Code of Federal Regulations listed below: Product Name: Wireless-G VPN Broadband Router Model Number: WRV54G This device complies with the limits for a Class B digital device pursuant to IEEE ANSI C63.4 and FCC Part 15 subpart B of the Rules and Regulations. The test result has been shown in the ADT test report with numbered D930622L03. Operation is subject to the following two conditions: 1. This device may not cause harmful interference. 2. This device must accept any interference received, including interference that may cause undesired operation. The Part 15 radio device operates on a non-interference basis with other devices operation at this frequency. Any change or modification to the product not expressly approved by Linksys could void the user’s authority to operate the device. Jennifer Yu / Associate Engineer Cisco-Linksys, LLC Tel.: ( 949 ) 823-3188 Fax: ( 949 ) 823-3002 [email protected]

A Division of Cisco Systems, Inc. ® Model No. VPN Broadband Router Wireless-G WRV54G User Guide GHz 2.4 54Mbps WIRELESS Wireless-G VPN Broadband Router Copyright and Trademarks Specifications are subject to change without notice. Instant Etherfast, Linksys, and the Linksys logo are registered trademarks of Linksys Group, Inc. Other brands and product names are trademarks or registered trademarks of their respective holders. Copyright © 2003 Linksys. All rights reserved. How to Use this Guide Your Guide to the Wireless-G VPN Broadband Router has been designed to make understanding networking with the Router easier than ever. Look for the following items when reading this User Guide: In addition to these symbols, there are definitions for technical terms that are presented like this: Also, each figure (diagram, screenshot, or other image) is provided with a figure number and description, like this: Figure numbers and descriptions can also be found in the "List of Figures" section in the “Table of Contents”. WRV54G-QI-30801NC BW This exclamation point means there is a Caution or Warning and is something that could damage your property or the Router. word: definition. This checkmark means there is a Note of interest and is something you should pay special attention to while using the Router. This question mark provides you with a reminder about something you might need to do while using the Router. Figure 0-1: Sample Figure Description Wireless-G VPN Broadband Router Table of Contents Chapter 1: Introduction 1 Welcome 1 What’s in this Guide? 2 Chapter 2: Planning your Wireless Network 4 The Router’s Functions4 IP Addresses 4 Why do I need a VPN? 5 What is a VPN? 6 Chapter 3: Getting to Know the Wireless-G VPN Broadband Router 9 The Back Panel 9 The Front Panel 10 Chapter 4: Connecting the Wireless-G Broadband Router 11 Overview 11 Wired Connection to a PC 12 Wireless Connection to a PC 12 Chapter 5: Configuring the PCs 14 Overview 14 Configuring Windows 98 and Millennium PCs 14 Configuring Windows 2000 PCs 15 Configuring Windows XP PCs 16 Chapter 6: Configuring the Router 18 Overview 18 How to Access the Web-based Utility 20 The Setup Tab 20 The Wireless Tab 27 The Security Tab 31 The Access Restrictions Tab 36 The Applications and Gaming Tab 38 The Administration Tab 42 Status 46 Appendix A:Troubleshooting 49 Common Problems and Solutions 49 Wireless-G VPN Broadband Router Frequently Asked Questions 57 Appendix B: Wireless Security 64 A Brief Overview 64 What Are The Risks? 64 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router 71 Introduction 71 Environment 71 How to Establish a Secure IPSec Tunnel72 Windows 98 or Me Instructions 82 Windows 2000 or XP Instructions 83 Appendix D: Finding the MAC Address and IP Address for Your Ethernet Adapter 84 Appendix E: SNMP Functions 84 Appendix F: Upgrading Firmware 85 Appendix G: Windows Help 86 Appendix H: Glossary 87 Appendix I: Specifications 93 Appendix J: Warranty Information 95 Appendix K: Regulatory Information 96 Appendix L: Contact Information 98 1 Chapter 1: Introduction Welcome Wireless-G Broadband VPN Router Chapter 1: Introduction Welcome Wireless-G is the upcoming 54Mbps wireless networking standard that’s almost five times faster than the widely deployed Wireless-B (802.11b) products found in homes, businesses, and public wireless hotspots around the country—but since they share the same 2.4GHz radio band, Wireless-G devices can also interoperate with existing 11Mbps Wireless-B equipment. Since both standards are built in, you can protect your investment in existing 802.11b infrastructure, and migrate to the new screaming fast Wireless-G standard as your needs grow. The Linksys Wireless-G Broadband VPN Router is really three devices in one box. First, there’s the Wireless Access Point, which lets you connect Wireless-G or Wireless-B devices to the network. There’s also a built-in 4- port full-duplex 10/100 Switch to connect your wired-Ethernet devices. Connect four PCs directly, or daisy-chain out to more hubs and switches to create as big a network as you need. Finally, the Router function ties it all together and lets your whole network share a high-speed cable or DSL Internet connection. To protect your data and privacy, the Wireless-G Broadband VPN Router can encrypt all wireless transmissions. The Router can serve as a DHCP Server, has NAT technology to protect against Internet intruders, supports VPN pass-through, and can be configured to filter internal users’ access to the Internet. Configuration is a snap with the web browser-based configuration utility. With the Linksys Wireless-G Broadband VPN Router at the center of your home or office network, you can share a high-speed Internet connection, files, printers, and multi-player games with the flexibility, speed, and security you need! 2 Chapter 1: Introduction What’s in this Guide? Wireless-G Broadband VPN Router What’s in this Guide? This user guide covers the steps for setting up and using the Wireless-G VPN Broadband Router. • Chapter 1: Introduction This chapter describes the Wireless-G VPN Broadband Router applications and this User Guide. • Chapter 2: Planning your Wireless Network This chapter describes the basics of wireless networking. • Chapter 3: Getting to Know the Wireless-G VPN Broadband Router This chapter describes the physical features of the Router. • Chapter 4: Connecting the Wireless-G VPN Broadband Router This chapter instructs you on how to connect the Router to your network. • Chapter 5: Configuring the PCs This chapter explains how to configure the PCs for your network. • Chapter 6: Configuring the Router This chapter explains how to use the Web-Based Utility to configure the settings on the Router. • Appendix A: Troubleshooting This appendix describes some problems and solutions, as well as frequently asked questions, regarding installation and use of the Wireless-G VPN Broadband Router. • Appendix B: Wireless Security This appendix…

Text truncated - open the document above for the full version.

17 Chapter 5: Configuring the PCs Configuring Windows XP PCs Wireless-G VPN Broadband Router Figure 5-8: IP Address 18 Chapter 6: Configuring the Router Overview Wireless-G VPN Broadband Router Chapter 6: Configuring the Router Overview Linksys recommends using the Setup CD-ROM for first-time installation of the Router and setting up additional computers. If you do not wish to run the Setup Wizard on the Setup CD-ROM, then follow the steps in this chapter and use the Router’s web-based utility to configure the Router. This chapter will describe each web page in the Utility and each page’s key functions. The utility can be accessed via your web browser through use of a computer connected to the Router. For a basic network setup, most users only have to use the following screens of the Utility: • Basic Setup. On the Basic Setup screen, enter the settings provided by your ISP. • Management. Click the Administration tab and then the Management tab. The Router’s default password is admin. To secure the Router, change the Password from its default. There are seven main tabs: Setup, Wireless, Security, Access Restrictions, Applications & Gaming, Administration, and Status. Additional tabs will be available after you click one of the main tabs. Setup • Basic Setup. Enter the Internet connection and network settings on this screen. • DDNS. To enable the Router’s Dynamic Domain Name System (DDNS) feature, complete the fields on this screen. • MAC Address Clone. If you need to clone a MAC address onto the Router, use this screen. • Advanced Routing. On this screen, you can alter Network Address Translation (NAT), Dynamic Routing, and Static Routing configurations. • Hot Spot. Register with your Hot Spot service provider on this screen. Wireless • Basic Wireless Settings. You can choose your Wireless Network Mode and Wireless Security on this screen. • Wireless Network Access. This screen displays your network access list. Note: For added security, you should change the password through the Administration screen of the web-based utility. NAT (Network Address Translation): NAT technology translates IP addresses of a local area network to a different IP address for the Internet. Have You: Enabled TCP/IP on your PCs? PCs communicate over the network with this protocol. Refer to Appendix D: Windows Help for more information on TCP/IP. Note: The Router is designed to function properly after connecting the Router to your network. This chapter is provided solely for those who wish to perform more advanced 19 Chapter 6: Configuring the Router Overview Wireless-G VPN Broadband Router • Advanced Wireless Settings. On this screen you can access the Advanced Wireless features of Authentication Type, Basic Data Rates, Control Tx Rates, Beacon Interval, DTIM Interval, RTS Threshold, and Fragmentation Threshold. Security • Filter. To block specific users from Internet access, you can set up IP address, port, and MAC address filtering on the Filter screen. • VPN. To enable or disable IPSec, L2TP, and/or PPTP Pass-through, and set up VPN tunnels, use this screen. • 802.1x. Use this screen to set up RADIUS authentication. Access Restrictions • Access Restriction. This screen allows you to prevent or permit only certain users from attaching to your network. Applications & Gaming • Port Range Forwarding. To set up public services or other specialized Internet applications on your network, click this tab. • Port Triggering. To set up triggered ranges and forwarded ranges for Internet applications, click this tab. • UPnP Forwarding. Use this screen to alter UPnP forwarding settings. • DMZ. To allow one local user to be exposed to the Internet for use of special-purpose services, use this screen. Administration • Management. On this screen, alter router access privileges and UPnP settings. • Log. If you want to view or save activity logs, click this tab. • Diagnostics. Use this screen to check the connection between your Router and PC. • Factory Defaults. If you want to restore the Router’s factory defaults, then use this screen. • Firmware Upgrade. Click this tab if you want to upgrade the Router’s firmware. DTIM (Delivery Traffic Indication Message): A message included in data packets that can increase wireless efficiency. Beacon Interval :The frequency interval of the beacon, which is a packet broadcast by a router to synchronize a wireless network. RTS (Request To Send): A packet sent when a computer has data to transmit. The computer will wait for a CTS (Clear To Send) message before sending data. Fragmentation: Breaking a packet into smaller units when transmitting over a network medium that cannot support the original size of the packet. 20 Chapter 6: Configuring the Router How to Access the Web-based Utility Wireless-G VPN Broadband Router Status • Router. This screen provides status information about the Router. • Local Network. This provides status information about the local network. How to Access the Web-based Utility To access the web-based utility, launch Internet Explorer or Netscape Navigator, and enter the Router’s default IP address, 192.168.1.1, in the Address field. Then press Enter. A password request page, shown in Figure 6-1 will appear. (non-Windows XP users will see a similar screen.) Enter admin (the default user name) in the User Name field, and enter admin (the default password) in the Password field. Then click the OK button. The Setup Tab The Basic Setup Tab The first screen that appears is the Basic Setup tab. (See Figure 6-2.) This tab allows you to change the Router's general settings. Change these settings as described here and click the Save Settings button to save your changes or Cancel Changes to cancel your changes. Internet Setup • Internet Connection Type. The Router supports four connection types: Automatic Configuration - DHCP (the default connection type), PPPoE, Static IP, and PPTP. Each Basic Setup screen and available features will differ depending on what kind of connection t…

Text truncated - open the document above for the full version.

32 Chapter 6: Configuring the Router The Security Tab Wireless-G VPN Broadband Router VPN Virtual Private Networking (VPN) is a security measure that basically creates a secure connection between two remote locations. This connection is very specific as far as its settings are concerned; this is what creates the security. The VPN screen, shown in Figure 6-17, allows you to configure your VPN settings to make your network more secure. VPN PassThrough • IPSec Passthrough. Internet Protocol Security (IPSec) is a suite of protocols used to implement secure exchange of packets at the IP layer. To allow IPSec Passthrough, click the Enabled button. To disable IPSec Passthrough, click the Disabled button. • PPTP Pass Through. Point-to-Point Tunneling Protocol Passthrough is the method used to enable VPN sessions to a Windows NT 4.0 or 2000 server. To allow PPTP Passthrough, click the Enabled button. To disable PPTP Passthrough, click the Disabled button. • L2TP Pass Through. Layering 2 Tunneling Protocol Passthrough is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by to enable the operation of a virtual private network (VPN) over the Internet.To allow L2TP Passthrough, click the Enabled button. To disable L2TP Passthrough, click the Disabled button. VPN Tunnel The VPN Router creates a tunnel or channel between two endpoints, so that the data or information between these endpoints is secure. • To establish this tunnel, select the tunnel you wish to create in the Select Tunnel Entry drop-down box. It is possible to create up to 50 simultaneous tunnels. Then click Ena bled to enable the tunnel. Once the tunnel is enabled, enter the name of the tunnel in the Tunnel Name field. This is to allow you to identify multiple tunnels and does not have to match the name used at the other end of the tunnel. • Local Secure Group and Remote Secure Group. The Local Secure Group is the computer(s) on your LAN that can access the tunnel. The Remote Secure Group is the computer (s) on the remote end of the tunnel that can access the tunnel. Enter the IP Address and Subnet Mask of the local VPN Router in the fields. To allow access to the entire IP subnet, enter 0 for the last set of IP Addresses. (e.g. 192.168.1.0). • Remote Security Gateway. The Remote Security Gateway is the VPN device, such as a second VPN Router, on the remote end of the VPN tunnel. Enter the IP Address of the VPN device at the other end of the tunnel. The remote VPN device can be another VPN Router, a VPN Server, or a computer with VPN client software that supports IPSec. The IP Address may either be static (permanent) or dynamic (changing), depending on the Figure 6-17: VPN 33 Chapter 6: Configuring the Router The Security Tab Wireless-G VPN Broadband Router settings of the remote VPN device. Make sure that you have entered the IP Address correctly, or the connection cannot be made. Remember, this is NOT the IP Address of the local VPN Router, but the IP Address of the remote VPN Router or device with which you wish to communicate. • Encryption. Using Encryption also helps make your connection more secure. There are two different types of encryption: DES or 3DES (3DES is recommended because it is more secure). You may choose either of these, but it must be the same type of encryption that is being used by the VPN device at the other end of the tunnel. Or, you may choose not to encrypt by selecting Disable. In Figure 6-18, DES (which is the default) has been selected. • Authentication. Authentication acts as another level of security. There are two types of authentication: MD5 and SHA (SHA is recommended because it is more secure). As with encryption, either of these may be selected, provided that the VPN device at the other end of the tunnel is using the same type of authentication. Or, both ends of the tunnel may choose to Disable authentication. In Figure 6-18, MD5 (the default) has been selected. • Key Management. Key Exchange Method. Select Auto (IKE) or Manual for the Key Exchange Method. The two methods are described below. Auto (IKE) Select Auto (IKE) and enter a series of numbers or letters in the Pre-shared Key field. Check the box next to PFS (Perfect Forward Secrecy) to ensure that the initial key exchange and IKE proposals are secure. Based on this word, which MUST be entered at both ends of the tunnel if this method is used, a key is generated to scramble (encrypt) the data being transmitted over the tunnel, where it is unscrambled (decrypted). You may use any combination of up to 24 numbers or letters in this field. No special characters or spaces are allowed. In the Key Lifetime field, you may optionally select to have the key expire at the end of a time period of your choosing. Enter the number of seconds you’d like the key to be useful, or leave it blank for the key to last indefinitely. Manual (See Figure 6-18.) Select Manual, then select the Encryption Algorithm from the drop-down menu. Enter the Encryption Key in the field (If, for your Encryption Algorithm, you chose DES, enter 16 hexadecimal characters. If you chose 3DES, enter 48 hexadecimal characters.) Select the Authentication Algorithm from the drop-down menu. Enter the Authentication Key in the field (If, for your Authentication Algorithm, you chose MD5, enter 32 hexadecimal characters. If you chose SHA1, enter 40 hexadecimal characters.) . Enter the Inbound and Outbound SPIs in the respective fields. • Status. Click the Advanced VPN Tunnel Setup key and the Advanced VPN Tunnel Setup screen will appear. See Figure 6-20. Figure 6-18: Manual Key Management 34 Chapter 6: Configuring the Router The Security Tab Wireless-G VPN Broadband Router When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. Advanced VPN Tunnel Setup From the Advance VPN Tunnel Setup screen, shown in Figure 6-19, you can adjust the settings for specific VPN tunnels. Phase 1 • …

Text truncated - open the document above for the full version.

42 Chapter 6: Configuring the Router The Administration Tab Wireless-G VPN Broadband Router Figure 6-30: Management The Administration Tab Management The Management screen, shown in Figure 6-30, allows you to change the Router’s access settings as well as configure the SNMP and UPnP (Universal Plug and Play) features. Router Password Local Router Access. To ensure the Router’s security, you will be asked for your password when you access the Router’s Web-based Utility. The default password is admin. • User Name. Enter the default admin. • Router Password. It is recommended that you change the default password to one of your choice. • Re-enter to confirm. Re-enter the Router’s new Password to confirm it. Remote Router Access. This feature allows you to access the Router from a remote location, via the Internet. • Remote Management. This feature allows you to manage the Router from a remote location, via the Internet. To enable Remote Management, click Enabled. • Mangagement Port. Select the port number you will use to remotely access the Router from the drop-down menu. SNMP Simple Network Management Protocol (SNMP) is a popular network monitoring and management protocol. To enable SNMP, click Enabled. To disable SNMP, click Disabled. • Identification. In the Contact field, enter contact information for the Router. In the Device Name field, enter the name of the Router. In the Location field, specify the area or location where the Router resides. • Get Community. Enter the password that allows read-only access to the Router’s SNMP information. • Set Community. Enter the password that allows read/write access to the Router’s SNMP information. • SNMP Trusted Host. You can restrict access to the Router’s SNMP information by IP address. Enter the IP address in the SNMP Trusted Host field. If this field is left blank, then access is permitted from any IP address. 43 Chapter 6: Configuring the Router The Administration Tab Wireless-G VPN Broadband Router Figure 6-31: Log • SNMP Trap-Community. Enter the password required by the remote host computer that will receive trap messages or notices sent by the Router. • SNMP Trap-Destination. Enter the IP address of the remote host computer that will receive the trap messages. UPnP UPnP allows Windows XP to automatically configure the Router for various Internet applications, such as gaming and videoconferencing. To enable UPnP, click Enabled. • Allow User to make Configuration Changes. When enabled, this feature allows you to make manual changes while still using the UPnP feature. • Allow users to disable Internet access. When enabled, this feature allows you to prohibit any and all Internet connections. When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. Log The Log tab, shown in Figure 6-31, provides you with a log of all incoming and outgoing URLs or IP addresses for your Internet connection. Email Alert To enable E-Mail Alert, click Enabled. • E-Mail Address for General Logs. Enter the E-Mail Address for General Logs in the field. • E-Mail Address for Alert Logs. Enter the E-Mail Address for Alert Logs in the field. • Return E-Mail address. Enter the address for the return E-Mail. • E-Mail Server IP Address. Enter the IP Address of the E-Mail Server in the fields. Syslog Notification To enable Syslog, click Enabled. • Device Name. Enter the Device Name in the field. 44 Chapter 6: Configuring the Router The Administration Tab Wireless-G VPN Broadband Router • Syslog Server IP Address. Enter the IP Address of the Syslog Server. • Syslog Priority. Select the priority from the drop-down list. Notification Queue Length • Log queue Length. Enter the number of entries in the log queue in the field. • Log Time Threshold. Enter the time for the threshold in the field. Alert Log Select the type of attacks that you want to be alerted to. Select Syn Flooding, IP Spoofing, Win Nuke, Ping of Death, or Unauthorized Login attempt. General Log. Select the type of activity you would like to log. Select System Error Messages, Deny Policies, Allow Policies, Content Filtering, Data Inspection, authorized Login, or Configuration Changes. When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. Diagnostics Ping Test (See Figure 6-32.) Ping Test Parameters Ping Target IP. Enter the IP Address that you want to ping in the field. No. of Pings. Enter the number of times that you want to ping. Ping Size. Enter the size of the ping packets. Ping Interval. Enter the ping interval in Milliseconds. Ping Timeout. Enter the time in Milliseconds. Click the Start Test button to start the Ping Test. Click the Abort Test button to stop the test. Click the Clear Result button to clear the results. The results of the test will display in the window. Figure 6-32: Ping Test 45 Chapter 6: Configuring the Router Wireless-G VPN Broadband Router Factory Default (See Figure 6-33.) If you have exhausted all other options and wish to restore the Router to its factory default settings and lose all your settings, click Yes. When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. Firmware Upgrade (See Figure 6-34.) To upgrade the Router’s firmware: 1. Click the Browse button to find the firmware upgrade file that you downloaded from the Linksys website and then extracted. 2. Double-click the firmware file you downloaded and extracted. Click the Upgrade button, and follow the instructions there. Figure 6-34: Firmware Upgrade Figure 6-33: Factory Default 46 Chapter 6: Configuring the Router Status Wireless-G VPN Broadband Router Status Router This screen displays information about your Router and its WAN (Internet) Connections. (See Figure 6-35.) Information The information displayed is the Hardwar…

Text truncated - open the document above for the full version.

72 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router How to Establish a Secure IPSec Tunnel Step 1: Create an IPSec Policy 1. Click the Start button, select Run, and type secpol.msc in the Open field. The Local Security Setting screen will appear as shown in Figure C-1. 2. Right-click IP Security Policies on Local Computer, and click Create IP Security Policy. 3. Click the Next button, and then enter a name for your policy (for example, to_router). Then, click Next. 4. Deselect the Activate the default response rule check box, and then click the Next button. 5. Click the Finish button, making sure the Edit check box is checked. Step 2: Build Filter Lists Filter List 1: win->router 1. In the new policy’s properties screen, verify that the Rules tab is selected, as shown in Figure C-2. Deselect the Use Add Wizard check box, and click the Add button to create a new rule. 2. Make sure the IP Filter List tab is selected, and click the Add button. (See Figure C-3.) NOTE:The references in this section to “win” are references to Windows 2000 and XP. Figure C-1: Password Screen Figure C-2: Setup Tab Figure C-3: IP Filter List Tab 73 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 3. The IP Filter List screen should appear, as shown in Figure C-4. Enter an appropriate name, such as win- >router, for the filter list, and de-select the Use Add Wizard check box. Then, click the Add button. 4. The Filters Properties screen will appear, as shown in Figure C-5. Select the Addressing tab. In the Source address field, select My IP Address. In the Destination address field, select A specific IP Subnet, and fill in the IP Address: 192.168.1.0 and Subnet mask: 255.255.255.0. (These are the Router’s default settings. If you have changed these settings, enter your new values.) 5. If you want to enter a description for your filter, click the Description tab and enter the description there. 6. Click the OK button. Then, click the OK (for Windows XP) or Close (for Windows 2000) button on the IP Filter List window. Filter List 2: router=>win 7. The New Rule Properties screen will appear, as shown in Figure C-6. Select the IP Filter List tab, and make sure that win -> router is highlighted. Then, click the Add button. Figure C-4: IP Filter List Figure C-5: Filters Properties Figure C-6: New Rule Properties 74 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 8. The IP Filter List screen should appear, as shown in Figure C-7. Enter an appropriate name, such as router- >win for the filter list, and de-select the Use Add Wizard check box. Click the Add button. 9. The Filters Properties screen will appear, as shown in Figure C-8. Select the Addressing tab. In the Source address field, select A specific IP Subnet, and enter the IP Address: 192.168.1.0 and Subnet mask: 255.255.255.0. (Enter your new values if you have changed the default settings.) In the Destination address field, select My IP Address. 10. If you want to enter a description for your filter, click the Description tab and enter the description there. 11. Click the OK button and the New Rule Properties screen should appear with the IP Filer List tab selected, as shown in Figure C-9. There should now be a listing for “router -> win” and “win -> router”. Click the OK (for WinXP) or Close (for Win2000) button on the IP Filter List window. Figure C-7: IP Filter List Figure C-8: Filters Properties Figure C-9: New Rule Properties 75 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router Step 3: Configure Individual Tunnel Rules Tunnel 1: win->router 1. From the IP Filter List tab, shown in Figure C-10, click the filter list win->router. 2. Click the Filter Action tab (as in Figure C-11), and click the filter action Require Security radio button. Then, click the Edit button. 3. From the Security Methods tab, shown in Figure C-12, verify that the Negotiate security option is enabled, and deselect the Accept unsecured communication, but always respond using IPSec check box. Select Session key Perfect Forward Secrecy, and click the OK button. Figure C-12: Security Methods Tab Figure C-11: Filter Action Tab Figure C-10: IP Filter List Tab 76 Appendix C: Configuring IPSec between a Windows 2000 PC and the Router How to Establish a Secure IPSec Tunnel Wireless-G VPN Boradband Router 4. Select the Authentication Methods tab, shown in Figure C-13, and click the Edit button. 5. Change the authentication method to Use this string to pro…

Text truncated - open the document above for the full version.