User manual LINKSYS WRTP54G - Install Guide

® A Division of Cisco Systems, Inc. 2.4 GHz Wireless-G 802.11g Voice Broadband Router with 2 Phone Ports Installation and Troubleshooting Guide Model No. WRTP54G Wireless-G Broadband Router with 2 Phone Ports Copyright and Trademarks Specifications are subject to change without notice. Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright © 2005 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered trademarks of their respective holders. WARNING: This product contains chemicals, including lead, known to the State of California to cause cancer, and birth defects or other reproductive harm. Wash hands after handling. How to Use this Guide Your guide to the Wireless-G Broadband Router with 2 Phone Ports has been designed to make understanding networking with the Router easier than ever. Look for the following items when reading this guide: This exclamation point means there is a caution or warning and is something that could damage your property or the Router. This question mark provides you with a reminder about something you might need to do while using the Router. This checkmark means there is a note of interest and is something you should pay special attention to while using the Router. In addition to these symbols, there are definitions for technical terms that are presented like this: word: definition. Also, each figure (diagram, screenshot, or other image) is provided with a figure number and description, like this: Figure 0-1: Sample Figure Description Figure numbers and descriptions can also be found in the "List of Figures" section. WRTP54G-UG-50708A JL Wireless-G Broadband Router with 2 Phone Ports Wireless-G Broadband Router with 2 Phone Ports Table of Contents Chapter 1: Introduction Welcome What's in this Guide? 1 1 2 Chapter 2: Planning Your Wireless Network Network Topology Ad-Hoc versus Infrastructure Mode Network Layout 5 5 5 6 Chapter 3: Getting to Know the Router The Back Panel The Front Panel 7 7 8 Chapter 4: Connecting the Router Overview Connection Instructions Placement Options 9 9 10 11 Chapter 5: Configuring the Router Overview How to Access the Web-based Utility The Setup Tab - Basic Setup The Setup Tab - DDNS The Setup Tab - MAC Address Clone The Setup Tab - Advanced Routing The Wireless Tab - Basic Wireless Settings The Wireless Tab - Wireless Security The Wireless Tab - Wireless MAC Filter 13 13 16 17 21 23 24 26 27 30 The Wireless Tab - Advanced Wireless Settings The Security Tab - Firewall The Access Restrictions Tab - Filter The Access Restrictions Tab - Device Access Control The Applications & Gaming Tab - Port Range Forwarding The Applications & Gaming Tab - Port Triggering The Applications & Gaming Tab - UPnP Forwarding The Applications & Gaming Tab - DMZ The Applications & Gaming Tab - QoS The Administration Tab - Management The Administration Tab - Log The Administration Tab - Factory Defaults The Administration Tab - Diagnostics The Status Tab - Local Network The Status Tab - Router The Status Tab - Wireless The Status Tab - Voice The Voice Tab 31 33 34 36 37 38 39 42 43 45 46 47 48 49 50 52 53 54 Appendix A: Troubleshooting Common Problems and Solutions Frequently Asked Questions 55 55 69 Appendix B: Wireless Security Security Precautions Security Threats Facing Wireless Networks 79 79 80 Wireless-G Broadband Router with 2 Phone Ports Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter Windows 98 or Me Instructions Windows 2000 or XP Instructions For the Router's Web-based Utility 83 83 84 84 Appendix D: Windows Help Appendix E: Glossary Appendix F: Specifications Appendix G: Warranty Information Appendix H: Regulatory Information Appendix I: Contact Information Vonage Linksys 85 87 95 97 99 103 103 103 Wireless-G Broadband Router with 2 Phone Ports List of Figures Figure 3-1: Back Panel Figure 3-2: Front Panel Figure 4-1: Router Connection Diagram Figure 4-1: Connect the Modem Figure 4-2: Connect a PC Figure 4-3: Connect the Power Figure 4-4: Connect a Telephone Figure 4-5: Attach the Stand to the Router Figure 4-6: Measurement between Wall-Mount Slots Figure 5-1: Router's IP Address Figure 5-2: Router Login Figure 5-3: Setup Tab - Basic Setup (Obtain an IP automatically) Figure 5-4: Static IP Figure 5-5: PPPoE Figure 5-6: Setup Tab - DDNS (DynDNS.org) Figure 5-7: Setup Tab - DDNS (TZO.com) Figure 5-8: Setup Tab - MAC Address Clone Figure 5-9: Setup Tab - Advanced Routing Figure 5-10: Routing Table Entry List Figure 5-11: Wireless Tab - Basic Wireless Settings Figure 5-12: Wireless Tab - Wireless Security (WPA-Preshared Key) Figure 5-13: Wireless Tab - Wireless Security (WPA-RADIUS) 7 8 9 10 10 10 10 11 12 16 16 17 18 19 22 22 23 24 25 26 27 28 Figure 5-14: Wireless Tab - Wireless Security (RADIUS) Figure 5-15: Wireless Tab - Wireless Security (WEP) Figure 5-16: Wireless Tab - Wireless MAC Filter Figure 5-17: MAC Address Filter List Figure 5-18: Wireless Client MAC List Figure 5-19: Wireless Tab - Advanced Wireless Settings Figure 5-20: Security Tab - Firewall Figure 5-21: Access Restrictions Tab - Filter Figure 5-22: Filtered MAC Address Figure 5-23: Access Restrictions Tab - Device Access Control Figure 5-24: Applications & Gaming Tab - Port Range Forwarding Figure 5-25: Applications & Gaming Tab - Port Triggering Figure 5-26: Applications & Gaming Tab - UPnP Forwarding Figure 5-27: Applications & Gaming Tab - DMZ Figure 5-28: Applications & Gaming Tab - QoS Figure 5-29: QoS - Create Rule Figure 5-30: Administration Tab - Management Figure 5-31: Administration Tab - Log Figure 5-32: Administration Tab - Factory Defaults Figure 5-33: Administration Tab -Diagnostics Figure 5-34: Ping Test Figure 5-35: Traceroute Test Figure 5-36: Status Tab - Local Network 28 29 30 30 30 31 33 34 34 36 37 38 39 42 43 44 45 46 47 48 48 48 49 Wireless-G Broadband Router with 2 Phone Ports Figure 5-37: DHCP Active IP Table Figure 5-38: Status Tab - Router Figure 5-39: Status Tab - Wireless Figure 5-40: Wireless Client MAC List Figure 5-41: Status Tab - Voice Figure 5-42: Voice Tab Figure C-1: IP Configuration Screen Figure C-2: MAC/Adapter Address Figure C-3: MAC/Physical Address Figure C-4: MAC Address Clone Figure C-5: MAC Address Filter 49 50 52 52 53 54 83 83 84 84 84 Wireless-G Broadband Router with 2 Phone Ports Chapter 1: Introduction Welcome Thank you for choosing the Linksys Wireless-G Broadband Router with 2 Phone Ports. This Router will allow you to network wirelessly better than ever, sharing Internet access, files and fun, easily and securely. Plus, after you have set up your Vonage service, you can make phone or fax calls using your Internet connection. How does the Router do all of this? A router is a device that allows access to an Internet connection over a network. With the Wireless-G Broadband Router with 2 Phone Ports, this access can be shared over the four switched ports or via the wireless broadcast at either up to 11Mbps for Wireless-B or up to 54Mbps for Wireless-G. In addition, the WPA standard provides greater security opportunities while the whole network is protected through NAT technology. All of these security features, as well as full configurability, are accessed through the easy-to-use browser-based utility. But what does all of this mean? Networks are useful tools for sharing Internet access and computer resources. Multiple computers can share Internet access, so you don't need more than one high-speed Internet connection. After you set up your Vonage account, you can also use your Internet access to make Internet phone or fax calls, even while you're surfing the Internet. Plus, you can access one printer from different computers and access data located on another computer's hard drive. Networks are even used for playing multiplayer video games. All the while, the Router protects your networks from unauthorized and unwelcome users. So, networks not only are useful in homes and offices, but also can be fun. PCs on a wired network create a LAN, or Local Area Network. They are connected with Ethernet cables, which is why the network is called "wired". Chapter 1: Introduction Welcome wpa (wi-fi protected access): a wireless security protocol using TKIP (Temporal Key Integrity Protocol) encryption, which can be used in conjunction with a RADIUS server. nat (network address translation): NAT technology translated IP addresses of a local area network to a different IP address for the Internet. mbps: one million bits per second; a unit of measurement for data transmission. browser: an application program that provides a way to look at and interact with all the information on the World Wide Web. lan (local area network): the computers and networking products that make up the network in your home or office. ethernet: an IEEE standard network protocol that specifies how data is placed on and retrieved from a common transmission medium. 1 Wireless-G Broadband Router with 2 Phone Ports PCs equipped with wireless cards or adapters can communicate without cumbersome cables. By sharing the same wireless settings, within their transmission radius, they form a wireless network, which is sometimes called a Wireless Local Area Network (WLAN). The Router bridges wireless networks of both 802.11b and 802.11g standards and wired networks, allowing them to communicate with each other. To create your network, install and set up the Router. To guide you through the process, Linksys strongly recommends that you run the Setup Wizard on the Setup CD-ROM. If you prefer to manually set up the Router, use the instructions in this Installation and Troubleshooting Guide to help you. These instructions should be all you need to get the most out of the Wireless-G Broadband Router with 2 Phone Ports. 802.11b: an IEEE wireless networking standard that specifies a maximum data transfer rate of 11Mbps and an operating frequency of 2.4GHz. 802.11g: an IEEE wireless networking standard that specifies a maximum data transfer rate of 54Mbps, an operating frequency of 2.4GHz, and backward compatibility with 802.11b devices. What's in this Guide? This guide covers the basic steps for setting up a network with a router. After going through "Chapter 3: Getting to Know the Router," most users will only need to use the following chapters: · Chapter 4: Connecting the Router This chapter instructs you on how to connect the Router to your cable or DSL modem, PCs, and telephones (or fax machines). Chapter 5: Configuring the Router This chapter explains how to configure the Router using your web browser and the Router's Web-based Utility. You will configure the Router using the settings provided by your ISP. · When you're finished with the basic steps, then you are ready to connect to the Internet. 2 Chapter 1: Introduction What's in this Guide? Wireless-G Broadband Router with 2 Phone Ports You also have other chapters available for reference: · · · Chapter 1: Introduction This chapter describes the Router's applications and this Installation and Troubleshooting Guide. Chapter 2: Planning Your Wireless Network This chapter describes the basics of wireless networking. Appendix A: Troubleshooting This appendix describes some possible problems and solutions, as well as frequently asked questions, regarding installation and use of the Router. Appendix B: Wireless Security This appendix explains the risks of wireless networking and some solutions to reduce the risks. Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter This appendix instructs you on how to find the MAC address or Ethernet address of your PC's Ethernet network adapter. Appendix D: Windows Help This appendix describes how you can use Windows Help for instructions about networking, such as installing the TCP/IP protocol. Appendix E: Glossary This appendix gives a brief glossary of terms frequently used in networking. Appendix F: Specifications This appendix provides the technical specifications for the Router. Appendix G: Warranty Information This appendix supplies the warranty information for the Router. · · · · · · Chapter 1: Introduction What's in this Guide? 3 Wireless-G Broadband Router with 2 Phone Ports · Appendix H: Regulatory Information This appendix supplies the regulatory information regarding the Router. · Appendix I: Contact Information This appendix provides contact information for a variety of Linksys resources, including Technical Support, as well as Vonage. 4 Chapter 1: Introduction What's in this Guide? Wireless-G Broadband Router with 2 Phone Ports Chapter 2: Planning Your Wireless Network Network Topology A wireless local area network (WLAN) is exactly like a regular local area network (LAN), except that each computer in the WLAN uses a wireless device to connect to the network. Computers in a WLAN share the same frequency channel and SSID, which is an identification name shared by the wireless devices belonging to the same wireless network. network: a series of computers or devices connected for the purpose of data sharing, storage, and/or transmission between users. ssid: your wireless network's name. ad-hoc: a group of wireless devices communicating directly to each other (peer-to-peer) without the use of an access point. infrastructure: a wireless network that is bridged to a wired network via an access point. adapter: a device that adds network functionality to your PC. ethernet: IEEE standard network protocol that specifies how data is placed on and retrieved from a common transmission medium. Ad-Hoc versus Infrastructure Mode Unlike wired networks, wireless networks have two different modes in which they may be set up: infrastructure and ad-hoc. An infrastructure configuration is a WLAN and wired LAN communicating to each other through an access point. An ad-hoc configuration is wireless-equipped computers communicating directly with each other. Choosing between these two modes depends on whether or not the wireless network needs to share data or peripherals with a wired network or not. If the computers on the wireless network need to be accessible by a wired network or need to share a peripheral, such as a printer, with the wired network computers, the wireless network should be set up in Infrastructure mode. The basis of Infrastructure mode centers around an access point or wireless router, such as the Wireless-G Broadband Router with 2 Phone Ports, which serves as the main point of communications in a wireless network. The Router transmits data to PCs equipped with wireless network adapters, which can roam within a certain radial range of the Router. You can arrange the Router and multiple access points to work in succession to extend the roaming range, and you can set up your wireless network to communicate with your Ethernet hardware as well. Chapter 2: Planning Your Wireless Network Network Topology 5 Wireless-G Broadband Router with 2 Phone Ports If the wireless network is relatively small and needs to share resources only with the other computers on the wireless network, then the Ad-Hoc mode can be used. Ad-Hoc mode allows computers equipped with wireless transmitters and receivers to communicate directly with each other, eliminating the need for a wireless router or access point. The drawback of this mode is that in Ad-Hoc mode, wireless-equipped computers are not able to communicate with computers on a wired network. And, of course, communication between the wirelessequipped computers is limited by the distance and interference directly between them. access point: a device that allows wireless-equipped computers and other devices to communicate with a wired network. Also used to expand the range of a wireless network. Network Layout The Wireless-G Broadband Router with 2 Phone Ports has been specifically designed for use with both your 802.11b and 802.11g products. It is compatible with all 802.11b and 802.11g adapters, such as the Notebook Adapters for your laptop computers, PCI Adapters for your desktop PCs, and USB Adapters when you want to enjoy USB connectivity. The Broadband Router will also communicate with the Wireless PrintServer and Wireless Ethernet Bridges. When you wish to connect your wireless network with your wired network, you can use the Broadband Router's four Ethernet network ports. To add more ports, any of the Broadband Router's Ethernet network ports can be connected to any of Linksys's switches. With these, and many other, Linksys products, your networking options are limitless. Go to the Linksys website at www.linksys.com for more information about products that work with the Wireless-G Broadband Router with 2 Phone Ports. 6 Chapter 2: Planning Your Wireless Network Network Layout Wireless-G Broadband Router with 2 Phone Ports Chapter 3: Getting to Know the Router The Back Panel The Router's ports and the Reset button are located on the back panel of the Router. Figure 3-1: Back Panel Internet Phone1 This Internet port connects to your cable or DSL modem. For your primary Vonage line, the Phone1 port allows you to connect the Router to your telephone (or fax machine) using an RJ-11 telephone cable (not included). If you have a second Vonage line, the Phone2 port allows you to connect the Router to your second telephone (or fax machine) using an RJ-11 telephone cable (not included). These four Ethernet ports connect to network devices, such as PCs or more switches. There are two ways to reset the Router's factory defaults. Either press the Reset Button for five seconds, or restore the defaults from the Router's Web-based Utility. The Power port is where you will connect the power adapter. NOTE: The Internet port only accepts a straight-through cable. Do NOT connect a crossover cable to the Internet port. Phone2 Ethernet 1-4 Reset Button Power NOTE: The Factory Default feature of the Router's Webbased Utility is protected by a password available only from Vonage. Contact Vonage for more information. 7 Chapter 3: Getting to Know the Router The Back Panel Wireless-G Broadband Router with 2 Phone Ports The Front Panel The Router's LEDs, which inform you about network activities, are located on the front panel. Figure 3-2: Front Panel POWER Blue/Red. The POWER LED lights up blue when the Router is powered on. If the blue LED is flashing, the Router is booting up or upgrading its firmware. If the LED lights up red, then disconnect the power, and wait five seconds. Then reconnect the power. Blue. The ETHERNET LED lights up when there is an active connection through the corresponding port. If the LED is flashing, then there is traffic moving through that port. Blue. The WIRELESS LED lights up when there is an active wireless connection. If the LED is flashing, the Router is sending or receiving data over the wireless network. Blue. The PHONE LED is solidly lit when a telephone or fax machine has an active or registered connection to Vonage through the corresponding port (Phone 1 or 2). It flashes when the phone is being used or is off the hook. Blue. The INTERNET LED lights up when the Router is connected to your cable or DSL modem. If the LED is flashing, the Router is sending or receiving data over the Internet port. Proceed to "Chapter 4: Connecting the Router." 8 Chapter 3: Getting to Know the Router The Front Panel ETHERNET 1-4 WIRELESS PHONE 1-2 INTERNET Wireless-G Broadband Router with 2 Phone Ports Chapter 4: Connecting the Router Overview To begin installation of the Router, you will connect the Router to your PCs, telephone(s) or fax machine(s), and cable or DSL modem. The following connection diagram illustrates a basic network setup with wired connections to one desktop PC and telephone and a wireless connection to one notebook PC. Desktop PC NOTE: If you already have a router in your network, then replace your existing router with the Wireless-G Broadband Router with 2 Phone Ports. Internet Cable/DSL Modem Router Notebook PC Telephone Figure 4-1: Router Connection Diagram Chapter 4: Connecting the Router Overview 9 Wireless-G Broadband Router with 2 Phone Ports Connection Instructions 1. Make sure that all of your hardware is powered off, including the Router, PCs, and broadband modem. 2. Attach the antenna to the Router's antenna port. 3. Connect your broadband modem's Ethernet cable to the Router's Internet port. 4. Connect one end of an Ethernet network cable to one of the numbered ports on the back of the Router. Connect the other end to an Ethernet port on a network device, e.g., a PC, print server, or switch. Repeat this step to connect more PCs or other network devices to the Router. 5. Power on the broadband modem. 6. Connect the included power adapter to the Router's Power port, and then plug the power adapter into an electrical outlet. The Power LED on the front panel will light up when the adapter is connected properly. 7. Power on your PC(s). 8. Plug a standard telephone into the Router's Phone1 port. IMPORTANT: Do not connect the Phone port to a telephone wall jack. Make sure you only connect a telephone or fax machine to the Phone port. Otherwise, the Router or the telephone wiring in your home or office may be damaged. 9. If you have a second Vonage phone or fax line, repeat step 8 to connect a telephone or fax machine to the Router's Phone2 port. Proceed to the following section, "Placement Options." 10 NOTE: Make sure your telephone is set to its tone setting (not pulse). Figure 4-1: Connect the Modem Figure 4-2: Connect a PC Figure 4-3: Connect the Power Figure 4-4: Connect a Telephone Chapter 4: Connecting the Router Connection Instructions Wireless-G Broadband Router with 2 Phone Ports Placement Options There are three ways to place the Router. The first way is to place it horizontally on a surface, so it sits on its four rubber feet. The second way is to stand the Router vertically on a surface (this uses an optional stand). The third way is to mount it on a wall. The second and third options are explained in further detail below. Stand Option If you have the optional stand, then you can place the Router vertically on a surface. 1. Line up the center of the Router's stand with the center of the Router's labeled edge. 2. Insert the Router into the stand. Proceed to "Chapter 5: Configuring the Router." Figure 4-5: Attach the Stand (Optional) to the Router Chapter 4: Connecting the Router Placement Options 11 Wireless-G Broadband Router with 2 Phone Ports Wall-Mount Option The Router has four wall-mount slots on its bottom panel. The distance between two adjacent slots is 62 mm (2.44 inches). Before you begin, make sure you have four screws that are size #4--this indicates a diameter measurement of 0.112 inches (2.845 mm). 1. Determine where you want to mount the Router. 2. Drill four holes into the wall. Make sure adjacent holes are 62 mm (2.44 inches) apart. 3. Insert a screw into each hole, and leave 5 mm (0.2 inches) of its head exposed. 4. Maneuver the Router so the wall-mount slots line up with the four screws. 5. Place the wall-mount slots over the screws and slide the Router down until the screws fit snugly into the wall-mount slots. Proceed to "Chapter 5: Configuring the Router." Figure 4-6: Measurement between Wall-Mount Slots 62 mm (2.44 inches) 12 Chapter 4: Connecting the Router Placement Options Wireless-G Broadband Router with 2 Phone Ports Chapter 5: Configuring the Router Overview Linksys recommends using the Setup CD-ROM for first-time installation of the Router. If you do not wish to run the Setup Wizard on the Setup CD-ROM, then you can use the Web-based Utility to configure the Router. For advanced users, you may configure the Router's advanced settings through the Web-based Utility. This chapter will describe each web page on the Utility and each page's key functions. The Utility can be accessed via your web browser through use of a computer connected to the Router. For a basic wireless network setup, most users only have to use the following screens of the Utility: · Basic Setup. On the Basic Setup screen, enter the Internet connection settings provided by your ISP. If you do not have this information, you can call your ISP to request the settings. Once you have the setup information for your specific type of Internet connection, then you can configure the Router. Management. Click the Administration tab and then the Management tab. The Router's default user name and password is admin. To secure the Router, change the User Name and Password from their defaults. Wireless. On the Basic Wireless Settings screen, set the basic configuration for your wireless network. · · There are eight main tabs: Setup, Wireless, Security, Access Restrictions, Applications & Gaming, Administration, Status, and Voice. Additional tabs will be available after you click one of the main tabs. Chapter 5: Configuring the Router Overview 13 Wireless-G Broadband Router with 2 Phone Ports Setup · · · · Basic Setup. Enter the Internet connection and network settings on this screen. DDNS. Enable the Router's Dynamic Domain Name System (DDNS) feature on this screen. MAC Address Clone. If you need to clone a MAC address onto the Router, use this screen. Advanced Routing. On this screen, you can alter firewall, Network Address Translation (NAT), Dynamic Routing, and Static Routing configurations. Wireless · · · Basic Wireless Settings. Enter the basic settings for your wireless network on this screen. Wireless Security. Enable and configure the security settings for your wireless network. Wireless MAC Filter. To permit or deny wireless network access for specific devices, set up MAC address filtering. Advanced Wireless Settings. Advanced users can alter data transmission settings on this screen. · Security · Firewall. To enable certain types of web filters, use this screen. 14 Chapter 5: Configuring the Router Overview Wireless-G Broadband Router with 2 Phone Ports Access Restrictions · Filter. To block specific users from Internet access, you can set up IP address, port, and MAC address filtering. Device Access Control. Use this screen to control remote access of the Router. · Applications & Gaming · · · · Port Range Forwarding. Set up public services or other specialized Internet applications on your network. Port Triggering. To set up triggered ranges and forwarded ranges for Internet applications, click this tab. DMZ. Click this tab to allow one local user to be exposed to the Internet for use of special-purpose services. QoS. Enable QoS (Quality of Service) to maximize network performance. Administration · · · Management. On this screen, alter the Router's user name, password, and UPnP settings. Log. If you want to view or save activity logs, click this tab. Factory Defaults. If you want to reset the Router to its factory default settings, then you will need a password available only from Vonage. Contact Vonage for more information. Status · Local Network. This provides status information about the local network. 15 Chapter 5: Configuring the Router Overview Wireless-G Broadband Router with 2 Phone Ports · Router. This screen provides status information about the Router. · · Wireless. This screen provides status information about the Router's wireless network. Voice. This screen provides status information about your Vonage phone line(s). Voice Access to the Voice tab is restricted by Vonage. Contact Vonage for more information. How to Access the Web-based Utility To access the Web-based Utility of the Router, launch Internet Explorer or Netscape Navigator, and enter the Router's default IP address, 192.168.15.1, in the Address field. Press the Enter key. The Login screen will appear asking you for your User name and Password. Enter admin in the User Name and Password fields. Then click the Log In button. Click the Cancel button to exit the Login screen. Make the necessary changes through the Utility. When you have finished making changes to a screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Help information is shown on the right-hand side of a screen. For additional help on a tab, click More. Figure 5-2: Router Login Figure 5-1: Router's IP Address 16 Chapter 5: Configuring the Router How to Access the Web-based Utility Wireless-G Broadband Router with 2 Phone Ports The Setup Tab - Basic Setup The Basic Setup screen is the first screen you see when you access the Web-based Utility. Internet Setup The Internet Setup section configures the Router for your Internet connection type. This information can be obtained from your ISP. Internet Connection Type The Router supports three connection types: Obtain an IP automatically, Static IP, and PPPoE. Each Basic Setup screen and available features will differ depending on what kind of connection type you select. Obtain an IP automatically By default, the Router's Internet Connection Type is set to Obtain an IP automatically, and it should be used only if your ISP supports DHCP or you are connecting through a dynamic IP address. Figure 5-3: Setup Tab - Basic Setup (Obtain an IP automatically) Chapter 5: Configuring the Router The Setup Tab - Basic Setup 17 Wireless-G Broadband Router with 2 Phone Ports Static IP If you are required to use a permanent IP address, then select Static IP. IP Address. This is the IP address that the Router has, when seen from the Internet. Your ISP will provide you with the IP Address you need to specify here. Subnet Mask. This is the Router's Subnet Mask, as seen by external users on the Internet (including your ISP). Your ISP will provide you with the Subnet Mask. Gateway. Your ISP will provide you with the Default Gateway Address. DNS 1-3. Your ISP will provide you with at least one DNS (Domain Name System) Server IP Address. WINS. The Windows Internet Naming Service (WINS) converts NetBIOS names to IP addresses. If you use a WINS server, enter that server's IP address here. Otherwise, leave this field blank. Figure 5-4: Static IP static ip address: a fixed address assigned to a computer or device connected to a network. subnet mask: an address code that determines the size of the network. default gateway: a device that forwards Internet traffic from your local area network. pppoe: a type of broadband connection that provides authentication (username and password) in addition to data transport. PPPoE Some DSL-based ISPs use PPPoE (Point-to-Point Protocol over Ethernet) to establish Internet connections for end-users. If you use a DSL line, check with your ISP to see if they use PPPoE. If they do, you will have to enable it. User Name and Password. Enter the User Name and Password provided by your ISP. Connect on Demand and Idle Timeout. You can configure the Router to cut the Internet connection after it has been inactive for a specific period of time (Idle Timeout). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the Router to automatically re-establish your connection as soon as you attempt to access the Internet again. If you wish to activate Connect on Demand, click the radio 18 Chapter 5: Configuring the Router The Setup Tab - Basic Setup Wireless-G Broadband Router with 2 Phone Ports button. If you want your Internet connection to remain on at all times, enter 0 in the Idle Timeout field. Otherwise, enter the number of minutes you want to have elapsed before your Internet access disconnects. Keep Alive and Redial Period. This option keeps your Internet access connected indefinitely, even when it sits idle. If you select this option, the Router will periodically check your Internet connection. If the connection is down, then the Router will automatically re-establish the connection. To use this option, click the radio button next to Keep Alive. The default Redial Period is 30 seconds. When you are finished, click the Save Settings button. Then click the Status tab, and click the Connect button to start the connection. Figure 5-5: PPPoE NOTE: For DSL users, if you need to enable PPPoE support, remember to remove any PPPoE applications that are installed on your PCs. Optional Settings Some of these settings may be required by your ISP. Verify with your ISP before making any changes. Host Name and Domain Name. These fields allow you to supply a host and domain name for the Router. Some ISPs require these names as identification. You may have to check with your ISP to see if your broadband Internet service has been configured with a host and domain name. In most cases, leaving these fields blank will work. MTU. The MTU (Maximum Transmission Unit) setting specifies the largest packet size permitted for network transmission. Select Auto to have the Router automatically select the MTU value, or select Manual and enter the value desired. It is recommended that you leave this value in the 1200 to 1500 range. For two Internet connection types, Obtain an IP automatically and Static IP, the MTU's default value is 1500. For PPPoE, the MTU's default value is 1492. packet: a unit of data sent over a network. Network Setup The Network Setup section allows you to change the Router's local network settings. Chapter 5: Configuring the Router The Setup Tab - Basic Setup 19 Wireless-G Broadband Router with 2 Phone Ports Router IP The values for the Router's Local IP Address and Subnet Mask are shown here. In most cases, keeping the default values will work. Local IP Address. The default value is 192.168.15.1. Subnet Mask. The default value is 255.255.255.0. Network Address Server Settings (DHCP) These settings allow you to configure the Router's Dynamic Host Configuration Protocol (DHCP) server function. The Router can be used as a DHCP server for your network. A DHCP server automatically assigns an IP address to each computer on your network. Unless you already have one, it is highly recommended that you leave the Router enabled as a DHCP server. Local DHCP Server. DHCP is enabled by factory default. If you already have a DHCP server on your network, set the Router's DHCP option to Disable. If you disable DHCP, remember to assign a static IP address to the Router. Start IP Address. Enter a value for the DHCP server to start with when issuing IP addresses. Because the default IP address for the Router is 192.168.15.1, the Start IP Address must be 192.168.15. 101 or greater, but smaller than 192.168.15.254. The default Start IP Address is 192.168.15.100. Number of Address (Optional). Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. This number cannot be greater than 253. The default is 50. DHCP Address Range. The range of DHCP addresses is displayed here. 20 Chapter 5: Configuring the Router The Setup Tab - Basic Setup Wireless-G Broadband Router with 2 Phone Ports Client Lease Time. The Client Lease Time is the amount of time a network user will be allowed connection to the Router with their current dynamic IP address. Enter the amount of time, in minutes, that the user will be "leased" dynamic ip address: a temporary IP this dynamic IP address. After the dynamic IP address has expired, the user will be automatically assigned a new address assigned by a DHCP server. dynamic IP address. The default is 0 minutes, which means one day. WINS. The Windows Internet Naming Service (WINS) converts NetBIOS names to IP addresses. If you use a WINS server, enter that server's IP address here. Otherwise, leave this field blank. Time Setting Change the time zone in which your network functions from this pull-down menu. To use the Router's daylight savings feature, click the Automatically adjust clock for daylight saving changes checkbox. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. NOTE: To test your settings, connect to the Internet now. The Setup Tab - DDNS The Router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP address. It is useful when you are hosting your own website, FTP server, or other server behind the Router. Before you can use this feature, you need to sign up for DDNS service at one of two DDNS service providers, DynDNS.org or TZO.com. If you do not want to use this feature, keep the default setting, Disable. Chapter 5: Configuring the Router The Setup Tab - DDNS ddns: allows the hosting of a website, FTP server, or e-mail server with a fixed domain name (e.g., www.xyz.com) and a dynamic IP address. 21 Wireless-G Broadband Router with 2 Phone Ports DDNS DDNS Service. If you use DynDNS.org, then select DynDNS.org. If you use TZO, then select TZO.com. The features available on the DDNS screen will vary, depending on which DDNS service provider you use. DynDNS.org User Name, Password, and Host Name. Enter the User Name, Password, and Host Name of the account you set up with DynDNS.org. Internet IP Address. The Router's current Internet IP Address is displayed here. Because it is dynamic, this will change. Status. The status of the DDNS service connection is displayed here. Figure 5-6: Setup Tab - DDNS (DynDNS.org) TZO.com E-mail Address, Password, and Domain Name. Enter the Email Address, Password, and Domain Name of the service you set up with TZO. Internet IP Address. The Router's current Internet IP Address is displayed here. Because it is dynamic, this will change. Status. The status of the DDNS service connection is displayed here. When you have finished making changes to this screen, click the Update button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-7: Setup Tab - DDNS (TZO.com) 22 Chapter 5: Configuring the Router The Setup Tab - DDNS Wireless-G Broadband Router with 2 Phone Ports The Setup Tab - MAC Address Clone A MAC address is a 12-digit code assigned to a unique piece of hardware for identification, like a social security number. Some ISPs will require you to register a MAC address in order to access the Internet. If you do not wish to re-register the MAC address with your ISP, you may assign the MAC address you have currently registered with your ISP to the Router with the MAC Address Clone feature. MAC Clone MAC Clone Service. To use MAC address cloning, select Enable. MAC Address. Enter the MAC Address registered with your ISP. Then click the Save Settings button. Clone. If you want to clone the MAC address of the PC you are currently using to configure the Router, then click the Clone button. The Router will automatically detect your PC's MAC address, so you do NOT have to call your ISP to change the registered MAC address to the Router's MAC address. It is recommended that the PC registered with the ISP is used to open the MAC Address Clone screen. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-8: Setup Tab MAC Address Clone mac address: the unique address that a manufacturer assigns to each networking device. Chapter 5: Configuring the Router The Setup Tab - MAC Address Clone 23 Wireless-G Broadband Router with 2 Phone Ports The Setup Tab - Advanced Routing The Advanced Routing screen allows you to configure the firewall, Network Address Translation (NAT), dynamic routing, and static routing settings. Advanced Routing Firewall & NAT. The Stateful Packet Inspection (SPI) firewall reviews data packets entering your network. NAT is a security feature that enables the Router to translate IP addresses of your local area network to a different IP address for the Internet. These features are enabled by default. To disable the firewall and NAT, click the Disable radio button. (When NAT is disabled, the DHCP server feature is also disabled.) Dynamic Routing. This feature enables the Router to automatically adjust to physical changes in the network's layout and exchange routing tables with the other router(s). The Router determines the network packets' route based on the fewest number of hops between the source and the destination. To enable Dynamic Routing, click the Enable radio button. To disable this feature, click the Disable radio button. Transmit RIP Version. To use dynamic routing for transmission of network data, select the protocol you want, RIP1 v1, RIP1 v1 Compatible, or RIP v2. Static Routing. Use this feature to set up a static router between the Router and another network. (A static route is a pre-determined pathway that network information must travel to reach a specific host or network.) To create a static route, alter the following settings: Select Entry. Select the number of the static route from the drop-down menu. The Router supports up to 20 static route entries. Destination LAN IP. The Destination LAN IP Address is the address of the remote network or host to which you want to assign a static route. Enter the IP address of the host for which you wish to create a static route. 24 Chapter 5: Configuring the Router The Setup Tab - Advanced Routing Figure 5-9: Setup Tab Advanced Routing Wireless-G Broadband Router with 2 Phone Ports Subnet Mask. The Subnet Mask determines which portion of a Destination IP address is the network portion, and which portion is the host portion. Gateway. This is the IP address of the gateway device that allows for contact between the Router and the remote network or host. Hop Count. This determines the maximum number of steps between network nodes that data packets will travel. A node is any device on the network, such as PCs, print servers, routers, etc. Interface. Select Local or Internet, depending on the location of the static route's final destination. Delete Entry. If you need to delete a route, select its number from the drop-down menu, and click the Delete Entry button. Show Routing Table. Click the Show Routing Table button to open a screen displaying how data is routed through your local network. For each route, the Destination LAN IP address, Default Gateway, Subnet Mask, Flags, Metric, Ref (Reference), User, and Interface are displayed. Click the Refresh button to update the information. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-10: Routing Table Entry List Chapter 5: Configuring the Router The Setup Tab - Advanced Routing 25 Wireless-G Broadband Router with 2 Phone Ports The Wireless Tab - Basic Wireless Settings The basic settings for wireless networking are set on this screen. Wireless Settings Wireless Network Mode. From this drop-down menu, you can select the wireless standards running on your network. If you have both 802.11g and 802.11b devices in your network, keep the default setting, Mixed. If you have only 802.11g devices, select G-Only. If you have only 802.11b devices, select B-Only. If you do not have any 802.11g and 802.11b devices in your network, select Disable. Wireless Network Name (SSID). The SSID is the network name shared among all points in a wireless network. The SSID must be identical for all devices in the wireless network. It is case-sensitive and must not exceed 32 characters (use any of the characters on the keyboard). Make sure this setting is the same for all points in your wireless network. For added security, you should change the default SSID (linksys) to a unique name. Wireless Channel. Select the appropriate channel from the list provided to correspond with your network settings. All devices in your wireless network must be broadcast on the same channel in order to function correctly. Wireless SSID Broadcast. When wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the Router. To broadcast the Router's SSID, keep the default setting, Enable. If you do not want to broadcast the Router's SSID, then select Disable. When you have finished making changes on this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-11: Wireless Tab - Basic Wireless Settings 26 Chapter 5: Configuring the Router The Wireless Tab - Basic Wireless Settings Wireless-G Broadband Router with 2 Phone Ports The Wireless Tab - Wireless Security The Wireless Security settings configure the security of your wireless network. If you do not want to use wireless security, keep the default, Disabled. There are four wireless security mode options supported by the Router: WPA Pre-Shared Key, WPA RADIUS, RADIUS, and WEP. (WPA stands for Wi-Fi Protected Access, which is a security standard stronger than WEP encryption. WEP stands for Wired Equivalent Privacy, while RADIUS stands for Remote Authentication Dial-In User Service.) These three are briefly discussed here. For detailed instructions on configuring wireless security for the Router, proceed to "Appendix B: Wireless Security." wpa (wi-fi protected access): a wireless security protocol using TKIP (Temporal Key Integrity Protocol) encryption, which can be used in conjunction with a RADIUS server. wep (wired equivalent privacy): a method of encrypting network data transmitted on a wireless network for greater security. Wireless Security WPA-Preshared Key. Select TKIP or AES from the WPA Algorithm drop-down menu. Enter a WPA Shared Key of 8-32 characters. Then enter the Group Key Renewal period, which instructs the Router how often it should change the encryption keys. When you have finished making changes on this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-12: Wireless Tab - Wireless Security (WPA-Preshared Key) Chapter 5: Configuring the Router The Wireless Tab - Wireless Security 27 Wireless-G Broadband Router with 2 Phone Ports WPA-RADIUS. This option features WPA used in coordination with a RADIUS server. (This should only be used when a RADIUS server is connected to the Router.) Select TKIP or AES from the WPA Algorithm drop-down menu. Enter the RADIUS server's IP address and port number, along with the Shared Key, which is the key shared between the Router and the server. Last, enter the Key Renewal Timeout period, which instructs the Router how often it should change the encryption keys. When you have finished making changes on this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-13: Wireless Tab - Wireless Security (WPA-RADIUS) radius: a protocol that uses an authentication server to control network access. RADIUS. This option features WEP encryption used in coordination with a RADIUS server. (This should only be used when a RADIUS server is connected to the Router.) Enter the RADIUS server's IP address and port number, along with the Shared Key, which is the key shared between the Router and the server. To indicate which WEP key to use, select the appropriate Default Transmit Key number. Select a level of WEP encryption, 64 bits 10 hex digits or 128 bits 26 hex digits. If you want to use a Passphrase, then enter it in the Passphrase field and click the Generate button. If you want to enter the WEP key(s) manually, then enter it in the Key 1-4 field(s). When you have finished making changes on this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-14: Wireless Tab - Wireless Security (RADIUS) 28 Chapter 5: Configuring the Router The Wireless Tab - Wireless Security Wireless-G Broadband Router with 2 Phone Ports WEP. WEP is a basic encryption method, which is not as secure as WPA. To indicate which WEP key to use, select the appropriate Default Transmit Key number. Select a level of WEP encryption, 64 bits 10 hex digits or 128 bits 26 hex digits. If you want to use a Passphrase, then enter it in the Passphrase field and click the Generate button. If you want to enter the WEP key(s) manually, then enter it in the Key 1-4 field(s). When you have finished making changes on this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-15: Wireless Tab - Wireless Security (WEP) Chapter 5: Configuring the Router The Wireless Tab - Wireless Security 29 Wireless-G Broadband Router with 2 Phone Ports The Wireless Tab - Wireless MAC Filter Wireless MAC Filter Wireless MAC Filter. If you want to filter wireless access by MAC address, select Enable. Otherwise, select Disable. Click Prevent to block access for the designated computers, or click Permit only to permit access for the designated computers. Click the Update Filter List button, and the Mac Address Filter List screen will appear. Enter the MAC addresses of the computers you want to designate. To see a list of MAC addresses for wireless computers or clients, click the Wireless Client MAC List button. The Wireless Client MAC List screen will list Client Host Names, IP Addresses, and MAC Addresses for your wireless devices. Click the Refresh button to get the most up-to-date information. To add a specific computer to the Mac Address Filter List, click the Enable MAC Filter checkbox and then the Update Filter List button. Click the Close button to return to the MAC Address Filter List screen. On the MAC Address Filter List screen, click the Save Settings button to save this list, or click the Cancel Changes button to remove your entries. When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. Figure 5-17: MAC Address Filter List Figure 5-16: Wireless Tab - Wireless MAC Filter Figure 5-18: Wireless Client MAC List 30 Chapter 5: Configuring the Router The Wireless Tab - Wireless MAC Filter Wireless-G Broadband Router with 2 Phone Ports The Wireless Tab - Advanced Wireless Settings This tab is used to set up the Router's advanced wireless functions. These settings should only be adjusted by an expert administrator as incorrect settings can reduce wireless performance. Advanced Wireless Settings Preamble Type. The preamble defines the length of the CRC block for communication between the Router and the roaming wireless adapters. (High network traffic areas should use the shorter preamble type.) Select the appropriate preamble type for your network. If you are not sure which setting to select, then keep the default setting, Long Preamble. Authentication Type. The default is set to Auto, which allows Open System and Shared Key authentication. For Open System authentication, the sender and the recipient do not use a WEP key for authentication but can use WEP for data encryption. For Shared Key authentication, the sender and recipient use a WEP key for both authentication and data encryption. To only allow Open System authentication, select Open. To only allow Shared Key authentication, select Shared Key. In most cases, you should keep the default setting, Auto, because some clients cannot be configured for Shared Key. CTS Protection Mode. CTS (Clear-To-Send) Protection Mode function boosts the Router's ability to catch all Wireless-G transmissions but will severely decrease performance. Keep the default setting, Auto, so the Router can use this feature as needed, when the Wireless-G products are not able to transmit to the Router in an environment with heavy 802.11b traffic. CTS Protection Type. CTS Protection Type specifies the type of traffic covered by the CTS Protection Mode. Select CTS-only or RTS-CTS from the drop-down menu. If you are not sure which setting to select, then keep the default setting, CTS-only. Figure 5-19: Wireless Tab - Advanced Wireless Settings cts (clear to send): a signal sent by a wireless device, signifying that it is ready to receive data. beacon interval: data transmitted on your wireless network that keeps the network synchronized. Chapter 5: Configuring the Router The Wireless Tab - Advanced Wireless Settings 31 Wireless-G Broadband Router with 2 Phone Ports Power Level. You can adjust the output power of the Router to get the appropriate coverage for your wireless network. Select the percentage of power you need for your environment. If you are not sure which setting to select, then keep the default setting, Full. Beacon Interval. The Beacon Interval value indicates the frequency interval of the beacon. A beacon is a packet broadcast by the Router to synchronize the wireless network. The default value is 100. DTIM Interval. This indicates the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages. When the Router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. Its clients hear the beacons and awaken to receive the broadcast and multicast messages. The default value is 3. Fragmentation Length. This value specifies the maximum size for a packet before data is fragmented into multiple packets. If you experience a high packet error rate, you may slightly increase the Fragmentation Threshold. Setting the Fragmentation Length too low may result in poor network performance. Only minor reduction of the default value is recommended. In most cases, it should remain at its default value of 2346. RTS Threshold. Should you encounter inconsistent data flow, only minor reduction of the default value, 2347, is recommended. If a network packet is smaller than the preset RTS threshold size, the RTS/CTS mechanism will not be enabled. The Router sends Request to Send (RTS) frames to a particular receiving station and negotiates the sending of a data frame. After receiving an RTS, the wireless station responds with a Clear to Send (CTS) frame to acknowledge the right to begin transmission. In most cases, keep the default value, 2347. When you have finished making changes on this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. dtim: a message included in data packets that can increase wireless efficiency. fragmentation: breaking a packet into smaller units when transmitting over a network medium that cannot support the original size of the packet. rts (request to send): a networking method of coordinating large packets through the RTS Threshold setting. 32 Chapter 5: Configuring the Router The Wireless Tab - Advanced Wireless Settings Wireless-G Broadband Router with 2 Phone Ports The Security Tab - Firewall When you click the Security tab, you will see the Firewall screen. You can use this screen to enable a variety of web filters, which will enhance the firewall protecting your network. Web Filters Filter Proxy. Use of WAN proxy servers may compromise the Gateway's security. Denying Filter Proxy will disable access to any WAN proxy servers. To enable proxy filtering, click the checkbox. Filter Java Applets. Java is a programming language for websites. If you deny Java Applets, you run the risk of not having access to Internet sites created using this programming language. To enable Java Applet filtering, click the checkbox. Filter Pop-Ups. When you use the Internet, sometimes unwanted pop-up screens may appear on your screen. To enable pop-up filtering, click the checkbox. Filter Cookies. A cookie is data stored on your computer and used by Internet sites when you interact with them. To enable cookie filtering, click the checkbox. Filter ActiveX. ActiveX is a programming language for websites. If you deny ActiveX, you run the risk of not having access to Internet sites created using this programming language. To enable ActiveX filtering, click the checkbox. When you have finished making changes on this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-20: Security Tab - Firewall Chapter 5: Configuring the Router The Security Tab - Firewall 33 Wireless-G Broadband Router with 2 Phone Ports The Access Restrictions Tab - Filter Filters can block specific internal users from accessing the Internet, anonymous Internet requests, and/or multicasting. Filter IP Address Range You can create up to five different IP Address filters. To set up a filter, enter the IP address you wish to filter in the field provided. Users who have filtered IP addresses will not be able to access the Internet at all. Filter Port Range You can create up to five different Port Range filters. To filter users by network port number, select the protocol you want to filter, TCP, UDP, or Both, from the Protocol drop-down menu. Enter the port numbers you want to filter in the Start and End fields. Users connected to the Router will no longer be able to access any port number listed there. Figure 5-21: Access Restrictions Tab Filter Filter MAC Address This feature blocks computers with specific MAC addresses from going out to the Internet. For information on obtaining a MAC address, go to "Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter." To set the MAC filter, click the Edit MAC Filter Setting button. Edit MAC Filter Setting. Click the Edit MAC Filter Setting button. Select the range of MAC address entries in the drop-down box. In each mac field, enter the MAC address you want to filter. Click the Apply button before closing the window. To cancel changes, click the Undo button. Figure 5-22: Filtered MAC Address 34 Chapter 5: Configuring the Router The Access Restrictions Tab - Filter Wireless-G Broadband Router with 2 Phone Ports Block WAN Requests Use these features to enhance your network's security and filter multicasting. Block Anonymous Internet Requests. This keeps your network from being "pinged" or detected and reinforces your network security by hiding your network ports, so it is more difficult for intruders to work their way into your network. Select Enabled to block anonymous Internet requests, or Disabled to allow anonymous Internet requests. Filter Multicast. Multicasting allows for multiple transmissions to specific recipients at the same time. If multicasting is permitted, then the Router will allow IP multicast packets to be forwarded to the appropriate computers. Select Enabled to filter multicasting, or Disabled to disable this feature. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Chapter 5: Configuring the Router The Access Restrictions Tab - Filter 35 Wireless-G Broadband Router with 2 Phone Ports The Access Restrictions Tab - Device Access Control Use this screen to control local and remote access to the Router's management ports via different services. Access Control Enable Access Control. If you want to control access to the Router's management ports via the services listed below, click the checkbox. For each service, make sure the appropriate checkbox is checked if you want to allow local or remote access. Make sure the appropriate checkbox is not checked if you want to block local or remote access. If the Access Control feature is disabled, then access is permitted within the local network but blocked for the Internet. Service Name. You can control access for five services: Telnet, Web, FTP, TFTP, and Secure Shell (SSH). WAN. If you want to block WAN (Internet) access for a service, make sure the appropriate checkbox is unchecked. If you want to allow access, then make sure the appropriate checkbox is checked. LAN. If you want to block local access for a service, make sure the appropriate checkbox is unchecked. If you want to allow access, then make sure the appropriate checkbox is checked. IP Access List. Specify the IP addresses that are allowed to remotely access the Router. If you want to delete an IP address, select it and then click the Delete checkbox. New IP. To add an IP address, enter it in the field provided, and then click the Add checkbox. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. 36 Chapter 5: Configuring the Router The Access Restrictions Tab - Device Access Control Figure 5-23: Access Restrictions Tab Device Access Control NOTE: When a checkbox for a service is checked, access is enabled. When a checkbox is unchecked, access is denied. Wireless-G Broadband Router with 2 Phone Ports The Applications & Gaming Tab - Port Range Forwarding When you click the Applications & Gaming tab, you will see the Port Range Forwarding screen. Port Range Forwarding sets up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications. (Specialized Internet applications are any applications that use Internet access to perform functions such as videoconferencing or online gaming. Some Internet applications may not require any forwarding.) When users send this type of request to your network via the Internet, the Router will forward those requests to the appropriate PC. Before using forwarding, you should assign a static IP address to the designated PC. If you need to forward all ports to one PC, click the DMZ tab. Port Range Forwarding Port Range To add a server using Port Range Forwarding, complete the following fields: Application. Enter the name of the application. Start and End. Enter the number or range of external port(s) used by the server or Internet application. Check with the Internet application software documentation for more information. Protocol. Select the protocol TCP or UDP, or select Both. IP Address. Enter the IP address of the server that you want the Internet users to be able to access. To find the IP address, go to "Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter." Figure 5-24: Applications & Gaming Tab Port Range Forwarding tcp: a network protocol for transmitting data that requires acknowledgement from the recipient of data sent. udp: a network protocol for transmitting data that does not require acknowledgement from the recipient of the data that is sent. ip (internet protocol): a protocol used to send data over a network. ip address: the address used to identify a computer or device on a network. 37 Chapter 5: Configuring the Router The Applications & Gaming Tab - Port Range Forwarding Wireless-G Broadband Router with 2 Phone Ports Enable. Check the Enable box to enable the services you have defined. Port Range Forwarding will not function if the Enabled button is left unchecked. This is disabled (unchecked) by default. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. The Applications & Gaming Tab - Port Triggering The Port Triggering screen allows the Router to watch outgoing data for specific port numbers. The IP address of the computer that sends the matching data is remembered by the Router, so that when the requested data returns through the Router, the data is pulled back to the proper computer by way of IP address and port mapping rules. Port Triggering Application. Enter the application name of the trigger. Triggered Range For each application, list the triggered port number range. Check with the Internet application documentation for the port number(s) needed. Start Port. Enter the starting port number of the Triggered Range. End Port. Enter the ending port number of the Triggered Range. Figure 5-25: Applications & Gaming Tab Port Triggering 38 Chapter 5: Configuring the Router The Applications & Gaming Tab - Port Triggering Wireless-G Broadband Router with 2 Phone Ports Forwarded Range For each application, list the forwarded port number range. Check with the Internet application documentation for the port number(s) needed. Start Port. Enter the starting port number of the Forwarded Range. End Port. Enter the ending port number of the Forwarded Range. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. The Applications & Gaming Tab - UPnP Forwarding The UPnP Forwarding screen displays preset application settings as well as options to customize port services for other applications. UPnP Forwarding Application. Ten applications are preset. For custom applications, enter the name of your application in one of the available fields. The preset applications are among the most widely used Internet applications. They include the following: FTP (File Transfer Protocol). A protocol used to transfer files over a TCP/IP network (Internet, UNIX, etc.). For example, after developing the HTML pages for a website on a local machine, they are typically uploaded to the Figure 5-26: Applications & Gaming Tab web server using FTP. UPnP Forwarding Chapter 5: Configuring the Router The Applications & Gaming Tab - UPnP Forwarding 39 Wireless-G Broadband Router with 2 Phone Ports Telnet. A terminal emulation protocol commonly used on Internet and TCP/IP-based networks. It allows a user at a terminal or computer to log onto a remote device and run a program. SMTP (Simple Mail Transfer Protocol). The standard e-mail protocol on the Internet. It is a TCP/IP protocol that defines the message format and the message transfer agent (MTA), which stores and forwards the mail. DNS (Domain Name System). The way that Internet domain names are located and translated into IP addresses. A domain name is a meaningful and easy-to-remember "handle" for an Internet address. TFTP (Trivial File Transfer Protocol). A version of the TCP/IP FTP protocol that has no directory or password capability. Finger. A UNIX command widely used on the Internet to find out information about a particular user, such as a telephone number, whether the user is currently logged on, and the last time the user was logged on. The person being "fingered" must have placed his or her profile on the system in order for the information to be available. Fingering requires entering the full user@domain address. HTTP (HyperText Transport Protocol). The communications protocol used to connect to servers on the World Wide Web. Its primary function is to establish a connection with a web server and transmit HTML pages to the client web browser. POP3 (Post Office Protocol 3). A standard mail server commonly used on the Internet. It provides a message store that holds incoming e-mail until users log on and download it. POP3 is a simple system with little selectivity. All pending messages and attachments are downloaded at the same time. POP3 uses the SMTP messaging protocol. NNTP (Network News Transfer Protocol). The protocol used to connect to Usenet groups on the Internet. Usenet newsreaders support the NNTP protocol. 40 Chapter 5: Configuring the Router The Applications & Gaming Tab - UPnP Forwarding Wireless-G Broadband Router with 2 Phone Ports SNMP (Simple Network Management Protocol). A widely used network monitoring and control protocol. Data is passed from SNMP agents, which are hardware and/or software processes reporting activity in each network device (hub, router, bridge, etc.) to the workstation console used to oversee the network. The agents return information contained in a MIB (Management Information Base), which is a data structure that defines what is obtainable from the device and what can be controlled (turned off, on, etc.). Ext. Port. Enter the number of the external port used by the server in the Ext. Port column. Check with the Internet application documentation for more information. TCP or UDP. Select the protocol UDP or TCP for each application. You cannot select both protocols. Int. Port. Enter the number of the internal port used by the server in the Int. Port column. Check with the Internet application software documentation for more information. IP Address. Enter the IP address of the server that you want the Internet users to be able to access. To find the IP address, go to "Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter." Enabled. Check the Enabled box to enable the service you have defined. UPnP Forwarding will not function if the Enabled button is left unchecked. This is disabled (unchecked) by default. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Help information is shown on the right-hand side of a screen. For additional information, click More. Chapter 5: Configuring the Router The Applications & Gaming Tab - UPnP Forwarding 41 Wireless-G Broadband Router with 2 Phone Ports The Applications & Gaming Tab - DMZ The DMZ screen allows one local user to be exposed to the Internet for use of a special-purpose service such as Internet gaming and videoconferencing. DMZ hosting forwards all the ports at the same time to one PC. The Port Range Forwarding is more secure because it only opens the ports you want to have opened, while DMZ hosting opens all the ports of one computer, exposing the computer to the Internet. Any PC whose port is being forwarded must have its DHCP client function disabled and should have a new static IP address assigned to it because its IP address may change when using the DHCP function. DMZ DMZ. To use this feature, select Enabled. To disable DMZ hosting, select Disabled. DMZ Host IP Address. To expose one PC, enter the computer's IP address. To get the IP address of a computer, refer to "Appendix C: Finding the MAC Address and IP Address for Your Ethernet Adapter." Deactivate DMZ by entering a 0 in the field. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. Figure 5-27: Applications & Gaming Tab DMZ 42 Chapter 5: Configuring the Router The Applications & Gaming Tab - DMZ