User manual NETGEAR DG824M - REFERENCE MANUAL

Reference Manual for the Model DG824M Wireless ADSL Modem Gateway NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR SM-DG824MNA-1 July 2003 © 2003 by NETGEAR, Inc. All rights reserved. May 2003. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: · · · · Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. Federal Communications Commission (FCC) Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. In order to avoid the possibility of exceeding the FCC radio frequency exposure limits, human proximity to the antenna shall not be less than 20 cm (8 inches) during normal operation. EN 55 022 Declaration of Conformance This is to certify that the DG824M Wireless ADSL Modem Gateway is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN 55 022 Class B (CISPR 22). ii Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das DG824M Wireless ADSL Modem Gateway gemäß der im BMPT-AmtsblVfg 243/ 1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung. Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Certificate of the Manufacturer/Importer It is hereby certified that the DG824M Wireless ADSL Modem Gateway has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions. Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations. Voluntary Control Council for Interference (VCCI) Statement This equipment is in the second category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling. Customer Support Refer to the Support Information Card that shipped with your DG824M Wireless ADSL Modem Gateway. World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer or Netscape are required. iii iv Contents Chapter 1 About This Guide Audience .........................................................................................................................1-1 Scope .............................................................................................................................1-1 Typographical Conventions ............................................................................................1-2 Special Message Formats ..............................................................................................1-2 How to Use the HTML Version of this Manual ................................................................1-3 How to Print this Manual .................................................................................................1-4 Chapter 2 Introduction About the Gateway .........................................................................................................2-1 Key Features ..................................................................................................................2-1 802.11b Standards-based Wireless Networking ......................................................2-2 A Powerful, True Firewall .........................................................................................2-2 Content Filtering .......................................................................................................2-3 Auto Sensing and Auto UplinkTM LAN Ethernet Connections ..................................2-3 Protocol Support ......................................................................................................2-3 Easy Installation and Management ..........................................................................2-4 What's in the Box? ..........................................................................................................2-5 The Gateway's Front Panel ......................................................................................2-6 The Gateway's Rear Panel ......................................................................................2-7 Chapter 3 Connecting the Gateway to the Internet What You Will Need Before You Begin ...........................................................................3-1 ADSL Microfilter Requirements ................................................................................3-1 ADSL Microfilter .................................................................................................3-1 ADSL Microfilter with Built-In Splitter .................................................................3-2 Ethernet Cabling Requirements ...............................................................................3-2 Computer Hardware Requirements .........................................................................3-2 Contents v LAN Configuration Requirements ............................................................................3-2 Internet Configuration Requirements .......................................................................3-3 Where Do I Get the Internet Configuration Parameters? .........................................3-3 Record Your Internet Connection Information ..........................................................3-4 Connecting the DG824M to Your LAN ............................................................................3-5 How to Connect the Gateway ..................................................................................3-5 Connecting the DG824M to the Internet .........................................................................3-9 Auto-Detecting Your Internet Connection Type ........................................................3-9 Wizard-Detected PPPoE Login Account Setup ......................................................3-10 Wizard-Detected PPPoA Login Account Setup ......................................................3-12 Wizard-Detected Dynamic IP Account Setup .........................................................3-14 Wizard-Detected IP Over ATM Account Setup ......................................................3-15 Wizard-Detected Fixed IP (Static) Account Setup ..................................................3-16 Testing Your Internet Connection ..................................................................................3-17 Manually Configuring Your Internet Connection ...........................................................3-18 Manual Configuration .............................................................................................3-19 Chapter 4 Wireless Configuration Considerations for a Wireless Network ..........................................................................4-1 Observe Performance, Placement, and Range Guidelines .....................................4-1 Implement Appropriate Wireless Security ................................................................4-2 Understanding Wireless Settings ...................................................................................4-3 How to Set Up and Test Basic Wireless Connectivity ..............................................4-4 Restricting Wireless Access to Your Network ..........................................................4-5 Restricting Access to Your Network by Turning Off Wireless Connectivity ........4-6 Restricting Wireless Access Based on the Wireless Network Name (SSID) .....4-6 Restricting Wireless Access Based on the Trusted PCs List .............................4-6 Choosing WEP Authentication and Security Encryption Methods ...........................4-8 Authentication Type Selection ...........................................................................4-8 Encryption Choices ............................................................................................4-9 How to Configure WEP ............................................................................................4-9 Chapter 5 Protecting Your Network Protecting Access to Your DG824M Wireless ADSL Modem Gateway ..........................5-1 How to Change the Built-In Password .....................................................................5-1 vi Contents Changing the Administrator Login Timeout ..............................................................5-2 Configuring Basic Firewall Services ...............................................................................5-2 Blocking Keywords, Sites, and Services ..................................................................5-3 How to Block Keywords and Sites ...........................................................................5-3 Rules ..............................................................................................................................5-5 Inbound Rules (Port Forwarding) .............................................................................5-7 Inbound Rule Example: A Local Public Web Server ..........................................5-7 Inbound Rule Example: Allowing Videoconferencing ........................................5-9 Considerations for Inbound Rules .....................................................................5-9 Outbound Rules (Service Blocking) .......................................................................5-10 Outbound Rule Example: Blocking Instant Messenger ...................................5-10 Order of Precedence for Rules ..............................................................................5-12 Services ........................................................................................................................5-13 How to Define Services ..........................................................................................5-13 Setting Times and Scheduling Firewall Services ..........................................................5-14 How to Set Your Time Zone ...................................................................................5-14 How to Schedule Firewall Services ........................................................................5-16 Chapter 6 Managing Your Network Backing Up, Restoring, or Erasing Your Settings ...........................................................6-1 How to Back Up the Configuration to a File .............................................................6-1 How to Restore a Configuration from a File .............................................................6-2 How to Erase the Configuration ...............................................................................6-2 Upgrading the Gateway's Firmware ...............................................................................6-2 How to Upgrade the Gateway Firmware ..................................................................6-3 Network Management Information .................................................................................6-4 Viewing Gateway Status and Usage Statistics .........................................................6-4 Viewing Attached Devices ........................................................................................6-8 Viewing, Selecting, and Saving Logged Information ................................................6-8 Selecting What Information to Log ..................................................................6-10 Saving Log Files on a Server .......................................................................... 6-11 Examples of log messages .................................................................................... 6-11 Activation and Administration .......................................................................... 6-11 Dropped Packets ............................................................................................. 6-11 Enabling Security Event E-mail Notification .................................................................6-12 Contents vii Running Diagnostic Utilities and Rebooting the Router ................................................6-13 Enabling Remote Management ....................................................................................6-14 Configure Remote Management ............................................................................6-14 Chapter 7 Advanced Configuration Configuring Advanced Security ......................................................................................7-1 Setting Up A Default DMZ Server ............................................................................7-1 How to Configure a Default DMZ Server. .................................................................7-2 Respond to Ping on Internet WAN Port ...................................................................7-2 Configuring LAN IP Settings ...........................................................................................7-2 DHCP .......................................................................................................................7-5 Use Gateway as DHCP server ..........................................................................7-5 Reserved IP addresses .....................................................................................7-6 How to Configure LAN TCP/IP Settings ...................................................................7-6 Configuring Dynamic DNS .......................................................................................7-7 How to Configure Dynamic DNS ..............................................................................7-8 Using Static Routes ........................................................................................................7-9 Static Route Example ...............................................................................................7-9 How to Configure Static Routes .............................................................................7-10 Chapter 8 Troubleshooting Basic Functioning ...........................................................................................................8-1 Power LED Not On ...................................................................................................8-2 Test LED Never Turns On or Test LED Stays On .....................................................8-2 LAN or WAN Port LEDs Not On ...............................................................................8-2 Troubleshooting the Web Configuration Interface ..........................................................8-3 Troubleshooting the ISP Connection ..............................................................................8-4 ADSL link .................................................................................................................8-4 WAN LED Blinking Yellow ..................................................................................8-4 WAN LED Off .....................................................................................................8-4 Obtaining a WAN IP Address ...................................................................................8-5 Troubleshooting PPPoE or PPPoA ..........................................................................8-6 Troubleshooting Internet Browsing ..........................................................................8-6 Troubleshooting a TCP/IP Network Using the Ping Utility ..............................................8-7 Testing the LAN Path to Your Router .......................................................................8-7 viii Contents Testing the Path from Your PC to a Remote Device ................................................8-8 Restoring the Default Configuration and Password ........................................................8-8 Using the Default Reset button ................................................................................8-9 Problems with Date and Time .........................................................................................8-9 Appendix A Technical Specifications Appendix B Network and Routing Basics Related Publications ...................................................................................................... B-1 Basic Router Concepts .................................................................................................. B-1 What is a Router? ................................................................................................... B-2 Routing Information Protocol ................................................................................... B-2 IP Addresses and the Internet ................................................................................. B-2 Netmask .................................................................................................................. B-4 Subnet Addressing .................................................................................................. B-5 Private IP Addresses ............................................................................................... B-7 Single IP Address Operation Using NAT ................................................................. B-8 MAC Addresses and Address Resolution Protocol ................................................. B-9 Related Documents ................................................................................................. B-9 Domain Name Server ............................................................................................ B-10 IP Configuration by DHCP .................................................................................... B-10 Internet Security and Firewalls .................................................................................... B-10 What is a Firewall? .................................................................................................B-11 Stateful Packet Inspection ......................................................................................B-11 Denial of Service Attack .........................................................................................B-11 Ethernet Cabling ...........................................................................................................B-11 Category 5 Cable Quality ...................................................................................... B-12 Inside Twisted Pair Cables .................................................................................... B-13 Uplink Switches, Crossover Cables, and MDI/MDIX Switching ............................ B-14 Appendix C Preparing Your Network Preparing Your Computers for TCP/IP Networking ....................................................... C-1 Configuring Windows 95, 98, and Me for TCP/IP Networking ....................................... C-2 Install or Verify Windows Networking Components ................................................. C-2 Enabling DHCP to Automatically Configure TCP/IP Settings in Windows 95B, 98, and Me C-4 Contents ix Selecting Windows' Internet Access Method .......................................................... C-6 Verifying TCP/IP Properties .................................................................................... C-6 Configuring Windows NT4, 2000 or XP for IP Networking ............................................ C-7 Install or Verify Windows Networking Components ................................................. C-7 DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4 ............................... C-8 DHCP Configuration of TCP/IP in Windows XP ..................................................... C-8 DHCP Configuration of TCP/IP in Windows 2000 ................................................ C-10 DHCP Configuration of TCP/IP in Windows NT4 .................................................. C-13 Verifying TCP/IP Properties for Windows XP, 2000, and NT4 .............................. C-15 Configuring the Macintosh for TCP/IP Networking ...................................................... C-16 MacOS 8.6 or 9.x .................................................................................................. C-16 MacOS X ............................................................................................................... C-16 Verifying TCP/IP Properties for Macintosh Computers ......................................... C-17 Verifying the Readiness of Your Internet Account ....................................................... C-18 Are Login Protocols Used? ................................................................................... C-18 What Is Your Configuration Information? .............................................................. C-18 Obtaining ISP Configuration Information for Windows Computers ....................... C-19 Obtaining ISP Configuration Information for Macintosh Computers ..................... C-20 Restarting the Network ................................................................................................ C-21 Appendix D Wireless Networking Basics Wireless Networking Overview ...................................................................................... D-1 Infrastructure Mode ................................................................................................. D-1 Ad Hoc Mode (Peer-to-Peer Workgroup) ................................................................ D-2 Network Name: Extended Service Set Identification (ESSID) ................................ D-2 Authentication and WEP ................................................................................................ D-3 802.11b Authentication ............................................................................................ D-3 Open System Authentication ................................................................................... D-4 Shared Key Authentication ...................................................................................... D-4 Overview of WEP Parameters ................................................................................ D-5 Key Size .................................................................................................................. D-6 WEP Configuration Options .................................................................................... D-7 Wireless Channels ......................................................................................................... D-7 Glossary Index x Contents Chapter 1 About This Guide Thank you for purchasing the NETGEARTM DG824M Wireless ADSL Modem Gateway. Audience, Conventions, Scope This reference manual assumes that the reader has basic-to-intermediate computer and Internet skills. However, basic computer network, Internet, firewall, and networking technology tutorial information is provided in the Appendices. This guide uses the following typographical conventions: Table 1. italics bold times roman courier font Typographical conventions Emphasis, books, CDs, URL names User input Screen text, file and server names, extensions, commands, IP addresses Note: This format is used to highlight information of importance or special interest. This manual is written for the DG824M wireless gateway according to these specifications.: Table 1-1. Product Version Manual Publication Date Manual Specifications DG824M Wireless ADSL Modem Gateway July 2003 Note: Product updates are available on the NETGEAR, Inc. web site at http:// www.netgear.com/support/main.asp. Documentation updates are available on the NETGEAR, Inc. web site at http://www.netgear.com/docs. About This Guide 1 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway How to Use this Manual The HTML version of this manual includes these features. 1 2 3 Figure 1 -1: HTML version of this manual 1. Left pane. Use the left pane to view the Contents, Index, Search, and Favorites tabs. To view the HTML version of the manual, you must have a version 4 or later browser with Java or JavaScript enabled. To use the Favorites feature, your browser must be set to accept cookies. You can record a list of favorite pages in the manual for easy later retrieval. 2. Toolbar buttons. Use the toolbar buttons across the top to navigate, print pages, and more. ­ ­ ­ ­ ­ ­ 3. The Show in Contents button locates the currently displayed topic in the Contents tab. Previous/Next buttons display the topic that precedes or follows the current topic. The PDF button links to a PDF version of the full manual. The E-mail button enables you to send feedback by e-mail to Netgear support. The Print button prints the currently displayed topic. Using this button when a step-by-step procedure is displayed will send the entire procedure to your printer--you do not have to worry about specifying the correct range of pages. The Bookmark button bookmarks the currently displayed page in your browser. Right pane. Use the right pane to view the contents of the manual. Also, each page of the manual includes a "PDF of This Chapter" link at the top right which links to a PDF file containing just the currently selected chapter of the manual. About This Guide 2 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway How to Print this Manual To print this manual you man choose one of the following several options, according to your needs. · Printing a "How To" Sequence of Steps in the HTML View. Use the Print button on the upper right of the toolbar to print the currently displayed topic. Using this button when a step-by-step procedure is displayed will send the entire procedure to your printer--you do not have to worry about specifying the correct range of pages. Printing a Chapter. Use the "PDF of This Chapter" link at the top right of any page. ­ ­ ­ · Click "PDF of This Chapter" link at the top right of any page in the chapter you want to print. A new browser window opens showing the PDF version of the chapter you were viewing. Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper an printer ink by selecting this feature. · Printing the Full Manual. Use the PDF button in the toolbar at the top right of the browser window. ­ ­ ­ Click PDF button. A new browser window opens showing the PDF version of the chapter you were viewing. Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper an printer ink by selecting this feature. About This Guide 3 Chapter 2 Introduction This chapter describes the features of the NETGEAR DG824M Wireless ADSL Modem Gateway. The DG824M wireless gateway is a combination of a built-in ADSL modem, router, 4-port switch, and firewall which enables your entire network to safely share an Internet connection that otherwise is used by a single PC. Note: If you are unfamiliar with networking and routing, refer to Appendix B, "Network and Routing Basics," to become more familiar with the terms and procedures used in this manual. About the Gateway The DG824M Wireless ADSL Modem Gateway provides continuous, high-speed 11 Mbps access between your wireless and Ethernet devices. The DG824M wireless gateway enables your entire network to share an Internet connection through the built-in ADSL modem that otherwise is used by a single PC. With minimum setup, you can install and use the gateway within minutes. The DG824M wireless gateway provides multiple Web content filtering options, plus e-mail browsing activity reporting and instant alerts. Parents and network administrators can establish restricted access policies based on time-of-day, website addresses and address keywords, and share high-speed ADSL Internet access for up to 253 personal computers. The included firewall and Network Address Translation (NAT) features protect you from hackers. Key Features The DG824M wireless gateway provides the following features: · · · A Powerful, True Firewall 802.11b Standards-based wireless networking Content Filtering Introduction 2-1 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway · · · · Auto Sensing and Auto UplinkTM LAN Ethernet Connections Extensive Internet Protocol Support Easy, web-based setup for installation and management A built-in ADSL modem These features are discussed below. 802.11b Standards-based Wireless Networking The DG824M wireless gateway includes an 802.11b-compliant wireless access point, providing continuous, high-speed 11 Mbps access between your wireless and Ethernet devices. The access point provides: · · · · 802.11b Standards-based wireless networking at up to 11 Mbps 64-bit and 128-bit WEP encryption security WEP keys can be generated manually or by passphrase Wireless access can be restricted by MAC address. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the DG824M is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include: · Denial of Service (DoS) protection Automatically detects and thwarts Denial of Service (DoS) attacks such as Ping of Death, SYN Flood, LAND Attack and IP Spoofing. Blocks unwanted traffic from the Internet to your LAN. Blocks access from your LAN to Internet locations or services that you specify as off-limits. Logs security incidents The DG824M will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. You can configure the gateway to email the log to you at specified intervals. You can also configure the gateway to send immediate alert messages to your email address or email pager whenever a significant event occurs. · · · 2-2 Introduction Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Content Filtering With its content filtering feature, the DG824M prevents objectionable content from reaching your PCs. The gateway allows you to control access to Internet content by screening for keywords within Web addresses. You can configure the gateway to log and report attempts to access objectionable Internet sites. Auto Sensing and Auto UplinkTM LAN Ethernet Connections With its internal 4-port 10/100 switch, the DG824M can connect to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. The local LAN ports are autosensing and capable of full-duplex or half-duplex operation. The gateway incorporates Auto UplinkTM technology. Each LOCAL Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a `normal' connection such as to a PC or an `uplink' connection such as to a switch or hub. That port will then configure itself to the correct configuration. This feature also eliminates the need to worry about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection. Protocol Support The DG824M supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). Appendix B, "Network and Routing Basics" provides further information on TCP/IP. · IP Address Sharing by NAT The DG824M allows several networked PCs to share an Internet account using only a single IP address, which may be statically or dynamically assigned by your Internet service provider (ISP). This technique, known as Network Address Translation (NAT), allows the use of an inexpensive single-user ISP account. Automatic Configuration of Attached PCs by DHCP The DG824M dynamically assigns network configuration information, including IP, gateway, and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies configuration of PCs on your local network. · Introduction 2-3 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway · DNS Proxy When DHCP is enabled and no DNS addresses are specified, the gateway provides its own address as a DNS server to the attached PCs. The gateway obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. Classical IP (RFC 1577) Some Internet service providers, in Europe for example, use Classical IP in their ADSL services. In such cases, the gateway is able to use the Classical IP address from the ISP. PPP over Ethernet (PPPoE) PPP over Ethernet is a protocol for connecting remote hosts to the Internet over an ADSL connection by simulating a dial-up connection. This feature eliminates the need to run a login program such as EnterNet or WinPOET on your PC. PPP over ATM (PPPoA) PPP over ATM is a protocol for connecting remote hosts to the Internet over an ADSL connection by simulating a ATM connection. Dynamic DNS Dynamic DNS services allow remote users to find your network using a domain name when your IP address is not permanently assigned. The gateway contains a client that can connect to many popular Dynamic DNS services to register your dynamic IP address. Universal Plug and Play (UPnP) UPnP is a networking architecture that provides compatibility among networking technology. UPnP compliant routers provide broadband users at home and small businesses with a seamless way to participate in online games, videoconferencing and other peer-to-peer services. · · · · · Easy Installation and Management You can install, configure, and operate the DG824M within minutes after connecting it to the network. The following features simplify installation and management tasks: · Browser-based management Browser-based configuration allows you to easily configure your gateway from almost any type of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. Smart Wizard The gateway automatically senses the type of Internet connection, asking you only for the information required for your type of ISP account. Introduction · 2-4 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway · Remote management The gateway allows you to login to the Web Management Interface from a remote location via the Internet. For security, you can limit remote management access to a specified remote IP address or range of addresses, and you can choose a nonstandard port number. Diagnostic functions The gateway incorporates built-in diagnostic functions such as Ping, DNS lookup, and remote reboot. These functions allow you to test Internet connectivity and reboot the gateway. You can use these diagnostic functions directly from the DG824M when your are connect on the LAN or when you are connected over the Internet via the remote management function. Visual monitoring The gateway's front panel LEDs provide an easy way to monitor its status and activity. Flash EPROM for firmware upgrade · · · What's in the Box? The product package should contain the following items: · · · · · · DG824M Wireless ADSL Modem Gateway AC power adapter (varies by region) Category 5 (Cat 5) Ethernet cable Telephone cable Microfilters (quantity and type vary by region) Model DG824M Resource CD, including: -- This guide -- Application Notes A Quick Printed Installation Guide Warranty and Support Information Cards · · If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair. Introduction 2-5 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway The Gateway's Front Panel The DG824M Wireless ADSL Modem Gateway front panel shown below contains status LEDs. Figure 2-1: DG824M Front Panel You can use the LEDs to verify various conditions. Table 2-1 lists and describes each LED on the front panel of the router. These LEDs are green when lit. Table 2-1. Label Power LED Descriptions Activity On Off On Off Blink -- Amber On -- Green Blink -- Green On Off On (Green) Blink (Green) On (Amber) Blink (Amber) Off Description Power is supplied to the router. Power is not supplied to the router. The system is initializing. The system is ready and running. Indicates ADSL training. The Internet port has detected a link with an attached device. Data is being transmitted or received by the Internet port. Indicates that the Wireless port is initialized. The Wireless Access Point is turned off. The Local port has detected link with a 100 Mbps device. Data is being transmitted or received at 100 Mbps. The Local port has detected link with a 10 Mbps device. Data is being transmitted or received at 10 Mbps. No link is detected on this port. Test Internet Wireless LAN 2-6 Introduction Reference Manual for the Model DG824M Wireless ADSL Modem Gateway The Gateway's Rear Panel The rear panel of the DG824M Wireless ADSL Modem Gateway (Figure 2-2) contains port connections. Figure 2-2: DG824M Rear Panel Viewed from left to right, the rear panel contains the following elements: · · · · · AC power adapter outlet Wireless antenna Factory Default Reset push button Four Local Ethernet RJ-45 ports for connecting the gateway to the local computers ADSL port for connecting the gateway to an ADSL line Introduction 2-7 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway 2-8 Introduction Chapter 3 Connecting the Gateway to the Internet This chapter describes how to set up the gateway on your Local Area Network (LAN), connect to the Internet, how to configure your DG824M Wireless ADSL Modem Gateway for Internet access using the Setup Wizard, or how to manually configure your Internet connection. What You Will Need Before You Begin You need to prepare these three things before you can establish an Internet connection through your gateway: 1. 2. 3. The gateway connected to an ADSL line and a computer properly connected to the gateway as explained below. Active Internet service such as that provided by an ADSL account. The Internet Service Provider (ISP) configuration information for your DSL account. ADSL Microfilter Requirements ADSL technology uses the same wires as your telephone service. However, ADSL adds signals to the telephone lines which create noise in the telephone service. You must use ADSL microfilters to filter out these signals before they reach your telephone. ADSL Microfilter Phone Figure 3-1: ADSL microfilter Each device such as a telephone, fax machine, answering machine, or caller ID display will require an ADSL microfilter. Connecting the Gateway to the Internet 3-1 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Note: Do not connect the DG824M to the ADSL line through a microfilter unless the microfilter is a combination microfilter/splitter specifically designed for this purpose. Doing so will prevent the built-in ADSL modem in the DG824M from establishing a connection to the Internet. If you have any doubts about this, connect the DG824M directly to the ADSL line. ADSL Microfilter with Built-In Splitter DSL Phone Line Figure 3-2: ADSL microfilter with built-in splitter Use an ADSL microfilter with built-in splitter when there is a single wall outlet must provide connectivity for both the DG824M and telephone equipment. Ethernet Cabling Requirements The DG824M wireless gateway connects to your Ethernet LAN via twisted-pair cables. If the computer will connect to your network at 100 Mbps, you must use a Category 5 (CAT5) cable such as the one provided with your gateway. Computer Hardware Requirements To use the DG824M wireless gateway on your network, each computer must have an installed Ethernet adapter and an Ethernet cable, or a 802.11b wireless adapter. LAN Configuration Requirements For the initial connection to the Internet and configuration of your gateway, you will need to connect a computer to the gateway which is set to automatically get its TCP/IP configuration from the gateway via DHCP. Note: Please refer to Appendix C, "Preparing Your Network for assistance with DHCP configuration. 3-2 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Internet Configuration Requirements Depending on how your ISP set up your Internet account, you will need one or more of these configuration parameters to connect your gateway to the Internet: · · · · · · VPI/VCI parameters Multiplexing Method Host and Domain Names ISP Login Name and Password ISP Domain Name Server (DNS) Addresses Fixed or Static IP Address Where Do I Get the Internet Configuration Parameters? There are several ways you can gather the required Internet connection information. · Your ISP should have provided you with all the information needed to connect to the Internet. If you cannot locate this information, you can ask your ISP to provide it or you can try one of the options below. If you have a computer already connected using the active Internet access account, you can gather the configuration information from that computer. · · · · For Windows 95/98/ME, open the Network control panel, select the TCP/IP entry for the Ethernet adapter, and click Properties. For Windows 2000/XP, open the Local Area Network Connection, select the TCP/IP entry for the Ethernet adapter, and click Properties. For Macintosh computers, open the TCP/IP or Network control panel. · You may also refer to the DG824M Resource CD for the NETGEAR Router ISP Guide which provides Internet connection information for many ISPs. Once you locate your Internet configuration parameters, you may want to record them on the page below according to the instructions in "Record Your Internet Connection Information" on page 3-4. Connecting the Gateway to the Internet 3-3 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Record Your Internet Connection Information Print this page. Fill in the configuration parameters from your Internet Service Provider (ISP). ISP Multiplexing Method and Virtual Circuit Number: The default settings of your DG824M Wireless ADSL Modem Gateway will work fine for most ISPs. However, some ISPs use a specific Multiplexing Method or a Virtual Circuit Number for either the VPI or VCI. If your ISP provided you with a specific Multiplexing Method or VPI/VCI number, then fill in the following: Multiplexing Method, circle one: LLC-based or VC-based VPI: ________ A number between 0 and 255. VCI: ___________ A number between 1and 65535. ISP Login Name: The login name and password are case sensitive and must be entered exactly as given by your ISP. Some ISPs use your full e-mail address as the login name. The Service Name is not required by all ISPs. If you use a login name and password, then fill in the following: Login Name: ______________________________ Password: ____________________________ Service Name: _____________________________ Fixed or Static IP Address: If you have a static IP address, record the following information. For example, 169.254.141.148 could be a valid IP address. Fixed or Static Internet IP Address: ______ . ______ . ______ . ______ Gateway IP Address: ______ . ______ . ______ . ______ Subnet Mask: ______ . ______ . ______ . ______ ISP DNS Server Addresses: If you were given DNS server addresses, fill in the following: Primary DNS Server IP Address: ______ . ______ . ______ . ______ Secondary DNS Server IP Address: ______ . ______ . ______ . ______ Host and Domain Names: Some ISPs use a specific host or domain name like CCA7324-A or home. If you did not get host or domain names, use the following examples as a guide: · · If your main e-mail account with your ISP is aaa@yyy.com, then use aaa as your host name. Your ISP might call this your account, user, host, computer, or system name. If your ISP's mail server is mail.xxx.yyy.com, then use xxx.yyy.com as the domain name. ISP Host Name: _________________________ ISP Domain Name: _______________________ For Wireless Access: For configuration of the wireless network, record the following: Wireless Network Name (SSID): __________________ WEP Authentication (circle one): Automatic, Open System, or Shared Key WEP Encryption (circle one): 64 or 128; Passphrase or Key: ____________________ 3-4 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Connecting the DG824M to Your LAN This section provides instructions for connecting the DG824M wireless gateway. Note: The Resource CD included with your gateway contains an animated Installation Assistant to help you through this procedure. How to Connect the Gateway There are three steps to connecting your firewall: 1. 2. 3. 4. Connect the gateway to your ADSL line Connect the gateway to the computers on your network Log in to the gateway Connect to the Internet Follow the steps below to connect your gateway to your network. You can also refer to the Resource CD included with your gateway which contains an animated Installation Assistant to help you through this procedure. Before you begin, locate the ADSL configuration information from your Internet Service Provider (ISP). 1. CONNECT THE DG824M TO THE ADSL LINE. a. You need to install a filter on every telephone or device that shares the same phone number as your ADSL gateway. Select the filter that came with your gateway. One-Line Filter Phone Splitter Two-Line Filter With Splitter DSL Phone Figure 3-3: ADSL microfilters Note: If you purchased the DG824M in a country where the filter is not included, you must acquire one. Connecting the Gateway to the Internet 3-5 Line Reference Manual for the Model DG824M Wireless ADSL Modem Gateway b. Two-Line Filter Example. Insert the two-line filter into the phone outlet and connect the phone to the phone line connector (A). Line DSL Phone A Figure 3-4: Connecting an ADSL microfilter and phone Note: To use a one-line filter with a separate splitter, insert the splitter into the phone outlet, connect the one-line filter to the splitter, and connect the phone to the filter. 2. CONNECT THE DG824M TO THE INTERNET. Note: Improperly connecting a filter to your DG824M wireless gateway will block your ADSL connection. a. Turn off your computer. b. Connect the ADSL port of the DG824M to the ADSL port (B) of the two-line filter. Line DSL Phone B Wireless ADSL Modem Gateway DG824M Figure 3-5: Connecting DG824M wireless gateway to an ADSL microfilter and phone 3-6 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway c. Connect the Ethernet cable (C) from your DG824M's LAN port to the Ethernet adapter in your computer. Line DSL Phone C Wireless ADSL Modem Gateway DG824M Figure 3-6: Connecting a computer to the DG824M wireless gateway Note: The DG824M wireless gateway incorporates Auto UplinkTM technology. Each Ethernet LAN port will automatically sense whether the cable plugged into the port should have a 'normal' connection (e.g. connecting to a PC) or an 'uplink' connection (e.g. connecting to a switch or hub). That port will then configure itself to the correct configuration. This feature also eliminates the need to worry about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection. d. Connect the power adapter to the gateway and plug it in to a power outlet. Verify the following: The power light is lit after turning on the gateway. The ADSL link light is solid green, indicating a link has been established to the cable network. e. Now, turn on your computer. If software usually logs you in to your Internet connection, do not run that software or cancel it if it starts automatically. The local lights are lit for any connected computers. Note: For instructions on connecting computers to the DG824M via wireless links, please see the Chapter 4, "Wireless Configuration". 3. LOG IN TO THE DG824M. Note: Your computer needs to be configured for DHCP. For instructions on configuring for DHCP, please see Appendix C in the Reference Manual on the Model DG824M Resource CD. Connecting the Gateway to the Internet 3-7 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway a. Connect to the gateway by typing http://192.168.0.1 in the address field of Internet Explorer or Netscape® Navigator. Figure 3-7: Log in to the gateway A login window opens as shown below: Figure 3-8: Login window b. When prompted, enter admin for the user name and password for the password, both in lower case letters. After logging in, you will see the menu below. Figure 3-9: Setup Wizard 3-8 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway 4. CONNECT TO THE INTERNET If you do not see the menu above, click the Setup Wizard link on the upper left of the main menu. Click the Yes button in the Setup Wizard, and click the Next button to let the Setup Wizard automatically detect what type of Internet connection your ISP has provided. b. Select your country and the multiplexing method will update with the preset defaults. The multiplexing method preset default settings will usually work. Only change the multiplexing method if you are sure your ISP requires VPI or VCI settings that are different from the default values. Incorrect VPI or VCI settings will prevent you from connecting to the Internet. a. Note: You must select a country before clicking Next to proceed with the Setup Wizard. c. Click the Next button to let the Setup Wizard detect the type of connection you have from your ISP. Follow the steps in the subsequent screens of the Setup Wizard to input the Internet configuration parameters from your ISP. Note: If you were unable to connect to the gateway, please refer to Chapter 8, "Troubleshooting". Also, improperly connecting a filter between the gateway and your phone line will block your ADSL connection. Connecting the DG824M to the Internet The gateway is now properly attached to your network. You are now ready to configure your gateway to connect to the Internet. There are two ways you can configure your gateway to connect to the Internet: · · Let the DG824M auto-detect the type of Internet connection you have and configure it. Manually choose which type of Internet connection you have and configure it. These options are described below. In either case, unless your ISP automatically assigns your configuration automatically via DHCP, you will need the configuration parameters from your ISP you recorded in "Record Your Internet Connection Information" on page 3-4. Auto-Detecting Your Internet Connection Type The Web Configuration Manager built in to the gateway contains a Setup Wizard that can automatically determine your network connection type. 1. If your gateway has not yet been configured, the Setup Wizard shown in Figure 3-9 should launch automatically. 3-9 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Note: If, instead of the Setup Wizard menu, the main menu of the gateway's Configuration Manager as shown in Figure 3-15 appears, click the Setup Wizard link in the upper left to bring up this menu. When the Wizard launches, select Yes in the menu below to allow the gateway to automatically determine your connection. Note: You must select a country before clicking Next to proceed with the Setup Wizard. 2. Click Next The Setup Wizard will now check for the following connection types: · · · Dynamic IP assignment A login protocol such as PPPoE or PPPoA Fixed IP address assignment Next, the Setup Wizard will report which connection type it has discovered, and then display the appropriate configuration menu. If the Setup Wizard finds no connection, you will be prompted to check the physical connection between your gateway and the ADSL line. When the connection is properly made, the gateway's Internet LED should be on. The procedures for filling in the configuration menu for each type of connection follow below. 3-10 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Wizard-Detected PPPoE Login Account Setup If the Setup Wizard determines that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you will be directed to a menu like the PPPoE menu in Figure 3-10: Figure 3-10: Setup Wizard menu for PPPoE login accounts 1. 2. Enter the PPPoE login user name, password, and Service Name (if required) as provided by your ISP. These fields are case sensitive. If you wish to change the login timeout, enter a new value in minutes. This determines how long the gateway keeps the Internet connection active after there is no Internet activity from the LAN. Entering a timeout value of zero means never log out. Note: You will no longer need to launch the ISP's login program on your PC in order to access the Internet. When you start an Internet application, your gateway will automatically log you in. 3. Domain Name Server (DNS) Address: If you know that your ISP does not automatically transmit DNS addresses to the gateway during login, select "Use these DNS servers" and enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. Note: If you enter a DNS address, after you finish configuring the gateway, you must reboot your PCs so that the settings take effect. 4. Click on Apply to save your settings. Connecting the Gateway to the Internet 3-11 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway 5. Click on the Test button to test your Internet connection. If the NETGEAR website does not appear within one minute, refer to Chapter 8, "Troubleshooting". Wizard-Detected PPPoA Login Account Setup If the Setup Wizard determines that your Internet service account uses a login protocol such as PPP over ATM (PPPoA), you will be directed to a menu like the PPPoA menu in Figure 3-10: Figure 3-11: Setup Wizard menu for PPPoA login accounts 1. 2. Enter your Login and Password. These fields are case sensitive. If you wish to change the login timeout, enter a new value in minutes. This determines how long the gateway keeps the Internet connection active after there is no Internet activity from the LAN. Entering a timeout value of zero means never log out. Note: You will no longer need to launch the ISP's login program on your PC in order to access the Internet. When you start an Internet application, your gateway will automatically log you in. 3. Choose how your IP Address is configured. 3-12 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway · Get Dynamically from ISP: If your ISP uses DHCP to assign your IP address, select "Get Dynamically from ISP". Enter the IP address that your ISP assigned. Also enter the netmask and the Gateway IP address. The Gateway is the ISP's router to which your gateway will connect. Use Static IP Address: If your ISP has assigned you a permanent, fixed (static) IP address for your PC, select "Use static IP address". Enter the IP address that your ISP assigned. Also enter the netmask and the Gateway IP address. The Gateway is the ISP's router to which your gateway will connect. · 4. Domain Name Server (DNS) Address: These parameters may be necessary to access your ISP's services such as mail or news servers. If you leave the Domain Name field blank, the gateway will attempt to learn the domain automatically from the ISP. If this is not successful, you may need to enter it manually. If you know that your ISP does not automatically transmit DNS addresses to the gateway during login, select "Use these DNS servers" and enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. Note: If you enter a DNS address, after you finish configuring the gateway, you must reboot your PCs so that the settings take effect. 5. 6. Click on Apply to save your settings. Click on the Test button to test your Internet connection. If the NETGEAR website does not appear within one minute, refer to Chapter 8, "Troubleshooting". Connecting the Gateway to the Internet 3-13 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Wizard-Detected Dynamic IP Account Setup If the Setup Wizard determines that your Internet service account uses Dynamic IP assignment, you will be directed to the menu shown in Figure 3-12 below: Figure 3-12: Setup Wizard menu for Dynamic IP address 1. Enter your Account Name (may also be called Host Name) and Domain Name. These parameters may be necessary to access your ISP's services such as mail or news servers. If you leave the Domain Name field blank, the gateway will attempt to learn the domain automatically from the ISP. If this is not successful, you may need to enter it manually. If you know that your ISP does not automatically transmit DNS addresses to the gateway during login, select "Use these DNS servers" and enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. A DNS server is a host on the Internet that translates Internet names (such as www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of one or two DNS servers to your gateway during login. If the ISP does not transfer an address, you must obtain it from the ISP and enter it manually here. Note: If you enter a DNS address, after you finish configuring the gateway, you must reboot your PCs so that the settings take effect. 2. 3. The Router's MAC Address is the Ethernet MAC address that will be used by the gateway on the Internet port. Connecting the Gateway to the Internet 3-14 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway If your ISP allows access from only one specific computer's Ethernet MAC address, select "Use this MAC address." The gateway will then capture and use the MAC address of the computer that you are now using. You must be using the one computer that is allowed by the ISP. Otherwise, you can type in a MAC address. Note: Some ISPs will register the Ethernet MAC address of the network interface card in your PC when your account is first opened. They will then only accept traffic from the MAC address of that PC. This feature allows your gateway to masquerade as that PC by using its MAC address. 4. 5. Click on Apply to save your settings. Click on the Test button to test your Internet connection. If the NETGEAR website does not appear within one minute, refer to Chapter 8, "Troubleshooting"". Wizard-Detected IP Over ATM Account Setup If the Setup Wizard determines that your Internet service account uses IP Over ATM Classical IP assignment (RFC1577), you will be directed to the menu shown in Figure 3-13 below: Figure 3-13: Setup Wizard menu for IP Over ATM (Classical IP) address 1. Enter your assigned IP Address and Subnet Mask. This information should have been provided to you by your ISP. You will need the configuration parameters from your ISP you recorded in "Record Your Internet Connection Information" on page 3-4. Enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. DNS servers are required to perform the function of translating an Internet name such as www.netgear.com to a numeric IP address. For a fixed IP address configuration, you must obtain DNS server addresses from your ISP and enter them manually here. 2. 3. Click on Apply to save the settings. 3-15 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway 4. Click on the Test button to test your Internet connection. If the NETGEAR website does not appear within one minute, refer to Chapter 8, "Troubleshooting". Wizard-Detected Fixed IP (Static) Account Setup If the Setup Wizard determines that your Internet service account uses Fixed IP assignment, you will be directed to the menu shown in Figure 3-13 below: Figure 3-14: Setup Wizard menu for Fixed IP address 1. 2. If required, enter the Account Name and Domain Name from your ISP. Choose "Use Static IP Address" or Use IP Over ATM (IPoA -- RFC1483 Routed) according to the information from your ISP. If you choose IPoA, the Setup Wizard will be able to detect the Gateway IP Address but you will still need to provide the IP Address. Enter your assigned IP Address, Subnet Mask, and the IP Address of your ISP's gateway router. This information should have been provided to you by your ISP. You will need the configuration parameters from your ISP you recorded in "Record Your Internet Connection Information" on page 3-4. Enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. 3. 4. 3-16 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway DNS servers are required to perform the function of translating an Internet name such as www.netgear.com to a numeric IP address. For a fixed IP address configuration, you must obtain DNS server addresses from your ISP and enter them manually here. 5. 6. Click on Apply to save the settings. Click on the Test button to test your Internet connection. If the NETGEAR website does not appear within one minute, refer to Chapter 8, "Troubleshooting". Testing Your Internet Connection After completing the Internet connection configuration, your can test your Internet connection. Log in to the gateway, then, from the Setup Basic Settings link, click on the Test button. If the NETGEAR website does not appear within one minute, refer to Chapter 8, "Troubleshooting". Your gateway is now configured to provide Internet access for your network. Your gateway automatically connects to the Internet when one of your computers requires access. It is not necessary to run a dialer or login application such as Dial-Up Networking or Enternet to connect, log in, or disconnect. These functions are performed by the gateway as needed. To access the Internet from any computer connected to your gateway, launch a browser such as Microsoft Internet Explorer or Netscape Navigator. You should see the gateway's Internet LED blink, indicating communication to the ISP. The browser should begin to display a Web page. The following chapters describe how to configure the Advanced features of your gateway, and how to troubleshoot problems that may occur. Connecting the Gateway to the Internet 3-17 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Manually Configuring Your Internet Connection You can manually configure your gateway using the menu below, or you can allow the Setup Wizard to determine your configuration as described in the previous section. ISP Does Not Require Login ISP Does Require Login Figure 3-15: Basic Settings menu 3-18 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Manual Configuration You can manually configure the gateway in the Basic Settings menu shown in Figure 3-15 using these steps: 1. If your ISP ADSL service requires setting the Multiplexing Method and VPI/VCI parameters, click on the ADSL Settings link from the main menu, fill in the settings your ISP provided, and click Apply. Usually the default settings will work fine and you can skip this step. Click the Basic Settings link on the Setup menu. · If your Internet connection does require login. Select Yes and fill in the settings according to the instructions below. Note: You will no longer need to launch the ISP's login program on your PC in order to access the Internet. When you start an Internet application, your gateway automatically logs you in. -- Choose the encapsulation method your ISP uses. ­ For PPPoE Select "Get Dynamically from ISP" if your ISP uses DHCP to assign your IP address. Your ISP will automatically assign this address. Select "Use Static IP Address" if your ISP has assigned you a permanent, fixed (static) IP address. Enter the IP address that your ISP assigned. Enter the login name (frequently the email address your ISP provided), password, and service name (if required). If you wish to change the login timeout, enter a new value in minutes. This determines how long the gateway keeps the Internet connection active after there is no Internet activity from the LAN. Entering an Idle Timeout value of zero means never log out. 2. Connecting the Gateway to the Internet 3-19 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway ­ For PPPoA Select "Get Dynamically from ISP" if your ISP uses DHCP to assign your IP address. Your ISP will automatically assign this address. Select "Use Static IP Address" if your ISP has assigned you a permanent, fixed (static) IP address. Enter the IP address that your ISP assigned. Enter the login name (frequently the email address your ISP provided), and password. If you wish to change the login timeout, enter a new value in minutes. This determines how long the gateway keeps the Internet connection active after there is no Internet activity from the LAN. Entering an Idle Timeout value of zero means never log out. -- DNS Address Select "Get Dynamically from ISP" if your ISP uses DHCP to assign your IP address. Select "Use These DNS Servers" if your ISP has assigned you DNS server addresses. Enter the Primary and Secondary DNS server addresses that your ISP provided. · If your Internet connection does not require a login. Select No and fill in the settings according to the instructions below. -- Enter your Account Name (may also be called Host Name) and Domain Name. These parameters may be necessary to access your ISP's mail or news servers. -- Internet IP Address: ­ ­ Select "Get Dynamically from ISP" if your ISP uses DHCP to assign your IP address. Your ISP will automatically assign these addresses. Select "Use Static IP Address" if your ISP has assigned you a permanent, fixed (static) IP address. Enter the IP address that your ISP assigned. Also enter the IP Subnet Mask and the Gateway IP Address. The Gateway is the ISP's router to which your gateway will connect. Select IP Over ATM (IPoA) if your ISP uses Classical IP Addresses (RFC1577). Enter the IP address, IP Subnet Mask, and Gateway IP Addresses that your ISP assigned. ­ 3-20 Connecting the Gateway to the Internet Reference Manual for the Model DG824M Wireless ADSL Modem Gateway -- Domain Name Server (DNS) Address: If you know that your ISP does not automatically transmit DNS addresses to the gateway during login, select "Use these DNS servers" and enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. A DNS server is a host on the Internet that translates Internet names (such as www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of one or two DNS servers to your gateway during login. If the ISP does not transfer an address, you must obtain it from the ISP and enter it manually here. -- Gateway's MAC Address: This section determines the Ethernet MAC address that will be used by the gateway on the Internet port. Some ISPs will register the Ethernet MAC address of the network interface card in your PC when your account is first opened. They will then only accept traffic from the MAC address of that PC. This feature allows your gateway to masquerade as that PC by "cloning" its MAC address. To change the MAC address, select "Use this Computer's MAC address." The gateway will then capture and use the MAC address of the PC that you are now using. You must be using the one PC that is allowed by the ISP. Or, select "Use this MAC address" and enter it. 3. 4. Click Apply to save your settings. Click on the Test button to test your Internet connection. If the NETGEAR website does not appear within one minute, refer to Chapter 8, "Troubleshooting". Connecting the Gateway to the Internet 3-21 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway 3-22 Connecting the Gateway to the Internet Chapter 4 Wireless Configuration This chapter describes how to configure the wireless features of your DG824M Wireless ADSL Modem Gateway. Considerations for a Wireless Network In planning your wireless network, you should consider the level of security required. You should also select the physical placement of your gateway in order to maximize the network speed. For further information, refer to Appendix D, "Wireless Networking Basics." Observe Performance, Placement, and Range Guidelines The operating distance or range of your wireless connection can vary significantly based on the physical placement of the wireless firewall. The latency, data throughput performance, and notebook power consumption also vary depending on your configuration choices. Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the router. For complete range/ performance specifications, please see Appendix A, "Technical Specifications." For best results, place your firewall: · · · · Near the center of the area in which your PCs will operate. In an elevated location such as a high shelf where the wirelessly connected PCs have line-of-sight access (even if through walls). Away from sources of interference, such as PCs, microwaves, and 2.4 GHz cordless phones. Away from large metal surfaces. The time it takes to establish a wireless connection can vary depending on both your security settings and placement. WEP connections can take slightly longer to establish. Also, WEP encryption can consume more battery power on a notebook PC. Wireless Configuration 4-1 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Implement Appropriate Wireless Security Note: Indoors, computers can connect over 802.11b wireless networks at a maximum range of up to 300 feet. Such distances can allow for others outside of your immediate area to access your network. Unlike wired network data, your wireless data transmissions can extend beyond your walls and can be received by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The DG824M wireless gateway provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs. DG824M Wireless Data Security Options Range: Up to 300 Feet 1) Open System: Easy but no security 2) MAC Access List: No data security 3) WEP: Security but some performance impact Figure 4-1: DG824M wireless data security options Restricting access by MAC address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the wireless link is fully exposed. To block a determined eavesdropper, you should use one of the data encryption options of the firewall. Wired Equivalent Privacy (WEP) data encryption provides data security. 4-2 Wireless Configuration Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Understanding Wireless Settings To configure the Wireless interface of your gateway, click the Wireless link in the main menu of the browser interface. The Wireless Settings menu will appear, as shown below: Figure 4-2: Wireless Settings menu In the Wireless Network section are the following parameters: · Identification. -- Regulatory Domain. This field displays the region of operation for which the wireless interface is intended. It may not be legal to operate the gateway in a region other than the region shown here. -- Station Name. The gateway model number. -- SSID (Service Set ID). This is also known as the wireless network name. Enter a value of up to 32 alphanumeric characters. The same SSID must be assigned to all wireless devices in your network. The default SSID is Wireless. Wireless Configuration 4-3 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway · Wireless Access Point. -- Enable Wireless Access Point. This field lets you turn off or turn on the wireless access point built in to the gateway. The wireless icon on the front of the gateway will also display the current status of the Wireless Access Point to let you know if it is disabled or enabled. -- Allow Broadcast of Name (SSID). If Enabled, the SSID is broadcast to all Wireless Stations. Stations which have no SSID (or a "null" value) can then adopt the correct SSID for connections to this Access Point. · Options. -- Channel No. This field determines which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby access point. -- WEP Status. Identifies the WEP options configured. · Access Point. -- All wireless stations. Any wireless station can connect. -- Trusted PCs only. Only PCs with MAC address which you have specified can connect. How to Set Up and Test Basic Wireless Connectivity Follow the instructions below to set up and test basic wireless connectivity. Once you have established basic wireless connectivity, you can enable security settings appropriate to your needs. 1. Log in to the DG824M firewall at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever LAN address and password you have set up. Click the Wireless Settings link in the main menu of the DG824M firewall. Choose a suitable descriptive name for the wireless network name (SSID). In the SSID box, enter a value of up to 32 alphanumeric characters. The default SSID is Wireless. Note: The SSID of any wireless access adapters must match the SSID you configure in the DG824M Wireless ADSL Modem Gateway. If they do not match, you will not get a wireless connection to the DG824M. 2. 3. 4. 5. Set the Region. Select the region in which the wireless interface will operate. Set the Channel. The default channel is 6. 4-4 Wireless Configuration Reference Manual for the Model DG824M Wireless ADSL Modem Gateway This field determines which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby wireless router or access point. Select a channel that is not being used by any other wireless networks within several hundred feet of your firewall. For more information on the wireless channel frequencies please refer to "Wireless Channels" on page D-7. 6. 7. For initial configuration and test, leave the Wireless Card Access List set to "Everyone" and the Encryption Strength set to "Disabled." Click Apply to save your changes. Note: If you are configuring the firewall from a wireless PC and you change the firewall's SSID, channel, or security settings, you will lose your wireless connection when you click on Apply. You must then change the wireless settings of your PC to match the firewall's new settings. 8. Configure and test your PCs for wireless connectivity. Program the wireless adapter of your PCs to have the same SSID and channel that you configured in the router. Check that they have a wireless link and are able to obtain an IP address by DHCP from the firewall. Once your PCs have basic wireless connectivity to the firewall, then you can configure the advanced wireless security functions of the firewall. Restricting Wireless Access to Your Network The DG824M Wireless ADSL Modem Gateway provides several ways to restrict wireless access to your network: · · · Turn off wireless connectivity completely Restrict access based on the Wireless Network Name (SSID) Restrict access based on the Wireless Card Access List These options are discussed below. Wireless Configuration 4-5 Reference Manual for the Model DG824M Wireless ADSL Modem Gateway Figure 4-3: Wireless Access Point settings Restricting Access to Your Network by Turning Off Wireless Connectivity You can completely turn off the wireless portion of the DG824M. For example, if your notebook computer is used to wirelessly connect to your router and you take a business trip, you can turn off the wireless portion of the router while you are travelling. Other members of your household who use computers connected to the router via Ethernet cables will still be able to use the router. Restricting Wireless Access Based on the Wireless Network Name (SSID) The DG824M can restrict wireless access to your network by not broadcasting the wireless network name (SSID). However, by default, this feature is turned off. If you turn this feature on, any wireless device will not `see' your DG824M. You must configure your wireless devices to match the wireless network name (SSID) you configure in the DG824M wireless gateway. Note: The SSID of any wireless access adapters must match the SSID you configure in the DG824M Wireless ADSL Modem Gateway. If they do not match, you will not get a wireless connection to the DG824M. Restricting Wireless Access Based on the Trusted PCs List This list determines which wireless hardware devices will be allowed to connect to the firewall. To restrict access based on MAC addresses, follow these steps: 1. Log in to the DG824M firewall at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever LAN address and password you have set up. 4-6 Wireless Configuration Reference Manual for the Model DG824M Wireless ADSL Modem Gateway 2. From the Wireless Settings menu, click the Trusted PCs button to display the Wireless Access menu, shown below: Figure 4-4. 3. Wireless Access menu Enter the MAC address of the authorized PC. The MAC address is usually printed on the wireless card, or it may appear in the gateway's DHCP table. You can copy and paste the MAC addresses from the gateway's Attached Devices menu into the MAC Address box of this menu. To do this, configure each wireless PC to obtain a wireless link to the gateway. The PC should then appear in the Attached Devices menu. Note: If you are configuring the gateway from a wireless PC whose MAC address is not in the Trusted PC list, and you select Trusted PCs only, you will lose your wireless connection when you click on Apply. You must then access the gateway from a wired PC to make any further changes. 4. 5. Click Add to save your entry. Click Back to return to the Wireless Settings menu. Make sure the Trusted PCs only radio button is selected, then click Apply.