Cisco Linksys BEFW11S4V3 WLAN Router User Manual

Cisco-Linksys, LLC WLAN Router Users Manual

Contents

Users Manual

Instant Wireless™  Series Wireless Access Point Routerwith 4-Port SwitchUse this Guide to install: BEFW11S4 ver. 3User GuideBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 1
BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 2
COPYRIGHT & TRADEMARKS Copyright © 2002 Linksys, All Rights Reserved.  Instant Wireless is a trademark ofLinksys.  Linksys and the Linksys logo are registered trademarks of Linksys Group, Inc.Microsoft, Windows, and the Windows logo are registered trademarks of MicrosoftCorporation.  All other trademarks and brand names are the property of their respectiveproprietors.LIMITED WARRANTY Linksys guarantees that every Instant Wireless™  Wireless Access Point Router with 4-Port Switch is free from physical defects in material and workmanship for one year fromthe date of purchase, when used within the limits set forth in the Specifications sectionof this User Guide. If the product proves defective during this warranty period, callLinksys Technical Support in order to obtain a Return Authorization number. BE SURE TOHAVE YOUR PROOF OF PURCHASE ON HAND WHEN CALLING.  When returning aproduct, mark the Return Authorization number clearly on the outside of the package andinclude a copy of your original proof of purchase.  RETURN REQUESTS CANNOT BEPROCESSED WITHOUT PROOF OF PURCHASE.  All customers located outside of theUnited States of America and Canada shall be held responsible for shipping and han-dling charges.IN NO EVENT SHALL LINKSYS’ LIABILITY EXCEED THE PRICE PAID FOR THE PROD-UCT FROM DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAM-AGES RESULTING FROM THE USE OF THE PRODUCT, ITS ACCOMPANYING SOFT-WARE, OR ITS DOCUMENTATION. LINKSYS OFFERS NO REFUNDS FOR ITS PROD-UCTS.  Linksys makes no warranty or representation, expressed, implied, or statutory,with respect to its products or the contents or use of this documentation and all accom-panying software, and specifically disclaims its quality, performance, merchantability, orfitness for any particular purpose. Linksys reserves the right to revise or update its prod-ucts, software, or documentation without obligation to notify any individual or entity.Please direct all inquiries to:Linksys  P.O. Box 18558, Irvine, CA 92623.   FCC STATEMENTThe Instant Wireless™  Wireless Access Point Router with 4-Port Switch has been testedand complies with the limits for a Class B digital device, pursuant to Part 15 of the FCCRules. These limits are designed to provide reasonable protection against harmful inter-ference in a residential installation. This equipment generates, uses, and can radiateradio frequency energy and, if not installed and used according to the instructions, maycause harmful interference to radio communications. However, there is no guarantee thatinterference will not occur in a particular installation. If this equipment does cause harm-ful interference to radio or television reception, which is found by turning the equipmentoff and on, the user is encouraged to try to correct the interference by one or more of thefollowing measures:• Reorient or relocate the receiving antenna• Increase the separation between the equipment or devices• Connect the equipment to an outlet other than the receiver’s• Consult a dealer or an experienced radio/TV technician for assistanceUG-BEFW11S4 ver. 3-100302NC JLBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 3
Federal Communication Commission Interference Statement  This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.    These limits are designed to provide reasonable protection against harmful interference in a residential installation.    This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.   However, there is no guarantee that interference will not occur in a particular installation.  If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:  -  Reorient or relocate the receiving antenna. -  Increase the separation between the equipment and receiver. -  Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. -  Consult the dealer or an experienced radio/TV technician for help.  FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment.  This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.  IMPORTANT NOTE: FCC Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.  This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
Instant WirelessTM SeriesTable of ContentsChapter 1: Introduction 1The Linksys Wireless Access Point Router with 4-Port Switch 1Features 1Minimum Requirements 2An Introduction to LANs and WANs 2IP Addresses 3The Wireless Access Point Router’s Ports 5The Wireless Access Point Router’s LEDs 6Chapter 2: Connecting the Router 8Before You Start 8Connecting Your Hardware Together & Booting Up 8Chapter 3: Configuring the PCs 11Overview 11Configuring Windows 95, 98, and Millennium PCs 11Configuring Windows 2000 PCs 13Configuring Windows XP PCs 15Chapter 4: Configuring the Router 17Chapter 5: Using the Router’s Web-Based Utility 22Setup 23Password 27Status 28DHCP 30Log 31Security 33Help 35Advanced Tab: Filters 37Advanced Tab: Port Range Forwarding 41Advanced Tab: Dynamic Routing 46Advanced Tab: Static Routing 47BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 4
Advanced Tab: DMZ Host 49Advanced Tab: MAC Address Cloning 50Advanced Tab: Wireless 51Appendix A: Troubleshooting 54Common Problems and Solutions 54Frequently Asked Questions 67Appendix B: How to Ping YourISP’s E-mail and Web Addresses 73Appendix C: Configuring Wireless Security 76Configuring Wireless Security in Windows XP 79Appendix D: Finding the MAC Addressand IP Address for Your Ethernet Adapter 84Appendix E: Setting Up AOL®Broadband Cable & DSL 88AOL Broadband via Cable 88AOL Broadband via DSL 90Appendix F: Glossary 91Appendix G: Specifications 105Environmental 106Appendix H: Warranty Information 107Appendix I: Contact Information 108Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 5
Chapter 1: IntroductionCongratulations on your purchase of a Wireless Access Point Router with 4-Port Switch.  The Wireless Access Point Router with 4-Port Switch provides theideal solution for connecting your wireless network to a high-speed broadbandInternet connection and a 10/100 Fast Ethernet backbone. Configurable as aDHCP server for your existing network, the Wireless Access Point Router with4-Port Switch acts as the only externally recognized Internet gateway on yourlocal area network (LAN) and serves as an Internet NAT firewall againstunwanted outside intruders.  The Wireless Access Point Router with 4-PortSwitch can also be configured to filter internal users’ access to the Internet. A typical router relies on a hub or a switch to share its Internet connection, butthe Linksys Wireless Access Point Router with 4-Port Switch channels thisconnection through the blazing, full duplex speed of its built-in EtherFast®10/100 4-Port Switch.  This cutting-edge combination of wireless router andswitch technology eliminates the need to buy an additional hub or switch andextends the range of your wireless network.  Now your entire wireless networkcan enjoy blazing broadband Internet connections supported by its robustswitched backbone.  With the dual-function speed and power of the WirelessAccess Point Router with 4-Port Switch, your network will take off at speedsfaster than you ever imagined possible.• Supports Universal Plug-and-Play for easy configuration• Capable of up to 128-bit WEP Encryption• Supports enhanced security using NAT firewall, ZoneAlarm Pro and PC-cillin Software• Access your network remotely over the Internet through Virtual PrivateNetworking (VPN)• Supports IPSec and PPTP Pass-Through• Administer and upgrade the Router remotely over the Internet• Configurable as a DHCP Server on your network• Advanced security management functions for Port Filtering, MAC AddressFiltering, and DMZ Hosting• Includes one Ethernet Cable to Connect to a Cable or DSL modemFeatures1The Linksys Wireless Access Point Router with 4-Port SwitchInstant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 6
Wireless Access Point Router with 4-Port Switch2• One Windows 98 SE, Millennium, 2000, or XP PC equipped with:• TCP/IP Protocol,• Internet Explorer 4.0 or Netscape Navigator 4.7 for web-basedconfiguration,• a CD-ROM Drive, and• an Ethernet Adapter with a UTP CAT 5 Network Cable• Cable or DSL Modem with Ethernet Connection and Internet AccessSimply put, a router is a network device that connects two networks together. In this instance, the Router connects your Local Area Network (LAN), or thegroup of PCs in your home or office, to the Wide Area Network (WAN) that isthe Internet.  The Router processes and regulates the data that travels betweenthese two networks.    Think of the Router as a network device with two sides. The first side is madeup of your private Local Area Network (LAN) of PCs.  The other, public sideis the Internet, or the Wide Area Network (WAN), outside of your home oroffice.  The Router’s firewall (NAT) protects your network of PCs so users on the pub-lic, Internet side cannot “see” your PCs.  This is how your LAN, or network,remains private. The Router protects your network by inspecting the first pack-et coming in from the WAN port before delivery to the final destination on theLAN port. The Router inspects Internet port services like the web server, ftpserver, or other Internet applications, and, if allowed, it will forward the packetto the appropriate PC on the LAN side.Minimum RequirementsAn Introduction to LANs and WANsBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 1
What’s an IP Address?IP stands for Internet Protocol. Every device on an IP-based network, includ-ing PCs, print servers, and routers, requires an IP address to identify its “loca-tion,” or address, on the network.  This applies to both the WAN and LAN con-nections.There are two ways of assigning an IP address to your network devices. Static IP AddressesA static IP address is a fixed IP address that you assign manually to a PC orother device on the network.  Since a static IP address remains valid until youdisable it, static IP addressing insures that the device assigned it will have thatsame IP address until you change it.  Static IP addresses are commonly usedwith network devices such as server PCs or print servers.If you use the Router to share your cable or DSL Internet connection, contactyour ISP to find out if they have assigned a static IP address to your account.If so, you will need that static IP address when configuring the Router. You canget the information from your ISP.3IP AddressesNNoottee::Since the Router is a device that connects two networks, it needs twoIP addresses—one for the LAN side, and one for the WAN side.  In this UserGuide, you’ll see references to the “WAN IP address” and the “LAN IPaddress.”Since the Router has firewall security (NAT), only the Router’s WAN IP addresscan be seen from the Internet.However, even the WAN IP address can be blocked, so that the Router andnetwork seem invisible to the Internet—This is shown in the Filters section in“Chapter 5: Using the Routers Web-Based Utility”.  Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 2
Dynamic IP AddressesA dynamic IP address is automatically assigned to a device on the network,such as PCs and print servers.  These IP addresses are called “dynamic”because they are only temporarily assigned to the PC or device.  After a certaintime period, they expire and may change. If a PC logs on to the network (or theInternet) and its dynamic IP address has expired, the DHCP server will assignit a new dynamic IP address.For DSL users, many ISPs may require you to log on with a user name andpassword to gain access to the Internet. This is called “Point to Point Protocolover Ethernet” or PPPoE. PPPoE is similar to a dial-up connection but does nothave a phone number to dial into, and PPPoE is a dedicated high-speed con-nection. PPPoE also will provide the Router with a dynamic IP address toestablish a connection to the Internet.DHCP (Dynamic Host Configuration Protocol) ServersDHCP frees you from having to assign IP addresses manually every time a newuser is added to your network. PCs and other network devices using dynamicIP addressing are assigned a new IP address by a DHCP server. The PC or net-work device obtaining an IP address is called the DHCP client. The Router’sWAN port is, by default, set as a DHCP client.DHCP servers can either be a designated PC on the network or another networkdevice, such as the Router. By default, a DHCP server is enabled on yourRouter’s LAN ports.  If you already have a DHCP server running on your net-work, you must disable one of the two DHCP servers.  If you run more than oneDHCP server on your network, you will experience network errors, such asconflicting IP addresses.  To disable the Router’s DHCP function, see theDHCP section in Chapter 3: Configuring the Router.NNoottee::Even if you assign a static IP address to a PC, other PCs can still useDHCP’s dynamic IP addressing, as long as the static IP is not within theDHCP range of the LAN IP Address.If the Router’s DHCP function fails to provide a dynamic IP address for anyreason, please refer to Appendix A: Troubleshooting.Wireless Access Point Router with 4-Port Switch4BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 3
The Router’s rear panel (as shown in Figure 1-1) is where all of its connectionsare made.WA N The WAN (Wide Area Network) Port is where you will con-nect your cable or DSL modem with an Ethernet cable. Yourmodem connection will not work from any other port. Ports 1-4 These four LAN (Local Area Network) ports are where youwill connect networked devices, such as PCs, print servers,and any other Ethernet devices you want to put on your net-work. If Port 4 is being used, the Uplink Port will not work.Uplink The Uplink Port is where you can expand your network byconnecting to another switch or hub. Uplinking to anotherswitch or a hub is done by simply running a cable from theUplink Port to the other device. The Uplink Port is sharedwith Port 4. If the Uplink port is being used, Port 4 will notwork.Power The Power Port is where you will connect the included ACPower adapter.Antenna Jacks The Antenna Jacks are where the included antennas are con-nected.Figure 1-1The Wireless Access Point Router’s PortsInstant WirelessTM Series5BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 4
The LAN IndicatorsWLAN Act Green. This LED indicates wireless activity.WLAN Link Green. This LED indicates that the Router’s wireless func-tions have been enabled through the Web-based utility.Power Green. This LED indicates that the Router’s power is on.Link/Act Green. This LED serves two purposes. When this LED is litcontinuously, this indicates that the Router is connected to adevice through the corresponding port (1, 2, 3, or 4). A blink-ing LED indicates that the Router is actively sending orreceiving data over that port. When the Uplink Port is in use,the LED for Port 4 will be lit continuously.6The Wireless Access Point Router’s LEDsTThhee  RReesseett  BBuuttttoonnPressing the Reset Button and holding it in for a few seconds will clear allof the Router’s data and restore the factory defaults. This should be doneonly if you are experiencing heavy routing problems, and only after youhave exhausted all of the other troubleshooting options. By resetting theRouter, you run the risk of creating conflicts between your PCs’ actual IPAddresses and what the Router thinks their IP Addresses should be. Youmay be forced to reboot each network PC.If the Router locks up, simply press the reset button or power it down forthree to five seconds by removing the power cable from the Router’sPower Port. Leaving the power off for too long could result in the loss ofnetwork connections.Figure 1-2Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 5
Full/Col Green. This LED also serves two purposes. When this LEDis lit continuously, the connection made through the corre-sponding port is running in Full Duplex mode. A blinkingLED indicates that the connection is experiencing collisions.Infrequent collisions are normal. If this LED blinks toooften, there may be a problem with your connection. Refer tothe Troubleshooting Appendix if you think there is a prob-lem.100 Orange. This LED indicates when a successful 100Mbpsconnection is made through the corresponding port.The WAN IndicatorsLink Green. This LED indicates a connection between the Routerand your broadband device or network.Act Green. This LED blinks when the Router is sending orreceiving data over the broadband (WAN) port.Diag Red. This LED indicates the Router’s self-diagnosis modeduring boot-up and restart. It will turn off upon completingthe diagnosis. If this LED stays on for an abnormally longperiod of time, refer to the Troubleshooting Appendix.7Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 6
Chapter 2: Connecting the RouterBefore plugging everything together, it’s always a good idea to have everythingyou’ll need to get the Router up and running. Depending upon how you config-ure the Router in Chapter 4: Configuring the Router, you may need some of thefollowing values from your ISP:When connecting through a Static IP connection, be sure to have 1) Yourbroadband-configured PC’s fixed Internet IP Address, 2) Your broadband-configured PC’s Computer Name and Workgroup Name, 3) Your SubnetMask, 4) Your Default Gateway, and 5) Your Primary DNS IP address.When connecting through a PPPoE connection, be sure to have 1) YourPPPoE User Name and 2) Your PPPoE Password.The installation technician from your ISP should have left this information withyou after installing your broadband connection. If not, you can call your ISP torequest the data.Once you have the above values, you can begin the Router’s installation andsetup.Once you are sure that you have the above values on hand, you can begin theInstallation and Setup of the Router.1. Power everything down, including your PCs, your cable or DSL modem andthe Router.2. Connect an Ethernet cable from one ofyour PC’s Ethernet ports to one of theRouter’s LAN ports (as shown in Figure 2-1). Do the same with all the PCs you wishto connect to the Router. (LAN Port 4 willbecome inactive if you use the Uplinkport.)In addition to accessing the Router throughan Ethernet connection, a wireless connec-Before You StartConnecting Your Hardware Together and Booting UpFigure 2-1Wireless Access Point Router with 4-Port Switch8BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 7
tion can be used to access the Router. See the “For Wireless Connections”section that follows these connection instructions.3. Connect another Ethernet cable from yourcable or DSL modem to the Router’s WA Nport (as shown in Figure 2-2).4. Connect the Power Adapter (included) tothe Router’s Power port (as shown inFigure 2-3) and plug the other end into apower outlet.• The Power LED will illuminate greenas soon as the power adapter is con-nected.• The Diag LED will illuminate red for afew seconds while the Router goesthrough its internal diagnostic test. TheLED will turn off when the self-test iscomplete.5. Power on the cable or DSL modem.  Verifythat the power is on by checking the Link LED in the WAN column on thefront of the Router.  The Link LED will be illuminated if the power is on andthe modem is ready.6. Press the Reset button on the back of the Router. Hold the button in for threeseconds, or until the Diag LED illuminates red. This restores the Router’sdefault settings.7. Power on your PC.The Router is now connected. Continue to the next chapter to configureyour PCs.Figure 2-2Figure 2-3Instant WirelessTM Series9BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 8
For Wireless Connections: In addition to accessing the Router through anEthernet connection, a wireless connection can be used to access the Router.After powering on the Router and connecting it to your modem, enter theRouter’s IP Address in the Address field of your wireless PC’s web-browser asfollows: http://192.168.1.1 and press Enter.IImmppoorrttaanntt::  The Wireless Access Point Router with 4-Port Switch isconfigured by default to work out of the box with all Linksys WirelessAdapters. If you have changed the defaults on your Linksys WirelessAdapters, or are using other wireless adapters, you must temporar-ily change your wireless adapter settings to: (SSID = linksys) inorder to initially access the Router wirelessly. After you haveaccessed the Router with the default settings, you can change therouter settings to coincide with your Network settings and reset youradapters.IImmppoorrttaanntt::  Some ISPs—most notably some cable providers—config-ure their networks so that you do not have to enter a full Internetaddress into your web browser or e-mail application to reach yourhome page or receive your e-mail. If your Internet home pageaddress is something very simple, such as “www”, rather than“www.linksys.com”, or your e-mail server’s address is something sim-ilar to “e-mail” or “pop3”, rather than “pop.mail.linksys.com”, youwon’t be able to properly configure the Router until you determine theactual Internet addresses of your Web and e-mail connections.You  mmuussttobtain this information prior to connecting the Router toyour network. You can obtain this information by contacting your ISP.10Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 9
Chapter 3: Configuring the PCsThese instructions will help you configure each of your computers to commu-nicate with the Router.To do this, you will need to configure your PC’s network settings to obtain anIP (or TCP/IP) address automatically. Computers use IP addresses to commu-nicate with each other across a network or the Internet.You will need to know which operating system your computer is running, suchas Windows 95, 98, Millennium, 2000, or XP.  You can find out by clicking theStart button and then selecting the Settings option. (If your Start menu does-n’t have a Settings option, you’re running Windows XP. You can select theControl Panel directly from the Start Menu.) Then, click Control Panel anddouble-click the System icon.  Click the Cancel button when done.Once you know which Windows operating system you are running, follow thedirections in this step for your computer’s operating system. If you PC is notconfigured with the TCP/IP protocol, you will need to do this for each com-puter you are connecting to the Router.The next few pages tell you, step by step, how to configure your TCP/IP set-tings based on the type of Windows operating system you are using. Onceyou've configured your computers, continue to Chapter 4: Configuring theRouter.1. Click the Start button, click Settings and open the Control Panel. Fromthere, double-click the Network icon to open the Network screen.OverviewConfiguring Windows 95, 98, and Millennium PCsInstant WirelessTM Series11BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 10
2. Select the Configuration taband highlight the TCP/IPline for the applicableEthernet adapter (as shownin Figure 3-1). If the wordTCP/IP appears by itself,select that line. (Note:  Ifthere is no TCP/IP line list-ed, refer to your Ethernetadapter’s documentation toinstall TCP/IP now.) Then,click the Properties button.3. Click the IP Address taband select Obtain an IPaddress automatically (asshown in figure 3-2).4. Click the Gateway tab and verify that the Installed Gateway field is blank.Click the OK button.12Figure 3-1Figure 3-2Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 11
5. Click the OK button again.  Windows may ask you for the originalWindows installation disk or additional files. Supply them by pointing tothe correct file location, e.g., D:\win98, D:\win9x,c:\windows\options\cabs, etc. (This assumes that “D” is the letter of yourCD-ROM drive).6. If Windows asks you to restart your PC, click the Ye s button. If Windowsdoes not ask you to restart, restart your computer anyway.Repeat steps 1-6 for each PC on your network. When all of your PCs areconfigured, proceed to Chapter 4: Configuring the Router.1. Click the Start button, click Settings and open the Control Panel.  Fromthere, double-click the Network and Dial-up Connections icon. This willdisplay the Network screen.2. Select the Local AreaConnection icon for theapplicable Ethernetadapter (usually it is thefirst Local AreaConnection listed).3. When the Local Area Connection Status screen appears, click theProperties button. (See Figure 3-3.)Configuring Windows 2000 PCsFigure 3-3Instant WirelessTM Series13BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:33 AM  Page 12
4. Select  Internet Protocol(TCP/IP) (as shown inFigure 3-4) and click theProperties button.5. Select  Obtain an IPaddress automaticallyand verify that ObtainDNS server addressautomatically is select-ed (as shown in Figure3-5). Then, click the OKbutton and click the OKbutton on the subse-quent screens to com-plete the PC’s configura-tion.Repeat steps 1-5 for each PC on your network. When all of your PCs areconfigured, proceed to Chapter 4: Configuring the Router.Figure 3-4Figure 3-5Wireless Access Point Router with 4-Port Switch14BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 13
The following instructions assume you are running Windows XP’s defaultinterface. If you are using the Classic interface (where the icons and menuslook like previous Windows versions), please follow the instructions forWindows 2000.1. Click the Start button, open the Control Panel. and click the Network andInternet Connections icon. Then, click the Network Connections icon todisplay the Network screen.2. Select the Local AreaConnection icon forthe applicable Ethernetadapter (usually it isthe first Local AreaConnection listed). 3. When the Local Area Connection Status screen appears, click theProperties button. (See Figure 3-6.)Configuring Windows XP PCsFigure 3-6Instant WirelessTM Series15BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 14
4. Select  Internet Protocol(TCP/IP) (as shown inFigure 3-7) and click theProperties button.5. Select  Obtain an IPaddress automaticallyand verify that ObtainDNS server address auto-matically is selected (asshown in Figure 3-8).Then, click the OK buttonand click the OK button onthe subsequent screens tocomplete the PC’s configu-ration.Repeat steps 1-5 for each PC on your network. When all of your PCs areconfigured, proceed to Chapter 4: Configuring the Router.Figure 3-7Figure 3-8Wireless Access Point Router with 4-Port Switch16BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 15
17Chapter 4: Configuring the RouterThis chapter will show you how to configure the Router to function in your net-work and gain access to the Internet through your Internet Service Provider(ISP). Detailed description of the  Router’s Web-based Utility can be found inthe Chapter 5: Using the Router’s Web-Based Utility. Your ISP may require theuse of a Host Name and Domain Name. Further, you will set the WANConfiguration Type on the Router’s Setup tab from the information given byyour ISP. You will need this setup information from your ISP. If you do not havethis information, please contact your ISP before proceeding.The instructions from your ISP tell you how to set up your PC for Internetaccess.  Since you are now using the Router to share Internet access among sev-eral computers, you will use this setup information for Router configuration.1. Open your web browser, and enter 192.168.1.1 into the web browser’sAddress field, as shown in Figure 4-1. Then, press the Enter key.2. An Enter Network Password window, shown in Figure 4-2a, will appear.(Windows XP users will see a Connect to 192.168.1.1 window, shown inFigure 4-2b.) Leave the User Name field empty, and enter admin (thedefault password) in lowercase letters in the Password field.  Then, click theOK button. Figure 4-1Figure 4-2aFigure 4-2bInstant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 16
3. If required by your ISP, enter the Router’s Host Name and Domain Namein the appropriate fields on the Setup tab. (This is usually required by cableISPs.)4. To configure theRouter for your wire-less network, verifythat the Setup tab’sWireless fields (shownin Figure 4-3) arecompleted as follows:Enable/Disable:Selecting the Enableradio button willenable the Router’swireless feature.Wireless functionswill not be availableunless enabled.SSID: The SSID is a unique name for your wireless network.  It is case sen-sitive and must not exceed 32 characters.  The default SSID is "linksys " butyou should change this to a personal wireless network name.  All wirelesspoints in your network must use the same SSID.SSID Broadcast - Allows the SSID to be broadcast on your network. Youmay want to enable this function while configuring the Router, but makesure that you disable it when you are finished. With this enabled, someonecould easily obtain the SSID information with site survey software and gainunauthorized access to your network. Click Enable to broadcast. ClickDisable to increase network security and prevent the SSID from being seenon networked PCs.Channel: Select the appropriate channel for your network from the list pro-vided.  All wireless points in your network must use the same channel inorder to function properly.Do not change the WEP setting from the default, “Disabled”, without firstreferring to the Wireless Security sections of the User Guide or SetupWizard CD-ROM for advanced features and settings.18Figure 4-3Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 17
195. The Router supports five connection types: DHCP (obtain an IP automati-cally), PPPoE, Static IP Address, RAS, and PPTP. These types are selectedfrom the drop-down menu beside WAN Connection Type. The Setup taband available features will differ depending on what kind of connection typeyou select, the instructions for which are included here:Obtain an IP Automatically If your ISP says that you are connecting through a dynamic IP address (orDHCP), perform these steps:a. Select Obtain an IP automatically as the WAN Connection Type (aspreviously shown in Figure 4-3).b. Click the Apply button to save the settings.Static IPIf your ISP says that you are connecting through a static (or fixed) IPaddress, perform these steps (as shown in Figure 4-4):a. Select Static IP as the WAN Connection Type.b. In the fields beside“Specify WAN IPAddress”, enter the IPAddress.c. Enter the Subnet Mask.d. Enter the DefaultGateway Address.e. Enter the DNS in the 1,2, and/or 3 fields. Youmust enter at least oneDNS address.f. Click the Apply buttonto save the settings.Figure 4-4Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 18
PPPoEIf your DSL providersays that you are con-necting through PPPoEor if you normally entera user name and pass-word to access theInternet, perform thesesteps (shown in Figure4-5):a. Select PPPoE as theWAN ConnectionType.b. Enter the UserName.c. Enter the Password.d. Click the Apply button to save the settings.RAS (for SingTel Users)RAS is a service used inSingapore only. If you areusing a RAS connection(as shown in Figure 4-6),check with your ISP forthe necessary setup infor-mation.20Figure 4-5Figure 4-6Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 19
21PPTPPPTP is a service used inEurope only. If you areusing a PPTP connection(as shown in Figure 4-7),check with your ISP forthe necessary setup infor-mation.6. If you haven’t already done so, click the Apply button to save the settings.7. Reset the power on your cable or DSL modem and restart your computers.They will now obtain the Router's new settings.Note: You only need to configure the Router from one computer. If youneed advanced setting information, please refer to the Linksys support web-site at support.linksys.com or the User Guide on the Setup Wizard CD-ROM.Congratulations! You’ve successfully configured the Router. You can testthe setup by opening your web browser from any computer and enteringwww.linksys.com/registration (as shown in Figure 4-8).If you are unable to reach our website, you may want to review what youdid in this section or refer to the Troubleshooting Appendix.Figure 4-7Figure 4-8Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 20
Chapter 5: Using the Router’s Web-Based UtilityFor your convenience, an administrative utility has been programmed into theRouter. This chapter will explain all of the functions in this utility. All router-based administrative tasks are performed through this web utility. The web util-ity can be accessed by any PC on the network by typing “http://192.168.1.1” inthe PC’s web browser address window, as shown in Figure 5-1.Upon entering the address into the web browser, a password request page willpop up, as shown in Figure 5-2a. (Windows XP users will see a “Connect to192.168.1.1” window, shown in Figure 5-2b.)Leave the User Name field empty, and enter admin (the default password) inlowercase letters in the Password field.  Then, click the OK button. In this chapter, you will find brief descriptions of each of the utility’s tabs andits more important functions.  More detailed explanations and instructions canbe found by clicking each page’s Help button or on Linksys’s website atwww.linksys.com.  To clear any values you’ve entered on any page, click  theCancel  button.  To apply any settings you’ve altered on any page, click theApply button.Figure 5-1Figure 5-2aFigure 5-2bWireless Access Point Router with 4-Port Switch22BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 21
23The utility’s tabs: Setup, Password, Status, DHCP, Log, Security and Help areused for Basic Setup of the Router. When the Advanced Tab is clicked, furtheroptions will be displayed for Filters, Forwarding, Dynamic Routing, StaticRouting DMZ Host, MAC Address Cloning, and Wireless configuration.The Setup tab is the first tab you will see when you access the Utility. If youhave already installed and set up the Router, you have already seen this tab andhave already properly configured all of the values. •Host Name Thisentry is necessaryfor some ISPs andcan be provided bythem.•Domain NameThis entry is neces-sary for some ISPsand can be providedby them.•Firmware VersionThis displays thefirmware versionthe Router is cur-rently using. As future ver-sions of the Router’sfirmware become available,they can be downloaded from the Linksys website at www.linksys.com.•LAN IP Address and Subnet Mask This is the Router’s IP Address andSubnet Mask as seen on the internal LAN. The default value is 192.168.1.1for IP Address and 255.255.255.0 for Subnet Mask.•Wireless (Enable/Disable). In order to utilize the Router’s wireless func-tions, select Enable. If you do not wish to utilize any wireless functions,make sure Disable is selected.  (Note: No other wireless functions will beavailable unless you enable this setting.)SetupFigure 5-3NNoottee::    Due to differences in webbrowsers, some screen shots may differ. Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 22
•  SSID: The SSID is a unique name for your wireless network.  It is case sensi-tive and must not exceed 32 characters.  The default SSID is "linksys " but youshould change this to a personal wireless network name.  All wireless pointsin your network must use the same SSID. Verify that you are using the correctSSID and click the Apply button to set it.•SSID Broadcast - Allows the SSID to be broadcast on your network. You maywant to enable this function while configuring the Router, but make sure thatyou disable it when you are finished. With this enabled, someone could easilyobtain the SSID information with site survey software and gain unauthorizedaccess to your network. Click Enable to broadcast. Click Disable to increasenetwork security and prevent the SSID from being seen on networked PCs.•Channel  Select the appropriate channel from the list provided to correspondwith your network settings, between 1 and 11. (Higher channels can only beused outside of the United States and Canada.) All points in your wireless net-work must use the same channel in order to function correctly. Verify that thecorrect channel is selected and click the Apply button to set it.•WEP (Mandatory/Disable). In order to utilize WEP encryption, selectEnable. If you do not wish to utilize WEP encryption, make sure Disable isselected.•WEP Key Setting When WEP Encryption is Enabled, press this button tomodify the WEP Key Settings.  For further details on configuring Wireless Security, using WEP, refer toAppendix C: Configuring Wireless Security.•WAN Connection Type The Router supports five connection types: DHCP(obtain an IP automatically), PPPoE, Static IP Address, RAS, and PPTP. Thesetypes are selected from the drop-down menu beside WAN Connection Type.The Setup tab and available features will differ depending on what kind ofconnection type you select. Each option is described on the following pages.Obtain an IP Automatically If your ISP says that you are connecting through a dynamic IP address (orDHCP), select this option from the drop-down menu (as shown in Figure 5-3).Now, the Router will accept the dynamic IP addresses assigned by your ISPwhen connecting to the Internet.24Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:34 AM  Page 23
25Static IPIf your ISP says that you are connecting through a static (or fixed) IPaddress, select this option from the drop-down menu (as shown in Figure 5-4). The Router will utilize that static IP Address when the following infor-mation is entered into the appropriate field:•WAN IP Address and Subnet Mask This is the Router’s IP Address andSubnet Mask as seen by external users on the Internet (including yourISP).•  Default Gateway Address Your ISP will provide you with the GatewayIP Address.•  DNS (Domain Name Server) IP Address Your ISP will provide youwith at least one DNS IP Address.Figure 5-4Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 24
PPPoE Some DSL-basedISPs use PPPoE(Point-to-PointProtocol overEthernet) to estab-lish communica-tions with an end-user. If you areusing a DSL line,check with your ISPto see if they usePPPoE. If they douse PPPoE, selectthis from the drop-down menu (asshown in Figure 5-5).If you do enable PPPoE, remember to remove any existing PPPoE applica-tions already on any of your PCs. •User Name and Password Enter the User Name and Password you usewhen logging onto your ISP connection.•Connect on Demand and Max Idle Time You can configure the Routerto disconnect your ISP connection after a specified period of time (MaxIdle Time). If you have been disconnected due to inactivity, Connect onDemand enables the Router to automatically re-establish your connection assoon as you attempt to access the Internet again. If you wish to activateConnect on Demand, click the radio button. If you want your Internet con-nection to remain on at all times, enter 0in the Max Idle Time field.Otherwise, enter the number of minutes you want to have elapsed beforeyour Internet access disconnects.•Keep Alive Option and Redial Period This option keeps you connected toyour ISP indefinitely, even when your connection sits idle.  To use thisoption, click the radio button next to Keep Alive. The default Redial Periodis 30 seconds.26Figure 5-5Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 25
RAS (for SingTel Users) RAS is a service used in Singapore only. If you are using a RAS connection(as shown in Figure 4-6), check with your ISP for the necessary setup infor-mation.PPTP PPTP is a service used in Europe only. If you are using a PPTP connection(as shown in Figure 4-7), check with your ISP for the necessary setup infor-mation.You can confirm that the above settings are correct by successfully connectingto the Internet.To clear any values you’ve entered on any page, click  the Cancel button.  Toapply any settings you’ve altered on any page, click the Apply button.From the Password tab, shown in Figure 5-7, you can change the Router’sPassword, enable Universal Plug and Play (UPnP) Services for systems such asWindows XP PCs, and restore the Router’s factory default settings. PasswordFigure 5-7Instant WirelessTM Series27BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 26
28•Router Password For greater security, you should set a password for theRouter. If you don’t set the password, all users on your network will be ableto access the Router using the default password admin. We recommend thatyou change your password often. •  UPnP Services Universal Plug and Play (UPnP) allows systems, such asWindows XP PCs to automatically configure the Router for various Internetapplications, such as gaming and videoconferencing. Click the radio buttonnext to Enable to enable UPnP Services, or Disable  to disable UPnPServices.•  Restore Factory Defaults If you select the Restore Factory Default optionand click the Apply button, you will clear all of the Router’s settings andrestore the default settings. Do not restore the factory defaults unless you are having difficulties with theRouter and have exhausted all other troubleshooting measures. Once the Routeris reset, you will have to re-enter all of your configuration data.To clear any values you’ve entered on any page, click  the Cancel button.  Toapply any settings you’ve altered on any page, click the Apply button. The Status tab, shown in Figure 5-8, displays the Router’s current status; itreflects the data and selections you’ve entered using the Setup tab and providesoptions for DHCP users.  All of the information provided on the Status tab is read-only and can bechanged using the Setup tab.  • Host Name This field shows the name of the Router. This entry is neces-sary for some ISPs.  • Firmware Version This field shows the installed version and date of thefirmware.  Version dates are slightly more accurate than version numbers.• Login  This indicates if you are using a dial-up style connection likePPPoE, RAS, or PPTP. For PPPoE, RAS, or PPTP only, there is a Connectbutton to click if you are disconnected and want to re-establish a connec-tion.StatusNote: The information provided on the Statustab may vary depending on the Router’s settings. Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 27
29• LAN These fields display the current IP Address and Subnet Mask of theRouter, as seen by users on your local area network. The DHCP Server fieldshows the status of the Router’s DHCP server function, which is eitherenabled or disabled.•WANThese fields display the WAN IP Address, WAN Subnet Mask, andWAN Default Gateway IP Address of the Router, as seen by external users onthe Internet. The DNS (Domain Name System) IP Address fields show the IPaddress(es) of the DNS currently used by the Router. Multiple DNS IP set-tings are common. In most cases, the first available DNS entry is used.• DHCP Release  Click the DHCP Release button to delete the current IPaddress of the device connected to the Router’s WAN port. •DHCPRenew  Click the DHCP Renew button to replace the current IPaddress—of the device connected to the Router’s WAN port—with a new IPaddress.• DHCP Clients Table  This table lists the PCs that were given IP addresses bythe Router.Figure 5-8Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 28
A DHCP (DynamicHost ConfigurationProtocol) Serverautomaticallyassigns IP addressesto each computer onits network. Unlessyou already haveone, you should setthe Router up as aDHCP  server. Thisis done on the DHCPtab, shown in Figure5-9.•DHCP Server  Click the Enable option to enable the Router’s DHCP serv-er function If you already have a DHCP server on your network, set theRouter’s DHCP option to Disable.•Starting IP Address Enter a numerical value for the DHCP server to startwith when issuing IP addresses.•Number of DHCP users Enter the maximum number of PCs that willrequire IP addresses assigned by the Router. No more than 253 computerscan be used.  In order to determine the DHCP IP Address range, add thestarting IP address (e.g., 100) to the number of DHCP users.  By default, asshown in Figure 5-9, if you add 50 users, the range or IP Addresses will be192.168.1.100 to 192.168.1.149.• Client Lease Time The Client Lease Time is the amount of time a networkuser will be allowed connection to the Router with their current dynamic IPaddress. Enter the amount of time, in minutes, that the user will be “leased”this dynamic IP address.DHCP30Figure 5-9Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 29
• DNS The Domain Name System (DNS) is how the Internet translatesdomain or website names into Internet addresses or URLs. Your ISP willprovide you with at least one DNS Server IP Address. If you wish to useanother, type that IP Address in one of these fields. You can type up tothree DNS Server IP Addresses here. The Router will use these for quickeraccess to functioning DNS servers.•WINSThe Windows Internet Naming Service (WINS) manages each PC’sinteraction with the Internet. If you use a WINS server, enter that server’sIP Address here. Otherwise, left this blank.• DHCP Clients Table  When this button is clicked, a table similar to thatshown in Figure 5-10 appears, displaying a list of PCs assigned IP address-es by the Router. Click the Refresh button to display the most currentinformation. If youwish to delete aclient’s IP address,select that client byclicking the box tothe right and clickthe Delete button.To clear any values you’ve entered on any page, click  the Cancel button.  Toapply any settings you’ve altered on any page, click the Apply button.The Log tab, shown in Figure 5-11, provides you with a log of all incoming andoutgoing URLs or IP addresses for your Internet connection.To access activity logs, select the Enable option next to “Access Log”. Thisfunction can be disabled by clicking the Disable radio button.With logging Enabled, you can choose to view temporary logs or have a per-manent record, using the Logviewer software.  Temporary logs can be accessedfrom the Log tab by clicking either the Incoming Access Log or  OutgoingAccess Log buttons.  The Incoming Access Log gives you a log of all theincoming Internet traffic while the Outgoing Access Log lists all the URLs andIP addresses of Internet sites that users on your network have accessed.Figure 5-10LogInstant WirelessTM Series31BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 30
For a permanent record of these logs, Logviewer software must be used. Thissoftware is downloadable from the Linksys website at www.linksys.com. TheLogviewer saves all incoming and outgoing activity as a permanent file on yourPC’s hard drive. Next to “Send Log to”, enter the fixed IP address of the PCrunning the Logviewer software. The Router will now send updated logs to thatPC.To clear any values you’ve entered on any page, click  the Cancel button.  Toapply any settings you’ve altered on any page, click the Apply button.32Figure 5-11Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 31
The Security tab, as shown in Figure 5-12, enables configuration of the Routerto provide enhanced network security using ZoneAlarm Pro and PC-cillin(each sold separately). While the Router provides a built-in Internet NAT fire-wall, ZoneAlarm Pro enhances the Router’s security capabilities for increasedprotection against hackers and other threats from the Internet and PC-cillin pro-tects against viruses. ZoneAlarm Pro and PC-cillin work independently of eachother. For more information on ZoneAlarm Pro, PC-cillin, and DSL or cablenetwork security, please click the on-screen link to the Internet Security Center. Software DownloadClick this button to purchase and download ZoneAlarm Pro and/or PC-cillin atthe Internet Security Center. Print the summary page, which contains thelicense key needed for installation, or write down the license key if you areunable to print the page. You will also be e-mailed a confirmation invoice withthe key included. When adding security enhancements to your other networkedcomputers, you can either copy the downloaded files to the other PCs or re-download the software on each individual PC without incurring any more costs.SecurityNote: Your license key will be e-mailed to you.Figure 5-12Instant WirelessTM Series33BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 32
ZoneAlarm Pro SettingsIf you have downloaded ZoneAlarm Pro, complete this section.License Key Enter the License Key for ZoneAlarm Pro. The License Keywill be e-mailed to you after you purchase ZoneAlarm Pro.Enforce ZoneAlarm Pro Security Check this box to enable ZoneAlarm Proon the Router. This will require every PC to have ZoneAlarm Pro installedbefore being allowed to access the Internet (except for exempt computers).Enforcement Level This sets how often ZoneAlarm Pro will check for unau-thorized intrusions. More Secure (default setting) enables ZoneAlarm Pro tocheck frequently. Conserve Bandwidth enables ZoneAlarm Pro to check lessfrequently; this uses less bandwidth. It is recommended to set the EnforcementLevel at the More Secure setting unless there is a decrease in the Router’s per-formance. PC-cillin SettingsIf you have downloaded PC-cillin, complete this section.Enforce PC-cillin Anti-Virus Check this box to enable PC-cillin Anti-Viruson the Router.Exempt ComputersIf you wish to exempt any computers from enforcement of ZoneAlarm Pro and/orPC-cillin, complete this section.Enable/Disable To enable or disable computer exemptions, click Enable orDisable. From IP Address/To IP Address  Enter the range of IP addresses for thecomputers you want to exempt from enforcement of ZoneAlarm Pro and/orPC-cillin.AOL Parental ControlsEnabling this engages AOL’s proprietary “Parental Control” feature. Enabling thiswill disable all options under the Advanced tab except MAC Address cloning.To apply any of the settings you change on a page, click the Apply button.  To can-cel any values you’ve entered on any page, click the Cancel button. Wireless Access Point Router with 4-Port Switch34Note: AOL Parental Controls are availableto AOL customers in the Unites States Only.BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 33
35The Help tab, as shown in Figure 5-13, contains links to all of the Utility’s inter-nal support documentation, a link to Linksys’s website, and the application thatupgrades the Router’s firmware. To utility these links, you must have an activeInternet connection.Click the Linksys Website link to connect to the Linksys homepage forKnowledgebase help files and information about other Linksys products.For an Online Manual in PDF format, click that text link. The manual will appearin Adobe PDF format. If you do not have the Adobe PDF Reader installed on yourcomputer, click the Adobe Website link to download this software.Firmware can be upgraded by clicking the Upgrade Firmware link. Do not upgradeyour firmware unless you are experiencing problems with the Access Point.To upgrade the Router’s firmware:1. Access the Help tab and click Upgrade Firmware. A new page, shown inFigure 5-14, will appear.HelpFigure 5-13Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 34
2. Click the Browse button and find the firmware upgrade file that youdownloaded from the Linksys website. Double-click the upgrade file.This will place the file into the “File Path:” field.3.  When the correct file is in the “File Path:” field, click the Upgrade but-ton and follow the instructions there.  This will complete your firmwareupgrade.FiltersImportant: Do not interrupt the firmware upgrade process inany way or power down the Router while the upgrade is inprogress as this could damage the Router.36Important: In order to upgrade the Router’s firmware, youmust use Internet Explorer 5.0 or higher, or NetscapeNavigator 4.7 or higher.  Upgrading the firmware may causethe Router to be reset to the factory defaults.  Make a record ofall settings before attempting the upgrade.Figure 5-14Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 35
37Filters block spe-cific internal usersfrom accessing theInternet. From theFilters tab, asshown in Figure 5-15, you can set up afilter through an IPaddress or a net-work port number.• Setting Up FiltersTo set up a filter using IP addresses, enter the range of IP addresses youwish to filter in the IP address fields. Users who have filtered IP addresseswill not be able to access the Internet at all. If you only want to filter oneIP address instead of a range of IP addresses, enter the same value into bothfields. For instance, if you wish to filter the PC with the IP address of192.168.1.5, enter 5into both fields on one line: 192.168.1.5 ~ 192.168.1.5.Click the Apply button when you’re done. Advanced Tab: FiltersImportant: Filtering is an Advanced Function. No changesshould be made to this tab without a thorough understandingof networking concepts.Figure 5-15Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 36
To filter users by network port number, enter a network port number or arange of network ports.  Enter the port numbers you want to filter in the portnumbers fields.  Users connected to the Router will no longer be able toaccess any port number listed there. • Editing MAC Filter SettingThis feature filters the Ethernet adapter’s specific MAC address from goingout to the Internet.To check your Ethernet adapter’s MAC address, run winipcfg or ipconfigin the command prompt, depending on which Windows operating systemyou are using.  To set the MAC filter, click the Edit MAC Filter Settingbutton.  When a second window appears, select the range in the drop-downmenu, and in a MAC number field, enter the 12-digit MAC address youwant to filter.  Click the Apply button before closing the window. For infor-mation on obtaining a MAC address, go to Appendix D: Finding the MACAddress and IP Address for Your Ethernet Adapter.• Blocking WAN RequestsBy enabling the Block WAN Request feature, you can prevent your networkfrom being “pinged,” or detected, by other Internet users. The Block WANRequest feature also reinforces your network security by hiding your net-work ports. Both functions of the Block WAN Request feature make it moredifficult for outside users to work their way into your network.Click the Apply button to save your changes.• Using Multicast Pass ThroughThis feature allows for multiple transmissions to specific recipients at thesame time.  Select Enable to support the feature, or Disable to keep theRouter from multicasting.38Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 37
• Using Multicast Pass ThroughThis feature allows for multiple transmissions to specific recipients at thesame time.  Select Enable to support the feature, or Disable to keep theRouter from multicasting.• Using IPSec Pass ThroughThis feature lets you use IPSec Pass Through.  To use this feature, click the Enable button next to IPSec Pass Through, and then the Apply button.IPSec Pass Through is enabled by default. To disable IPSec Pass Through,click on Disable and then the Apply button.• Using PPTP Pass ThroughPoint-to-Point Tunneling Protocol is the method used to enable VPN sessions.  To enable this feature, click the Enable button next to PPTP PassThrough, and click the Apply button.PPTP Pass Through is enabled by default. To disable this feature, click onDisable next to PPTP Pass Through, and  then the Apply button.• Using Remote ManagementThis feature allows you to manage the Router from a remote location, suchas over the Internet.  To enable this feature, click on Enable, and click theApply button. Remote Management must be activated before you can man-age the Router from a remote location.To disable Remote Management, click on Disable, and click the Apply but-ton. If you wish to use this feature, enter http:\\<WAN IP Address>:8080into your web browser’s address field and press the Enter key.(Enter yourspecific WAN IP Address in place of <WAN IP Address>.)To disable this feature, click on Disable, and click the Apply button.Instant WirelessTM Series39BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 38
• Using Remote Upgrade This feature allows you to upgrade the Router’s firmware from a remotelocation.  To enable Remote Upgrade, click on Enable, and then click theApply button. Remote Management must be activated before you can man-age the Router from a remote location.• Using MTU (Maximum Transmission Unit) This feature specifies the largest packet size permitted for network trans-mission. Select Enable and enter the value desired.  It is recommended thatyou leave this value in the 1200 to 1500 range.  For most DSL users, it isrecommended to use the value 1492.  By default, MTU is set at 1500 whendisabled.IImmppoorrttaanntt::Upgrading may cause theRouter to be reset to the factorydefaults. Make a record of all set-tings before attempting the upgrade.Wireless Access Point Router with 4-Port Switch40BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 39
Port Range Forwardingfrom this tab, as shownin Figure 5-16, sets uppublic services on yournetwork, such as webservers, ftp servers, e-mail servers, or otherspecialized Internetapplications.(Specialized Internetapplications are anyapplications that useInternet access to per-form functions such asvideoconferencing oronline gaming. SomeInternet applicationsmay not require anyforwarding.) Whenusers send this type of request to your network via the Internet, the Router willforward those requests to the appropriate PC.  Before using Forwarding, theDHCP function on the PC whose port is being forwarded must be disabled andhave a new static IP address assigned because its IP address may change whenusing the DHCP function.If you need to forward all ports to one PC, see the “DMZ” section.To add a server using Port Range Forwarding:1. Enter the name of the application in the appropriate CustomizedApplications field. 2.  Next to the name of the application, enter the number or  range of theexternal port(s) used by the server or Internet application in the Ext. Portcolumn. Check with the Internet application software documentation formore information.Advanced Tab: Port Range ForwardingImportant: Port Range Forwarding is an AdvancedFunction. No changes should be made to this tab without athorough understanding of networking concepts.Figure 5-16Instant WirelessTM Series41BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 40
3.  On the same line, select the protocol TCP or UDP, or select both protocols.  4. Enter the IP address of the server that you want the Internet users to beable to access. To find the IP address, go to Appendix D: Finding the MACAddress and IP Address for Your Ethernet Adapter.5. Check the Enable box to enable the services you have defined. Port RangeForwarding will not function if the Enable button is left unchecked. This isdisabled (unchecked) by default.6.  Configure as many entries as needed—the Router supports up to 10 rangesof ports. Click the Apply button when you are done. UPnP ForwardingClicking the UPnP Forwarding button on the Port Range Forwarding tab willdisplay the UPnP Forwarding tab. The UPnP Forwarding tab, shown in Figure5-17, displays preset application settings as well as options for customizationof port services for other applications. This table is similar tothe Port Forwardingtable, but the items onthis table will automat-ically synchronize withother UPnP devicesand operating systems,such as Windows XP.Figure 5-1742Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 41
The Preset Applications are among the most widely used Internet applicationsthat may require forwarding. They include the following:•  FTP (File Transfer Protocol)  A protocol used to transfer files over a TCP/IPnetwork (Internet, UNIX, etc.). For example, after developing the HTMLpages for a website on a local machine, they are typically uploaded to theweb server using FTP. FTP includes functions to log onto the network, listdirectories, and copy files. It can also convert between the ASCII andEBCDIC character codes. FTP operations can be performed by typing com-mands at a command prompt or via an FTP utility running under a graphicalinterface such as Windows. FTP transfers can also be initiated from within aweb browser by entering the URL preceded by ftp://.•  Telnet A terminal emulation protocol commonly used on Internet andTCP/IP-based networks. It allows a user at a terminal or computer to log ontoa remote device and run a program.•  SMTP (Simple Mail Transfer Protocol)  The standard e-mail protocol on theInternet. It is a TCP/IP protocol that defines the message format and themessage transfer agent (MTA), which stores and forwards the mail. •  DNS (Domain Name System)  The way that Internet domain names arelocated and translated into IP addresses. A domain name is a meaningful andeasy-to-remember “handle” for an Internet address.•  TFTP (Trivial File Transfer Protocol)  A version of the TCP/IP FTP proto-col that has no directory or password capability.•  Finger A UNIX command widely used on the Internet to find out informa-tion about a particular user, such as a telephone number, whether the user iscurrently logged on, and the last time the user was logged on. The personbeing “fingered” must have placed his or her profile on the system in orderfor the information to be available. Fingering requires entering the fulluser@domain address.•  HTTP (HyperText Transport Protocol)  The communications protocol usedto connect to servers on the World Wide Web. Its primary function is toestablish a connection with a web server and transmit HTML pages to theclient web browser. Instant WirelessTM Series43BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 42
•  POP3 (Post Office Protocol 3)  A standard mail server commonly used onthe Internet. It provides a message store that holds incoming e-mail untilusers log on and download it. POP3 is a simple system with little selectivity.All pending messages and attachments are downloaded at the same time.POP3 uses the SMTP messaging protocol.•  NNTP (Network News Transfer Protocol)  The protocol used to connect toUsenet groups on the Internet. Usenet newsreaders support the NNTP pro-tocol.•  SNMP (Simple Network Management Protocol)  A widely used networkmonitoring and control protocol. Data is passed from SNMP agents, whichare hardware and/or software processes reporting activity in each networkdevice (hub, router, etc.) to the workstation console used to oversee the net-work. The agents return information contained in a MIB (ManagementInformation Base), which is a data structure that defines what is obtainablefrom the device and what can be controlled (turned off, on, etc.).You must check the Enable box to enable the applications you have defined.To add a server using UPnP Forwarding:1. Enter the name of the application in the appropriate Application Namefield.2.  Next to the name of the application, enter the number of the external portused by the server in the Ext. Port column. Check with the Internet appli-cation software documentation for more information.3.  On the same line, select the protocol UDP or TCP.4. Enter the number of the internal port used by the server in the Int. Port col-umn.  Check with the Internet application software documentation for moreinformation.5.  Enter the IP address of the server that you want the Internet users to be ableto access. To find the IP address, go to Appendix D: Finding the MACAddress and IP Address for Your Ethernet Adapter.6. Check the Enable box to enable the services you have defined. UPnPForwarding will not function if the Enable button is left unchecked. This isdisabled (unchecked) by default.Wireless Access Point Router with 4-Port Switch44BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 43
45Port TriggeringFrom the Port RangeForwarding tab, shownin Figure 5-18, clickthe  Port Triggeringbutton to allow theRouter to watch out-going data for specificport numbers.  The IPaddress of the comput-er that sends thematching data isremembered by theRouter, so that whenthe requested datareturns through the Router, the data is pulled back to the proper computer byway of IP address and port mapping rules.1. Enter the Application Name of the trigger.2. Enter the Trigger Port Range used by the application. Check with theInternet application for the port number needed.3. Enter the Incoming Port Range used by the application. Check with theInternet application for the port number needed.4. Click the Apply button.Figure 5-18Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 44
From the DynamicRouting tab, shownin Figure 5-19, youcan automaticallyadjust to physicalchanges in the net-work’s layout. TheRouter, using theRIP protocol,determines the net-work packets’route based on thefewest number ofhops between thesource and the des-tination. The RIPprotocol regularly broadcasts routing information to other routers on the net-work. To set up Dynamic Routing:1.  Choose the correct Working Mode. Gateway Mode should be used if theRouter is hosting your network’s connection to the Internet. Router Modeshould be selected if the Router exists on a network with other routers. 2. In the TX field, choose the protocol by which you transmit data on the net-work. 3. In the RX field, choose the protocol by which the Router receives networkdata. 4. Click the Apply button to save your changes.To view the Routing Table, which shows the network layout, click the ShowRouting Table button.To clear any values you’ve entered on any page, click  the Cancel button.  Toapply any settings you’ve altered on any page, click the Apply button.Advanced Tab: Dynamic RoutingImportant: Dynamic Routing is an Advanced Function. Nochanges should be made to this tab without a thorough under-standing of networking concepts.Figure 5-19Wireless Access Point Router with 4-Port Switch46BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 45
If the Router is connected to more than one network, it may be necessary to setup a static route between them. This is set on the Static Routing tab, as shownin Figure 5-20. A static route is a pre-determined pathway that network infor-mation must travel to reach a specific host or network.  Click the ShowRouting Table button to view the current static routing configuration.To create a static route entry:1. Select Static Route Entry from the drop-down list. The Router supportsup to 20 static route entries. Advanced Tab: Static RoutingImportant: Static Routing is an Advanced Function. Nochanges should be made to this tab without a thorough under-standing of networking concepts.Figure 5-20Instant WirelessTM Series47BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 46
2.  Enter the following data to create a new static route:Destination LAN IP. The Destination LAN IP is the address of the remotenetwork or host to which you want to assign a static route. Enter the IPaddress of the host for which you wish to create a static route here. If youare building a route to an entire network, be sure that the host portion of theIP address is set to zero. For example, the Router’s standard IP address is192.168.1.1. Based on this address, the address of the network to which theRouter is connected is 192.168.1. You would enter the IP address192.168.1.0 if you wanted to route to the entire network, rather than just tothe Router.Subnet Mask. The Subnet Mask indicates which portion of an IP addressis the network portion and which portion is the host portion. If, for instance,you use a Subnet Mask of 255.255.255.0 with the example shown above forDestination LAN IP, then this would indicate that the first three numbers ofan network IP address identifies this particular network, while the lastnumber in the network address (from 1 to 254) would identify the specifichost.Gateway IP.  This IP address should be the IP address of the gatewaydevice that allows for contact between the Router and the remote networkor host.Hop Count. This value gives the number of nodes that a data packet pass-es through before reaching its destination.  A node is any deviceon the network, such as switches, PCs, etc.  Interface. This interface tells you whether your network is on the internalLAN or the WAN, or the external Internet.  If you’re connecting to a sub-network, select LAN.  If you’re connecting to another network through theInternet, select WAN.    To delete a Static Routing entry, select an entry, and click the Delete this entrybutton.To clear any values you’ve entered on any page, click  the Cancel button.  Toapply any settings you’ve altered on any page, click the Apply button.48Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 47
The DMZ Hosting feature, accessed from the DMZ Host tab as shown inFigure 5-21, allows one local user to be exposed to the Internet for use of a spe-cial-purpose service such as Internet gaming and videoconferencing. Whereas Port Range Forwarding can only forward a maximum of ten portranges, DMZ hosting forwards all the ports at the same time to one PC. Before using this feature, the DHCP function on the PC whose port is beingexposed must be disabled and have a new static IP address assigned because itsIP address may change when using the DMZ function.To expose one PC, enter the computer’s IP address. To get the IP address of acomputer, refer to Appendix D: Finding the MAC Address and IP Address forYour Ethernet Adapter.Deactivate DMZ by entering a zero in the field. When finished, click the Apply button to save the settings. Otherwise, click theCancel button to undo changes made on this screen.Advanced Tab: DMZ Host49Important: DMZ Hosting is an Advanced Function. Nochanges should be made to this tab without a thorough under-standing of networking concepts.Figure 5-21Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 48
From the MACAddress Cloning tab,shown in Figure 5-22,you can assign theRouter a MACaddress, which is a 12-digit code assigned toa unique piece ofhardware for identifi-cation, like a socialsecurity number.Some ISPs requirethat you register theMAC address of yournetwork card/adapter, which was connected to your cable or DSL modem duringinstallation. Therefore, in order to connect the Router to your cable or DSLmodem in place of the PC (network card or adapter), you must change the RouterMAC to duplicate (or clone) your network card/adapter MAC.  You can find youradapter's MAC address by doing the following: • If you are running Windows 95, 98 or Millennium: Go to Start, Run, type in command, and press Enter.  At the DOS prompt,type winipcfg.• If you are running Windows NT 4.0 or 2000:         Go to Start, Run, type in command, and press Enter.  At the DOS prompt,type ipconfig /all.The Physical Address with 12 digits is your adapter’s MAC address.  Enterthose 12 digits into the MAC Address fields, and click Apply.  This “clones”your network adapter’s MAC address onto the Router, and prevents you fromhaving to call your ISP to change the registered MAC address to the adapter’sMAC address.Advanced Tab: MAC Address Cloning50Important: MAC Address Cloning is an AdvancedFunction. No changes should be made to this tab without athorough understanding of networking concepts.Figure 5-22Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:35 AM  Page 49
Before making anychanges to theWireless tab, shownin Figure 5-23,please check thewireless settings forall your wirelessPCs, as thesechanges will alter theRouter’s effective-ness. In most cases,these settings do notneed to be changed.• Firmware Version. This indicates the Router’s firmware version.• Beacon Interval. This value indicates the frequency interval of the beacon.A beacon is a packet broadcast by the Router to keep the network synchro-nized. A beacon includes the wireless LAN service area, the IP address, theBroadcast destination addresses, a time stamp, Delivery Traffic IndicatorMaps, and the Traffic Indicator Message (TIM).• RTS Threshold. This value should remain at its default setting of 2,346.Should you encounter inconsistent data flow, only minor modifications arerecommended.Advanced Tab: Wireless51Important: Wireless is an Advanced Function. No changesshould be made to this tab without a thorough understandingof networking concepts.Figure 5-23Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 50
• Fragmentation Threshold. This value indicates how much of the Router’sresources are devoted to recovering packet errors. The value should remainat its default setting of 2,346. If you have decreased this value and experi-ence high packet error rates, you can increase it again, but it will likelydecrease overall network performance. Only minor modifications of thisvalue are recommended.• DTIM Interval. This value indicates the interval of the Delivery TrafficIndication Message (DTIM). A DTIM field is a countdown field informingclients of the next window for listening to broadcast and multicast mes-sages. When the Router has buffered broadcast or multicast messages forassociated clients, it sends the next DTIM with a DTIM Interval value.Clients for the Router hear the beacons and awaken to receive the broadcastand multicast messages.  • Basic Rates. The basic transfer rates should be set depending on the speedof your wireless network. You must select 1-2 (Mbps) if you have older802.11 compliant equipment on your network, such as wireless adaptersthat support only 1 or 2 Mbps. Selecting 1-2 (Mbps), however, does notlimit the basic transfer rates of faster adapters.• TX Rates. Select all the supported rates at which an access point will com-municate with a client. • Preamble Type. The preamble defines the length of the CRC block forcommunication between the Router and the roaming Network Card. (Highnetwork traffic areas should use the shorter preamble type.) Select theappropriate preamble type and click the Apply button to set it.• Authentication Type. You may choose between Open System,  SharedKey, and Both.  The Authentication Type default is set to Open System, inwhich the sender and the recipient do NOT share a secret key.  Each partygenerates its own key-pair and asks the receiver to accept the randomly-generated key.  Once accepted, this key is used for a short time only.  Thena new key is generated and agreed upon.  Shared Key is when both thesender and the recipient share a secret key.• Antenna Selection. This selection is for choosing which antenna transmitsdata. By default, the Diversity Antenna selection, used to increase recep-tion, is chosen. 52Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 51
53• Station MAC Filter. This option will allow you to prevent wireless userson your network from accessing the Router’s functions.Clicking the Active MAC Table  button will display the MAC Addresses ofall users on your wireless network. Addresses in green show access to theRouter, while addresses in red do not have access.To filter users, click the Edit MAC Filter Setting button. The windowshown in Figure 5-24 will appear.Click the Wireless MAC Entry drop-down menu to select a range ofentries for your network. From within this range, select the entry for whichyou’d like to manage access. Verify that the appropriate MAC Address isentered into the MAC Address field. Click the Filter checkbox beside thatMAC Address. Now, this user will be prevented from accessing the Router.All other users will have access. To allow only that user and deny access toall others, leave Filter unchecked.Click the Apply button to set these changes or Undo if you do not wishthese changes to go into effect.When finished with the Wireless Tab, click the Apply button to save the set-tings. Otherwise, click the Cancel button to undo changes made on this screen.Figure 5-23Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 52
Appendix A: TroubleshootingThis appendix consists of two parts: “Common Problems and Solutions” and“Frequently Asked Questions.” Provided are possible solutions to problemsregarding the installation and operation of the Router. If your situation is describedhere, the problem should be solved by applying the corresponding solution. If youcan’t find an answer here, check the Linksys website at www.linksys.com.1. I need to set a static IP address on a PC.The Router, by default, assigns an IP address range of 192.168.1.100 to192.168.1.150 using the DHCP server on the Router. To set a static IP address, youcan only use the ranges 192.168.1.2 to 192.168.1.99 and 192.168.1.151 to192.168.1.254. Each PC or network device that uses TCP/IP must have a uniqueaddress to identify itself in a network. If the IP address is not unique to a network,Windows will generate an IP conflict error message.  You can assign a static IPaddress to a PC by performing the following steps:For Windows 95, 98, and Me:A. Click Start, Settings, and Control Panel. Double-click Network.B. In The following network components are installed box, select the TCP/IP->associated with your Ethernet adapter. If you only have one Ethernet adapterinstalled, you will only see one TCP/IP line with no association to an Ethernetadapter.  Highlight it and click the Properties button.C. In the TCP/IP properties window, select the IP address tab, and select Specifyan IP address. Enter a unique IP address that is not used by any other com-puter on the network connected to the Router. You can only use an IP addressin the ranges 192.168.1.2 to 192.168.1.99 and 192.168.1.151 to192.168.1.254.   Make sure that each IP address is unique for each PC or net-work device.D. Click the Gateway tab, and in the New Gateway prompt, enter 192.168.1.1,which is the default IP address of the Router. Click the Add button to acceptthe entry.E. Click the DNS tab, and make sure the DNS Enabled option is selected. Enterthe  Host and  Domain names (e.g., John for Host and home for Domain).Enter the DNS entry provided by your ISP. If your ISP has not provided theDNS IP address, contact your ISP to get that information or go to its websitefor the information.F. Click the OK button in the TCP/IP properties window, and click Close or  theOK button for the Network window.G. Restart the computer when asked.Common Problems and SolutionsWireless Access Point Router with 4-Port Switch54BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 53
55For Windows 2000:A. Click  Start,  Settings, and Control Panel. Double-click Network andDial-Up Connections.B. Right-click the Local Area Connection that is associated with the Ethernetadapter you are using, and select the Properties option.C. In the Components checked are used by this connection box, highlightInternet Protocol (TCP/IP), and click the Properties button. Select Usethe following IP address option.D. Enter a unique IP address that is not used by any other computer on thenetwork connected to the Router. You can only use an IP address in theranges 192.168.1.2 to 192.168.1.99 and 192.168.1.151 to 192.168.1.254.   E. Enter the Subnet Mask, 255.255.255.0.F. Enter the Default Gateway, 192.168.1.1 (Router’s default IP address).G. Toward the bottom of the window, select Use the following DNS serveraddresses, and enter the Preferred DNS server and  Alternative DNSserver (provided by your ISP). Contact your ISP or go on its website to findthe information.H. Click the OK button in the Internet Protocol (TCP/IP) Properties window,and click the OK button in the Local Area Connection Properties window.I. Restart the computer if asked.For Windows NT 4.0:A. Click Start, Settings, and Control Panel. Double-click the Network icon.B. Click the Protocol tab, and double-click TCP/IP Protocol.C. When the window appears, make sure you have selected the correctAdapter for your Ethernet adapter.D. Select  Specify an IP address, and enter a unique IP address that is notused by any other computer on the network connected to the Router. Youcan only use an IP address in the ranges 192.168.1.2 to 192.168.1.99 and192.168.1.151 to 192.168.1.254.E. Enter the Subnet Mask, 255.255.255.0.F. Enter the Default Gateway, 192.168.1.1 (Router’s default IP address).G. Click the DNS tab, and enter the Host and Domain names (e.g., John forHost and home for Domain). Under DNS Service Search Order, click theAdd button.  Enter the DNS IP address in the DNS Server field, and clickthe Add button. Repeat this action for all DNS IP addresses given by yourISP.H. Click the OK button in the TCP/IP Protocol Properties window, and clickthe Close button in the Network window.I. Restart the computer if asked.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 54
For Windows XP:The following instructions assume you are running Windows XP with the defaultinterface. If you are using the Classic interface (where the icons and menus looklike previous Windows versions), please follow the instructions for Windows 2000.A. Click Start and Control Panel. B. Click the Network and Internet Connections icon and then the NetworkConnections icon.C. Right-click the Local Area Connection that is associated with the Ethernetadapter you are using, and select the Properties option.D. In the This connection uses the following items box, highlight InternetProtocol (TCP/IP). Click the Properties button.E. Enter a unique IP address that is not used by any other computer on the net-work connected to the Router. You can only use an IP address in the ranges192.168.1.2 to 192.168.1.99 and 192.168.1.151 to 192.168.1.254.   F. Enter the Subnet Mask, 255.255.255.0.G. Enter the Default Gateway, 192.168.1.1 (Router’s default IP address).H. Toward the bottom of the window, select Use the following DNS serveraddresses, and enter the Preferred DNS server and Alternative DNS server(provided by your ISP). Contact your ISP or go on its website to find the infor-mation.I. Click the OK  button in the Internet Protocol (TCP/IP) Properties window.Click the OK button in the Local Area Connection Properties window.2. I want to test my Internet connection.A. Check your TCP/IP settings.For Windows 95, 98, and Me:Refer to your Ethernet adapter’s documentation for details. Make sure ObtainIP address automatically is selected in the settings.For Windows 2000:• Click Start, Settings, and Control Panel. Double-click Network and Dial-Up Connections.• Right-click the Local Area Connection that is associated with the Ethernetadapter you are using, and select the Properties option. • In the Components checked are used by this connection box, highlightInternet Protocol (TCP/IP), and click the Properties button. Make surethat Obtain an IP address automatically and Obtain DNS server addressautomatically are selected.56Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 55
57• Click the OK button in the Internet Protocol (TCP/IP) Properties win-dow, and click the OK button in the Local Area Connection Propertieswindow.• Restart the computer if asked.For Windows XP:The following instructions assume you are running Windows XP with thedefault interface. If you are using the Classic interface (where the icons andmenus look like previous Windows versions), please follow the instructionsfor Windows 2000.• Click Start and Control Panel. • Click the Network and Internet Connections icon and then theNetwork Connections icon.• Right-click the Local Area Connectionthat is associated with the Ethernet adapter you are using, and select theProperties option.• In the This connection uses the following items box, highlight InternetProtocol (TCP/IP), and click the Properties button.  Make sure thatObtain an IP address automatically and Obtain DNS server addressautomatically are selected.• Click the OK button in the Internet Protocol (TCP/IP) Properties win-dow, and click the OK button in the Local Area Connection Propertieswindow.• Restart the computer if asked.For Windows NT 4.0:• Click Start,  Settings, and Control Panel. Double-click the Networkicon.• Click the Protocol tab, and double-click on TCP/IP Protocol.• When the window appears, make sure you have selected the correctAdapter for your Ethernet adapter and set it for Obtain an IP addressfrom a DHCP server.• Click the OK button in the TCP/IP Protocol Properties window, andclick the Close button in the Network window.• Restart the computer if asked.B. Open a command prompt.• For Windows 95, 98, and Me, please click Start and Run. In the Openfield, type in command. Press the Enter key or click the OK button.• For Windows NT, 2000, and XP, please click Start and  Run. In theOpen field, type cmd. Press the Enter key or click the OK button.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 56
C. In the command prompt, type ping 192.168.1.1 and press the Enter key.  • If you get a reply, the computer is communicating with the Router.• If you do NOT get a reply, please check the cable, and make sure Obtainan IP address automatically is selected in the TCP/IP settings for yourEthernet adapter.  D. In the command prompt, type ping followed by your WAN IP address andpress the Enter key.  The WAN IP Address can be found in the web inter-face of the Router. For example, if your WAN IP address is 1.2.3.4, youwould enter ping 1.2.3.4 and press the Enter key.• If you get a reply, the computer is connected to the Router.• If you do NOT get a reply, try the ping command from a different com-puter to verify that your original computer is not the cause of the prob-lem.E. In the command prompt, type ping www.yahoo.com and press the Enterkey.  • If you get a reply, the computer is connected to the Internet. If you can-not open a webpage, try the ping command from a different computer toverify that your original computer is not the cause of the problem.• If you do NOT get a reply, there may be a problem with the connection.Try the ping command from a different computer to verify that your orig-inal computer is not the cause of the problem.3. I am not getting an IP address on the WAN with my Internet connection.A. Refer to “Problem #2, I want to test my Internet connection” to verify thatyou have connectivity.B. If you need to register the MAC address of your Ethernet adapter with yourISP, please see “Appendix F: Finding the MAC address and IP Address forYour Ethernet Adapter.” If you need to clone the MAC address of yourEthernet adapter onto the Router, see the MAC Address Clone section of“Chapter 5: Using the Router’s Web-based Utility” for details.C. Make sure you are using the right WAN settings. Contact your ISP to see ifyour WAN connection type is DHCP, Static IP Address, or PPPoE (com-monly used by DSL consumers).  Please refer to the Setup section of“Chapter 5: Using the Router’s Web-based Utility” for details on WAN set-tings.D. Make sure you have the right cable. Check to see if the WAN column has asolidly lit Link LED. E. Make sure the cable connecting from your cable or DSL modem is con-nected to the Router’s WAN port. Verify that the Status page of the Router’sweb interface shows a valid IP address from your ISP.58Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 57
F. Turn off the computer, Router, and cable/DSL modem. Wait 30 seconds,and then turn on the Router, cable/DSL modem, and computer. Check theStatus tab of the Router’s web-based utility to see if you get an IP address. 4. I am not able to access the Router’s web interface Setup page.A. Refer to “Problem #2, I want to test my Internet connection” to verify thatyour computer is properly connected to the Router.B. Refer to “Appendix D: Finding the MAC Address and IP address for YourEthernet Adapter” to verify that your computer has an IP Address, SubnetMask, Gateway, and DNS.C. Set a static IP address on your system; refer to “Problem #1: I need to set astatic IP address.”D. Refer to “Problem #10: I need to remove the proxy settings or the dial-uppop-up window (for PPPoE users).”5. I can’t get my Virtual Private Network (VPN) working through the Router.Access the Router’s web interface by going to http://192.168.1.1 or the IPaddress of the Router, and go to the Advanced => Filter tab.  Make sure youhave IPsec pass-through and/or PPTP pass-through enabled.VPNs that use IPSec with the ESP (Encapsulation Security Payload known asprotocol 50) authentication will work fine. At least one IPSec session will workthrough the Router; however, simultaneous IPSec sessions may be possible,depending on the specifics of your VPNs.VPNs that use IPSec and AH (Authentication Header known as protocol 51)are incompatible with the Router.  AH has limitations due to occasional incom-patibility with the NAT standard.  Change the IP address for the Router to another subnet to avoid a conflictbetween the VPN IP address and your local IP address. For example, if yourVPN server assigns an IP address 192.168.1.X (X is a number from 1 to 254)and your local LAN IP address is 192.168.1.X (X is the same number used inthe VPN IP address), the Router will have difficulties routing information tothe right location.  If you change the Router’s IP address to 192.168.2.1, thatshould solve the problem. Change the Router’s IP address through the Setup tabof the web interface.  If you assigned a static IP address to any computer or net-work device on the network, you need to change its IP address accordingly to192.168.2.Y (Y being any number from 1 to 254). Note that each IP addressmust be unique within the network.Instant WirelessTM Series59BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 58
60Your VPN may require port 500/UDP packets to be passed to the computer thatis connecting to the IPSec server. Refer to “Problem #7, I need to set up onlinegame hosting or use other Internet applications” for details. Check the Linksys website for more information at www.linksys.com.6. I need to set up a server behind my Router.To use a server like a web, ftp, or mail server, you need to know the respectiveport numbers they are using.  For example, port 80 (HTTP) is used for web;port 21 (FTP) is used for FTP, and port 25 (SMTP outgoing) and port 110(POP3 incoming) are used for the mail server.  You can get more informationby viewing the documentation provided with the server you installed.   Followthese steps to set up port forwarding through the Router’s web-based utility. Wewill be setting up web, ftp, and mail servers.A. Access the Router’s web-based utility by going to http://192.168.1.1 or theIP address of the Router. Go to the Advanced => Forwarding tab.  B. Enter any name you want to use for the Customized Application.C. Enter the Ext. Port range of the service you are using. For example, if youhave a web server, you would enter the range 80 to 80.  D. Check the protocol you will be using, TCP and/or UDP. E. Enter the IP address of the PC or network device that you want the portserver to go to. For example, if the web server’s Ethernet adapter IP addressis 192.168.1.100, you would enter 100 in the field provided. Check“Appendix D: Finding the MAC Address and IP Address for Your EthernetAdapter” for details on getting an IP address.F. Check the Enable option for the port services you want to use. Consider theexample below:Customized Ext. Port TCP UDP IP Address EnableApplicationWeb server 80 to 80 X  X 192.168.1.100 XFTP server 21 to 21 X 192.168.1.101 XSMTP (outgoing) 25 to 25 X X 192.168.1.102 XPOP3 (incoming) 110 to 110 X X 192.168.1.102 XWhen you have completed the configuration, click the Apply button.Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 59
7. I need to set up online game hosting or use other Internet applications.If you want to play online games or use Internet applications, most will workwithout doing any port forwarding or DMZ hosting.  There may be cases whenyou want to host an online game or Internet application.  This would requireyou to set up the Router to deliver incoming packets or data to a specific com-puter.  This also applies to the Internet applications you are using. The best wayto get the information on what port services to use is to go to the website of theonline game or application you want to use. Follow these steps to set up onlinegame hosting or use a certain Internet application:A. Access the Router’s web interface by going to http://192.168.1.1 or the IPaddress of the Router. Go to the Advanced => Forwarding tab.B. Enter any name you want to use for the Customized Application.C. Enter the Ext. Port range of the service you are using. For example, if youwant to host Unreal Tournament (UT), you would enter the range 7777 to27900.D. Check the protocol you will be using, TCP and/or UDP. E. Enter the IP address of the PC or network device that you want the portserver to go to. For example, if the web server’s Ethernet adapter IP addressis 192.168.1.100, you would enter 100 in the field provided. Check“Appendix D: Finding the MAC Address and IP Address for Your EthernetAdapter” for details on getting an IP address.F. Check the Enable option for the port services you want to use. Consider theexample below:Customized Ext. Port TCP UDP IP Address EnableApplicationUT 7777 to 27900 X X 192.168.1.100 X Halflife 27015 to 27015 X X 192.168.1.105 XPC Anywhere 5631 to 5631 X 192.168.1.102 XVPN IPSEC 500 to 500 X 192.168.1.100 XWhen you have completed the configuration, click the Apply button.Instant WirelessTM Series61BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 60
8. I can’t get the Internet game, server, or application to work.If you are having difficulties getting any Internet game, server, or applicationto function properly, consider exposing one PC to the Internet usingDeMilitarized Zone (DMZ) hosting. This option is available when an applica-tion requires too many ports or when you are not sure which port services touse. Make sure you disable all the forwarding entries if you want to success-fully use DMZ hosting, since forwarding has priority over DMZ hosting. (Inother words, data that enters the Router will be checked first by the forwardingsettings. If the port number that the data enters from does not have port for-warding, then the Router will send the data to whichever PC or network deviceyou set for DMZ hosting.)  Follow these steps to set DMZ hosting:A. Access the Router’s web-based utility by going to http://192.168.1.1 or theIP address of the Router. Go to the Advanced => Forwarding tab.B. Disable or remove the entries you have entered for forwarding.  Keep thisinformation in case you want to use it at a later time.C. Click the DMZ Host tab.D. Enter the Ethernet adapter’s IP address of the computer you want exposedto the Internet.  This will bypass the NAT firewall for that computer. Pleaserefer to “Appendix D: Finding the MAC Address and IP Address for YourEthernet Adapter” for details on getting an IP address. Once completed with the configuration, click the Apply button.9. I forgot my password, or the password prompt always appears when saving set-tings to the Router.Reset the Router to factory default by pressing the Reset button for 30 secondsand then releasing it. If you are still getting prompted for a password when sav-ing settings, then perform the following steps:A. Access the Router’s web interface by going to http://192.168.1.1 or the IPaddress of the Router. Enter the default password admin, and click thePassword tab. B. Enter a different password in the Router Password field, and enter thesame password in the second field to confirm the password.C. Click the Apply button.Wireless Access Point Router with 4-Port Switch62BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 61
10. I am a PPPoE user, and I need to remove the proxy settings or the dial-up pop-up window.If you have proxy settings, you need to disable these on your computer.Because the Router is the gateway for the Internet connection, the computerdoes not need any proxy settings to gain access.  Please follow these directionsto verify that you do not have any proxy settings and that the browser you useis set to connect directly to the LAN.For Microsoft Internet Explorer 5.0 or higher:A. Click Start, Settings, and Control Panel. Double-click Internet Options. B. Click the Connections tab.C. Click the LAN settings button and remove anything that is checked.D. Click the OK button to go back to the previous screen.E. Click the option Never dial a connection.  This will remove any dial-uppop-ups for PPPoE users.For Netscape 4.7 or higher:A. Start  Netscape Navigator, and click Edit,  Preferences,  Advanced, andProxies.  B. Make sure you have Direct connection to the Internet selected on thisscreen.C. Close all the windows to finish.11. To start over, I need to set the Router to factory default.Hold the Reset button for up to 30 seconds and then release it. This will returnthe password, forwarding, and other settings on the Router to the factorydefault settings. In other words, the Router will revert to its original factoryconfiguration.12. I need to upgrade the firmware.In order to upgrade the firmware with the latest features, you need to go to theLinksys website and download the latest firmware at www.linksys.com. Followthese steps:A. Go to the Linksys website at http://www.linksys.com and download thelatest firmware.B. To upgrade the firmware, follow the steps in the Help section found in“Chapter 5: Using the Router’s Web-based Utility.”Instant WirelessTM Series63BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 62
13. The firmware upgrade failed, and/or the Diag LED is flashing.The upgrade could have failed for a number of reasons.  Follow these steps toupgrade the firmware and/or make the Diag LED stop flashing:A. If the firmware upgrade failed, use the TFTP program (it was downloadedalong with the firmware). Open the pdf that was downloaded along with thefirmware and TFTP program, and follow the pdf’s instructions.B. Set a static IP address on the PC; refer to “Problem #1, I need to set a stat-ic IP address.” Use the following IP address settings for the computer youare using:IP Address: 192.168.1.50Subnet Mask: 255.255.255.0Gateway: 192.168.1.1C. Perform the upgrade using the TFTP program or the Router’s web-basedutility through its Help tab.14. My DSL service’s PPPoE is always disconnecting.PPPoE is not actually a dedicated or always-on connection.  The DSL ISP candisconnect the service after a period of inactivity, just like a normal phone dial-up connection to the Internet.  There is a setup option to “keep alive” the con-nection.  This may not always work, so you may need to re-establish connec-tion periodically.A. To connect to the Router, go to the web browser, and enterhttp://192.168.1.1 or the IP address of the Router.B. Enter the password, if asked. (The default password is admin.)C. In the Setup tab, select the option Keep Alive, and set the Redial Periodoption at 20 (seconds).D. Click the Apply button.E. Click the Status tab, and click the Connect button.F. You may see the login status display as Connecting. Press the F5 key torefresh the screen, until you see the login status display as Connected.G. Click the Apply button to continue.If the connection is lost again, follow steps E to G to re-establish connection.Wireless Access Point Router with 4-Port Switch64BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 63
15. I can't access my email, web, or VPN, or I am getting corrupted data from theInternet.The Maximum Transmission Unit (MTU) setting may need to be adjusted. Bydefault, the MTU is set at 1500.  For most DSL users, it is strongly recom-mended to use MTU 1492.  If you are having some difficulties, perform the fol-lowing steps:A. To connect to the Router, go to the web browser, and enterhttp://192.168.1.1 or the IP address of the Router.B. Enter the password, if asked. (The default password is admin.)C. Click the Advanced => Filter tab.D. Look for the MTU option, and select Enable. In the Size field, enter 1492.  E. Click the Apply button to continue.If your difficulties continue, change the Size to different values. Try this list ofvalues, one value at a time, in this order, until your problem is solved:146214001362130016. I need to use port triggering.Port triggering looks at the outgoing port services used and will trigger theRouter to open a specific port, depending on which port an Internet applicationuses.  Follow these steps:A. To connect to the Router, go to the web browser, and enterhttp://192.168.1.1 or the IP address of the Router.B. Enter the password, if asked. (The default password is admin.)C. Click the Advanced => Forwarding tab, and click the Port Trigger button.D. Enter any name you want to use for the Application Name.E. Enter the Triggered Port Range. Check with your Internet applicationprovider for more information on which outgoing port services it is using.F. Enter the Incoming Port Range. Check with your Internet Applicationprovider for more information on which incoming port services arerequired by the Internet application.Instant WirelessTM Series65BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 64
17. The Diag LED stays lit continuously.• The Diag LED lights up when the device is first powered up. Meantime,the system will boot up itself and check for proper operation. After fin-ishing the checking procedure, the LED turns off to show that the systemis working fine. If the LED remains lit after this time, the device is notworking properly. Try to flash the firmware by assigning a static IPaddress to the computer, and then upgrade the firmware. Try using thefollowing settings, IP Address: 192.168.1.50 and Subnet Mask:255.255.255.0.18. When I enter a URL or IP address, I get a time-out error or am prompted to retry.• Check if other PCs work. If they do, ensure that your workstation’s IP set-tings are correct (IP Address, Subnet Mask, Default Gateway, and DNS).Restart the computer that is having a problem.• If the PCs are configured correctly, but still not working, check theRouter. Ensure that it is connected and ON. Connect to it and check itssettings. (If you cannot connect to it, check the LAN and power connec-tions.)• If the Router is configured correctly, check your Internet connection(DSL/cable modem, etc.) to see if it is working correctly. You can removethe Router to verify a direct connection.• Manually configure the TCP/IP with a DNS address provided by yourISP.• Make sure that your browser is set to connect directly and that any dial-up is disabled. For Internet Explorer, click Tools, Internet Options, andthen the Connection tab. Make sure that Internet Explorer is set to Neverdial a connection. For Netscape Navigator, click Edit,  Preferences,Advanced, and Proxy. Make sure that Netscape Navigator is set toDirect connection to the Internet.19. The Full/Col LED keeps flickering continuously.• Check the Category 5 Ethernet cable and its RJ-45 connectors.• There may be interference with other network devices. Try removingother PCs or network devices to see if the problem persists. Eliminateeach network device one at a time to determine the cause.Wireless Access Point Router with 4-Port Switch66BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 65
What is the maximum number of IP addresses that the Router will support? TheRouter will support up to 253 IP addresses.Is IPSec Pass-Through supported by the Router? Yes, it is a built-in feature thatthe Router automatically enables.Where is the Router installed on the network? In a typical environment, theRouter is installed between the cable/DSL modem and the LAN.  Plug theRouter into the cable/DSL modem’s Ethernet port.Does the Router support IPX or AppleTalk? No. TCP/IP is the only protocol stan-dard for the Internet and has become the global standard for communications.IPX, a NetWare communications protocol used only to route messages fromone node to another, and AppleTalk, a communications protocol used onApple and Macintosh networks, can be used for LAN to LAN connections,but those protocols cannot connect from WAN to LAN.Does the WAN connection of the Router support 100 Mbps Ethernet? Because ofthe speed limitations of broadband Internet connections, the Router’s currenthardware design supports 10 Mbps Ethernet on its WAN port. It does, ofcourse, support 100 Mbps over the auto-sensing Fast Ethernet 10/100 switchon the LAN side of the Router. What is Network Address Translation and what is it used for? Network AddressTranslation (NAT) translates multiple IP addresses on the private LAN to onepublic address that is sent out to the Internet. This adds a level of securitysince the address of a PC connected to the private LAN is never transmittedon the Internet. Furthermore, NAT allows the Router to be used with low costInternet accounts, such as DSL or cable modems, when only one TCP/IPaddress is provided by the ISP. The user may have many private addressesbehind this single address provided by the ISP.Does the Router support any operating system other than Windows 95, Windows98, Windows 2000, Windows NT, or Windows XP? Yes, but Linksys does not, atthis time, provide technical support for setup, configuration or troubleshoot-ing of any non-Windows operating systems.Frequently Asked QuestionsInstant WirelessTM Series67BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 66
Does the Router support ICQ send file? Yes, with the following fix: click ICQ menu -> preference -> connections tab->, and check I am behind a fire-wall or proxy. Then set the firewall time-out to 80 seconds in the firewall set-ting. The Internet user can then send a file to a user behind the Router.I set up an Unreal Tournament Server, but others on the LAN cannot join. What doI need to do?  If you have a dedicated Unreal Tournament server running, youneed to create a static IP for each of the LAN computers and forward ports7777, 7778, 7779, 7780, 7781, and 27900 to the IP address of the server. Youcan also use a port forwarding range of 7777 ~ 27900. If you want to use theUT Server Admin, forward another port (8080 usually works well but is usedfor remote admin. You may have to disable this.), and then in the[UWeb.WebServer] section of the server.ini file, set the ListenPort to 8080 (tomatch the mapped port above) and ServerName to the IP assigned to theRouter from your ISP.Can multiple gamers on the LAN get on one game server and play simultaneouslywith just one public IP address? It depends on which network game or whatkind of game server you are using.  For example, Unreal Tournament supportsmulti-login with one public IP.How do I get Half-Life: Team Fortressto work with the Router? The default clientport for Half-Life is 27005.  The computers on your LAN need to have“+clientport 2700x” added to the HL shortcut command line; the x would be6, 7, 8, and on up. This lets multiple computers connect to the same server.One problem: Version 1.0.1.6 won’t let multiple computers with the same CDkey connect at the same time, even if on the same LAN (not a problem with1.0.1.3).  As far as hosting games, the HL server does not need to be in theDMZ. Just forward port 27015 to the local IP address of the server comput-er. How can I block corrupted FTP downloads?  If you are experiencing corruptedfiles when you download a file with your FTP client, try using another FTPprogram.The web page hangs; downloads are corrupt, or nothing but junk characters arebeing displayed on the screen. What do I need to do? Force your Ethernetadapter to 10Mbps or half duplex mode, and turn off the “Auto-negotiate”feature of your Ethernet adapter as a temporary measure. (Please look at theNetwork Control Panel in your Ethernet adapter’s Advanced Properties tab.)Wireless Access Point Router with 4-Port Switch68BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 67
Make sure that your proxy setting is disabled in the browser. Check our web-site at www.linksys.com for more information.If all else fails in the installation, what can I do? Reset the Router by holdingdown the reset button until the Diag LED fully turns on and off. Reset yourcable or DSL modem by powering the unit off and then on.  Obtain and flashthe latest firmware release that is readily available on the Linksys website,www.linksys.com.How will I be notified of new Router firmware upgrades? All Linksys firmwareupgrades are posted on the Linksys website at www.linksys.com, where theycan be downloaded for free.  The Router’s firmware can be upgraded withTFTP programs. If the Router’s Internet connection is working well, there isno need to download a newer firmware version, unless that version containsnew features that you would like to use.  Downloading a more current versionof Router firmware will not enhance the quality or speed of your Internet con-nection, and may disrupt your current connection stability.Will the Router function in a Macintosh environment?  Yes, but the Router’s setuppages are accessible only through Internet Explorer 4.0 or NetscapeNavigator 4.0 or higher for Macintosh.I am not able to get the web configuration screen for the Router.  What can I do?You may have to remove the proxy settings on your Internet browser, e.g.,Netscape Navigator or Internet Explorer.  Or remove the dial-up settings onyour browser.  Check with your browser documentation, and make sure thatyour browser is set to connect directly and that any dial-up is disabled. Makesure that your browser is set to connect directly and that any dial-up is dis-abled. For Internet Explorer, click Tools,  Internet Options, and then theConnection tab. Make sure that Internet Explorer is set to Never dial a con-nection. For Netscape Navigator, click Edit,  Preferences,  Advanced, andProxy. Make sure that Netscape Navigator is set to Direct connection to theInternet.What is DMZ Hosting? Demilitarized Zone (DMZ) allows one IP address (com-puter) to be exposed to the Internet.  Some applications require multipleTCP/IP ports to be open.  It is recommended that you set your computer witha static IP if you want to use DMZ Hosting. To get the LAN IP address, see“Appendix D: Finding the MAC Address and IP Address for Your EthernetAdapter.”If DMZ Hosting is used, does the exposed user share the public IP with the Router?No.Instant WirelessTM Series69BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 68
Does the Router pass PPTP packets or actively route PPTP sessions?  The Routerallows PPTP packets to pass through.Is the Router cross-platform compatible?  Any platform that supports Ethernetand TCP/IP is compatible with the Router.How many ports can be simultaneously forwarded?  Theoretically, the Router canestablish 520 sessions at the same time, but you can only forward 10 rangesof ports.Does the Router replace a modem?  Is there a cable or DSL modem in the Router?No, this version of the Router must work in conjunction with a cable or DSLmodem.Which modems are compatible with the Router?  The Router is compatible withvirtually any cable or DSL modem that supports Ethernet.What are the advanced features of the Router? The Router’s advanced featuresinclude IP Filtering, Port Range Forwarding, Dynamic Routing, StaticRouting, DMZ hosting, and MAC Address Cloning.What is the maximum number of VPN sessions allowed by the Router?The maximum number depends on many factors. At least one IPSec sessionwill work through the Router; however, simultaneous IPSec sessions may bepossible, depending on the specifics of your VPNs. How big is the memory buffer on the Router? 1MB buffer and 512KB flash.How can I check whether I have static or DHCP IP Addresses? Consult your ISPto obtain this information.  How do I get mIRC to work with the Router? Under the Port Range Forwardingtab, set port forwarding to 113 for the PC on which you are using mIRC.Can the Router act as my DHCP Server?  Yes.  The Router has DHCP Server soft-ware built-in.Can I run an application from a remote computer over the wireless network?  Thiswill depend on whether or not the application is designed to be used over aWireless Access Point Router with 4-Port Switch70BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 69
network. Consult the application’s documentation to determine if it supportsoperation over a network.What is the IEEE 802.11b standard?  The IEEE 802.11b Wireless LAN standardssubcommittee formulates the standard for the industry. The objective is toenable wireless LAN hardware from different manufacturers to communicate. What IEEE 802.11 features are supported? The product supports the followingIEEE 802.11 functions: •  CSMA/CA plus Acknowledge protocol •  Multi-Channel Roaming•  Automatic Rate Selection •  RTS/CTS feature •  Fragmentation •  Power Management What is BSS ID? A specific Ad-hoc LAN is called a Basic Service Set (BSS).Computers in a BSS must be configured with the same BSS ID.What is SSID? An Infrastructure configuration could also support roamingcapability for mobile workers. More than one BSS can be configured as anExtended Service Set (ESS). Users within an ESS could roam freely betweenBSSs while maintaining a continuous connection to the wireless network sta-tions and Access Points.What is ISM band? The FCC and their counterparts outside of the U.S. have setaside bandwidth for unlicensed use in the ISM (Industrial, Scientific andMedical) band. This presents a truly revolutionary opportunity to place con-venient high speed wireless capabilities in the hands of users around theglobe. What is Spread Spectrum? Spread Spectrum technology is a wideband radiofrequency technique developed by the military for use in reliable, secure, mis-sion-critical communications systems. It is designed to trade off bandwidthefficiency for reliability, integrity, and security. In other words, more band-width is consumed than in the case of narrowband transmission, but the trade-off produces a signal that is, in effect, louder and thus easier to detect, pro-vided that the receiver knows the parameters of the spread-spectrum signalbeing broadcast. If a receiver is not tuned to the right frequency, a spread-spectrum signal looks like background noise. There are two main alternatives,Direct Sequence Spread Spectrum (DSSS) and Frequency Hopping SpreadSpectrum (FHSS).Instant WirelessTM Series71BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 70
What is DSSS? What is FHSS? And what are their differences?  FrequencyHopping Spread Spectrum (FHSS) uses a narrowband carrier that changesfrequency in a pattern that is known to both transmitter and receiver. Properlysynchronized, the net effect is to maintain a single logical channel. To anunintended receiver, FHSS appears to be short-duration impulse noise. DirectSequence Spread Spectrum (DSSS) generates a redundant bit pattern for eachbit to be transmitted. This bit pattern is called a chip (or chipping code). Thelonger the chip, the greater the probability that the original data can be recov-ered. Even if one or more bits in the chip are damaged during transmission,statistical techniques embedded in the radio can recover the original datawithout the need for retransmission. To an unintended receiver, DSSS appearsas low power wideband noise and is rejected (ignored) by most narrowbandreceivers. Would the information be intercepted while transmitting on air?  WLAN featurestwo-fold protection in security. On the hardware side, as with DirectSequence Spread Spectrum technology, it has the inherent security feature ofscrambling. On the software side, the WLAN series offers the encryptionfunction (WEP) to enhance security and access control. Users can set it updepending upon their needs.What is WEP?  WEP is Wired Equivalent Privacy, a data privacy mechanismbased on a 40/64 bit shared key algorithm, as described in the IEEE 802.11standard. What is a MAC Address?  The Media Access Control (MAC) address is a uniquenumber assigned by the manufacturer to any Ethernet networking device,such as a network adapter, that allows the network to identify it at the hard-ware level.  For all practical purposes, this number is usually permanent.Unlike IP addresses, which can change every time a computer logs on to thenetwork, the MAC address of a device stays the same, making it a valuableidentifier for the network.If your questions are not addressed here, refer to the Linksys website,www.linksys.com.Wireless Access Point Router with 4-Port Switch72BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 71
Appendix B: How to Ping Your ISP’sE-mail and Web AddressesVirtually all Internet addresses are configured with words or characters (i.e.,www.linksys.com, www.yahoo.com, etc.) In actuality, however, these Internetaddresses are assigned to IP addresses, which are the true addresses on theInternet. For example, www.linksys.com is actually 216.23.162.142. Enteringthat into your web browser will bring up at the Linksys home page every time.IP and web addresses, however, can sometimes be long and hard to remember.Because of this, certain ISPs will shorten their server addresses to single wordsor codes on their users’ web browser or e-mail configurations. If your ISP’s e-mail and web server addresses are configured with single words (“www,” “e-mail,” “home,” “pop3,” etc.) rather than whole Internet Addresses or IPAddresses, the Router may have problems sending or receiving mail andaccessing the Internet. This happens because the Router has not been config-ured by your ISP to accept their abbreviated server addresses.The solution is to determine the true web addresses behind your ISP’s codewords. You can determine the IP and web addresses of your ISP’s servers by“pinging” them.Step One: Pinging an IP AddressThe first step to determining your ISP’s web and e-mail server address is toping its IP address.1.  Power on the computer and the cable or DSL modem, and restore thenetwork configuration set by your ISP if you have since changed it.2.  Click Start, then Run, and type “command.” This will bring up the DOSwindow.73NNoottee::If you don’t have your ISP’s web and e-mail IP addresses, you musteither get them from your ISP or follow these steps prior to connecting theRouter to your network.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 72
3.  At the DOS command prompt, type “ping mail” (assuming that the loca-tion for which you’re trying to find an IP address is configured as “mail”).Press Enter. Information such as the following data, taken from a ping ofMicrosoft Network’s e-mail server, will be displayed.4.  Write down the IP address returned by the ping command. (In theexample above: 24.53.32.4.) This IP address is the actual IP address of theserver “mail,” or any other word or value you have pinged.Step Two: Pinging for a Web AddressWhile the IP address returned above would work as your e-mail server address,it may not be permanent. IP addresses change all the time. Web addresses, how-ever, usually don’t. Because of this, you’re likely to have fewer problems byconfiguring your system with web addresses rather than IP addresses. Followthe instructions below to find the web address assigned to the IP address youjust pinged.1. At the DOS command prompt, type “ping -a 24.53.32.4,” where24.53.32.4 is the IP address you just pinged. Information such as the fol-lowing data will be displayed.C:\>ping mailPinging mail [24.53.32.4] with 32 bytes of data:Reply from 24.53.32.4: bytes=32 time<10ms TTL=128Reply from 24.53.32.4: bytes=32 time<10ms TTL=128Reply from 24.53.32.4: bytes=32 time<10ms TTL=128Reply from 24.53.32.4: bytes=32 time<10ms TTL=128Ping statistics for 24.53.32.4:Packets: Sent = 4, Received = 4, Lost = 0 (0%loss),Approximate round trip times in milli-seconds:Minimum = 0ms, Maximum =  0ms, Average =  0ms74Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 73
2.  Write down the web address returned by the ping command (in theexample above: mail.msnv3.occa.home.com.). This web address is the webaddress assigned to the IP address you just pinged. While the IP address of“mail” could conceivably change, it is likely that this web address will not.3. Replace your ISP’s abbreviated server address with this extended webaddress in the corresponding Internet application (web browser, e-mailapplication, etc.).Once you have replaced the brief server address with the true server address,the Router should have no problem accessing the Internet through that Internetapplication.C:\>ping -a 24.53.32.4Pinging mail.msnv3.occa.home.com [24.53.32.4] with32 bytes of data:Reply from 24.53.32.4: bytes=32 time<10ms TTL=127Reply from 24.53.32.4: bytes=32 time<10ms TTL=127Reply from 24.53.32.4: bytes=32 time<10ms TTL=127Reply from 24.53.32.4: bytes=32 time<10ms TTL=127Ping statistics for 24.53.32.4:Packets: Sent = 4, Received = 4, Lost = 0 (0%loss),Approximate round trip times in milli-seconds:Minimum = 0ms, Maximum =  0ms, Average =  0ms75Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 74
Appendix C: Configuring WirelessSecurityAn acronym for Wired Equivalent Privacy, WEP is an encryption method usedto protect your wireless data communications.  WEP uses a combination of 64-bit or 128-bit keys to provide access control to your network and encryptionsecurity for every data transmission.  To decode a data transmission, each pointin a network must use an identical 64-bit or 128-bit key.  Higher encryption lev-els mean higher levels of security, but due to the complexity of the encryption,they may mean decreased network performance.You may also have heard the term “40-bit” used in conjunction with WEPencryption.  This is simply another term for 64-bit WEP encryption.  This levelof WEP encryption has been called 40-bit because it uses a 40-bit secret keyalong with a 24-bit Initialization Vector (40 + 24 = 64).  Wireless vendors mayuse either name.  Linksys uses the term “64-bit” when referring to this level ofencryption.Make sure your wireless network is functioning before attempting to configureWEP encryption.A 128-bit WEP encrypted wireless network will NOT communicate with a 64-bit WEP encrypted wireless network.  Therefore, make sure that all of yourwireless devices are using the same encryption level.  All wireless devices com-plying with the 802.11b standard will support 64-bit WEP.In addition to enabling WEP, Linksys also recommends the following securityimplementations:•Changing the SSID from the default “linksys”•Changing the WEP key regularlyNote: WEP encryption is an additional data securi-ty measure and not essential for router operation.  Note: In order for WEP Encryption to be enabled, wireless functions mustfirst be enabled.  Select Enable under the Wireless section before proceeding.Wireless Access Point Router with 4-Port Switch76BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 75
The following steps will show you how to utilize WEP encryption1. From the Web-based Utility’s Setup tab, select Mandatory under the WEPsection.2. Press the WEP Key Setting button to set the WEP Encryption type andlevel.3. The screen dis-played in FigureC-1 may appear,verifying that youare enabling WEPEncryption.  Pressthe  OK button tocontinue.4. This will display the screen shown in Figure C-2. From this screen, you willchoose your WEP Encryption settings.Figure C-2Figure C-1Instant WirelessTM Series77BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 76
• WEP (64Bit or 128B) Select the level of encryption from the drop-downbox.  128-bit WEP encryption is unique to Linksys and may conflict withother vendors’ WEP encryption.The WEP Encryption key is generated in one of two ways:1. You may create an encryption key by using a Passphrase.a. Enter a Passphrase, a user-defined password, into the Passphrase field.The Passphrase can be a maximum of 31 letters, symbols, and numbers.No spaces can be used.b. Click the Generate button to create a key. The key will be 10 digits ifyou chose 64-bit encryption, or 26 digits if you chose 128-bit encryption.This key will be used to encrypt and decrypt the data being sent betweenthe Router and your network’s wireless PCs.The Key field may not display all digits.  Using the mouse, click any-where within the Key field.  Move the cursor to the right to view the restof the Key.  Make sure your write down the entire Key EXACTLY theway it is displayed. 2. You may enter the encryption key manually.Make a note of the Passphrase or Manual Key.  You will need it for the otherwireless devices on the network, as the same WEP encryption key must beentered in all wireless devices on the network.Once you have chosen your key encryption method and entered either thePassphrase or manual key, click the Apply button, and the encryption portionof the setup is complete.Note: In order to utilize WEP encryption, all points in your wirelessnetwork must have WEP enabled and be set to the same Key Setting.Note: In Windows XP, a 128-bit Key generated by the Routerwill be called a "104 bits (26 digits)" key, and a 64-bit Key gen-erated by the Router will be called a “40 bits (10 digits)” key.Wireless Access Point Router with 4-Port Switch78BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 77
As Windows XP does not allow for the use of the Linksys Passphrase featurewith the wireless PC adapters, you will need to manually enter the key gener-ated in the previous section.  The following steps will help you enable WEP and enter the encryption keymanually for your wireless PC cards, in order to enable your Windows XP sys-tem to communicate with the Router wirelessly.These steps assume that your CD-ROM drive is letter D and that you are run-ning Windows XP in the default mode.Be sure you have the WEP Key generated by the Router.1.  As shown in Figure C-3, click the Start button and go to the Control Panel.Figure C-3Configuring Wireless Security in Windows XPInstant WirelessTM Series79BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 78
2. In the “Control Panel” window, click the Network and InternetConnections icon, shown in Figure C-4.3. Click the Network Connections icon, shown in Figure C-5.4. The “Network Connections” window will appear, as shown in Figure C-6.Under LAN or High-Speed Internet you will see all Network cards that areinstalled and operating in your computer. Double-click the WirelessNetwork Connection icon associated with your wireless adapter.If the “Wireless Network Connection Status” window appears, continue tothe next stepFigure C-4Figure C-5Wireless Access Point Router with 4-Port Switch80BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 79
If a “Connect to Wireless Network” window appears, in the AvailableNetworks section, click the desired wireless network, specified by theRouter’s SSID. Then, double-click the Wireless Network Connection icon.5. When the “Wireless Network Connection Status” window appears, as inFigure C-7, click the Properties button.Figure C-6Figure C-7Instant WirelessTM Series81BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 80
6. When the “WirelessNetwork ConnectionProperties” windowappears, as in Figure C-8, click the WirelessNetworks Tab.7. If the appropriate wire-less network, specifiedby the Router’s SSID, isdisplayed in the“Preferred networks”section, as shown inFigure C-9, double-click it and continue tothe next step.Otherwise, click on theappropriate wirelessnetwork, specified bythe Router’s SSID, inthe “Available net-works” section. Then,click the ConfigurebuttonFigure C-8Figure C-9Wireless Access Point Router with 4-Port Switch82BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 81
8. The “Wireless Network Properties” window (shown in Figure C-10) willappear.Click the check box for the Data encryption (WEP enabled) option.Remove the check from the Network Authentication (Shared mode) andThe key is provided for me automatically fields. In the "Network key" field, enter the exact Key (all 10 or 26 digits, depend-ing on the level of encryption) generated by the Router.Verify that the “Key format” field displays “Hexadecimal digits” and thatthe “Key length” field displays either “40 bits (10 digits)” or “104 bits (26digits)”. If this is not displayed, you have entered the key incorrectly.Click the OK button to save the settings.  Click on OK buttons until youget back to the “Wireless Network Connection Status” window.  Close anyopen windows to get back to the Windows XP desktop.Close any applications and reboot your PC.  After reboot, WEP configurationis complete and you should be able to connect wirelessly to the Router.Figure C-10Instant WirelessTM Series83BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 82
Appendix D: Finding the MACAddress and IP Address for YourEthernet AdapterThis section describes how to find the MAC address for your Ethernet adapterto do either MAC Filtering or MAC Address Cloning for the Router and ISP.You can also find the IP address of your computer’s Ethernet adapter.  The IPaddress is used for filtering, forwarding, and DMZ.  Follow these steps to findthe MAC address or IP address for your adapter in Windows 95, 98, ME, NT,2000, and XP. For Windows 95, 98, and ME:1. Click on Start and  Run. In the Open field, enter winipcfg, as shown inFigure D-1. Then press the Enter key or the OK button.2.  When the IP Configuration window appears, as shown in Figure D-2, selectthe Ethernet adapter you are using to connect to the Router via a CAT 5Ethernet cable.Figure D-1Figure D-2Wireless Access Point Router with 4-Port Switch84BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:36 AM  Page 83
3.  Write down the Adapter Address as shown on your computer screen (seeFigure D-3).  This is the MAC address for your Ethernet adapter and willbe shown as a series of numbers and letters.  The MAC address/Adapter Address is what you will use for MAC AddressCloning or MAC Filtering. The example in Figure F-3 shows the IP address of your Ethernet adapteras 192.168.1.100. Your computer may show something different.  For Windows NT, 2000, and XP:The following steps show an alternative way of obtaining the MAC address andIP address for your Ethernet adapter.1. Click on Start and Run. In the Open field, enter cmd, as shown in FigureD-4. Press the Enter key or click the OK button.Figure D-3Figure D-4Note: The MAC address is also called the AdapterAddress.Instant WirelessTM Series85BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:37 AM  Page 84
2.  In the command prompt, enter ipconfig /all. Then press the Enter key.3.  Write down the Physical Address as shown on your computer screen; it isthe MAC address for your Ethernet adapter.  This will appear as a series ofletters and numbers. The MAC address/Physical Address is what you will use for MAC AddressCloning or MAC Filtering. The example in Figure D-5 shows the IP address of your Ethernet adapteras 192.168.1.100. Your computer may show something different.  Figure D-5Note: The MAC address is also called the PhysicalAddress.Wireless Access Point Router with 4-Port Switch86BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:37 AM  Page 85
When entering the information using the Router’s web-based utility, you willtype the 12-digit MAC address in this format, XXXXXXXXXXXX withoutthe hyphens for MAC Filtering. See Figure D-6.When entering information for MAC Address Cloning, type the 12-digit MACaddress (see Figure D-7). Figure D-6Figure D-7Instant WirelessTM Series87BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:37 AM  Page 86
Appendix E: Setting Up AOL®Broadband Cable & DSLThis document provides instructions for setting up the Router using firmwareversion 1.43 or above to work with AOL Broadband via a Cable or DSL con-nection.   This Router's AOL Parental Controls feature is available for AOL cus-tomers in the US only.  Please follow the instructions in the appropriate sectionbelow to configure for AOL Broadband for the type of broadband connectionyou have.1. Open your web browser. Enterhttp://192.168.1.1 in the webbrowser’s Address field, as shown inFigure E-1, and press the Enter key.2. A password request page, shown in Figure E-2 will appear. (Windows XPusers will see a Connect to 192.168.1.1 window slightly different from thatshown). Leave the User Name field blank, and enter admin in the Passwordfield.  Then click the OK button. RoAOL Broadband via CableFigure E-1Figure E-2Note: Some of the screens in this section may lookslightly different than what appears on your screen.Note: You must install AOL 7.0 or above to all computersusing AOL Services.  Those with earlier versions of AOLcan find details at AOL Keyword: Linksys Setup.88Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:37 AM  Page 87
3. From the Setupscreen that appears,shown in Figure E-3,select  Obtain an IPautomatically fromthe WAN ConnectionType drop-downmenu. Then, click theSecurity tab.4. Select  Enable forAOL ParentalControls from theSecurity tab, shownin Figure E-4, andclick the OK buttonon the screen thatappears. Enablingthis will disable alloptions under theAdvanced tabexcept MACAddress cloning.Then, click the OKbutton to save thesesettings. Click the Xbutton on the topright side of the win-dow to close it.Figure E-3Figure E-4Note: AOL Parental Controls are availableto AOL customers in the Unites States Only.89Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 88
1. Open your web browser. Enterhttp://192.168.1.1 in the webbrowser’s Address field, as shown inFigure E-5, and press the Enter key.2. A password request page, shown inFigure E-6 will appear. (Windows XPusers will see a Connect to192.168.1.1 window slightly differentfrom that shown). Leave the UserName field blank, and enter admin inthe Password field.  Then click theOK button.3. From the Setup screen that appears, shown in Figure E-7, select PPPoEfrom the WAN Connection Type drop-down menu. Enter america onlinefor the User Name. In the password field, multiple asterisks will appear.Keep these settings and click the Apply button to save them. Click the Xbutton on the top right side of the window to close it.AOL Broadband via DSLFigure E-5Figure E-6Figure E-790Wireless Access Point Router with 4-Port SwitchBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 89
91Appendix F: Glossary10BaseT - An Ethernet standard that uses twisted wire pairs.100BaseTX - IEEE physical layer specification for 100 Mbps over two pairs ofCategory 5 wire.Adapter - Printed circuit board that plugs into a PC to add to capabilities orconnectivity to a PC. In a networked environment, a network interface card isthe typical adapter that allows the PC or server to connect to the intranet and/orInternet.Ad-hoc Network - An ad-hoc network is a group of computers, each with awireless adapter, connected as an independent 802.11 wireless LAN.  Ad-hocwireless computers operate on a peer-to-peer basis, communicating directlywith each other without the use of an access point.  Ad-hoc mode is alsoreferred to as an Independent Basic Service Set (IBSS) or as peer-to-peermode.AppleTalk - An Apple Computer networking system that support Apple's pro-prietary local talk.Auto-negotiate - To automatically determine the correct settings. The term isoften used with communications and networking. For example, Ethernet10/100 cards, hubs and switches can determine the highest speed of the nodethey are connected to and adjust their transmission rate accordingly.Backbone - The part of a network that connects most of the systems and net-works together and handles the most data.Bandwidth - The transmission capacity of a given facility, in terms of howmuch data the facility can transmit in a fixed amount of time; expressed in bitsper second (bps).Beacon Interval -  A beacon is a packet broadcast by the Access Point to keepthe network synchronized. A beacon includes the wireless LAN service area,the AP address, the Broadcast destination addresses, a time stamp, DeliveryTraffic Indicator Maps, and the Traffic Indicator Message (TIM).Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 90
Bit - A binary digit. The value - 0 or 1-used in the binary numbering system.Also, the smallest form of data.Boot - To cause the computer to start executing instructions. Personal comput-ers contain built-in instructions in a ROM chip that are automatically executedon startup. These instructions search for the operating system, load it and passcontrol to it. Broadband - A data-transmission scheme in which multiple signals share thebandwidth of a medium. This allows the transmission of voice, data and videosignals over a single medium. Cable television uses broadband techniques todeliver dozens of channels over one cable.Browser - A browser is an application program that provides a way to look atand interact with all the information on the World Wide Web or PC. The word"browser" seems to have originated prior to the Web as a generic term for userinterfaces that let you browse text files online. BSS (Basic  Service  Set) - An infrastructure network connecting wirelessdevices to a wired network using a single access point.Buffer - A buffer is a shared or assigned memory area used by hardwaredevices or program processes that operate at different speeds or with differentsets of priorities. The buffer allows each device or process to operate withoutbeing held up by the other. In order for a buffer to be effective, the size of thebuffer and the algorithms for moving data into and out of the buffer need to beconsidered by the buffer designer. Like a cache, a buffer is a "midpoint holdingplace" but exists not so much to accelerate the speed of an activity as to sup-port the coordination of separate activities. Cable Modem - A device that connects a computer to the cable television net-work, which in turn connects to the Internet. Once connected, cable modemusers have a continuous connection to the Internet. Cable modems featureasymmetric transfer rates: around 36 Mbps downstream (from the Internet tothe computer), and from 200 Kbps to 2 Mbps upstream (from the computer tothe Internet).CAT 5 - ANSI/EIA (American National Standards Institute/ElectronicIndustries Association) Standard 568 is one of several standards that specify"categories" (the singular is commonly referred to as "CAT") of twisted pairWireless Access Point Router with 4-Port Switch92BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 91
93cabling systems (wires, junctions, and connectors) in terms of the data ratesthat they can sustain. CAT 5 cable has a maximum throughput of 100 Mbps andis usually utilized for 100BaseTX networks.CAT 5e - The additional cabling performance parameters of return loss and far-end crosstalk (FEXT) specified for 1000BASE-T and not specified for10BASE-T and 100BASE-TX are related to differences in the signaling imple-mentation. 10BASE-T and 100BASE-TX signaling is unidirectional-signalsare transmitted in one direction on a single wire pair. In contrast, GigabitEthernet is bi-directional-signals are transmitted simultaneously in both direc-tions on the same wire pair; that is, both the transmit and receive pair occupythe same wire pair.CSMA/CA (Carrier  Sense  Multiple  Access/Collision  Avoidance) - In localarea networking, this is the CSMA technique that combines slotted time-divi-sion multiplexing with carrier sense multiple access/collision detection(CSMA/CD) to avoid having collisions occur a second time. This works best ifthe time allocated is short compared to packet length and if the number of sit-uations is small.Data Packet - One frame in a packet-switched message. Most data communi-cations is based on dividing the transmitted message into packets. For example,an Ethernet packet can be from 64 to 1518 bytes in length.Default Gateway - The routing device used to forward all traffic that is notaddressed to a station within the local subnet.DHCP (Dynamic Host Configuration Protocol) - A protocol that lets networkadministrators manage centrally and automate the assignment of InternetProtocol (IP) addresses in an organization's network. Using the Internet's set ofprotocol (TCP/IP), each machine that can connect to the Internet needs aunique IP address. When an organization sets up its computer users with a con-nection to the Internet, an IP address must be assigned to each machine.Without DHCP, the IP address must be entered manually at each computer and,if computers move to another location in another part of the network, a new IPaddress must be entered. DHCP lets a network administrator supervise and dis-tribute IP addresses from a central point and automatically sends a new IPaddress when a computer is plugged into a different place in the network. DHCP uses the concept of a "lease" or amount of time that a given IP addresswill be valid for a computer. The lease time can vary depending on how long auser is likely to require the Internet connection at a particular location. It's espe-Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 92
cially useful in education and other environments where users change fre-quently. Using very short leases, DHCP can dynamically reconfigure networksin which there are more computers than there are available IP addresses. DHCP supports static addresses for computers containing Web servers thatneed a permanent IP address. DMZ (Demilitarized  Zone) - Allows one IP address (or computer) to beexposed to the Internet.  Some applications require multiple TCP/IP ports to beopen.  It is recommended that you set your computer with a static IP address ifyou want to use DMZ Hosting.DNS - The domain name system (DNS) is the way that Internet domain nameare located and translated into Internet Protocol (IP) addresses. A domain nameis a meaningful and easy-to-remember "handle" for an Internet address. Domain - A subnetwork comprised of a group of clients and servers under thecontrol of one security database. Dividing LANs into domains improves per-formance and security.Download - To receive a file transmitted over a network. In a communicationssession, download means receive, upload means transmit. DSL (Digital Subscriber Line) - A technology that dramatically increases thedigital capacity of ordinary telephone lines into the home or office and, byemploying unused bandwidth, still allows for normal phone usage. DSL pro-vides "always-on" operation, eliminating the need to dial in to the service.DSSS (Direct-Sequence Spread Spectrum) - DSSS generates a redundant bitpattern for all data transmitted. This bit pattern is called a chip (or chippingcode).  Even if one or more bits in the chip are damaged during transmission,statistical techniques embedded in the receiver can recover the original datawithout the need for retransmission. To an unintended receiver, DSSS appearsas low power wideband noise and is rejected (ignored) by most narrowbandreceivers.  However, to an intended receiver (i.e. another wireless LAN end-point), the DSSS signal is recognized as the only valid signal, and interferenceis inherently rejected (ignored).DTIM (Delivery Traffic Indication Message) - A DTIM field is a countdownfield informing clients of the next window for listening to broadcast and mul-ticast messages. When the AP has buffered broadcast or multicast messages forWireless Access Point Router with 4-Port Switch94BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 93
95associated clients, it sends the next DTIM with a DTIM Interval value.  APClients hear the beacons and awaken to receive the broadcast and multicastmessages.Dynamic IP Address - An IP address that is automatically assigned to a clientstation in a TCP/IP network, typically by a DHCP server. Network devices thatserve multiple users, such as servers and printers, are usually assigned static IPaddresses. Dynamic Routing - The ability for a router to forward data via a different routebased on the current conditions of the communications circuits. For example,it can adjust for overloaded traffic or failing lines and is much more flexiblethan static routing, which uses a fixed forwarding path.Encryption - A security method that applies a specific algorithm to data inorder to alter the data's appearance and prevent other devices from reading theinformation. ESS (Extended Service Set) - A set of more than two or more BSSs (multipleaccess points) forming a single network.Ethernet - IEEE standard network protocol that specifies how data is placedon and retrieved from a common transmission medium. Has a transfer rate of10 Mbps. Forms the underlying transport vehicle used by several upper-levelprotocols, including TCP/IP and XNS.Fast Ethernet - A 100 Mbps technology based on the 10Base-T EthernetCSMA/CD network access method.FHSS (Frequency Hopping  Spread  Spectrum) - FHSS continuously changes(hops) the carrier frequency of a conventional carrier several times per secondaccording to a pseudo-random set of channels. Because a fixed frequency is notused, and only the transmitter and receiver know the hop patterns, interceptionof FHSS is extremely difficult.Finger - A UNIX command widely used on the Internet to find out informa-tion about a particular user, such as telephone number, whether currentlylogged on or the last time logged on. The person being "fingered" must haveplaced his or her profile on the system. Fingering requires entering the fulluser@domain address.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 94
Firewall - A firewall is a set of related programs, located at a network gatewayserver, that protects the resources of a network from users from other networks.(The term also implies the security policy that is used with the programs.) Anenterprise with an intranet that allows its workers access to the wider Internetinstalls a firewall to prevent outsiders from accessing its own private dataresources and for controlling what outside resources to which its own usershave access. Basically, a firewall, working closely with a router, examines each networkpacket to determine whether to forward it toward its destination.Firmware - Code that is written onto read-only memory (ROM) or program-mable read-only memory (PROM).  Once firmware has been written onto theROM or PROM, it is retained even when the device is turned off.Fragmentation - Breaking a packet into smaller units when transmitting overa network medium that cannot support the original size of the packet. FTP (File Transfer Protocol) - A protocol used to transfer files over a TCP/IPnetwork (Internet, UNIX, etc.). For example, after developing the HTML pagesfor a Web site on a local machine, they are typically uploaded to the Web serv-er using FTP.FTP includes functions to log onto the network, list directories and copy files.It can also convert between the ASCII and EBCDIC character codes. FTP oper-ations can be performed by typing commands at a command prompt or via anFTP utility running under a graphical interface such as Windows. FTP transferscan also be initiated from within a Web browser by entering the URL precededwith ftp://.Unlike e-mail programs in which graphics and program files have to be"attached," FTP is designed to handle binary files directly and does not add theoverhead of encoding and decoding the data.Full Duplex - The ability of a device or line to transmit data simultaneously inboth directions.Gateway - A device that interconnects networks with different, incompatiblecommunications protocols. Half Duplex - Data transmission that can occur in two directions over a singleline, but only one direction at a time.Wireless Access Point Router with 4-Port Switch96BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 95
97Hardware - Hardware is the physical aspect of computers, telecommunica-tions, and other information technology devices. The term arose as a way to dis-tinguish the "box" and the electronic circuitry and components of a computerfrom the program you put in it to make it do things. The program came to beknown as the software.Hop - The link between two network nodes.HTTP (HyperText Transport Protocol) - The communications protocol usedto connect to servers on the World Wide Web. Its primary function is to estab-lish a connection with a Web server and transmit HTML pages to the clientbrowser.Hub - The device that serves as the central location for attaching wires fromworkstations. Can be passive, where there is no amplification of the signals; oractive, where the hubs are used like repeaters to provide an extension of thecable that connects to a workstation.ICQ - A conferencing program for the Internet that provides interactive chat,e-mail and file transfer and can alert you when someone on your predefined listhas also come online. IEEE (The  Institute of Electrical and Electronics  Engineers) - The IEEEdescribes itself as "the world's largest technical professional society, promotingthe development and application of electrotechnology and allied sciences forthe benefit of humanity, the advancement of the profession, and the well-beingof our members." The IEEE fosters the development of standards that often become national andinternational standards. The organization publishes a number of journals, hasmany local chapters, and several large societies in special areas, such as theIEEE Computer Society.Infrastructure Network - An infrastructure network is a group of computersor other devices, each with a wireless adapter, connected as an 802.11 wirelessLAN.  In infrastructure mode, the wireless devices communicate with eachother and to a wired network by first going through an access point.  An infra-structure wireless network connected to a wired network is referred to as aBasic Service Set (BSS).  A set of two or more BSS in a single network isreferred to as an Extended Service Set (ESS).  Infrastructure mode is useful ata corporation scale, or when it is necessary to connect the wired and wirelessnetworks.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 96
IP Address - In the most widely installed level of the Internet Protocol(Internet Protocol) today, an IP address is a 32-binary digit number that identi-fies each sender or receiver of information that is sent in packet across theInternet. When you request an HTML page or send e-mail, the InternetProtocol part of TCP/IP includes your IP address in the message (actually, ineach of the packets if more than one is required) and sends it to the IP addressthat is obtained by looking up the domain name in the Uniform ResourceLocator you requested or in the e-mail address you're sending a note to. At theother end, the recipient can see the IP address of the Web page requestor or thee-mail sender and can respond by sending another message using the IP addressit received. IPCONFIG - A Windows NT or 2000 utility that provides for querying, defin-ing and managing IP addresses within a network.  A commonly used utility forconfiguring networks with static IP addresses.IPSec (Internet  Protocol  Security) - A suite of protocols used to implementsecure exchange of packets at the IP layer. IPSec supports two basic modes:Transport and Tunnel.  Transport encrypts the payload of each packet, leavingthe header untouched, while Tunnel mode encrypts both the header and the pay-load and is therefore more secure.  IPSec must be supported on both transmit-ter and receiver and must share a public key.  Tunnel mode is widely deployedin VPNs (Virtual Private Networks).IPX (Internetwork Packet EXchange) - A NetWare communications protocolused to route messages from one node to another. IPX packets include networkaddresses and can be routed from one network to another.ISM band - The FCC and their counterparts outside of the U.S. have set asidebandwidth for unlicensed use in the ISM (Industrial, Scientific and Medical)band. Spectrum in the vicinity of 2.4 GHz, in particular, is being made avail-able worldwide. This presents a truly revolutionary opportunity to place con-venient high-speed wireless capabilities in the hands of users around the globe.ISP - An ISP (Internet service provider) is a company that provides individualsand companies access to the Internet and other related services such as Web sitebuilding and virtual hosting. LAN - A local area network (LAN) is a group of computers and associateddevices that share a common communications line and typically share theresources of a single processor or server within a small geographic area (forexample, within an office building). Wireless Access Point Router with 4-Port Switch98BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 97
99MAC (Media  Access Control)  Address - A unique number assigned by themanufacturer to any Ethernet networking device, such as a network adapter,that allows the network to identify it at the hardware level.Mbps (MegaBits Per Second) - One million bits per second; unit of measure-ment for data transmission.MIB (Management Information Base) - A set of database objects. This set con-tains information about a specific device for utilizing SNMP.mIRC - mIRC runs under Windows and provides a graphical interface for log-ging onto IRC servers and listing, joining and leaving channels.Multicasting - Sending data to a group of nodes instead of a single destination.NAT (Network Address Translation) - The translation of an Internet Protocoladdress (IP address) used within one network to a different IP address knownwithin another network. One network is designated the inside network and theother is the outside. Network - A system that transmits any combination of voice, video and/or databetween users. NNTP (Network News Transfer Protocol)  - The protocol used to connect toUsenet groups on the Internet. Usenet newsreaders support the NNTP protocol.Node - A network junction or connection point, typically a computer or workstation.Packet - A unit of data routed between an origin and a destination in a network.Passphrase - Used much like a password, a passphrase simplifies the WEPencryption process by automatically generating the WEP encryption keys forLinksys products.PC Card - A credit-card sized removable module that contains memory, I/O,or a hard disk. Ping (Packet INternet Groper) - An Internet utility used to determine whethera particular IP address is online. It is used to test and debug a network by send-ing out a packet and waiting for a response.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 98
Plug-and-Play - The ability of a computer system to configure expansionboards and other devices automatically without requiring the user to turn offthe system during installation.Port - A pathway into and out of the computer or a network device such as aswitch or router. For example, the serial and parallel ports on a personal com-puter are external sockets for plugging in communications lines, modems andprinters. PPPoE (Point to Point Protocol over Ethernet) - PPPoE is a method for theencapsulation of PPP packets over Ethernet frames from the user to the ISPover the Internet.  One reason PPPoE is preferred by ISPs is because it providesauthentication (username and password) in addition to data transport.  A PPPoEsession can be initiated by either a client application residing on a PC, or byclient firmware residing on a modem or router.PPTP (Point-to-Point Tunneling Protocol) - A protocol (set of communicationrules) that allows corporations to extend their own corporate network throughprivate "tunnels" over the public Internet. Effectively, a corporation uses awide-area network as a single large local area network. A company no longerneeds to lease its own lines for wide-area communication but can securely usethe public networks. This kind of interconnection is known as a virtual privatenetwork.RIP (Routing Information Protocol) - A simple routing protocol that is part ofthe TCP/IP protocol suite. It determines a route based on the smallest hop countbetween source and destination. RIP is a distance vector protocol that routine-ly broadcasts routing information to its neighboring routers.RJ-45 (Registered Jack-45) - A connector similar to a telephone connector thatholds up to eight wires, used for connecting Ethernet devices.Roaming - In an infrastructure mode wireless network, this refers to the abili-ty to move out of one access point's range and into another and transparentlyreassociate and reauthenticate to the new access point.  This reassociation andreauthentication should occur without user intervention and ideally withoutinterruption to network connectivity.  A typical scenario would be a locationwith multiple access points, where users can physically relocate from one areato another and easily maintain connectivity.Wireless Access Point Router with 4-Port Switch100BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 99
101Router - Protocol-dependent device that connects subnetworks together.Routers are useful in breaking down a very large network into smaller subnet-works; they introduce longer delays and typically have much lower throughputrates than bridges. RTS (Request To Send) - An RS-232 signal sent from the transmitting stationto the receiving station requesting permission to transmit. Server - Any computer whose function in a network is to provide user accessto files, printing, communications, and other services. SMTP (Simple Mail Transfer Protocol)  - The standard e-mail protocol on theInternet. It is a TCP/IP protocol that defines the message format and the mes-sage transfer agent (MTA), which stores and forwards the mail.SNMP (Simple  Network  Management  Protocol)  - A widely used networkmonitoring and control protocol. Data is passed from SNMP agents, which arehardware and/or software processes reporting activity in each network device(hub, router, bridge, etc.) to the workstation console used to oversee the net-work. The agents return information contained in a MIB (ManagementInformation Base), which is a data structure that defines what is obtainablefrom the device and what can be controlled (turned off, on, etc.).Software - Instructions for the computer. A series of instructions that performsa particular task is called a "program." The two major categories of software are"system software" and "application software." System software is made up ofcontrol programs such as the operating system and database management sys-tem (DBMS). Application software is any program that processes data for theuser.A common misconception is that software is data. It is not. Software tells thehardware how to process the data.Spread Spectrum - Spread Spectrum technology is a wideband radio frequen-cy technique developed by the military for use in reliable, secure, mission-crit-ical communications systems. It is designed to trade off bandwidth efficiencyfor reliability, integrity, and security. In other words, more bandwidth is con-sumed than in the case of narrowband transmission, but the trade off producesa signal that is, in effect, louder and thus easier to detect, provided that thereceiver knows the parameters of the spread-spectrum signal being broadcast.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 100
If a receiver is not tuned to the right frequency, a spread-spectrum signal lookslike background noise. There are two main alternatives, Direct SequenceSpread Spectrum (DSSS) and Frequency Hopping Spread Spectrum (FHSS).SPI (Stateful Packet Inspection) - A firewall technology that monitors the stateof the transaction so that it can verify that the destination of an inbound pack-et matches the source of a previous outbound request. It examines not just theheaders of the packet, but also the contents, to determine more about the pack-et than just its source and destination information. It is called "stateful" becauseverifies that the stated destination computer has previously requested the cur-rent communication. In this way, it verifies that all communications are initiat-ed by the recipient computer and are taking place only with sources that areknown and trusted from previous interactions. In addition to being a more rig-orous inspection, stateful packet inspection closes off ports until connection tothe specific port is requested. This allows an added layer of protection from thethreat of port scanning.SSID (Service Set IDentifier) - A unique name shared among all points in awireless network. The SSID must be identical for each point in the wireless net-work and is case-sensitive.Static IP Address - A permanent IP address that is assigned to a node in an IPor a TCP/IP network. Static Routing - Forwarding data in a network via a fixed path. Static routingcannot adjust to changing line conditions as can dynamic routing. Subnet Mask - The method used for splitting IP networks into a series of sub-groups, or subnets. The mask is a binary pattern that is matched up with the IPaddress to turn part of the host ID address field into a field for subnets. Switch - 1. A data switch connects computing devices to host computers,allowing a large number of devices to share a limited number of ports. 2. Adevice for making, breaking, or changing the connections in an electrical cir-cuit.TCP (Transmission Control Protocol) - A method (protocol) used along withthe IP (Internet Protocol) to send data in the form of message units (datagram)between network devices over a LAN or WAN. While IP takes care of handlingthe actual delivery of the data (routing), TCP takes care of keeping track of theindividual units of data (called packets) that a message is divided into for effi-Wireless Access Point Router with 4-Port Switch102BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 101
103cient delivery over the network. TCP is known as a "connection oriented" pro-tocol due to requiring the receiver of a packet to return an acknowledgment ofreceipt to the sender of the packet resulting in transmission control.TCP/IP (Transmission Control Protocol/Internet Protocol) - The basic com-munication language or set of protocols for communications over a network(developed specifically for the Internet).  TCP/IP defines a suite or group ofprotocols and not only TCP and IP.Telnet - A terminal emulation protocol commonly used on the Internet andTCP/IP-based networks. It allows a user at a terminal or computer to log ontoa remote device and run a program.TFTP (Trivial File Transfer Protocol) - A version of the TCP/IP FTP protocolthat has no directory or password capability.Throughput - The amount of data moved successfully from one place toanother in a given time period.TX Rate - Transmission Rate.UDP (User Datagram Protocol) - A method (protocol) used along with the IP(Internet Protocol) to send data in the form of message units (datagram)between network devices over a LAN or WAN. While IP takes care of handlingthe actual delivery of the data (routing), UDP takes care of keeping track of theindividual units of data (called packets) that a message is divided into for effi-cient delivery over the network. UDP is known as a "connection-less" protocoldue to NOT requiring the receiver of a packet to return an acknowledgment ofreceipt to the sender of the packet (as opposed to TCP).Upgrade - To replace existing software or firmware with a newer version. Upload - To transmit a file over a network. In a communications session,upload means transmit, download means receive. URL (Uniform Resource Locator) - The address that defines the route to a fileon the Web or any other Internet facility. URLs are typed into the browser toaccess Web pages, and URLs are embedded within the pages themselves to pro-vide the hypertext links to other pages.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 102
UTP - Unshielded twisted pair is the most common kind of copper telephonewiring. Twisted pair is the ordinary copper wire that connects home and manybusiness computers to the telephone company. To reduce crosstalk or electro-magnetic induction between pairs of wires, two insulated copper wires aretwisted around each other. Each signal on twisted pair requires both wires.Since some telephone sets or desktop locations require multiple connections,twisted pair is sometimes installed in two or more pairs, all within a singlecable. VPN (Virtual Private Network) - A technique that allows two or more LANs tobe extended over public communication channels by creating private commu-nication subchannels (tunnels).  Effectively, these LANs can use a WAN as asingle large "virtually private" LAN.  This removes the need to use leased linesfor WAN communications through secure use of a publicly available WAN(such as the Internet).  Examples of VPN technology are: PPTP (Point to PointTunneling Protocol), L2TP (Layer 2 Tunneling Protocol), and IPSec (InternetProtocol Security).WA N (Wide  Area  Network)- A communications network that covers a rela-tively large geographic area, consisting of two or more LANs.  Broadbandcommunication over the WAN is often through public networks such as thetelephone (DSL) or cable systems, or through leased lines or satellites.  In itsmost basic definition, the Internet could be considered a WAN.WEP (Wired Equivalent Privacy) - A data privacy mechanism based on a 64-bit or 128-bit shared key algorithm, as described in the IEEE 802.11 standard. WINIPCFG - Configuration utility based on the Win32 API for querying,defining and managing IP addresses within a network.  A commonly used util-ity for configuring networks with static IP addresses.Wireless Access Point Router with 4-Port Switch104BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 103
105Appendix G: SpecificationsStandards IEEE 802.3 (10BaseT), IEEE 802.3u (100BaseTX), IEEE 802.11b (Wireless)Protocol CSMA/CDPortsWAN:  One 10Base-T RJ-45 Port for cable or DSL Modem LAN:  Four 10/100 RJ-45 Switched Ports, One Shared Uplink Port Speed (Mbps) WAN: 10 (Half Duplex) LAN:  10/100 (Half Duplex) 20/200 (Full Duplex)Cabling Type UTP Category 5 or betterButton ResetTX Power  19 dbm Throughput (average)  4.2 Mbps Receiver Sensitivity (Typical) 1Mbps 0-5 BER @ -89dbm5.5Mbps 10-5 BER @ -83dbm11Mbps  10-5 BER  @ -79dbm Topology Star (Ethernet)LED Indicators Power, WLAN Activity, WLAN LinkWAN Link/Activity, Diag for WANLAN Full Duplex/Collision, Link/Activity 100Connectors 2 Antenna ConnectorsInstant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 104
Dimensions 7.31" x 6.06" x 2.44" (186mm x 154mm x 62mm)Unit Weight 19.2 oz. (0.56 kg.)Power Input External, 5V DC, 2.5ACertifications FCC Class B, CE MarkOperating Temperature 0ºC to 40ºC (32ºF to 104ºF)Storage Temperature -20ºC to 70ºC (-4ºF to 158ºF)Operating Humidity 10% to 85%, Non-CondensingStorage Humidity 5% to 90%, Non-CondensingEnvironmentalWireless Access Point Router with 4-Port Switch106BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 105
107Appendix H: Warranty InformationBE SURE TO HAVE YOUR PROOF OF PURCHASE AND A BARCODEFROM THE PRODUCT’S PACKAGING ON HAND WHEN CALLING.RETURN REQUESTS CANNOT BE PROCESSED WITHOUT PROOF OFPURCHASE. IN NO EVENT SHALL LINKSYS’S LIABILITY EXCEED THE PRICEPAID FOR THE PRODUCT FROM DIRECT, INDIRECT, SPECIAL, INCI-DENTAL, OR CONSEQUENTIAL DAMAGES RESULTING FROM THEUSE OF THE PRODUCT, ITS ACCOMPANYING SOFTWARE, OR ITSDOCUMENTATION. LINKSYS DOES NOT OFFER REFUNDS FOR ANYPRODUCT. LINKSYS OFFERS CROSS SHIPMENTS, A FASTER PROCESS FOR PRO-CESSING AND RECEIVING YOUR REPLACEMENT.  LINKSYS PAYSFOR UPS GROUND ONLY. ALL CUSTOMERS LOCATED OUTSIDE OFTHE UNITED STATES OF AMERICA AND CANADA SHALL BE HELDRESPONSIBLE FOR SHIPPING AND HANDLING CHARGES. PLEASECALL LINKSYS FOR MORE DETAILS.Instant WirelessTM SeriesBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 106
Appendix I: Contact InformationFor help with the installation or operation of this product, contact LinksysTechnical Support at one of the phone numbers or Internet addresses below.Sales Information 800-546-5797 (LINKSYS)Technical Support 800-326-7114RMA Issues 949-271-5461Fax 949-265-6655E-mail support@linksys.comWeb http://www.linksys.comFTP Site ftp.linksys.comWireless Access Point Router with 4-Port Switch108BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 107
BEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 108
© Copyright 2002 Linksys, All Rights Reserved.Printed in the USA.http://www.linksys.comBEFW11S4 VER 3 USER GUIDE_2nd.qxd  10/15/02  10:38 AM  Page 109

Navigation menu