1. i’m having trouble getting my vpn tunnel to connect. what should i do?

    perform the following steps until the vpn tunnel connects:

    a. double-check all of the settings. make sure the ipsec setup settings of the 10/100 16-port vpn router match the ipsec setup settings of the remote vpn router or client, including the preshared key and phase1 and phase2 sa life time settings, which are used in the ike with preshared key mode.

    b. click the log tab of the router’s web-based utility. click the view system log button. from the dropdown menu, select the vpn log. the error message will indicate which setting is incorrect and needs to be changed on either the 10/100 16-port vpn router or the remote vpn router or client.

    c. make sure the ip address of the remote secure gateway or client is correct. click the system management tab of the router’s web-based utility. select the ping radio button. enter the ip address of the remote secure gateway or client in the ping host or ip address field. then click the go button.

    2. my vpn tunnel connects properly, but it frequently drops the connection. what should i do?

    through the router’s web-based utility, access the settings for your vpn tunnel. in the ipsec setup section with ike with preshared key mode selected, increase the phase2 sa life time setting to 28800 seconds, which is eight hours. then increase the phase2 sa life time setting to 28800 seconds on the remote vpn router or client. if you need to check the status of your vpn tunnel, view the vpn summary screen of the router’s web-based utility.

    3. i’m trying to access the router’s web-based utility, but i do not see the login screen. instead, i see a screen saying, “404 forbidden.”

    if you are using windows explorer, perform the following steps until you see the web-based utility’s login screen (netscape navigator will require similar steps):

    1. click file. make sure work offline is not checked.

    2. press ctrl + f5. this is a hard refresh, which will force windows explorer to load new webpages, not cached ones.

    3. click tools. click internet options. click the security tab. click the default level button. make sure the security level is medium or lower. then click the ok button.

    4. i need to set a static ip address on a pc.

    the router, by default, assigns an ip address range of 192.168.1.100 to 192.168.1.149 using the dhcp server on the router. to set a static ip address, you can only use the ranges 192.168.1.2 to 192.168.1.99 and 192.168.1.150 to 192.168.1.254. each pc or network device that uses tcp/ip must have a unique address to identify itself in a network. if the ip address is not unique to a network, windows will generate an ip conflict error message. you can assign a static ip address to a pc by performing the following steps:

    for windows 98 and millennium:

    a. click start, setting, and control panel. double-click network.

    b. in the following network components are installed box, select the tcp/ip-] associated with your ethernet adapter. if you only have one ethernet adapter installed, you will only see one tcp/ip line with no association to an ethernet adapter. highlight it and click the properties button.

    c. in the tcp/ip properties window, select the ip address tab, and select specify an ip address. enter a unique ip address that is not used by any other computer on the network connected to the router. you can only use an ip address in the ranges 192.168.1.2 to 192.168.1.99 and 192.168.1.151 to 192.168.1.254. make sure that each ip address is unique for each pc or network device.

    d. click the gateway tab, and in the new gateway prompt, enter 192.168.1.1, which is the default ip address of the router. click the add button to accept the entry.

    e. click the dns tab, and make sure the dns enabled option is selected. enter the host and domain names (e.g., john for host and home for domain). enter the dns entry provided by your isp. if your isp has not provided the dns ip address, contact your isp to get that information or go to its website for the information.

    f. click the ok button in the tcp/ip properties window, and click close or the ok button for the network window.

    g. restart the computer when asked.

    for windows 2000:

    a. click start, settings, and control panel. double-click network and dial-up connections.

    b. right-click the local area connection that is associated with the ethernet adapter you are using, and select the properties option.

    c. in the components checked are used by this connection box, highlight internet protocol (tcp/ip), and click the properties button. select use the following ip address option.

    d. enter a unique ip address that is not used by any other computer on the network connected to the router.

    you can only use an ip address in the ranges 192.168.1.2 to 192.168.1.99 and 192.168.1.151 to 192.168.1.254.

    e. enter the subnet mask, 255.255.255.0.

    f. enter the default gateway, 192.168.1.1 (router’s default ip address).

    g. toward the bottom of the window, select use the following dns server addresses, and enter the preferred dns server and alternative dns server (provided by your isp). contact your isp or go on its website to find the information.

    h. click the ok button in the internet protocol (tcp/ip) properties window, and click the ok button in the local area connection properties window.

    i. restart the computer if asked.

    for windows xp:

    the following instructions assume you are running windows xp with the default interface. if you are using the classic interface (where the icons and menus look like previous windows versions), please follow the instructions for windows 2000.

    a. click start and control panel.

    b. click the network and internet connections icon and then the network connections icon.

    c. right-click the local area connection that is associated with the ethernet adapter you are using, and select the properties option.

    d. in the this connection uses the following items box, highlight internet protocol (tcp/ip). click the properties button.

    e. enter a unique ip address that is not used by any other computer on the network connected to the router.

    you can only use an ip address in the ranges 192.168.1.2 to 192.168.1.99 and 192.168.1.151 to 192.168.1.254.

    f. enter the subnet mask, 255.255.255.0.

    g. enter the default gateway, 192.168.1.1 (router’s default ip address).

    h. toward the bottom of the window, select use the following dns server addresses, and enter the preferred dns server and alternative dns server (provided by your isp). contact your isp or go on its website to find the information.

    i. click the ok button in the internet protocol (tcp/ip) properties window. click the ok button in the local area connection properties window.

    5. i want to test my internet connection.

    a. check your tcp/ip settings.

    for windows 98 and millennium:

    refer to windows help and “chapter”5: configuring the pcs” for details. make sure obtain ip address automatically is selected in the settings.

    for windows 2000:

    1. click start, settings, and control panel. double-click network and dial-up connections.

    2. right-click the local area connection that is associated with the ethernet adapter you are using, and select the properties option.

    3. in the components checked are used by this connection box, highlight internet protocol (tcp/ip), and click the properties button. make sure that obtain an ip address automatically and obtain dns server address automatically are selected.

    4. click the ok button in the internet protocol (tcp/ip) properties window, and click the ok button in the local area connection properties window.

    5. restart the computer if asked.

    6. click the ok button in the internet protocol (tcp/ip) properties window, and click the ok button in the local area connection properties window.

    7. restart the computer if asked.