Linksys BEFSX41v1.52 Router Manual PDF (Setup & Configuration Guide)

Home

Manuals

Linksys

BEFSX41v1.52

Page 46 / 75 Scroll up to view Page 41 - 45

EtherFast

Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

Your VPN may require port 500/UDP packets to be passed to the computer that

is connecting to the IPSec server. Refer to “Problem #7, I need to set up online

game hosting or use other Internet applications” for details.

Check the Linksys website for more information at

www.linksys.com

I need to set up a server behind my Router.

To use a server like a web, ftp, or mail server, you need to know the respective

port numbers they are using.

For example, port 80 (HTTP) is used for web;

port 21 (FTP) is used for FTP, and port 25 (SMTP outgoing) and port 110

(POP3 incoming) are used for the mail server.

You can get more information

by viewing the documentation provided with the server you installed.

these steps to set up port forwarding through the Router’s web-based utility. We

will be setting up web, ftp, and mail servers.

Access the Router’s web-based utility by going to

http://192.168.1.1

or the

IP address

of the Router. Go to the

Advanced => Forwarding

tab.

Enter any

name

you want to use for the Customized Application.

Enter the

Ext. Port range

of the service you are using. For example, if you

have a web server, you would enter the range 80 to 80.

Check the

protocol

you will be using, TCP and/or UDP.

Enter the

IP address

of the PC or network device that you want the port

server to go to. For example, if the web server’s Ethernet adapter IP address

is 192.168.1.100, you would enter 100 in the field provided. Check

“Appendix G: Finding the MAC Address and IP Address for Your Ethernet

Adapter” for details on getting an IP address.

Check the

Enable

option for the port services you want to use. Consider the

example below:

Customized

Ext. Port

TCP

UDP

IP Address

Enable

Application

Web server

80 to 80

192.168.1.100

FTP server

21 to 21

192.168.1.101

SMTP (outgoing)

25 to 25

192.168.1.102

POP3 (incoming)

110 to 110

192.168.1.102

When you have completed the configuration, click the

Apply

button and then

the

Continue

button.

Instant Broadband

Series

Turn off the computer, Router, and cable/DSL modem. Wait 30 seconds,

and then turn on the Router, cable/DSL modem, and computer. Check the

Status tab of the Router’s web-based utility to see if you get an IP address.

I am not able to access the Router’s web interface Setup page.

Refer to “Problem #2, I want to test my Internet connection” to verify that

your computer is properly connected to the Router.

Refer to “Appendix G: Finding the MAC Address and IP address for Your

Ethernet Adapter” to verify that your computer has an IP Address, Subnet

Mask, Gateway, and DNS.

Set a static IP address on your system; refer to “Problem #1: I need to set a

static IP address.”

Refer to “Problem #10: I need to remove the proxy settings or the dial-up

pop-up window (for PPPoE users).”

I can’t get my Virtual Private Network (VPN) Pass-Through working through the

Router (not a VPN tunnel).

Access the Router’s web interface by going to

http://192.168.1.1

or the

address

of the Router, and go to the

Advanced => Filter

tab.

Make sure you

have IPsec pass-through and/or PPTP pass-through enabled.

VPNs that use IPSec with the ESP (Encapsulation Security Payload known as

protocol 50) authentication will work fine. At least one IPSec session will work

through the Router; however, simultaneous IPSec sessions

may

be possible,

depending on the specifics of your VPNs.

VPNs that use IPSec and AH (Authentication Header known as protocol 51)

are incompatible with the Router.

AH has limitations due to occasional incom-

patibility with the NAT standard.

Change the IP address for the Router to another subnet to avoid a conflict

between the VPN IP address and your local IP address. For example, if your

VPN server assigns an IP address 192.168.1.X (X is a number from 1 to 254)

and your local LAN IP address is 192.168.1.X (X is the same number used in

the VPN IP address), the Router will have difficulties routing information to

the right location.

If you change the Router’s IP address to 192.168.2.1, that

should solve the problem. Change the Router’s IP address through the Setup tab

of the web interface.

If you assigned a static IP address to any computer or net-

work device on the network, you need to change its IP address accordingly to

192.168.2.Y (Y being any number from 1 to 254). Note that each IP address

must be unique within the network.

Downloaded from

www.Manualslib.com

manuals search engine

Page 47 / 75

EtherFast

Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

I can’t get the Internet game, server, or application to work.

If you are having difficulties getting any Internet game, server, or application

to function properly, consider exposing one PC to the Internet using

DeMilitarized Zone (DMZ) hosting. This option is available when an applica-

tion requires too many ports or when you are not sure which port services to

use. Make sure you disable all the forwarding entries if you want to success-

fully use DMZ hosting, since forwarding has priority over DMZ hosting. (In

other words, data that enters the Router will be checked first by the forwarding

settings. If the port number that the data enters from does not have port for-

warding, then the Router will send the data to whichever PC or network device

you set for DMZ hosting.)

Follow these steps to set DMZ hosting:

Access the Router’s web-based utility by going to

http://192.168.1.1

or the

IP address

of the Router. Go to the

Advanced => Forwarding

tab.

Disable or remove the entries you have entered for forwarding.

Keep this

information in case you want to use it at a later time.

Click the

DMZ Host

tab.

Enter the Ethernet adapter’s

IP address

of the computer you want exposed

to the Internet.

This will bypass the NAT firewall for that computer. Please

refer to “Appendix G: Finding the MAC Address and IP Address for Your

Ethernet Adapter” for details on getting an IP address.

Once completed with the configuration, click the

Apply

button and then the

Continue

button.

I forgot my password, or the password prompt always appears when saving

settings to the Router.

Reset the Router to factory default by pressing the

Reset

button for 30 seconds

and then releasing it. If you are still getting prompted for a password when sav-

ing settings, then perform the following steps:

Access the Router’s web interface by going to

http://192.168.1.1

or the

address

of the Router. Enter the default password

admin

, and click the

Password

tab.

B. Enter a

different password

in the Router Password field, and enter the

same password in the second field to confirm the password.

Click the

Apply

and

Continue

buttons.

Instant Broadband

Series

I need to set up online game hosting or use other Internet applications.

If you want to play online games or use Internet applications, most will work

without doing any port forwarding or DMZ hosting.

There may be cases when

you want to host an online game or Internet application.

This would require

you to set up the Router to deliver incoming packets or data to a specific com-

puter.

This also applies to the Internet applications you are using. The best way

to get the information on what port services to use is to go to the website of the

online game or application you want to use. Follow these steps to set up online

game hosting or use a certain Internet application:

Access the Router’s web interface by going to

http://192.168.1.1

or the

address

of the Router. Go to the

Advanced => Forwarding

tab.

Enter any

name

you want to use for the Customized Application.

Enter the

Ext. Port range

of the service you are using. For example, if you

want to host Unreal Tournament (UT), you would enter the range 7777 to

27900.

Check the

protocol

you will be using, TCP and/or UDP.

Enter the

IP address

of the PC or network device that you want the port

server to go to. For example, if the web server’s Ethernet adapter IP address

is 192.168.1.100, you would enter 100 in the field provided. Check

“Appendix G: Finding the MAC Address and IP Address for Your Ethernet

Adapter” for details on getting an IP address.

Check the

Enable

option for the port services you want to use. Consider the

example below:

Customized

Ext. Port

TCP

UDP

IP Address

Enable

Application

7777 to 27900

192.168.1.100

Halflife

27015 to 27015

192.168.1.105

PC Anywhere

5631 to 5631

192.168.1.102

VPN IPSEC

500 to 500

192.168.1.100

When you have completed the configuration, click the

Apply

button and then

the

Continue

button.

Downloaded from

www.Manualslib.com

manuals search engine

Page 48 / 75

EtherFast

Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

13. The firmware upgrade failed, and/or the Diag LED is flashing.

The upgrade could have failed for a number of reasons.

Follow these steps to

upgrade the firmware and/or make the Diag LED stop flashing:

If the firmware upgrade failed, use the

TFTP

program (it was downloaded

along with the firmware). Open the pdf that was downloaded along with the

firmware and TFTP program, and follow the pdf’s instructions.

Set a

static IP address

on the PC; refer to “Problem #1, I need to set a stat-

ic IP address.” Use the following IP address settings for the computer you

are using:

IP Address: 192.168.1.50

Subnet Mask: 255.255.255.0

Gateway: 192.168.1.1

Perform the upgrade using the TFTP program or the Router’s web-based

utility through its Help tab.

14. My DSL service’s PPPoE is always disconnecting.

PPPoE is not actually a dedicated or always-on connection.

The DSL ISP can

disconnect the service after a period of inactivity, just like a normal phone dial-

up connection to the Internet.

There is a setup option to “keep alive” the con-

nection.

This may not always work, so you may need to re-establish connec-

tion periodically.

A. To connect to the Router, go to the web browser, and enter

http://192.168.1.1

or the

IP address

of the Router.

Enter the

password

, if asked. (The default password is

admin

In the Setup tab, select the option

Keep Alive

, and set the

Redial Period

option at

(seconds).

Click the

Apply

and

Continue

buttons.

Click the

Status

tab, and click the

Connect

button.

You may see the login status display as

Connecting

. Press the

key to

refresh the screen, until you see the login status display as

Connected

Click the

Apply

and

Continue

buttons to continue.

If the connection is lost again, follow steps E to G to re-establish connection.

Instant Broadband

Series

10. I am a PPPoE user, and I need to remove the proxy settings or the dial-up pop-

up window.

If you have proxy settings, you need to disable these on your computer.

Because the Router is the gateway for the Internet connection, the computer

does not need any proxy settings to gain access.

Please follow these directions

to verify that you do not have any proxy settings and that the browser you use

is set to connect directly to the LAN.

For Microsoft Internet Explorer 5.0 or higher

A. Click

Start

Settings

, and

Control Panel

. Double-click

Internet Options

Click the

Connections

tab.

Click the

LAN settings

button and remove anything that is checked.

Click the

button to go back to the previous screen.

Click the option

Never dial a connection

This will remove any dial-up

pop-ups for PPPoE users.

For Netscape 4.7 or higher

A. Start

Netscape Navigator

, and click

Edit

Preferences

Advanced

, and

Proxies

Make sure you have

Direct connection to the Internet

selected on this

screen.

Close all the windows to finish.

11. To start over, I need to set the Router to factory default.

Hold the

Reset

button for up to 30 seconds and then release it. This will return

the password, forwarding, and other settings on the Router to the factory

default settings. In other words, the Router will revert to its original factory

configuration.

12. I need to upgrade the firmware.

In order to upgrade the firmware with the latest features, you need to go to the

Linksys website and download the latest firmware at

www.linksys.com

. Follow

these steps:

A. Go to the Linksys website at

http://www.linksys.com

and download the

latest firmware.

B. To upgrade the firmware, follow the steps in the Help section found in

“Chapter 7: The Cable/DSL Firewall Router’s Web-based Utility.”

Downloaded from

www.Manualslib.com

manuals search engine

Page 49 / 75

EtherFast

Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

17. The Diag LED stays lit continuously.

The Diag LED lights up when the device is first powered up. Meantime, the

system will boot up itself and check for proper operation. After finishing the

checking procedure, the LED turns off to show that the system is working fine.

If the LED remains lit after this time, the device is not working properly. Try to

flash the firmware by assigning a static IP address to the computer, and then

upgrade the firmware. Try using the following settings, IP Address:

192.168.1.50 and Subnet Mask: 255.255.255.0. To set a static IP address, refer

to “Problem #1: I need to set a static IP address.”

18. When I enter a URL or IP address, I get a time-out error or am prompted to retry.

•

Check if other PCs work. If they do, ensure that your workstation’s IP set-

tings are correct (IP Address, Subnet Mask, Default Gateway, and DNS).

Restart the computer that is having a problem.

• If the PCs are configured correctly, but still not working, check the

Router. Ensure that it is connected and ON. Connect to it and check its

settings. (If you cannot connect to it, check the LAN and power connec-

tions.)

• If the Router is configured correctly, check your Internet connection

(DSL/cable modem, etc.) to see if it is working correctly. You can remove

the Router to verify a direct connection.

• Manually configure the TCP/IP with a DNS address provided by your

ISP.

• Make sure that your browser is set to connect directly and that any dial-

up is disabled. For Internet Explorer, click

Tools

Internet Options

, and

then the

Connection

tab. Make sure that Internet Explorer is set to

Never

dial a connection

. For Netscape Navigator, click

Edit

Preferences

Advanced

, and

Proxy

. Make sure that Netscape Navigator is set to

Direct

connection to the Internet

19. The Full/Col LED keeps flickering continuously.

• Check the Category 5 Ethernet cable and its RJ-45 connectors.

• There may be interference with other network devices. Try removing

other PCs or network devices to see if the problem persists. Eliminate

each network device one at a time to determine the cause.

Instant Broadband

Series

15. I can't access my email, web, or VPN, or I am getting corrupted data from the

Internet.

The Maximum Transmission Unit (MTU) setting may need to be adjusted. By

default, the MTU is set at 1500.

For most DSL users, it is strongly recom-

mended to use MTU 1492.

If you are having some difficulties, perform the fol-

lowing steps:

A. To connect to the Router, go to the web browser, and enter

http://192.168.1.1

or the

IP address

of the Router.

Enter the password, if asked. (The default password is

admin

Click the

Advanced => Filter

tab.

Look for the MTU option, and select

Manual

. In the Size field, enter

1492

Click the

Apply

and

Continue

buttons to continue.

If your difficulties continue, change the

Size

to different values. Try this list of

values, one value at a time, in this order, until your problem is solved:

1462

1400

1362

1300

16. I need to use port triggering.

Port triggering looks at the outgoing port services used and will trigger the

Router to open a specific port, depending on which port an Internet application

uses.

Follow these steps:

A. To connect to the Router, go to the web browser, and enter

http://192.168.1.1

or the

IP address

of the Router.

Enter the password, if asked. (The default password is

admin

Click the

Advanced => Forwarding

tab, and click the

Port Triggering

but-

ton.

Enter any

name

you want to use for the Application Name.

E. Enter the

Triggered Port Range

. Check with your Internet application

provider for more information on which outgoing port services it is using.

Enter the

Incoming Port Range

. Check with your Internet Application

provider for more information on which incoming port services are

required by the Internet application.

Downloaded from

www.Manualslib.com

manuals search engine

Page 50 / 75

EtherFast

Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint

Instant Broadband

Series

I set up an Unreal Tournament Server, but others on the LAN cannot join. What do

I need to do?

If you have a dedicated Unreal Tournament server running, you

need to create a static IP for each of the LAN computers and forward ports

7777, 7778, 7779, 7780, 7781, and 27900 to the IP address of the server. You

can also use a port forwarding range of 7777 ~ 27900. If you want to use the

UT Server Admin, forward another port (8080 usually works well but is used

for remote admin. You may have to disable this.), and then in the

[UWeb.WebServer] section of the server.ini file, set the ListenPort to 8080 (to

match the mapped port above) and ServerName to the IP assigned to the

Router from your ISP.

Can multiple gamers on the LAN get on one game server and play simultaneously

with just one public IP address?

It depends on which network game or what

kind of game server you are using.

For example, Unreal Tournament supports

multi-login with one public IP.

How do I get

Half-Life: Team Fortress

to work with the Router?

The default client

port for Half-Life is 27005.

The computers on your LAN need to have

“+clientport 2700x” added to the HL shortcut command line; the x would be

6, 7, 8, and on up. This lets multiple computers connect to the same server.

One problem:

Version 1.0.1.6 won’t let multiple computers with the same CD

key connect at the same time, even if on the same LAN (not a problem with

1.0.1.3).

As far as hosting games, the HL server does not need to be in the

DMZ. Just forward port 27015 to the local IP address of the server comput-

er.

How can I block corrupted FTP downloads?

If you are experiencing corrupted

files when you download a file with your FTP client, try using another FTP

program.

The web page hangs; downloads are corrupt, or nothing but junk characters are

being displayed on the screen. What do I need to do?

Force your Ethernet

adapter to 10Mbps or half duplex mode, and turn off the “Auto-negotiate”

feature of your Ethernet adapter as a temporary measure. (Please look at the

Network Control Panel in your Ethernet adapter’s Advanced Properties tab.)

Make sure that your proxy setting is disabled in the browser. Check our web-

site at

www.linksys.com

for more information.

If all else fails in the installation, what can I do?

Reset the Router by holding

down the reset button until the Diag LED fully turns on and off. Reset your

cable or DSL modem by powering the unit off and then on.

Obtain and flash

the latest firmware release that is readily available on the Linksys website,

www.linksys.com

What is the maximum number of IP addresses that the Router will support?

The

Router will support up to 253 IP addresses.

Is IPSec Pass-Through supported by the Router?

Yes, it is a built-in feature that

the Router automatically enables.

Where is the Router installed on the network?

In a typical environment, the

Router is installed between the cable/DSL modem and the LAN.

Plug the

Router into the cable/DSL modem’s Ethernet port.

Does the Router support IPX or AppleTalk?

No. TCP/IP is the only protocol stan-

dard for the Internet and has become the global standard for communications.

IPX, a NetWare communications protocol used only to route messages from

one node to another, and AppleTalk, a communications protocol used on

Apple and Macintosh networks, can be used for LAN to LAN connections,

but those protocols cannot connect from WAN to LAN.

Does the WAN connection of the Router support 100 Mbps Ethernet?

Yes, and it

does, of course, support 100 Mbps over the auto-sensing Fast Ethernet 10/100

switch on the LAN side of the Router.

What is

Network Address Translation

and what is it used for?

Network Address

Translation (NAT) translates multiple IP addresses on the private LAN to one

public address that is sent out to the Internet. This adds a level of security

since the address of a PC connected to the private LAN is never transmitted

on the Internet. Furthermore, NAT allows the Router to be used with low cost

Internet accounts, such as DSL or cable modems, when only one TCP/IP

address is provided by the ISP. The user may have many private addresses

behind this single address provided by the ISP.

Does the Router support any operating system other than Windows 95, Windows

98, Windows 2000, Windows NT, or Windows XP?

Yes, but Linksys does not, at

this time, provide technical support for setup, configuration or troubleshoot-

ing of any non-Windows operating systems.

Does the Router support ICQ send file?

Yes, with the following fix: click

ICQ

menu -> preference -> connections tab->

, and check

I am behind a fire-

wall or proxy

. Then set the firewall time-out to

seconds in the firewall set-

ting. The Internet user can then send a file to a user behind the Router.

Frequently Asked Questions

Downloaded from

www.Manualslib.com

manuals search engine

Rate

Popular Linksys Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share