User manual NETGEAR WGT624 - Reference Manual

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10090-01 April 2005 202-10090-01, April 2005 © 2005 by NETGEAR, Inc. All rights reserved. April 2005. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: · · · · Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. EN 55 022 Declaration of Conformance This is to certify that the WGT624 v3 108 Mbps Wireless Firewall Router is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN 55 022 Class B (CISPR 22). Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das WGT624 v3 108 Mbps Wireless Firewall Router gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung. Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Certificate of the Manufacturer/Importer It is hereby certified that the WGT624 v3 108 Mbps Wireless Firewall Router has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions. Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations. ii 202-10090-01, April 2005 Voluntary Control Council for Interference (VCCI) Statement This equipment is in the second category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling. Customer Support Refer to the Support Information Card that shipped with your WGT624 v3 108 Mbps Wireless Firewall Router. World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer or Netscape are required. Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: WGT624 v3 April 2005 router WGT624 v3 108 Mbps Wireless Firewall Router Home English 202-10090-01 iii 202-10090-01, April 2005 iv 202-10090-01, April 2005 Contents Chapter 1 About This Manual Audience, Scope, Conventions, and Formats ................................................................1-1 How to Use This Manual ................................................................................................1-2 How to Print this Manual .................................................................................................1-3 Chapter 2 Introduction Key Features ..................................................................................................................2-1 802.11g Wireless Networking ...................................................................................2-2 A Powerful, True Firewall with Content Filtering ......................................................2-2 Security ....................................................................................................................2-3 Autosensing Ethernet Connections with Auto Uplink ...............................................2-3 Extensive Protocol Support ......................................................................................2-3 Easy Installation and Management ..........................................................................2-4 Maintenance and Support ........................................................................................2-5 Package Contents ..........................................................................................................2-5 The Router's Front Panel .........................................................................................2-6 The Router's Rear Panel .........................................................................................2-7 Chapter 3 Configuring the Internet and Wireless Settings Initial Configuration .........................................................................................................3-2 Logging Into Your Router ................................................................................................3-3 Changing Your Configuration ..........................................................................................3-6 Internet Settings .......................................................................................................3-6 Wireless Settings ...................................................................................................3-10 Chapter 4 Content Filtering Blocking Access to Internet Sites ...................................................................................4-1 Blocking Access to Internet Services .............................................................................4-2 Contents 202-10090-01, April 2005 v Scheduling When Blocking Will Be Enforced .................................................................4-4 Configuring E-Mail Alert and Web Access Log Notifications ..........................................4-5 Viewing Logs of Web Access or Attempted Web Access ...............................................4-6 Chapter 5 Maintenance Viewing Wireless Router Status Information ...................................................................5-1 Viewing a List of Attached Devices .................................................................................5-5 Upgrading the Router Software ......................................................................................5-5 Configuration File Management .....................................................................................5-7 Restoring and Backing Up the Configuration ...........................................................5-7 Erasing the Configuration .........................................................................................5-8 Changing the Administrator Password ...........................................................................5-8 Chapter 6 Advanced Configuration Configuring Port Forwarding to Local Servers ................................................................6-1 Adding a Port Forwarding Custom Service ..............................................................6-2 Editing or Deleting a Port Forwarding Entry .............................................................6-2 Local Web and FTP Server Example .......................................................................6-3 Multiple Computers for Half Life, KALI or Quake III Example ..................................6-3 Using Port Triggering ......................................................................................................6-4 Port Triggering Rules Menu .....................................................................................6-5 Adding a new Rule ............................................................................................6-5 Modifying or Deleting an existing Rule: .............................................................6-6 Rules Status ......................................................................................................6-6 Configuring WAN Setup Options ....................................................................................6-7 Using a Dynamic DNS Service .......................................................................................6-9 Using LAN IP Setup Options ........................................................................................ 6-11 Using the Router as a DHCP server ......................................................................6-12 Using Address Reservation ....................................................................................6-13 How to Configure Static Routes ....................................................................................6-15 Enabling Remote Management Access .......................................................................6-17 Using Universal Plug and Play (UPnP) ........................................................................6-19 Chapter 7 Troubleshooting Basic Functioning ...........................................................................................................7-1 vi 202-10090-01, April 2005 Contents Power LED Not On ...................................................................................................7-1 LEDs Never Turn Off ................................................................................................7-2 Local or Internet Port LEDs Not On .........................................................................7-2 Troubleshooting the Web Configuration Interface ..........................................................7-3 Troubleshooting the ISP Connection ..............................................................................7-4 Troubleshooting a TCP/IP Network Using a Ping Utility .................................................7-5 Testing the LAN Path to Your Router .......................................................................7-5 Testing the Path from Your PC to a Remote Device ................................................7-6 Restoring the Default Configuration and Password ........................................................7-7 Problems with Date and Time .........................................................................................7-7 Appendix A Technical Specifications Appendix B Network, Routing, Firewall, and Basics Related Publications ...................................................................................................... B-1 Basic Router Concepts .................................................................................................. B-1 What is a Router? ................................................................................................... B-1 Routing Information Protocol ................................................................................... B-2 IP Addresses and the Internet ....................................................................................... B-2 Netmask .................................................................................................................. B-4 Subnet Addressing .................................................................................................. B-4 Private IP Addresses ............................................................................................... B-7 Single IP Address Operation Using NAT ....................................................................... B-7 MAC Addresses and Address Resolution Protocol ................................................. B-8 Related Documents ................................................................................................. B-9 Domain Name Server .............................................................................................. B-9 IP Configuration by DHCP ........................................................................................... B-10 Internet Security and Firewalls .................................................................................... B-10 What is a Firewall? ................................................................................................ B-10 Stateful Packet Inspection ...............................................................................B-11 Denial of Service Attack ..................................................................................B-11 Ethernet Cabling ...........................................................................................................B-11 Category 5 Cable Quality ...................................................................................... B-12 Inside Twisted Pair Cables .................................................................................... B-12 Uplink Switches, Crossover Cables, and MDI/MDIX Switching ............................ B-14 Contents 202-10090-01, April 2005 vii Appendix C Preparing Your Network Preparing Your Computers for TCP/IP Networking ....................................................... C-1 Configuring Windows 95, 98, and Me for TCP/IP Networking ....................................... C-2 Install or Verify Windows Networking Components ................................................. C-2 Enabling DHCP to Automatically Configure TCP/IP Settings ................................. C-4 Selecting Windows' Internet Access Method .......................................................... C-6 Verifying TCP/IP Properties .................................................................................... C-6 Configuring Windows NT4, 2000 or XP for IP Networking ............................................ C-7 Install or Verify Windows Networking Components ................................................. C-7 DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4 ............................... C-8 DHCP Configuration of TCP/IP in Windows XP ..................................................... C-8 DHCP Configuration of TCP/IP in Windows 2000 ................................................ C-10 DHCP Configuration of TCP/IP in Windows NT4 .................................................. C-13 Verifying TCP/IP Properties for Windows XP, 2000, and NT4 .............................. C-15 Configuring the Macintosh for TCP/IP Networking ...................................................... C-16 MacOS 8.6 or 9.x .................................................................................................. C-16 MacOS X ............................................................................................................... C-16 Verifying TCP/IP Properties for Macintosh Computers ......................................... C-17 Verifying the Readiness of Your Internet Account ....................................................... C-18 Are Login Protocols Used? ................................................................................... C-18 What Is Your Configuration Information? .............................................................. C-18 Obtaining ISP Configuration Information for Windows Computers ....................... C-19 Obtaining ISP Configuration Information for Macintosh Computers ..................... C-20 Restarting the Network ................................................................................................ C-21 Appendix D Wireless Networking Basics Wireless Networking Overview ...................................................................................... D-1 Infrastructure Mode ................................................................................................. D-1 Ad Hoc Mode (Peer-to-Peer Workgroup) ................................................................ D-2 Network Name: Extended Service Set Identification (ESSID) ................................ D-2 Authentication and WEP Data Encryption ..................................................................... D-2 802.11 Authentication .............................................................................................. D-3 Open System Authentication ................................................................................... D-3 Shared Key Authentication ...................................................................................... D-4 viii 202-10090-01, April 2005 Contents Overview of WEP Parameters ................................................................................ D-5 Key Size .................................................................................................................. D-6 WEP Configuration Options .................................................................................... D-7 Wireless Channels ......................................................................................................... D-7 WPA and WPA2 Wireless Security ................................................................................ D-8 How Does WPA Compare to WEP? ........................................................................ D-9 How Does WPA Compare to WPA2 (IEEE 802.11i)? ............................................ D-10 What are the Key Features of WPA and WPA2 Security? .................................... D-10 WPA/WPA2 Authentication: Enterprise-level User Authentication via 802.1x/EAP and RADIUS .................................................. D-12 WPA/WPA2 Data Encryption Key Management ............................................. D-14 Is WPA/WPA2 Perfect? ......................................................................................... D-16 Product Support for WPA/WPA2 ........................................................................... D-16 Supporting a Mixture of WPA, WPA2, and WEP Wireless Clients is Discouraged D-16 Changes to Wireless Access Points ............................................................... D-17 Changes to Wireless Network Adapters ......................................................... D-17 Changes to Wireless Client Programs ............................................................ D-18 Glossary Contents 202-10090-01, April 2005 ix x 202-10090-01, April 2005 Contents Chapter 1 About This Manual This chapter describes the intended audience, scope, conventions, and formats of this manual. Audience, Scope, Conventions, and Formats This reference manual assumes that the reader has basic to intermediate computer and Internet skills. However, basic computer network, Internet, firewall, and VPN technologies tutorial information is provided in the Appendices and on the Netgear website. This guide uses the following typographical conventions: Table 1-1. italics bold fixed Typographical Conventions Emphasis, books, CDs, URL names User input Screen text, file and server names, extensions, commands, IP addresses This guide uses the following formats to highlight special messages: Note: This format is used to highlight information of importance or special interest. This manual is written for the WGT624 v3 wireless router according to these specifications: Table 1-2. Product Version Manual Publication Date Manual Scope WGT624 v3 108 Mbps Wireless Firewall Router April 2005 Note: Product updates are available on the NETGEAR, Inc. Web site at http://kbserver.netgear.com/products/WGT624 v3.asp. About This Manual 202-10090-01, April 2005 1-1 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 How to Use This Manual The HTML version of this manual includes the following: · · Buttons, at a time and , for browsing forwards or backwards through the manual one page A button that displays the table of contents and an button. Double-click on a link in the table of contents or index to navigate directly to where the topic is described in the manual. A product model. button to access the full NETGEAR, Inc. online knowledge base for the · · Links to PDF versions of the full manual and individual chapters. 1-2 202-10090-01, April 2005 About This Manual Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 How to Print this Manual To print this manual you can choose one of the following several options, according to your needs. · Printing a Page in the HTML View. Each page in the HTML version of the manual is dedicated to a major topic. Use the Print button on the browser toolbar to print the page contents. · Printing a Chapter. Use the PDF of This Chapter link at the top left of any page. ­ Click the PDF of This Chapter link at the top right of any page in the chapter you want to print. The PDF version of the chapter you were viewing opens in a browser window. Note: Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at http://www.adobe.com. ­ Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature. · Printing the Full Manual. Use the Complete PDF Manual link at the top left of any page. ­ ­ Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window. Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature. About This Manual 202-10090-01, April 2005 1-3 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 1-4 202-10090-01, April 2005 About This Manual Chapter 2 Introduction Congratulations on your purchase of the NETGEAR® WGT624 v3 108 Mbps Wireless Firewall Router. The WGT624 v3 wireless router provides connection for multiple computers to the Internet through an external broadband access device (such as a cable modem or DSL modem) that is normally intended for use by a single computer. This chapter describes the features of the NETGEAR WGT624 v3 108 Mbps Wireless Firewall Router. Key Features The WGT624 v3 108 Mbps Wireless Firewall Router with 4-port switch connects your local area network (LAN) to the Internet through an external access device such as a cable modem or DSL modem. The WGT624 v3 wireless router provides you with multiple web content filtering options, plus browsing activity reporting and instant alerts via e-mail. Parents and network administrators can establish restricted access policies based on time-of-day, web site addresses and address keywords, and share high-speed cable/DSL Internet access for up to 253 computers. In addition to the Network Address Translation (NAT) feature, the built-in firewall protects you from hackers. With minimum setup, you can install and use the router within minutes. The WGT624 v3 wireless router provides the following features: · · · · · · · · 802.11g wireless networking, with the ability to operate in 802.11g-only, 802.11-turbo-g-only, or 802.11b+g modes. Easy, web-based setup for installation and management. Content Filtering and Site Blocking Security. Built in 4-port 10/100 Mbps Switch. Ethernet connection to a wide area network (WAN) device, such as a cable modem or DSL modem. Extensive Protocol Support. Login capability. Front panel LEDs for easy monitoring of status and activity. 2-1 202-10090-01, April 2005 Introduction Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 · Flash memory for firmware upgrade. 802.11g Wireless Networking The WGT624 v3 wireless router includes an 802.11g wireless access point, providing continuous, high-speed 54 Mbps access between your wireless and Ethernet devices. The access point provides: · · 802.11g wireless networking at up to 108 Mbps. 802.11g wireless networking, with the ability to operate in 802.11g-only, 802.11b-only, or 802.11g and b modes, providing backwards compatibility with 802.11b devices or dedicating the wireless network to the higher bandwidth 802.11g devices. 64-bit and 128-bit WEP encryption security. WEP keys can be generated manually or by passphrase. WPA-PSK support. Support for Wi-Fi Protected Access (WPA) data encryption which provides strong data encryption and authentication based on a pre-shared key. Wireless access can be restricted by MAC address. Wireless network name broadcast can be turned off so that only devices that have the network name (SSID) can connect. · · · · · A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the WGT624 v3 is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include: · Denial of Service (DoS) protection. Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND Attack, and IP Spoofing. · · · Blocks unwanted traffic from the Internet to your LAN. Blocks access from your LAN to Internet locations or services that you specify as off-limits. Logs security incidents. The WGT624 v3 will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. You can configure the router to email the log to you at specified intervals. You can also configure the router to send immediate alert messages to your email address or email pager whenever a significant event occurs. 2-2 202-10090-01, April 2005 Introduction Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 · The WGT624 v3 prevents objectionable content from reaching your PCs. The router allows you to control access to Internet content by screening for keywords within web addresses. You can configure the router to log and report attempts to access objectionable Internet sites. Security The WGT624 v3 wireless router is equipped with several features designed to maintain security, as described in this section. · PCs Hidden by NAT NAT opens a temporary path to the Internet for requests originating from the local network. Requests originating from outside the LAN are discarded, preventing users outside the LAN from finding and directly accessing the PCs on the LAN. Port Forwarding with NAT Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the router allows you to direct incoming traffic to specific PCs based on the service port number of the incoming request, or to one designated "DMZ" host computer. You can specify forwarding of single ports or ranges of ports. · Autosensing Ethernet Connections with Auto Uplink With its internal 4-port 10/100 switch, the WGT624 v3 can connect to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. Both the LAN and WAN interfaces are autosensing and capable of full-duplex or half-duplex operation. The router incorporates Auto UplinkTM technology. Each Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a `normal' connection such as to a PC or an `uplink' connection such as to a switch or hub. That port will then configure itself to the correct configuration. This feature also eliminates the need to worry about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection. Extensive Protocol Support The WGT624 v3 wireless router supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). For further information about TCP/IP, refer to Appendix B, "Network, Routing, Firewall, and Basics." Introduction 202-10090-01, April 2005 2-3 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 · IP Address Sharing by NAT The WGT624 v3 wireless router allows several networked PCs to share an Internet account using only a single IP address, which may be statically or dynamically assigned by your Internet service provider (ISP). This technique, known as NAT, allows the use of an inexpensive single-user ISP account. Automatic Configuration of Attached PCs by DHCP The WGT624 v3 wireless router dynamically assigns network configuration information, including IP, gateway, and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies configuration of PCs on your local network. DNS Proxy When DHCP is enabled and no DNS addresses are specified, the router provides its own address as a DNS server to the attached PCs. The router obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. PPP over Ethernet (PPPoE) PPPoE is a protocol for connecting remote hosts to the Internet over a DSL connection by simulating a dial-up connection. This feature eliminates the need to run a login program such as Entersys or WinPOET on your PC. · · · Easy Installation and Management You can install, configure, and operate the WGT624 v3 108 Mbps Wireless Firewall Router within minutes after connecting it to the network. The following features simplify installation and management tasks: · Browser-based management Browser-based configuration allows you to easily configure your router from almost any type of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based web Management Interface. Smart Wizard The WGT624 v3 wireless router Smart Wizard automatically senses the type of Internet connection, asking you only for the information required for your type of ISP account. Firmware Auto-Update The WGT624 v3 wireless router automatically checks the Internet to see if a newer version of firmware is available. If so, it asks you if you want to install the upgrade. This lets you take advantage of product enhancements for your WGT624 v3 as soon as they become available. · · 2-4 202-10090-01, April 2005 Introduction Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 · Visual monitoring The WGT624 v3 wireless router's front panel LEDs provide an easy way to monitor its status and activity. Maintenance and Support NETGEAR offers the following features to help you maximize your use of the WGT624 v3 wireless router: · · Flash memory for firmware upgrade Free technical support seven days a week, twenty-four hours a day Package Contents The product package should contain the following items: · · · · · WGT624 v3 108 Mbps Wireless Firewall Router. AC power adapter. Vertical stand. Category 5 (CAT5) Ethernet cable. 108 Mbps Wireless Router WGRT624 v3 Resource CD, including: -- Application Notes and other helpful information. · · · 108 Mbps Wireless Firewall Router WGT624 Installation Guide. Registration and Warranty Card. Support Information Card. If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the router for repair. Introduction 202-10090-01, April 2005 2-5 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 The Router's Front Panel The front panel of the WGT624 v3 wireless router contains the status LEDs described below. Figure 2-1: WGT624 v3 Front Panel You can use some of the LEDs to verify connections. Viewed from left to right, Table 2-1 describes the LEDs on the front panel of the router. These LEDs are green when lit. Table 2-1. Label LED Descriptions Activity On Off Description Power is supplied to the router. Power is not supplied to the router. Power On Internet Blink On Wireless On (Green) Blink (Green) On (Amber) Blink (Amber) Off The Local (LAN) port has detected link with a 100 Mbps device. Data is being transmitted or received at 100 Mbps. The Local port has detected link with a 10 Mbps device. Data is being transmitted or received at 10 Mbps. No link is detected on this port. The Internet (Wide Area Network) port has detected a link with an attached device. Data is being transmitted or received by the Internet port. Indicates that the Wireless port is initialized. Local 2-6 202-10090-01, April 2005 Introduction Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 The Router's Rear Panel The rear panel of the WGT624 v3 wireless router contains the port connections listed below. Figure 1-2: WGT624 v3 Rear Panel Viewed from left to right, the rear panel contains the following features: · · · · · AC power adapter outlet Four Local (LAN) 10/100 Mbps Ethernet ports for connecting the router to the local PCs Internet (WAN) Ethernet port for connecting the router to a cable or DSL modem Factory Default Reset push button Wireless antenna Introduction 202-10090-01, April 2005 2-7 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 2-8 202-10090-01, April 2005 Introduction Chapter 3 Configuring the Internet and Wireless Settings This chapter describes how to use the Smart Wizard Installation Assistant on the Resource CD to configure your wireless router's Internet connection and wireless parameters. Once you are connected to the Internet and your wireless connections are working, you can also configure the router's content filtering parameters if you need to change the default settings. See Chapter 4, "Content Filtering. If you are an advanced user, you can also configure maintenance (see Chapter 5, "Maintenance) and advanced (see Chapter 6, "Advanced Configuration) settings if you need to change the factory defaults. Note: Do not change your existing Internet connection. Instead, let the Smart Wizard Installation Assistant on the Resource CD guide you through the setup process. Configuring the Internet and Wireless Settings 202-10090-01, April 2005 3-1 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Initial Configuration 1. Insert the Resource CD into the CD drive on your PC. The following screen appears: Click SETUP to get started Figure 3-1: Smart Wizard Installation Assistant Startup screen 2. Click Setup and follow the instructions. The Smart Wizard Installation Assistant will guide you through the setup process: · · · How to change your cabling. How to connect to the Internet. How to configure your wireless settings. ­ When you get to the wireless settings, you will have to select the country where you are located and decide whether you want to have security on your wireless links (Netgear strongly recommends enabling security). Depending on the type of security you select, you will also have to enter security key or passphrase information (see "Wireless Settings" on page 3-10 for information on the wireless authentication and encryption parameters). Configuring the Internet and Wireless Settings 202-10090-01, April 2005 ­ 3-2 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 If you want to change your Internet or wireless settings later, see "Changing Your Configuration" on page 3-6. Logging Into Your Router To log into your router after you have configured your router, do the following: 1. Type http://www.routerlogin.net in the address field of Internet Explorer or Netscape® Navigator. Figure 3-2: Log in to the router 2. When prompted, enter admin for the router user name and password for the router password, both in lower case letters (or enter the password you chose if you changed it during the setup in "Initial Configuration" on page 3-2). Note: The router user name and password are not the same as any user name or password you may use to log in to your Internet connection. A login window like the one shown below opens: Figure 3-3: Login window Configuring the Internet and Wireless Settings 202-10090-01, April 2005 3-3 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 3. Click OK and the resulting window below appears: Figure 3-4: Login result 3-4 Configuring the Internet and Wireless Settings 202-10090-01, April 2005 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 4. Enable the Firmware Upgrade Assistant if you want the router to check for the lastest firmware everytime you log into the router (otherwise, you can check yourself manually; see "Upgrading the Router Software" on page 5-5). Figure 3-5: Firmware Upgrade Assistant popup and screen Configuring the Internet and Wireless Settings 202-10090-01, April 2005 3-5 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Changing Your Configuration You can change your Internet and wireless settings after they have been configured by the Smart Wizard Configuration Assistant. Internet Settings To change the Internet settings, click Basic Settings on the left menu bar. One of the following screens appears: Basic Settings, No Login Basic Settings, Login Required Figure 3-6: Basic Settings screens The Basic Settings pages allow you to configure, upgrade and check the status of your NETGEAR Wireless Router. 3-6 Configuring the Internet and Wireless Settings 202-10090-01, April 2005 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Click an item in the leftmost column. The current settings or information for that area appear in the center column. Helpful information related to the selected Settings page appears in this column. If you are using Internet Explorer, you may click an item in the center column to jump directly to the related help section; otherwise, scroll down until you reach it. For the most current documentation, go to: http://kbserver.netgear.com/products_automatic/WGT624v3.asp Note: If you are setting up the router for the first time, the default settings may work for you with no changes. · Does Your Internet Connection Require A Login?: Select this option based on the type of account you have with your ISP. If you need to enter login information every time you connect to the Internet or you have a PPPoE account with your ISP, select Yes. Otherwise, select No. Note: If you have installed PPP software such as WinPoET (from Earthlink) or Enternet (from PacBell), then you have PPPoE. Select Yes. After selecting Yes and configuring your router, you will not need to run the PPP software on your PC to connect to the Internet. · Internet Service Provider: Select the service provided by your ISP. "Other" (PPPoE) is the most common. "PPTP" is used in Austria and other European countries. "Telstra BigPond" is for Australia only. ­ Login: This is usually the name that you use in your e-mail address. For example, if your main mail account is JerAB@ISP.com, then put JerAB in this box. Some ISPs (like Mindspring, Earthlink, and T-DSL) require that you use your full e-mail address when you log in. If your ISP requires your full e-mail address, then type it in the Login box. ­ ­ ­ Password: Type the password that you use to log in to your ISP. Service Name: If your ISP provided a Service Name, enter it here. Otherwise, this may be left blank. Idle Timeout: An idle Internet connection will be terminated after this time period. If this value is zero (0), then the connection will be "kept alive" by re-connecting immediately whenever the connection is lost. · Internet IP Address: If you log in to your service or your ISP did not provide you with a fixed IP address, the router will find an IP address for you automatically when you connect. Select Get dynamically from ISP. Configuring the Internet and Wireless Settings 202-10090-01, April 2005 3-7 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 If you have a fixed (static, permanent) IP address, your ISP will have provided you with an IP address. Select Use static IP address and type in the IP Address. · Account Name (also known as Host Name or System Name): For most users, type your account name or user name in this box. For example, if your main mail account is JerAB@ISP.com, then put JerAB in this box. If your ISP has given you a specific Host name, then type it (for example, CCA7324-A). · Domain Name: For most users, you may leave this box blank, unless required by your ISP. You may type the domain name of your ISP. For example, if your ISP's mail server is mail.xxx.yyy.zzz, you would type xxx.yyy.zzz as the Domain Name. If you have a Domain name given to you by your ISP, type it in this box. (For example, Earthlink Cable may require a Host name of 'home' and Comcast sometimes supplies a Domain name.) If you have a cable modem, this is usually the Workgroup name. · Internet IP Address: If you log in to your service or your ISP did not provide you with a fixed IP address, the router will find an IP address for you automatically when you connect. Select Get Dynamically From ISP. If you have a fixed (or static IP) address, your ISP will have provided you with the required information. Select Use Static IP Address and type the IP Address, Subnet Mask and Gateway IP Address into the correct boxes. For example: IP Address: 24.218.156.183 Subnet Mask: 255.255.255.0 Gateway IP Address: 24.218.156.1 · Domain Name Server (DNS) Address: The DNS server is used to look up site addresses based on their names. If your ISP gave you one or two DNS addresses, select Use These DNS Servers and type the primary and secondary addresses. Otherwise, select Get Automatically From ISP. Note: If you get 'Address not found' errors when you go to a Web site, it is likely that your DNS servers aren't set up properly. You should contact your ISP to get DNS server addresses. · Router MAC Address: Your computer's local address is its unique address on your network. This is also referred to as the computer's MAC (Media Access Control) address. 3-8 Configuring the Internet and Wireless Settings 202-10090-01, April 2005 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Usually, select Use Default MAC Address. If your ISP requires MAC authentication, then select either Use Computer MAC address to disguise the Router's MAC address with the Computer's own MAC address or Use This MAC Address to manually type the MAC address for a different computer. The format for the MAC address is XX:XX:XX:XX:XX:XX. This value may be changed if the Use Computer MAC Address is selected once a value has already been set in the Use This MAC Address selection. Click Test to connect to the NETGEAR Web site. If you connect successfully, your settings work and you may click Logout to exit these pages and... enjoy surfing the 'net! If you don't connect successfully, 1. 2. 3. 4. 5. Go through the settings and make sure you've selected the correct options and typed everything correctly. Contact your ISP to verify the configuration information. Read the Troubleshooting section in the Router Installation Guide. On the Router GearBox CD, read the Troubleshooting Guide or the Troubleshooting section in the Reference Manual. Contact NETGEAR Technical Support. Configuring the Internet and Wireless Settings 202-10090-01, April 2005 3-9 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Wireless Settings To change the Internet settings, click Wireless Settings on the left menu bar. One of the following screens appears: Wireless Settings: No security Wireless Settings: WEP security Wireless Settings: WPA-PSK security Figure 3-7: Wireless Settings screens NOTE: To ensure proper agency compliance and compatibility between similar products in your area; the operating channel & region must be set correctly. · Placement of the Router to Optimize Wireless Connectivity: The operating distance or range of your wireless connection can vary significantly based on the physical placement of the router. For best results, place your router: ­ ­ ­ ­ ­ Near the center of the area in which your PCs will operate In an elevated location such as a high shelf Away from potential sources of interference, such as PCs, microwaves, and cordless phones With the Antenna tight and in the upright position Away from large metal surfaces 3-10 Configuring the Internet and Wireless Settings 202-10090-01, April 2005 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the router. · Name (SSID): Enter a value of up to 32 alphanumeric characters. The same Name (SSID) must be assigned to all wireless devices in your network. The default SSID is NETGEAR, but NETGEAR strongly recommends that you change your network's Name (SSID) to a different value. This value is also case-sensitive. For example, NETGEAR is not the same as NETGEAr. Region: Select your region from the drop-down list. This field displays the region of operation for which the wireless interface is intended. It may not be legal to operate the router in a region other than the region shown here. If your country or region is not listed, please check with your local government agency or check our web site for more information on which channels to use. Channel: This field determines which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby access point. Mode: Select the desired wireless mode. The options are: ­ ­ ­ ­ ­ g & b: Both 802.11g and 802.11b wireless stations can be used. g only: Only 802.11g wireless stations can be used. b only: All 802.11b wireless stations can be used. 802.11g wireless stations can still be used if they can operate in 802.11b mode. 108 Mbps only: Only compatible 802.11g wireless stations that support 108 Mbps can connect. Auto 108 Mbps: All 802.11g, 802.11b and NETGEAR 108 Mbps wireless stations can be used. · · · Note: If you select 108 Mbps mode, the WGT624 will only use channel 6. The default is "g & b", which allows both "g" and "b" wireless stations to access this device. · Security Options ­ ­ Disable: no data encryption WEP (Wired Equivalent Privacy): use WEP 64 or 128 bit data encryption · Authentication Type: Normally this can be left at the default value of "Automatic." If that fails, select the appropriate value - "Open System" or "Shared Key" Check your wireless card's documentation to see what method to use. Configuring the Internet and Wireless Settings 202-10090-01, April 2005 3-11 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 · Encryption Strength: Select the WEP Encryption level: 64-bit (sometimes called 40-bit) encryption 128-bit encryption Security Encryption (WEP) Key: If WEP is enabled, you can manually or automatically program the four data encryption keys. These values must be identical on all PCs and Access Points in your network. Automatic Key Generation (Passphrase): Enter a word or group of printable characters in the Passphrase box and click the Generate button to automatically configure the WEP Key(s). If encryption strength is set to 64 bit, then each of the four key boxes will automatically be populated with key values. If encryption strength is set to 128 bit, then only the selected WEP key box will automatically be populated with key values. Manual Entry Mode: Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key box. For 64 bit WEP: Enter ten hexadecimal digits (any combination of 0-9, A-F). For 128 bit WEP: Enter twenty-six hexadecimal digits (any combination of 0-9, A-F). · · · ­ WPA-PSK (Wi-Fi Protected Access Pre-Shared Key): use WPA-PSK standard encryption · Security Encryption (WPA-PSK): Enter a word or group of printable characters in the Passphrase box. The Passphrase must be 8 to 63 characters in length. 3-12 Configuring the Internet and Wireless Settings 202-10090-01, April 2005 Chapter 4 Content Filtering This chapter describes how to use the content filtering features of the WGT624 v3 108 Mbps Wireless Firewall Router to protect your network. These features can be found by clicking on the Content Filtering heading in the Main Menu of the browser interface. The WGT624 v3 108 Mbps Wireless Firewall Router provides you with web content filtering options, plus browsing activity reporting and instant alerts via e-mail. Parents and network administrators can establish restricted access policies based on time-of-day, web addresses and web address keywords. You can also block Internet access by applications and services, such as chat or games. Blocking Access to Internet Sites The WGT624 v3 wireless router allows you to restrict access based on web addresses and web address keywords. Up to 255 entries are supported in the Keyword list. The Block Sites menu is below: Figure 4-1: Block Sites menu Content Filtering 202-10090-01, April 2005 4-1 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 To enable keyword blocking, select either "Per Schedule" or "Always", then click Apply. If you want to block by schedule, be sure that a time period is specified in the Schedule menu. To add a keyword or domain, type it in the Keyword box, click Add Keyword, then click Apply. To delete a keyword or domain, select it from the list, click Delete Keyword, then click Apply. Keyword application examples: · · · If the keyword "XXX" is specified, the URL is blocked. If the keyword ".com" is specified, only websites with other domain suffixes (such as .edu or .gov) can be viewed. If you wish to block all Internet browsing access during a scheduled period, enter the keyword "." and set the schedule in the Schedule menu. To specify a Trusted User, enter that PC's IP address in the Trusted User box and click Apply. You may specify one Trusted User, which is a PC that will be exempt from blocking and logging. Since the Trusted User will be identified by an IP address, you should configure that PC with a fixed IP address. Blocking Access to Internet Services The WGT624 v3 wireless router allows you to block the use of certain Internet services by PCs on your network. This is called services blocking or port filtering. The Block Services menu is shown below: Figure 4-2: Block Services menu 4-2 202-10090-01, April 2005 Content Filtering Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Services are functions performed by server computers at the request of client computers. For example, web servers serve web pages, time servers serve time and date information, and game hosts serve data about other players' moves. When a computer on your network sends a request for service to a server computer on the Internet, the requested service is identified by a service or port number. This number appears as the destination port number in the transmitted IP packets. For example, a packet that is sent with destination port number 80 is an HTTP (web server) request. To enable service blocking, select either Per Schedule or Always, then click Apply. If you want to block by schedule, be sure that a time period is specified in the Schedule menu. To specify a service for blocking, click Add. The Add Services menu will appear, as shown below: Figure 4-3: Add Services menu From the Service Type list, select the application or service to be allowed or blocked. The list already displays several common services, but you are not limited to these choices. To add any additional services or applications that do not already appear, select User Defined. · Configuring a User Defined Service To define a service, first you must determine which port number or range of numbers is used by the application. The service numbers for many common protocols are defined by the Internet Engineering Task Force (IETF) and published in RFC1700, "Assigned Numbers." Service numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of the application. This information can usually be determined by contacting the publisher of the application or from user groups of newsgroups. Content Filtering 202-10090-01, April 2005 4-3 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Enter the Starting Port and Ending Port numbers. If the application uses a single port number, enter that number in both boxes. If you know that the application uses either TCP or UDP, select the appropriate protocol. If you are not sure, select Both. · Configuring Services Blocking by IP Address Range Under "Filter Services For", you can block the specified service for a single PC, a range of PCs (having consecutive IP addresses), or all PCs on your network. Scheduling When Blocking Will Be Enforced The WGT624 v3 wireless router allows you to specify when blocking will be enforced. The Schedule menu is shown below: Figure 4-4: Schedule menu Use this check boxes on this menu to create a schedule for blocking content. Click Apply. · Days to Block. Select days to block by checking the appropriate boxes. Select Everyday to check the boxes for all days. Click Apply. Content Filtering 202-10090-01, April 2005 4-4 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 · Time of Day to Block. Select a start and end time in 23:59 format. Select All day for 24 hour blocking. Click Apply. Note: Be sure to select your time zone in the E-Mail menu. Configuring E-Mail Alert and Web Access Log Notifications In order to receive logs and alerts by email, you must provide your email information in the E-Mail menu, shown below: Figure 4-5: Email menu · · Turn e-mail notification on Check this box if you wish to receive e-mail logs and alerts from the router. Send to this e-mail address Enter the e-mail address to which logs and alerts are sent. This e-mail address will also be used as the From address. If you leave this box blank, log and alert messages will not be sent via e-mail. 4-5 202-10090-01, April 2005 Content Filtering Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Your outgoing mail server Enter the name of your ISP's outgoing (SMTP) mail server (such as mail.myISP.com). You may be able to find this information in the configuration menu of your e-mail program. If you leave this box blank, log and alert messages will not be sent via e-mail. · My Mail Server Requires Authentication Select this checkbox and enter the user name and password for this email account, as required. You can specify that logs are automatically sent to the specified e-mail address with these options: · Send alert immediately Check this box if you would like immediate notification of attempted access to a blocked site. · Send logs according to this schedule Specifies how often to send the logs: None, Hourly, Daily, Weekly, or When Full. ­ Day for sending log. Specifies which day of the week to send the log. Relevant when the log is sent weekly or daily. ­ Time for sending log. Specifies the time of day to send the log. Relevant when the log is sent daily or weekly. If the Weekly, Daily or Hourly option is selected and the log fills up before the specified period, the log is automatically e-mailed to the specified e-mail address. After the log is sent, the log is cleared from the router's memory. If the router cannot e-mail the log file, the log buffer may fill up. In this case, the router overwrites the log and discards its contents. If you don't want logs sent, select None from the list in the Send Logs According To This Schedule area. When you turn on e-mail notification and choose None in the Send Logs According to this Schedule list, the alert is sent but not the log. The WGT624 v3 wireless router uses the Network Time Protocol (NTP) to obtain the current time and date from one of several Network Time Servers on the Internet. In order to localize the time for your log entries, you must specify your Time Zone: · Time Zone. Select your local time zone. This setting will be used for the blocking schedule and for time-stamping log entries. · Daylight Savings Time. Check this box to automatically adjust for daylight savings time. · Viewing Logs of Web Access or Attempted Web Access The log is a detailed record of what websites you have accessed or attempted to access. Up to 128 entries are stored in the log. Log entries will only appear when keyword blocking is enabled, and no log entries will be made for the Trusted User. An example is shown below: 4-6 202-10090-01, April 2005 Content Filtering Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Figure 4-6: Logs menu Log entries are described in Table 4-1 Table 4-1. Field Log entry descriptions Description Number The index number of the content filter log entries. 128 entries are available numbered from 0 to 127. The log will keep the record of the latest 128 entries. The date and time the log entry was recorded. The IP address of the initiating device for this log entry. This field displays whether the access was blocked or allowed. The name or IP address of the website or newsgroup visited or attempted to access. Date and Time Source IP Action Content Filtering 202-10090-01, April 2005 4-7 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Log action buttons are described in Table 4-2 Table 4-2. Field Log action buttons Description Refresh Clear Log Send Log Click this button to refresh the log screen. Click this button to clear the log entries. Click this button to email the log immediately. 4-8 202-10090-01, April 2005 Content Filtering Chapter 5 Maintenance This chapter describes how to use the maintenance features of your WGT624 v3 108 Mbps Wireless Firewall Router. These features can be found by clicking on the Maintenance heading in the Main Menu of the browser interface. Viewing Wireless Router Status Information The Router Status menu provides a limited amount of status and usage information. From the Main Menu of the browser interface, click on Maintenance, then select System Status to view the System Status screen, shown below. Figure 5-1: Router Status screen Maintenance 202-10090-01, April 2005 5-1 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 This screen shows the following parameters: Table 5-1. Field Account Name Firmware Version Internet Port MAC Address IP Address Menu 3.2 - Wireless Router Status Fields Description This field displays the Host Name assigned to the router. This field displays the router firmware version. These parameters apply to the Internet (WAN) port of the router. This field displays the Media Access Control address being used by the Internet (WAN) port of the router. This field displays the IP address being used by the Internet (WAN) port of the router. If no address is shown, the router cannot connect to the Internet. This field displays the IP Subnet Mask being used by the Internet (WAN) port of the router. If set to None, the router is configured to use a fixed IP address on the WAN. If set to Client, the router is configured to obtain an IP address dynamically from the ISP. These parameters apply to the Local (WAN) port of the router. This field displays the Media Access Control address being used by the LAN port of the router. This field displays the IP address being used by the Local (LAN) port of the router. The default is 192.168.1.1. Identifies if the router's built-in DHCP server is active for the LAN attached devices. This field displays the IP Subnet Mask being used by the Local (LAN) port of the router. The default is 255.255.255.0 These parameters apply to the Wireless port of the router. This field displays the Media Access Control address being used by the Wireless port of the router. This field displays the wireless network name (SSID) being used by the wireless port of the router. The default is NETGEAR. This field displays the geographic region where the router being used. It may be illegal to use the wireless features of the router in some parts of the world. Identifies if the channel the wireless port is using. See "Wireless Channels" on page D-7 for the frequencies used on each channel. IP Subnet Mask DHCP LAN Port MAC Address IP Address DHCP IP Subnet Mask Wireless Port MAC Address Name (SSID) Region Channel 5-2 202-10090-01, April 2005 Maintenance Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Click on the "Show WAN Status" button to display the WAN status, as shown below. Figure 5-2: Connection Status screen This screen shows the following statistics:. Table 5-1. Field Connection Time Connection Status Fields Description The length of time the router has been connected to your Internet service provider's network. Connection Method The method used to obtain an IP address from your Internet service provider. IP Address Network Mask Default Gateway The WAN (Internet) IP Address assigned to the router. The WAN (Internet) Subnet Mask assigned to the router. The WAN (Internet) default gateway the router communicates with. WAN Status action buttons are described in Table 5-2 Table 5-2. Field Show WAN Status action buttons Description Renew Click the Renew button to renew the DHCP lease. Maintenance 202-10090-01, April 2005 5-3 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Click on the "Show Statistics" button to display router usage statistics, as shown below. Figure 5-3: Router Statistics screen This screen shows the following statistics: Table 5-1. Field Port Status TxPkts RxPkts Collisions Tx B/s Rx B/s Up Time Up Time Poll Interval Router Statistics Fields Description The statistics for the WAN (Internet) and LAN (local) ports. For each port, the screen displays: The link status of the port. The number of packets transmitted on this port since reset or manual clear. The number of packets received on this port since reset or manual clear. The number of collisions on this port since reset or manual clear. The current transmission (outbound) bandwidth used on the WAN and LAN ports. The current reception (inbound) bandwidth used on the WAN and LAN ports. The amount of time since the router was last restarted. The time elapsed since this port acquired the link. Specifies the intervals at which the statistics are updated in this window. Click on Stop to freeze the display. 5-4 202-10090-01, April 2005 Maintenance Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Show Statistics action buttons are described in Table 5-2 Table 5-2. Field Show Statistics action buttons Description Set Interval Stop Enter a time and click the button to set the polling frequency. Click the Stop button to freeze the polling information. Viewing a List of Attached Devices The Attached Devices menu contains a table of all IP devices that the router has discovered on the local network. From the Main Menu of the browser interface, under the Maintenance heading, select Attached Devices to view the table, shown below: Figure 5-4: Attached Devices menu For each device, the table shows the IP address, NetBIOS Host Name (if available), and Ethernet MAC address. Note that if the router is rebooted, the table data is lost until the router rediscovers the devices. To force the router to look for attached devices, click the Refresh button. Upgrading the Router Software The router software of the WGT624 v3 wireless router is stored in FLASH memory, and can be upgraded as new software is released by NETGEAR. Note: The web browser used to upload new firmware into the WGT624 v3 wireless router must support HTTP uploads. Use Microsoft Internet Explorer or Netscape Navigator 4.0 or above. Do not interrupt the upgrade process once it has started. Maintenance 202-10090-01, April 2005 5-5 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Note: Be sure to check the NETGEAR web site for documentation updates which are available at http://www.netgear.com/docs. From the Main Menu of the browser interface, under the Maintenance heading, select the Router Upgrade heading to display the menu shown below. Figure 5-5: Router Upgrade menu Note: When uploading software to the WGT624 v3 wireless router, it is important not to interrupt the web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, it may corrupt the software. When the upload is complete, your router will automatically restart. The upgrade process will typically take about one minute. To check for new firmware: 1. Click Check.If the WGT624 v3 finds new firmware is available, follow the on-screen prompts to download in install the new firmware. To upload firmware from your hard drive: 1. 2. In the Router Upgrade menu, click the Browse button and browse to the location of the binary (.chk) upgrade file. Click Upload. Note: In some cases, you may need to reset to factory default and reconfigure the router after upgrading. 5-6 202-10090-01, April 2005 Maintenance Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Configuration File Management The configuration settings of the WGT624 v3 wireless router are stored within the router in a configuration file. This file can be saved (backed up) to a user's PC, retrieved (restored) from the user's PC, or cleared to factory default settings. From the Main Menu of the browser interface, under the Maintenance heading, select the Settings Backup heading to bring up the menu shown below. Figure 5-6: Settings Backup menu Three options are available, and are described in the following sections. Restoring and Backing Up the Configuration The Restore and Backup options in the Settings Backup menu allow you to save and retrieve a file containing your router's configuration settings. To save your settings, select the Backup tab. Click the Backup button. Your browser will extract the configuration file from the router and will prompt you for a location on your PC to store the file. You can give the file a meaningful name at this time, such as pacbell.cfg. To restore your settings from a saved configuration file, enter the full path to the file on your PC or click the Browse button to browse to the file. When you have located it, click the Restore button to send the file to the router. The router will then reboot automatically. Maintenance 202-10090-01, April 2005 5-7 Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3 Erasing the Configuration It is sometimes desirable to restore the router to the factory default settings. This can be done by using the Erase function, which will restore all factory settings. After an erase, the router's password will be password, the LAN IP address will be 192.168.1.1, and the router's DHCP client will be enabled. To erase the configuration, click the Erase button. To restore the factory default configuration settings without knowing the login password or IP address, you must use the Default Reset button on the rear panel of the router. See "Restoring the Default Configuration and Password" on page 7-7. Changing the Administrator Password The default password for the router's web Configuration Manager is password. Netgear recommends that you change this password to a more secure password. From the Main Menu of the browser interface, under the Maintenance heading, select Set Password to bring up the menu shown below. Figure 5-7: Set Password menu To change the password, first enter the old password, and then enter the new password twice. Click Apply. 5-8 202-10090-01, April 2005 Maintenance