Linksys BEFVP41 EtherFast Cable/DSL VPN Router with 4-Port 10/100 Switch

The router/switch/NAT features of this little box work just like the other Linksys products in this line -- and just as well. What's new is the IPSec VPN support. You can set up secure tunnels over the Internet between two or more LANs using one of these boxes in front of each LAN. Alternatively (or in addition) you can set up a tunnel between a standalone remote PC and a LAN that has one of these routers *IF* the remote PC supports IPSec. Windows 2000 and XP support IPSec but Windows 9x/Me/NT do *NOT*. (If you want a Windows 9x/Me/NT PC to connect into an IPSec VPN, you will need a 3rd party IPSec driver, or just buy another one of these boxes to put in front of the PC.)Configuring IPSec on a Windows 2000 or XP PC is not exactly easy either -- Linksys' how-to document is SIXTEEN PAGES long! But the difficulty is not Linksys' fault -- rather it's due to Microsoft's tortured GUI for the IPSec configuration.But setting up a tunnel between two of these boxes is easy. It's only the standalone PC to LAN tunnel that is daunting.I want to give this product 5 stars. It works very well, and the price is almost too good to be true -- it compares quite favorably with other products costing 5-10 times more. But I have to take a point off because Linksys does not give enough emphasis to the Windows 2000/XP limitation of the standalone PC VPN client in its marketing copy, and there is not one word about how to configure the standalone client in the manual that comes with the router -- you have to hunt for it on Linksys' Web site. From what I see on the discussion boards, there are a lot of people who are lost without better information on these points. So if you plan to use a standalone VPN client, be prepared for a struggle, but hang in there -- it DOES work!

I have been using the first generation BEFVP41 router now since 2002 and it needed to be replaced. Comcast has increased their speed to 18Mbs and the old first generation router limited my speed the 9Mbs it has a 10Base T WAN port BEFVP41 series 2 routers has a 100Base T WAN port. My old router had at least 70 available tunnels and the new router has only 50 available tunnels. Router to router VPN works great but router to VPN client on my Windows 7 basic netbook I cannot get that part to work. I will be upgrading my wireless network from 802.11g 54Mbs to 802.11n 300Mbs soon and my cable modem will go from DOCSIS 2.0 to DOCSIS 3.0 this modem just over 100Mbs speed and already this will make BEFVP41 series 2 router obsolete. What I am looking for from Cisco-Linksys is an updated version of their RV016 router that has Gigabit Ethernet ports both WAN and LAN ports with a VPN bandwidth 500Mbs to 1000Mbs the current version has 100Base T WAN and LAN ports with 97Mbs VPN bandwidth. The RV016 routers I have read about seem to be compatible with VPN clients on Windows 7 and Windows XP sorry I will not touch Windows Vista. Today the RV016 router does not have the speed I am looking for yet when I update to DOCSIS 3.0 Comcast is planning to go far beyond 100Mbs speed.

The BEFVP41 I bought is Hardware version 1.2 and firmware version 1.02.06 - build 003. It installed easily and works fine as a firewall and router between a Comcast cable modem and a Dell 16 port Ethernet switch. This is at one of two remote locations I need access to (Location1). The second location (Location2) uses a Cisco 3005 VPN appliance and I have the Cisco 5.0.01.0600-k9 vpnclient installed on the PC. So I need an IPSec client that will work with the BEFVP41 and coexist with the Cisco client. In all the tests, I installed the test client for the BEFVP41 first, and then installed the Cisco client. In setting up the IPSec client for the BEFVP41, I tried 5 available software clients on a Windows XP SP3 PC. I configured VPN on the BEFVP41 as described in the document "VPN with SSH Sentinel and Linksys BEFVP41" [...] . I did get a warning message from the BEFVP41 if I tried to set up a shared key of less than 24 characters, it would let you do it, but I think it caused problems later, so I put in a 24 character key and everything worked OK. I used the SSL-Sentinel 1.3 client which is free, and it worked fine and does coexist with the Cisco 5.0.01.0600-k9 vpnclient. The SSL-Sentinel 1.4 client worked fine and coexisted with the Cisco client, but this is not a free client. The SSL-Sentinel 1.3.2 did not work; it gave errors on install and disabled the Ethernet connection on the PC. The Netgear VPN01L client, which costs about $40, worked OK, but it does not coexist with the Cisco client. This is probably due to the fact that both clients use the "Deterministic Network Enhancer" device driver. The ShrewSoft 2.1.5 VPN client connected once with the BEFVP41 and I could not get it to connect ever again. So, I am connecting to the BEFVP41 box using the SSLSentinel 1.3 client and connecting to the Cisco 3005 using the Cisco client. I need to turn off each VPN client to use the other, but that is not a big problem.

I bought this Linksys product to connect two homes into a single virtual private network using a cable modem at each home. This setup requires using two of this product.Since installing the product, everything has worked great, and I can access all of my files on any computer at either home from the other seamlessly. My only complaint is that access is a bit slow, but this is probably a function of the internet, rather than this product.That said, I generally have a poor impresion of Linksys products, particularly given the problems that I've had with their WAP 11. Furthermore, Linksys has very poor technical support (they've transferred a lot of their technical support offshore). Thus, if you can find another product that will do what you want, you should consider it.

I purchased a pair of Linksys BEFVP41 units to connect two office networks, and to provide for secure remote network access through VPNs to mobile users. While the units performed the former job adequately, the latter left a lot to be desired.I should have known better when presented with Linksys' confusing marketing information. In one breath (from their web site) they say, "No IPSec VPN Client Software Needed," while in another say, "Mobile workers can also connect to a corporate network using an IPSec based VPN client software solution." As usual, there's a slight gulf between marketing spin and reality.For PC-to-box connections, such as those with mobile users, it's true that no special client software is needed. Windows 2000 and XP users can, in fact, connect to the BEFVP41 without special software, but only if the computer has a static IP address. Whether on local networks or in a coffee shop hotspot, it's unlikely the typical desktop user will have a static IP address, which translated means that, in fact, VPN client software IS needed to make these units useful in that remote network access role.That's because the BEFVP41 supports only IPSec. Commonly used Windows-based VPNs use PPTP or L2TP, both of which are built into Windows. But this unit (and most others) doesn't provide PPTP or L2TP support.Back to the requirement, then, for aftermarket IPSec VPN software. The software is not inexpensive, and it adds considerably to the total cost of this Linksys solution. I tested the IPSec client from French company TheGreenBow, and it does work. The problem is that there is no DHCP or other types of dynamic addressing or DNS support; it's merely a "raw" network pipe. For most mobile users, this isn't going to be particularly functional, and that's especially true for users of networks that use Windows Active Directory. (Perhaps the other recommended option, the SoftRemote VPN client, addresses this, but either way, it's a costly add-on.)All of this left me searching for ways to get PPTP support without buying other hardware. The suggestion widely made was to merely configure a Windows server behind the firewall to offer PPTP, and configure the Linksys BEFVP41 to pass PPTP through. Simply put, this doesn't work.Linksys' web site features a tech note on how to configure this very scenario. However, had anyone at Linksys actually TESTED the tech note, they would have discovered it doesn't work. The tech note suggests port mapping ports 1723 (PPTP) and 47 (supposedly for GRE, a protocol necessary for PPTP to work properly). The problem is that "47" is NOT A PORT NUMBER, it is the PROTOCOL number of GRE. Mapping port 47 in the firewall has absolutely NO IMPACT WHATEVER on the GRE protocol. Whoever wrote the tech note clearly has very little understanding of the subject matter.It is possible that some Linksys firewalls will work with PPTP pass-through, but the BEFVP41 clearly does not. Empirical evidence suggests that the GRE protocol is not properly handled internally to support the pass-through scenario. The connection can be made to port 1723 on a Windows server behind the firewall when passed through the Linksys, but without proper GRE handling, the VPN connection can't actually be established.When you add to all of this a remarkably clunky web management interface, the Linksys BEFVP41 is a non-starter for me. Both units are on their way back to Amazon.com as I write this review. After a previous experience with the company where they took forever to update drivers to fix a compatibility issue; after seeing technically inaccurate tech notes on their support web site; and after adding-in this experience, I'll think twice before bothering with anything Linksys again.My chosen replacement for the BEFVP41 (a pair of CyberGuard/SnapGear SG300 units) have already arrived, and have proven themselves to be far more flexible, more configurable, and more powerful than the BEFVP41. Along with their configurability, the SG300s provide PPTP and L2TP support directly (in addition to IPSec), making a total solution that (unlike the BEFVP41) TRULY doesn't require special software clients to offer a total office-to-office and mobile-to-office network solution.