Linksys Router BEFDSR41W User Manual

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-Ready
53
Instant Broadband
™Series
RIP Version
Select the version of IP you want to use.
• RIP-1Routing data will be sent in RIPv1 format.
• RIP-2BRouting data will be sent in RIPv2 format using subnet broadcast-
ing.
• RIP-2MRouting data will be sent in RIPv2 format using multicasting.
• N/ARouting data will not be sent.
Click the Show Routing Tablebutton to open a chart displaying how data is
routed through your LAN.
When f inished making your changes on this tab, click the Applybutton fol-
lowed by the Continuebutton to save these changes, or click the Cancelbut-
ton to undo your changes. For further help on this tab, click the Helpbutton.
52
If the Gateway is connected to more than one network, it may be necessary to
set up a static route between them. A static route is a pre-determined pathway
that network information must travel to reach a specif ic host or network.  You
can use static routing to allow different IP domain users to access the Internet
through the Gateway. 
The Gateway is also capable of dynamic routing (see the Dynamic Routing
tab). It is usually better to use dynamic routing because it allows the Gateway
to automatically adjust to physical changes in the network’s layout.
To set up static routing, you should add routing entries in the Gateway’s table,
so the Gateway knows where to send all incoming packets.
To create a static route entry:
1. Select a Static Route Entryfrom the drop-down list. The Gateway sup-
ports up to eight static route entries. Static Routing
Figure 6-22
Important:This is an Advanced Function.  No changes should be made
to this tab without a thorough understanding of network concepts. 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-Ready
55
Instant Broadband
™Series
54
The DMZ Hosting function allows for a server attached to Port 4 of the
Gateway to be fully accessible from the Internet.  The Gateway supports an
Advanced form of DMZ, allowing the system attached to Port 4 to be on a
secure subnet, separate from the computers attached to the other 3 ports. 
Port 4 Status Selecting DMZ
enables the advanced DMZ
function for the switched Port
4. Selecting LANdisables the
advanced DMZ function, and
Port 4 acts as a normal
switched port.
DMZ IP Address   Enter the
IP Addressthat is assigned to
the Gateway’s Port 4. Enter the
Subnet Maskassociated with the DMZ network.
Routing This setting is only applicable to the DMZ network.
RIP DirectionDetermines the direction that RIP routes will be updated.
• NoneRIP is disabled.
• BothThe Gateway will incorporate received RIP information and send out
updated RIP information.
• In OnlyThe Gateway will only incorporate received RIP information.
• Out OnlyThe Gateway will only send out RIP information.
RIP VersionSelect the version of IP you want to use.
• RIP-1Routing data will be sent in RIPv1 format.
• RIP-2BRouting data will be sent in RIPv2 format using subnet broad-
casting.
• RIP-2MRouting data will be sent in RIPv2 format using multicasting.
• N/ARouting data will not be sent.
When f inished making your changes on this tab, click the Applybutton fol-
lowed by the Continuebutton to save these changes, or click the Cancelbut-
ton to undo your changes. For further help on this tab, click the Helpbutton.DMZ Host
Figure 6-23
Important:This is an Advanced Function.  No changes should be made
to this tab without a thorough understanding of network concepts.
2.  Enter the following data to create a new static route.
Destination LAN IP:The Destination LAN IP is the address of the remote
network or host to which you want to assign a static route. Enter the IP
addressof the host for which you wish to create a static route here. For a
standard Class C IP domain, the network address is the f irst three f ields of
the Destination LAN IP, while the last f ield should be 0.
Subnet Mask:The Subnet Mask (also known as the Network Mask) iden-
tif ies which portion of an IP address is the network portion, and which por-
tion is the host portion. For a full Class C Subnet, the Subnet Mask is
255.255.255.0. 
Gateway IP:This IP address should be the IP address of the gateway
device that allows for contact between the Gateway and the remote network
or host.
Hop Count:This determines the maximum number of steps between net-
work nodes that data packets will travel. A node is any device on the net-
work, such as PCs, print servers, routers, etc.
From the Static Routing tab, click the Show Routing Tablebutton to view the
current static routing conf iguration.
To delete a Static Routing entry, select an entry, and click the Delete This
Entrybutton.
When f inished making your changes on this tab, click the Applybutton fol-
lowed by the Continuebutton to save these changes, or click the Cancelbut-
ton to undo your changes. For further help on this tab, click the Helpbutton.  
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-ReadyThe Link Test page allows an advanced user or technician to perform advanced
diagnostics of the ADSL Gateway and perform connectivity tests.
The information provided by these tests is not discussed in this document.
57
Instant Broadband
™Series
56
Link Test
Figure 6-25
Important:This is an Advanced Function.  No changes should be made
to this tab without a thorough understanding of network concepts.
The Firewall screen allows you to enable the advanced f irewall functions of the
Gateway, so it can use Stateful Packet Inspection (SPI) to automatically detect
and block Denial of Service (DoS) and hacker attacks. Also, you can enable the
Gateway to maintain a security log, which can be viewed by clicking the Show
Firewall Log Table button. The security log can also be e-mailed to a specif ic
address, whose information should be entered in the Address Info setting.
• Firewall ServiceEnable or disable the advanced f irewall functions.
• Address InfoYou can specify that the security log be e-mailed to a specif ic
address by completing the Mail Server, Mail Subject, Email Alert To, and
Return Address  f ields.
• Log TimerDepending on how often you want the security log e-mailed,
complete the Log Schedule, Day for Sending Alerts, and/or Time for Sending
Alerts f ields.
Click the Show Firewall Log Tablebutton to view the security log.
When f inished making your changes on this tab, click the Applybutton fol-
lowed by the Continuebutton to save these changes, or click the Cancelbut-
ton to undo your changes. For further help on this tab, click the Helpbutton.Firewall
Figure 6-24
Important:This is an Advanced Function.  No changes should be made
to this tab without a thorough understanding of network concepts. 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-Ready
Make sure that you do NOT have a microf ilter plugged in between the
Gateway and the wall jack.  Verify that your ADSL account is active with
your ISP.
5. I can’t browse through the Gateway.
• Check if both ends of the network cable and power adapter are properly
connected. Check if the status LEDs on the front panel are functioning
properly. 
• If using Windows 95, 98 or Millennium, check the TCP/IP setup on the
client side. Run winipcfgby clicking on the Startbutton, selecting Run,
and typing winipcfgin the Run f ield. Press Enter.  The PC should have
an IP address of 192.168.1.xxx (“xxx” is from 2 to 254.). The Subnet
Mask is 255.255.255.0; the default gateway IP should be the Gateway’s IP
Address, and check that the DNS is correct.
• Check the same setup values in the Gateway’s Status page.
6. When I enter a URL or IP address, I get a time out error.
• Check to see if your other PCs work. If they do, verify that your PC’s IP
settings are correct (IP address, Subnet Mask, Default Gateway, and
DNS)
• If the PCs are conf igured correctly, but still not working, check the
Gateway. Make sure that it is connected and ON. Connect to it and check
its settings. (If you cannot connect to it, check the LAN and power con-
nections.)
• If the Gateway is conf igured correctly, check your Internet connection to
see that it is working correctly.
• Manually conf igure the TCP/IP with a DNS address provided by your ISP.
7. I can’t obtain an IP address from my ADSL line.
• Verify that all of your cabling is properly connected and that all of the
Gateway’s ADSL and Link LEDs are correctly illuminated.
• Power down your Gateway for a few seconds. Turn it back on. After the
Gateway goes through its self-test, check to see if you now have an IP
address.
• Verify that the VPI/VCI and Encapsulation settings are correct in the
Setup page of the Web-based Utility. Go to the Setupsection of the Web-
based Utility chapter for more information.
• If you are conf igured for PPPoE or PPPoA, verify that the username and
password are entered correctly in the Setup page of the Web-based Utility.
Go to the Setupsection of the Web-based Utility chapter for more infor-
mation.
59
Instant Broadband
™Series
58
Appendix A:TroubleshootingThis section provides possible solutions to problems regarding the Gateway’s
installation and operation. If your situation is described here, the problem
should be solved by applying the corresponding solution.  If you can’t f ind an
answer here, check the Linksys website at www.linksys.com.
1. The Gateway is not working.
• Verify that the Power cord and other network cables are plugged in.
• Check the LAN and WAN LEDs on the Gateway’s front and verify that
they are lit appropriately.
• Check the settings on your PC.
• Check the Gateway’s settings.
2. I can’t connect to the Gateway.
• Verify that the Gateway is properly installed; LAN connections are OK,
and it is powered ON.
• Make sure that your PC and the Gateway are on the same network seg-
ment. If you are not sure, initiate the DHCP function, and let the PC get
the IP address automatically.
• Make sure that your PC is using an IP address within the default range of
192.168.1.2 to 192.168.1.254 and thus compatible with the Gateway
default IP Address of 192.168.1.1
• Also, the Subnet Mask should be set to 255.255.255.0 to match the
Gateway. For the Gateway, you can check these settings by using Control
Panel-Network to check the Properties for the TCP/IP protocol.
3. The Diag LED stays lit when it shouldn’t.
• The Diag LED lights up when the device is f irst powered up. Meantime,
the system will boot up itself and check for proper operation. After f in-
ishing the checking procedure, the LED turns off to show the system is
working f ine. If the LED remains lit after this time, the device is not
working properly. Try to re-flash the f irmware by assigning a static IP
address to the computer, and then upgrade the f irmware again. If that
doesn’t help, contact your dealer for further inspection.
4. The ADSL Link LED will not go solid.
• Verify that the RJ-11 cable is f irmly plugged into the ADSL jack of the
Gateway, with the other end plugged directly into the ADSL wall jack.Common Problems and Solutions 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-Ready
61
Instant Broadband
™Series
60
Iset up an Unreal Tournament Server, but others on the LAN cannot join. What do
I need to do?  If you have a dedicated Unreal Tournament server running, you
need to create a static IP for each of the LAN computers and forward ports
7777, 7778, 7779, 7780, 7781, and 27900 to the IP address of the server. You
can also use a port forwarding range of 7777 ~ 27900. If you want to use the
UT Server Admin, forward another port (8080 usually works well but is used
for remote admin. You may have to disable this.), and then in the
[UWeb.WebServer] section of the server.ini f ile, set the ListenPort to 8080 (to
match the mapped port above) and ServerName to the IP assigned to the
Gateway from your ISP.
Can multiple gamers on the LAN get on one game server and play simultaneously
with just one public IP address?It depends on which network game or what
kind of game server you are using.  For example, Unreal Tournament supports
multi-login with one public IP.
How do I get 
Half-Life: Team Fortress
to work with the Gateway?The default client
port for Half-Life is 27005.  The computers on your LAN need to have
“+clientport 2700x” added to the HL shortcut command line; the x would be
6, 7, 8, and on up. This lets multiple computers connect to the same server.
One problem:Version 1.0.1.6 won’t let multiple computers with the same CD
key connect at the same time, even if on the same LAN (not a problem with
1.0.1.3).  As far as hosting games, the HL server does not need to be in the
DMZ. Just forward port 27015 to the local IP address of the server computer. 
The web page hangs; downloads are corrupt, or nothing but junk characters are
being displayed on the screen. What do I need to do?Force your Ethernet
adapter to 10Mbps or half duplex mode, and turn off the “Auto-negotiate”
feature of your Ethernet adapter as a temporary measure. (Please look at the
Network Control Panel in your Ethernet adapter’s Advanced Properties tab.)
Make sure that your proxy setting is disabled in the browser. Check our web-
site at www.linksys.comfor more information.
If all else fails in the installation, what can I do?Reset the Gateway by holding
down the reset button until the Diag LED fully turns on and off. Obtain and
flash the latest f irmware release that is readily available on the Linksys web-
site, www.linksys.com.
How will I be notified of new Gateway firmware upgrades?All Linksys f irmware
upgrades are posted on the Linksys website at www.linksys.com, where they
can be downloaded for free.  The Gateway’s f irmware can be upgraded with
TFTP programs.
What is the maximum number of IP addresses that the Gateway will support? The
Gateway will support up to 253 IP addresses.
Is IPSec Pass-Through supported by the Gateway?Yes, it is a built-in feature that
the Gateway automatically enables.
Does the Gateway support IPX or AppleTalk? No. TCP/IP is the only protocol
standard for the Internet and has become the global standard for communica-
tions. IPX, a NetWare communications protocol used only to route messages
from one node to another, and AppleTalk, a communications protocol used on
Apple and Macintosh networks, can be used for LAN to LAN connections,
but those protocols cannot connect from WAN to LAN.
What is Network Address Translationand what is it used for?Network Address
Translation (NAT) translates multiple IP addresses on the private LAN to one
public address that is sent out to the Internet. This adds a level of security
since the address of a PC connected to the private LAN is never transmitted
on the Internet. Furthermore, NAT allows the Gateway to be used with low
cost Internet accounts, when only one TCP/IP address is provided by the ISP.
The user may have many private addresses behind this single address provid-
ed by the ISP.
Does the Gateway support any operating system other than Windows 95, Windows
98, Windows 2000, Windows NT, or Windows XP? Yes, but Linksys does not, at
this time, provide technical support for setup, conf iguration or troubleshoot-
ing of any non-Windows operating systems.
Does the Gateway support ICQ send file?Yes, with the following f ix: click ICQ 
menu -> preference -> connections tab->, and check I am behind a fire-
wall or proxy. Then set the f irewall time-out to 80seconds in the f irewall set-
ting. The Internet user can then send a f ile to a user behind the Gateway.
How do I get Napster to work with the Gateway?Napster is fully compatible with
the Gateway, but you must make sure that, during installation, you select “no
idea” when asked about your f irewall selection.  Set your proxy settings to
“No Proxy Server” in your File>Preferences.Frequently Asked Questions 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-ReadyWhat are the Gateway’s advanced features?The Gateway’s advanced features
include Filters, Forwarding, Dynamic Routing, Static Routing, and DMZ
host.
Does Linksys provide syslog support?  No, Linksys does not currently provide
syslog support.
How can I check whether I have static or dynamic IP Addresses?Consult your
ISP to conf irm the information.
How do I get mIRC to work with the Gateway?Set port forwarding to 113 for the
computer on which you are using mIRC.  If you are experiencing diff iculty
after setting the port forwarding, try changing the Direct Client-to-Client
(DCC) settings to a range from 1024 to 1030 on the DCC option and
Forwarding page of the Web-based Setup Utility.
Can I guess my encapsulation type and VPI/VCI?These settings are dependent on
your telephone company, ADSL ISP, service level, and when your line was
installed.  It is typically not something that can be guessed or found through
trial and error.  It is best to contact your ISP to f ind these settings. 
Will this product work on an SDSL, IDSL or ISDN line?No, those types of lines are
not ADSL technologies.  The BEFDSR41W will only work on ADSL lines
that support the T1.413i2, G.992.1 (G.dmt), or G.992.2 (G.lite) standards.    
If your questions are not addressed here, refer to the contact information
on the last page of this manual, or online at support.linksys.com.
63
Instant Broadband
™Series
62
Will the Gateway function in a Macintosh environment? Yes, but the Gateway’s
setup pages are accessible only through Internet Explorer v4.0 or Netscape
Navigator v4.0 or higher for Macintosh. NOTE: Linksys does not provide
technical support for Macintosh computers.
With which type of firewall is the Gateway equipped? The Gateway uses NAT and
TCP/IP port inspections. It also has SPI (Stateful Packet Inspection).
Does the Gateway do Stateful Packet Inspection?Yes. Enable the Firewall func-
tion of the Gateway.
I am not able to access the Gateway’s web configuration screen.  What can I do?
You may have to remove the proxy settings on your Internet browser, e.g.,
Netscape Navigator or Internet Explorer.  Or remove the dial-up settings on
your browser.  Check with your browser documentation.
What is DMZ?Demilitarized Zone (DMZ) allows one IP address (computer) to
be exposed to the Internet.  Some applications require multiple TCP/IP ports
to be open.  It is recommended that you set your computer with a static IP if
you want to use DMZ.
If DMZ is used, does the exposed user share the public IP with the Gateway?  No.
Does the Gateway pass PPTP packets or actively route PPTP sessions?  The
Gateway allows PPTP packets to pass through.
Is the Gateway cross-platform compatible?  Any platform that supports Ethernet
and TCP/IP is compatible with the Gateway.
Will the Gateway allow me to use my own public IPs and Domain, or do I have to
use the IPs provided by the Gateway? The Gateway allows for customization
of your public IPs and Domain.
How many ports can be simultaneously forwarded? Theoretically, the Gateway
can establish 520 sessions at the same time, but you can only forward 10
ranges of ports.
Does the Gateway replace a modem?  Is there a DSL modem in the Gateway?  Yes.
The Gateway has an integrated ADSL modem, so this product will replace
your current ADSL modem. 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-Ready
65
Instant Broadband
™Series
64
1. At the Wireless Screen, if you choose to enable WEP Encryption, select
Mandatoryunder the WEP section.
2. Press the WEP Key Settingbutton to set the WEP Encryption type and
level.
3. The following screen may appear, verifying that you are enabling WEP
Encryption.  Press the OKbutton to continue.
Figure B-2Figure B-1
Appendix B:Configuring
Wireless SecurityAn acronym for Wired Equivalent Privacy, WEP is an encryption scheme used
to protect your wireless data communications.  WEP uses a combination of 64-
bit or 128-bit keys to provide access control to your network and encryption
security for every data transmission.  To decode a data transmission, each point
in a network must use an identical 64-bit or 128-bit key.  Higher encryption lev-
els mean higher levels of security, but due to the complexity of the encryption,
they may mean decreased network performance.
You may also have heard the term “40-bit” used in conjunction with WEP
Encryption.  This is simply another term for 64-bit WEP encryption.  This level
of WEP encryption has been called 40-bit because it uses a 40-bit secret key
along with a 24-bit Initialization Vector (40 + 24 = 64).  Wireless vendors may
use either name.  Linksys uses the term “64-bit” when referring to this level of
encryption.
If possible, make sure your wireless network is functioning before attempting
to conf igure WEP.
A 128-bit WEP encrypted wireless network will NOT communicate with a 64-
bit WEP encrypted wireless network.  Therefore, make sure that all of your
wireless devices are using the same encryption level.  All wireless devices com-
plying with the 802.11b standard will support 64-bit WEP.
In addition to enabling WEP, Linksys also recommends the following security
implementations:
•Changing the SSID from the default “linksys”
•Changing the WEP key regularly
Note:WEP Encryption is an additional data security measure and
not essential for Gateway operation.  
Note:In order for WEP Encryption to be enabled, wireless functions must f irst
be enabled.  Select Enableunder the Wireless section before proceeding. 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-ReadyWEP Encryption key can be generated in one of two ways:
1. You may create an encryption key by using a Passphrase.
a. Enter a Passphrase, a user-def ined password, into the Passphrasef ield.
The Passphrase can be a maximum of 31 letters, symbols, and numbers.
No spaces can be used.
b. Click the Generatebutton to create a key. The key will be 10 digits if
you chose 64-bit encryption, or 26 digits if you chose 128-bit encryp-
tion. This key will be used to encrypt and decrypt the data being sent
between the Gateway and your network’s wireless PCs.
The Key f ield may not display all digits.  Using the mouse, click any-
where within the Key f ield.  Move the cursor to the right to view the rest
of the Key.  Make sure your write down the entire Key EXACTLY the
way it is displayed. 
2. You may enter the encryption key manually.
Make a note of the Passphrase or Manual Key.  You will need it for other wire-
less devices on the network, as the same WEP encryption key must be entered
in all wireless devices on the network.
Once you have chosen your key encryption method and entered either the
Passphrase or manual key, click the Applybutton, and the encryption portion
of the setup is complete.
67
Instant Broadband
™Series
4. The following screen will appear, where you will choose your WEP
Encryption settings.
• WEP (64Bit or 128B)Select the level of encryption from the drop-down
box.  128-bit WEP encryption is unique to Linksys and may conflict with
other vendors’ WEP encryption.
66
Note:In Windows XP, a 128-bit Key generated by the Gateway will be called a
104 bits (26 digits) key, and a 64-bit Key generated by the Gateway will be
called a “40 bits (10 digits)” key.
Figure B-3
Note:In order to utilize WEP encryption, all points in your wireless network
must have WEP enabled and be set to the same Key Setting. 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-Ready2. In the “Control Panel” window, click the Network and Internet
Connectionsicon.
3. Click on the Network Connectionsicon.
4. The “Network Connections” window will appear.  Under LAN or High-
Speed Internet you will see all Network cards that are installed and operat-
ing in your computer. Double-click the Wireless Network Connection
icon associated with your wireless adapter.
If the “Wireless Network Connection Status” window appears, continue to
the next step.
69
Instant Broadband
™Series
As Windows XP does not allow for the use of the Linksys Passphrase feature
with the wireless PC adapters, you will need to manually enter the key gener-
ated in the previous section.  
The following steps will help you enable WEP and enter the encryption key
manually for your wireless PC cards, in order to enable your Windows XP sys-
tem to communicate with the Gateway wirelessly.
These steps assume that your CD-ROM drive is letter D and that you are run-
ning Windows XP in the default mode.
Be sure you have the WEP Key generated by the Gateway.
1.  Click the Startbutton and go to the Control Panel.
68
Figure B-5Figure B-6
Configuring Wireless Security in Windows XP
Figure B-4 
						

							ADSL Gateway with Modem / Router / 4-Port Switch / Wireless-Ready
71
Instant Broadband
™Series
70
6. When the “Wireless Network Connection Properties” window appears,
click the Wireless NetworksTa b.
7. If the appropriate wireless network, specif ied by the Gateway’s SSID, is
displayed in the “Preferred networks” section, double-click it and continue
to the next step.
Otherwise, click on the appropriate wireless network, specif ied by the
Gateway’s SSID, in the “Available networks” section. Then, click the
Configurebutton.
Figure B-9Figure B-10
If a “Connect to Wireless Network” window appears, in the Available
Networks section, click the desired wireless network, specif ied by the
Gateway’s SSID. Then, double-click the Wireless Network Connection
icon.
5. When the “Wireless Network Connection Status” window appears, click the
Propertiesbutton.
Figure B-7Figure B-8