User manual NETGEAR DG834G

DG834G Reference Manual NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10006-06 September 2005 © 2005 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: · · · · Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. Federal Communications Commission (FCC) Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. In order to avoid the possibility of exceeding the FCC radio frequency exposure limits, human proximity to the antenna shall not be less than 20 cm (8 inches) during normal operation. EN 55 022 Declaration of Conformance This is to certify that the 54 Mbps Wireless ADSL Modem Router Model DG834G is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN 55 022 Class B (CISPR 22). Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das 54 Mbps Wireless ADSL Modem Router Model DG834G gemäß der im BMPTAmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung. ii v3.0, September 2005 Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Certificate of the Manufacturer/Importer It is hereby certified that the 54 Mbps Wireless ADSL Modem Router Model DG834G has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions. Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations. Voluntary Control Council for Interference (VCCI) Statement This equipment is in the second category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling. Customer Support Refer to the Support Information Card that shipped with your 54 Mbps Wireless ADSL Modem Router Model DG834G. World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer or Netscape are required. Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number: DG834G September 2005 firewall 54 Mbps Wireless ADSL Modem Router Model DG834G Home English 202-10006-06 3.0 iii v3.0, September 2005 iv v3.0, September 2005 Contents DG834G Reference Manual Chapter 1 About This Manual Audience, Scope, Conventions, and Formats ................................................................1-1 How to Use This Manual ................................................................................................1-2 How to Print this Manual .................................................................................................1-2 Chapter 2 Introduction About the ADSL Modem Router .....................................................................................2-1 Key Features ..................................................................................................................2-2 A Powerful, True Firewall .........................................................................................2-2 802.11 Standards-based Wireless Networking ........................................................2-3 Easy Installation and Management ..........................................................................2-3 Protocol Support ......................................................................................................2-4 Virtual Private Networking (VPN) .............................................................................2-5 Auto Sensing and Auto UplinkTM LAN Ethernet Connections ..................................2-5 Content Filtering .......................................................................................................2-6 Trend Micro Home Network Security .......................................................................2-6 What's in the Box? ..........................................................................................................2-7 The Router's Front Panel .........................................................................................2-8 The Router's Rear Panel .........................................................................................2-9 Chapter 3 Connecting the Router to the Internet What You Need Before You Begin ..................................................................................3-1 Internet Configuration Requirements .......................................................................3-1 Two Setup Methods: 1) Smart Wizard Setup 2) Manual Setup ......................................3-2 Smart Wizard Setup .......................................................................................................3-2 Manual Setup .................................................................................................................3-3 1 v3.0, September 2005 Understanding ADSL Microfilters .............................................................................3-3 Computers Set to DHCP ..........................................................................................3-4 Manually Setting Up Your ADSL Modem Router ............................................................3-4 Auto-Detecting Your Internet Connection Type ............................................................3-10 Wizard-Detected PPPoE Login Account Setup ......................................................3-10 Wizard-Detected PPPoA Login Account Setup ......................................................3-10 Wizard-Detected Dynamic IP Account Setup ......................................................... 3-11 Wizard-Detected IP Over ATM Account Setup ...................................................... 3-11 Wizard-Detected Fixed IP (Static) Account Setup ..................................................3-12 Testing Your Internet Connection ..................................................................................3-12 Manually Configuring Your Internet Connection ...........................................................3-14 How to Perform Manual Configuration ...................................................................3-14 ADSL Settings ........................................................................................................3-18 Chapter 4 Wireless Configuration Considerations for a Wireless Network ..........................................................................4-1 Observe Performance, Placement, and Range Guidelines .....................................4-1 Implement Appropriate Wireless Security ...............................................................4-2 Understanding Wireless Settings ...................................................................................4-4 How to Set Up and Test Basic Wireless Connectivity ..............................................4-7 How to Restricting Wireless Access to Your Network ..............................................4-8 Choosing WEP Authentication and Security Encryption Methods ......................... 4-11 How to Configure WEP ..........................................................................................4-13 How to Configure WPA-PSK ..................................................................................4-14 How to Configure WPA-802.1x ..............................................................................4-15 Chapter 5 Protecting Your Network Protecting Access to Your 54 Mbps Wireless ADSL Modem Router Model DG834G ....5-1 How to Change the Built-In Password .....................................................................5-1 Changing the Administrator Login Timeout ..............................................................5-2 Configuring Basic Firewall Services ...............................................................................5-2 Blocking Keywords, Sites, and Services ..................................................................5-3 How to Block Keywords and Sites ...........................................................................5-3 Firewall Rules .................................................................................................................5-5 Inbound Rules (Port Forwarding) .............................................................................5-6 2 v3.0, September 2005 Outbound Rules (Service Blocking) .......................................................................5-10 Order of Precedence for Rules ..............................................................................5-12 Services ........................................................................................................................5-12 How to Define Services ..........................................................................................5-13 Setting Times and Scheduling Firewall Services ..........................................................5-14 How to Set Your Time Zone ...................................................................................5-14 How to Schedule Firewall Services ........................................................................5-15 Trend Micro Home Network Security ............................................................................5-15 Security Service Settings .......................................................................................5-16 Parental Controls Settings .....................................................................................5-18 Chapter 6 Managing Your Network Backing Up, Restoring, or Erasing Your Settings ...........................................................6-1 How to Back Up the Configuration to a File .............................................................6-1 How to Restore the Configuration from a File ..........................................................6-2 How to Erase the Configuration ...............................................................................6-2 Upgrading the ADSL Modem Router's Firmware ...........................................................6-2 How to Upgrade the ADSL Modem Router Firmware ..............................................6-3 Network Management Information .................................................................................6-3 Viewing ADSL Modem Router Status and Usage Statistics .....................................6-4 Viewing Attached Devices ........................................................................................6-9 Viewing, Selecting, and Saving Logged Information ................................................6-9 Examples of Log Messages ...................................................................................6-12 Enabling Security Event E-mail Notification .................................................................6-13 Running Diagnostic Utilities and Rebooting the ADSL Modem Router ........................6-14 Enabling Remote Management ....................................................................................6-15 Configuring Remote Management .........................................................................6-15 Chapter 7 Advanced Configuration Configuring Advanced Security ......................................................................................7-1 Setting Up A Default DMZ Server ............................................................................7-2 Connect Automatically, as Required ........................................................................7-3 Disable Port Scan and DOS Protection ...................................................................7-3 Respond to Ping on Internet WAN Port ...................................................................7-4 MTU Size .................................................................................................................7-4 3 v3.0, September 2005 Configuring LAN IP Settings ...........................................................................................7-4 DHCP .......................................................................................................................7-6 How to Configure LAN TCP/IP Settings ...................................................................7-8 Configuring Dynamic DNS .......................................................................................7-9 How to Configure Dynamic DNS ..............................................................................7-9 Using Static Routes ...................................................................................................... 7-11 Static Route Example ............................................................................................. 7-11 How to Configure Static Routes .............................................................................7-12 Universal Plug and Play (UPnP) ...................................................................................7-13 Chapter 8 Virtual Private Networking Overview of VPN Configuration ......................................................................................8-2 Client-to-Gateway VPN Tunnels ..............................................................................8-2 Gateway-to-Gateway VPN Tunnels .........................................................................8-3 Planning a VPN ..............................................................................................................8-3 VPN Tunnel Configuration ..............................................................................................8-5 How to Set Up a Client-to-Gateway VPN Configuration .................................................8-6 Step 1: Configuring the Client-to-Gateway VPN Tunnel on the DG834G ................8-7 Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC .........8-12 How to Set Up a Gateway-to-Gateway VPN Configuration ..........................................8-20 VPN Tunnel Control ......................................................................................................8-27 Activating a VPN Tunnel ........................................................................................8-27 Verifying the Status of a VPN Tunnel .....................................................................8-30 Deactivating a VPN Tunnel ....................................................................................8-32 Deleting a VPN Tunnel ...........................................................................................8-35 How to Set Up VPN Tunnels in Special Circumstances ...............................................8-35 Using Auto Policy to Configure VPN Tunnels ........................................................8-36 Using Manual Policy to Configure VPN Tunnels ....................................................8-48 Chapter 9 Troubleshooting Basic Functioning ...........................................................................................................9-1 Power LED Not On ...................................................................................................9-2 Test LED Never Turns On or Test LED Stays On .....................................................9-2 LAN or WAN Port LEDs Not On ...............................................................................9-2 Troubleshooting the Web Configuration Interface ..........................................................9-3 4 v3.0, September 2005 Troubleshooting the ISP Connection ..............................................................................9-4 ADSL link .................................................................................................................9-4 Obtaining a WAN IP Address ...................................................................................9-5 Troubleshooting PPPoE or PPPoA ..........................................................................9-6 Troubleshooting Internet Browsing ..........................................................................9-6 Troubleshooting a TCP/IP Network Using the Ping Utility ..............................................9-7 Testing the LAN Path to Your Router .......................................................................9-7 Testing the Path from Your Computer to a Remote Device .....................................9-8 Restoring the Default Configuration and Password ........................................................9-9 Using the Reset button .............................................................................................9-9 Problems with Date and Time .........................................................................................9-9 Appendix A Technical Specifications Appendix B Related Documents Appendix C NETGEAR VPN Configuration DG834G to FVL328 ....................................................................................................... B-1 Configuration Profile ................................................................................................ B-1 Step-By-Step Configuration ..................................................................................... B-2 DG834G with FQDN to FVL328 .................................................................................... B-7 Configuration Profile ................................................................................................ B-7 Step-By-Step Configuration ..................................................................................... B-9 Configuration Summary (Telecommuter Example) ...................................................... B-14 Setting Up the Client-to-Gateway VPN Configuration (Telecommuter Example) ........ B-15 Step 1: Configuring the Client-to-Gateway VPN Tunnel on the VPN Router at the Employer's Main Office ......................................................................................... B-16 Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC at the Telecommuter's Home Office ................................................................................ B-18 Monitoring the VPN Tunnel (Telecommuter Example) ................................................. B-26 Viewing the PC Client's Connection Monitor and Log Viewer ............................... B-26 Viewing the VPN Router's VPN Status and Log Information ................................ B-28 5 v3.0, September 2005 6 v3.0, September 2005 Chapter 1 About This Manual This chapter describes the intended audience, scope, conventions, and formats of this manual. Audience, Scope, Conventions, and Formats This reference manual assumes that the reader has basic to intermediate computer and Internet skills. However, basic computer network, Internet, firewall, and VPN technologies tutorial information is provided in the Appendices and on the Netgear website. Note: Product updates are available on the NETGEAR, Inc. Web site at http://kbserver.netgear.com/products/DG834G.asp. This guide uses the following typographical conventions: Table 1-1. italics bold fixed Emphasis, books, CDs, URL names User input Screen text, file and server names, extensions, commands, IP addresses This guide uses the following formats to highlight special messages: Note: This format is used to highlight information of importance or special interest. Tip: This format is used to highlight a procedure that will save time or resources. About This Manual v3.0, September 2005 1-1 DG834G Reference Manual Warning: Ignoring this type of note may result in a malfunction or damage to the equipment. Danger: This is a safety warning. Failure to take heed of this notice may result in personal injury or death. This manual is written for the Wireless ADSL Modem Router according to these specifications: Table 1-2. Manual Scope Product Version Manual Publication Date 54 Mbps Wireless ADSL Modem Router Model DG834G September 2005 How to Print this Manual To print this manual you can choose one of the following several options, according to your needs. · Printing a Page in the HTML View. Each page in the HTML version of the manual is dedicated to a major topic. Use the Print button on the browser toolbar to print the page contents. · Printing a Chapter. Use the PDF of This Chapter link at the top left of any page. -- Click the PDF of This Chapter link at the top right of any page in the chapter you want to print. The PDF version of the chapter you were viewing opens in a browser window. -- Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at http://www.adobe.com. -- Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature. 1-2 v3.0, September 2005 About This Manual DG834G Reference Manual · Printing the Full Manual. Use the Complete PDF Manual link at the top left of any page. -- Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window. -- Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature. About This Manual v3.0, September 2005 1-3 DG834G Reference Manual 1-4 v3.0, September 2005 About This Manual Chapter 2 Introduction This chapter describes the features of the NETGEAR 54 Mbps Wireless ADSL Modem Router Model DG834G. The Wireless ADSL Modem Router is a combination of a built-in ADSL modem, ADSL modem router, 4-port switch, and firewall which enables your entire network to safely share an Internet connection that otherwise is used by a single computer. Note: If you are unfamiliar with networking and routing, refer to "Internet Networking and TCP/IP Addressing:" on page A-1 to become more familiar with the terms and procedures used in this manual. About the ADSL Modem Router The 54 Mbps Wireless ADSL Modem Router Model DG834G provides continuous, high-speed 10/100 Ethernet access between your Ethernet devices. The Wireless ADSL Modem Router enables your entire network to share an Internet connection through the built-in ADSL modem that otherwise is used by a single computer. With minimum setup, you can install and use the ADSL modem router within minutes. The Wireless ADSL Modem Routerprovides multiple Web content filtering options, plus e-mail browsing activity, reporting, and instant alerts. Parents and network administrators can establish restricted access policies based on time of day, Web site addresses, and address keywords. They can also share high-speed ADSL Internet access for up to 253 personal computers. The included firewall and Network Address Translation (NAT) features protect you from hackers. The DG834G supports Trend Micro Home Network Security, a bundle of services that includes router-based Parental Controls and network-wide protection from viruses, Trojans, spyware, spam, and other Internet threats. Introduction v3.0, September 2005 2-1 DG834G Reference Manual Key Features The Wireless ADSL Modem Router provides the following features: · · · · · · · · · · A built-in ADSL modem A powerful, true firewall 802.11g standards-based wireless networking Easy, Web-based setup for installation and management Extensive Internet protocol support Trustworthy VPN Communications over the Internet VPN Wizard for easy VPN configuration Auto Sensing and Auto UplinkTM LAN Ethernet connections Content filtering Support for Trend Micro Home Network Security These features are discussed below. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the DG834G is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include: · Denial of Service (DoS) protection Automatically detects and thwarts Denial of Service (DoS) attacks such as Ping of Death, SYN Flood, LAND Attack and IP Spoofing. Blocks unwanted traffic from the Internet to your LAN. Blocks access from your LAN to Internet locations or services that you specify as off-limits. Logs security incidents The DG834G will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. You can configure the ADSL modem router to email the log to you at specified intervals. You can also configure the ADSL modem router to send immediate alert messages to your email address or email pager whenever a significant event occurs. · · · 2-2 v3.0, September 2005 Introduction DG834G Reference Manual 802.11 Standards-based Wireless Networking The Wireless ADSL Modem Router includes an 802.11g-compliant wireless access point, providing continuous, high-speed 10/100 Mbps access between your wireless and Ethernet devices. The access point provides: · · · · · · 802.11g Standards-based wireless networking at up to 54 Mbps Works with both 802.11g and 802.11b wireless devices 64-bit and 128-bit WEP encryption security WEP keys can be entered manually or generated by passphrase Support for Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) encryption and 802.1x authentication Wireless access can be restricted by MAC address Easy Installation and Management You can install, configure, and operate the DG834G within minutes after connecting it to the network. The following features simplify installation and management tasks: · Browser-based management Browser-based configuration allows you to easily configure your ADSL modem router from almost any type of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. Smart Wizard The ADSL modem router automatically senses the type of Internet connection, asking you only for the information required for your type of ISP account. Remote management The ADSL modem router allows you to log in to the Web management interface from a remote location via the Internet. For security, you can limit remote management access to a specified remote IP address or range of addresses, and you can choose a nonstandard port number. Diagnostic functions The ADSL modem router incorporates built-in diagnostic functions such as Ping, DNS lookup, and remote reboot. These functions allow you to test Internet connectivity and reboot the ADSL modem router. You can use these diagnostic functions directly from the DG834G when you are connected on the LAN or when you are connected over the Internet via the remote management function. 2-3 v3.0, September 2005 · · · Introduction DG834G Reference Manual · Visual monitoring The ADSL modem router's front panel LEDs provide an easy way to monitor its status and activity. Flash erasable programmable read-only memory (EPROM) for firmware upgrades. · Protocol Support The DG834G supports Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). "Internet Networking and TCP/IP Addressing:" on page A-1 provides further information on TCP/IP. · The Ability to Enable or Disable IP Address Sharing by NAT The DG834G allows several networked PCs to share an Internet account using only a single IP address, which may be statically or dynamically assigned by your Internet service provider (ISP). This technique, known as Network Address Translation (NAT), allows the use of an inexpensive single-user ISP account. This feature can also be turned off completely while using the DG834G if you want to manage the IP address scheme yourself. Automatic Configuration of Attached PCs by DHCP The DG834G dynamically assigns network configuration information, including IP, ADSL modem router, and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies configuration of PCs on your local network. DNS Proxy When DHCP is enabled and no DNS addresses are specified, the ADSL modem router provides its own address as a DNS server to the attached PCs. The ADSL modem router obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. Classical IP (RFC 1577) Some Internet service providers, in Europe for example, use Classical IP in their ADSL services. In such cases, the ADSL modem router is able to use the Classical IP address from the ISP. PPP over Ethernet (PPPoE) PPP over Ethernet is a protocol for connecting remote hosts to the Internet over an ADSL connection by simulating a dial-up connection. This feature eliminates the need to run a login program such as EnterNet or WinPOET on your computer. · · · · 2-4 v3.0, September 2005 Introduction DG834G Reference Manual · PPP over ATM (PPPoA) PPP over ATM is a protocol for connecting remote hosts to the Internet over an ADSL connection by simulating an ATM connection. Dynamic DNS Dynamic DNS services allow remote users to find your network using a domain name when your IP address is not permanently assigned. The ADSL modem router contains a client that can connect to many popular Dynamic DNS services to register your dynamic IP address. Universal Plug and Play (UPnP) UPnP is a networking architecture that provides compatibility between networking technologies. UPnP compliant routers provide broadband users at home and small businesses with a seamless way to participate in online games, videoconferencing and other peer-to-peer services. · · Virtual Private Networking (VPN) The Wireless ADSL Modem Router provides a secure encrypted connection between your local area network (LAN) and remote networks or clients. It includes the following VPN features: · · Supports 8 VPN connections. Supports industry standard VPN protocols The Wireless ADSL Modem Router supports standard Manual or IKE keying methods, standard MD5 and SHA-1 authentication methods, and standard DES and 3DES encryption methods. It is compatible with many other VPN products. Supports 3DES encryption for maximum security. VPN Wizard based on VPNC recommended settings. · · Auto Sensing and Auto UplinkTM LAN Ethernet Connections With its internal 4-port 10/100 switch, the DG834G can connect to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. The local LAN ports are autosensing and capable of full-duplex or half-duplex operation. The ADSL modem router incorporates Auto UplinkTM technology. Each local Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a `normal' connection such as to a computer or an `uplink' connection such as to a switch or hub. That port will then configure itself to the correct configuration. This feature also eliminates the need to worry about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection. Introduction v3.0, September 2005 2-5 DG834G Reference Manual Content Filtering With its content filtering feature, the DG834G prevents objectionable content from reaching your PCs. The ADSL modem router allows you to control access to Internet content by screening for keywords within Web addresses. You can configure the ADSL modem router to log and report attempts to access objectionable Internet sites. Trend Micro Home Network Security This service bundle from Trend Micro has three components: · Trend Micro dashboard This component is free for unlimited use. From the dashboard you can: · Scan your computer and entire network for security vulnerabilities · View individual computer and network-wide security reports · Detect and remove spyware · View attempts to access content restricted by Parental Controls · Purchase subscriptions for Parental Controls and Trend Micro Internet Security Trend Micro Internet Security You can install this program on up to 10 computers and try it free for 60 days. Its features include: · Real-time and scheduled scanning to remove viruses, Trojans, spyware, and other Internet threats · Personal firewall · Network intruder detection · Anti-spam Router-based Parental Controls This service restricts home network users from viewing inappropriate Web content. It is free for 60 days, and when you register your free trial of Trend Micro Internet Security, your free use of Parental Controls is automatically extended to one year. · · For instructions on activating these services, refer to "Trend Micro Home Network Security" on page 5-15. 2-6 v3.0, September 2005 Introduction DG834G Reference Manual What's in the Box? The product package should contain the following items: · · · · · · 54 Mbps Wireless ADSL Modem Router Model DG834G AC power adapter (varies by region) Category 5 (Cat 5) Ethernet cable Telephone cable with RJ-11 connector Microfilters (quantity and type vary by region) Resource CD, including: -- The Smart Wizard Installation Assistant -- This manual Warranty and Support Information cards · If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair. Introduction v3.0, September 2005 2-7 DG834G Reference Manual The Router's Front Panel The front panel shown below contains status LEDs. 1 Figure 2-1 2 3 4 5 You can use the LEDs to verify various conditions. Table 2-1 describes each LED. Table 2-1. Label 1. Power 2. Test LED Descriptions Activity On Off On Off Blink -- Amber On -- Green Blink -- Green Description Power is supplied to the router. Power is not supplied to the router. The system is initializing. The system is ready and running. Indicates ADSL training. The Internet port has detected a link with an attached device. Data is being transmitted or received by the Internet port. Indicates that the Wireless port is initialized. The Wireless Access Point is turned off. The Local port has detected a link with a 100 Mbps device. Data is being transmitted or received at 100 Mbps. The Local port has detected a link with a 10 Mbps device. Data is being transmitted or received at 10 Mbps. No link is detected on this port. 3. Internet On 4. Wireless Off On (Green) Blink (Green) On (Amber) Blink (Amber) Off 5. LAN 2-8 v3.0, September 2005 Introduction DG834G Reference Manual The Router's Rear Panel The rear panel of the 54 Mbps Wireless ADSL Modem Router Model DG834G (Figure 2-2) contains port connections. 2 3 1 4 5 Figure 2-2 Viewed from left to right, the rear panel contains the following elements: 1. AC power adapter outlet 2. Four Local Ethernet RJ-45 LAN ports for connecting the firewall to the local computers 3. RJ-11 ADSL port for connecting the firewall to an ADSL line 4. Factory Default Reset push button 5. Wireless antenna Introduction v3.0, September 2005 2-9 DG834G Reference Manual 2-10 v3.0, September 2005 Introduction Chapter 3 Connecting the Router to the Internet This chapter describes how to set up the firewall on your Local Area Network (LAN) and connect to the Internet. It describes how to configure your 54 Mbps Wireless ADSL Modem Router Model DG834G for Internet access using the Setup Wizard, or how to manually configure your Internet connection. What You Need Before You Begin You need to prepare the following before you can set up your firewall: · · · · Active Internet service provided by an ADSL account. The Internet Service Provider (ISP) configuration information for your ADSL account. ASDL microfilters as explained below. Your computers set to DHCP. Internet Configuration Requirements Depending on how your ISP set up your Internet account, you need one or more of these configuration parameters to connect your firewall to the Internet: · · · · · · Virtual Path Identifier (VPI)/Virtual Channel Indentifier (VCI) parameters Multiplexing Method Host and Domain Names ISP Login Name and Password ISP Domain Name Server (DNS) Addresses Fixed or Static IP Address Your ISP should have provided you with all the information needed to connect to the Internet. If you cannot locate this information, you can ask your ISP to provide it. Connecting the Router to the Internet v3.0, September 2005 3-1 DG834G Reference Manual Two Setup Methods: 1) Smart Wizard Setup 2) Manual Setup You have two methods available for setting up your ADSL modem router: · Smart Wizard Setup: Use the Smart Wizard on the CD to assist you with setting up your ADSL modem router. -- This option is the easiest. The Smart Wizard on the CD guides you through the setup process, automating many of the steps, and verifying that necessary conditions exist and that steps you perform have been successfully completed. · -- This option requires a PC running Microsoft Windows 98SE or higher. Manual Setup: Manually set up your ADSL modem router. -- This option is best if you are replacing an existing ADSL modem router or are technically knowledgeable. -- Use this option if you are using a computer that does not run Microsoft Windows. -- The manual setup procedures are documented in this manual. Use the setup option that best suites you. Smart Wizard Setup The Smart Wizard setup process should take about 20 minutes to complete. 1. Locate the ADSL settings information your Internet service provider gave you. 2. Insert the NETGEAR CD into a Windows PC. The CD will automatically start and detect the language you are using on your PC. Note: If the CD does not automatically start, browse the CD and double-click on Autorun. 3. Accept the language option or change to a different language. 4. Click Next to proceed. 5. Click Setup to start the Smart Wizard installation assistant. Follow the instructions on the screen. 3-2 v3.0, September 2005 Connecting the Router to the Internet DG834G Reference Manual Manual Setup Use the topics and procedures below to manually set up your ADSL modem router. Understanding ADSL Microfilters ADSL technology uses the same wires as your telephone service. However, ADSL adds signals to the telephone lines which create noise in the telephone service. You must use ADSL microfilters to filter out these signals before they reach your telephone. Note: If you purchased the ADSL modem router in a country where a microfilter is not included, you must acquire one. ADSL Microfilter Phone Figure 3-1 Each device such as a telephone, fax machine, answering machine, or caller ID display will require an ADSL microfilter. Warning: Do not connect the ADSL modem router to the ADSL line through a microfilter unless the microfilter is a combination microfilter/splitter specifically designed for this purpose. Doing so will prevent block your connection to the Internet. If you have any doubts about this, connect the ADSL modem router directly to the ADSL line. Connecting the Router to the Internet v3.0, September 2005 3-3 DG834G Reference Manual ADSL Microfilter with Built-In Splitter DSL Phone Line Figure 3-2 Use an ADSL microfilter with built-in splitter when there is a single wall outlet which must provide connectivity for both the ADSL modem router and telephone equipment. Computers Set to DHCP For the initial connection to your firewall, your computer has to be set to automatically get its TCP/IP configuration from the firewall via DHCP. This is usually the case. The NETGEAR Smart Wizard CD automatically takes care of this requirement. For manual setup, refer to the documentation that came with your computer. Manually Setting Up Your ADSL Modem Router There are four steps to setting up your ADSL modem router: 1. Install ADSL filters on the phone lines. 2. Connect the firewall to the ADSL line. 3. Log in to the firewall. 4. Connect to the Internet. Follow the steps below to connect your firewall to your network. Before you begin, locate the ADSL configuration information from your Internet Service Provider (ISP). 1. Connect the ADSL filter. Note: If you purchased the DG834G in a country where an ADSL filter is not included, you must acquire one. 3-4 v3.0, September 2005 Connecting the Router to the Internet DG834G Reference Manual a. You need to install an ADSL filter for every telephone that uses the same phone line as your ADSL modem router. Select the filter that came with your ADSL modem router. 1 2 3 1. One-Line Filter: Use with a phone or fax machine. 2. Splitter: Use with a one-line filter to share an outlet with a phone and the ADSL modem modem router. 3. Two-Line Filter with Splitter: Use to share an outlet with a phone and the ADSL router. Figure 3-3 b. Two-Line Filter Example. Insert the two-line filter into the phone outlet and connect the phone to the phone line connector (A): A Figure 3-4 Note: To use a one-line filter with a separate splitter, insert the splitter into the phone outlet, connect the one-line filter to the splitter, and connect the phone to the filter. Connecting the Router to the Internet v3.0, September 2005 3-5 DG834G Reference Manual 2. Connect the ADSL modem router to the ADSL filter. a. Using the included phone cable with RJ-11 jacks, connect the ADSL port (B) of the ADSL modem router to the ADSL port (C) of the two-line filter. Line C B Figure 3-5 Warning: Improperly connecting a filter to your ADSL modem router will block your ADSL connection. 3-6 v3.0, September 2005 ADSL Phone Connecting the Router to the Internet DG834G Reference Manual b. Connect the Ethernet cable (D) from a ADSL modem router LAN port to the Ethernet adapter in your computer. Line ADSL Phone D Figure 3-6 c. Connect the power adapter to the firewall and plug it in to a power outlet. Verify the following: The power light is lit after turning on the firewall. The test light comes on briefly, then goes off. The wireless light is lit after turning on the firewall. The ADSL light is green, indicating you are connected to the ADSL network. d. Now, turn on your computer. If software usually logs you in to your Internet connection, do not run that software. Cancel it if it starts automatically. Verify the following: The local lights are lit for any connected computers. Connecting the Router to the Internet v3.0, September 2005 3-7 DG834G Reference Manual 3. Log in to the ADSL modem router. Note: Your computer needs to be configured for DHCP. For instructions on configuring for DHCP, please see the documentation that came with your computer or "Preparing a Computer for Network Access". a. Type http://Default IP Address Variable in the address field of a browser such as Internet Explorer or Netscape® Navigator. Figure 3-7 This login window opens: Figure 3-8 Enter admin for the user name and password for the password, both in lower case letters. 3-8 v3.0, September 2005 Connecting the Router to the Internet DG834G Reference Manual b. After logging in, you will see the menu below. Figure 3-9 4. Connect to the Internet You are now ready to configure your ADSL modem router to connect to the Internet. There are two ways you can configure your ADSL modem router to connect to the Internet: a. Let the ADSL modem router Setup Wizard auto-detect the type of Internet connection you have and configure it. b. Manually choose which type of Internet connection you have and configure it. In either case, use to the configuration parameters your ISP provided to assure that the configuration settings for your Internet connection are correct. 5. Test your Internet connection. From the bottom of the Setup menu, click Test. If the NETGEAR Web site does not appear within one minute, refer to Chapter 2, "Troubleshooting". Your ADSL modem router is now configured to provide Internet access for your network. Your ADSL modem router automatically connects to the Internet when one of your computers requires access. It is not necessary to run a dialer or login application such as Dial-Up Networking or Enternet to connect, log in, or disconnect. These functions are performed automatically by the ADSL modem router as needed. To access the Internet from any computer connected to your ADSL modem router, launch a browser such as Microsoft Internet Explorer or Netscape Navigator. You should see the ADSL modem router's Internet LED blink, indicating communication to the ISP. The browser should begin to display a Web page. Connecting the Router to the Internet v3.0, September 2005 3-9 DG834G Reference Manual Auto-Detecting Your Internet Connection Type The Web Configuration Manager built in to the ADSL modem router contains a Setup Wizard that can automatically determine your network connection type. The procedures for filling in the configuration page for each type of connection follow below. Wizard-Detected PPPoE Login Account Setup If the Setup Wizard determines that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you will be directed to the PPPoE page shown: Figure 3-10 Enter the PPPoE login user name and password. Wizard-Detected PPPoA Login Account Setup If the Setup Wizard determines that your Internet service account uses a login protocol such as PPP over ATM (PPPoA), you will be directed to the PPPoA page shown: Figure 3-11 3-10 v3.0, September 2005 Connecting the Router to the Internet DG834G Reference Manual Enter your login user name and password. These fields are case sensitive. Wizard-Detected Dynamic IP Account Setup If the Setup Wizard determines that your Internet service account uses Dynamic IP assignment, you will be directed to the page shown: Figure 3-12 Click Apply to set Dynamic IP as the connection method. Wizard-Detected IP Over ATM Account Setup If the Setup Wizard determines that your Internet service account uses IP over ATM Classical IP assignment (RFC1577), you will be directed to the page shown: Figure 3-13 1. Enter your assigned IP Address and Subnet Mask. This information should have been provided to you by your ISP. You need the configuration parameters from your ISP. 2. Enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. Connecting the Router to the Internet v3.0, September 2005 3-11 DG834G Reference Manual DNS servers are required to perform the function of translating an Internet name such as www.netgear.com to a numeric IP address. For a fixed IP address configuration, you must obtain DNS server addresses from your ISP and enter them manually here. 3. Click Apply to save the settings. 4. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Chapter 9, "Troubleshooting". Wizard-Detected Fixed IP (Static) Account Setup If the router determines that your Internet service account uses Fixed IP assignment, you will be directed to the page where you can enter the IP addresses. 1. If required, enter the Account Name and Domain Name from your ISP. 2. Choose "Use Static IP Address" or "Use IP Over ATM" (IPoA -- RFC1483 Routed) according to the information from your ISP. If you choose IPoA, the router will be able to detect the gateway IP address but you still need to provide the router IP address. 3. Enter your assigned IP Address, Subnet Mask, and the IP Address of your ISP's gateway ADSL modem router. This information should have been provided to you by your ISP. You need the configuration parameters from your ISP. 4. Enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. DNS servers are required to perform the function of translating an Internet name such as www.netgear.com to a numeric IP address. For a fixed IP address configuration, you must obtain DNS server addresses from your ISP and enter them manually here. 5. Click Apply to save the settings. 6. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Chapter 9, "Troubleshooting". Testing Your Internet Connection After completing the Internet connection configuration, your can test your Internet connection. Log in to the ADSL modem router, then, from the Basic Settings link in the Setup menu, click the Test button. If the NETGEAR Web site does not appear within one minute, refer to Chapter 9, "Troubleshooting". 3-12 v3.0, September 2005 Connecting the Router to the Internet DG834G Reference Manual Your ADSL modem router is now configured to provide Internet access for your network. Your ADSL modem router automatically connects to the Internet when one of your computers requires access. It is not necessary to run a dialer or login application such as Dial-Up Networking or Enternet to connect, log in, or disconnect. These functions are performed by the ADSL modem router as needed. To access the Internet from any computer connected to your ADSL modem router, launch a browser such as Microsoft Internet Explorer or Netscape Navigator. You should see the ADSL modem router's Internet LED blink, indicating communication to the ISP. The browser should begin to display a Web page. The following chapters describe how to configure the Advanced features of your ADSL modem router, and how to troubleshoot problems that may occur. Connecting the Router to the Internet v3.0, September 2005 3-13 DG834G Reference Manual Manually Configuring Your Internet Connection You can manually configure your ADSL modem router using the menu below, or you can allow the Setup Wizard to determine your configuration as described in the previous section. ISP Does Not Require Login ISP Does Require Login Figure 3-14 How to Perform Manual Configuration We recommend that you start the manual configuration from the Setup Wizard: 1. Select your country and language. Language choices are English, French, German, and Italian. After you change the language, the remaining setup screens change to the language of your choice. 2. Select No to manually configure your ADSL modem router connection. 3. Click Next. 4. Manually configure the ADSL modem router in the Basic Settings menu shown above. 3-14 v3.0, September 2005 Connecting the Router to the Internet DG834G Reference Manual 5. Follow the instructions below according to the encapsulation method and whether your Internet connection requires a login. The following methods are available: · · · Internet Connection Requires Login and Uses PPPoE Internet Connection Requires Login and Uses PPPoA Internet Connection Does Not Require a Login 6. Usually the default ADSL Settings work fine for most ISPs and you can skip this step. If you have any problems with your connection, check the ADSL Settings. See "ADSL Settings" on page 3-18 for more details. Internet Connection Requires Login and Uses PPPoE 1. If your Internet connection does require login, select Yes and fill in the settings according to the instructions below. Note: You will no longer need to launch the ISP's login program on your computer in order to access the Internet. When you start an Internet application, your ADSL modem router automatically logs you in. 2. Choose PPPoE for the encapsulation method. 3. Enter the login name (frequently the email address your ISP provided), password, and service name (if required). 4. If you want to change the login timeout, enter a new value in minutes. This determines how long the ADSL modem router keeps the Internet connection active after there is no Internet activity from the LAN. Entering an Idle Timeout value of zero means never log out. 5. When a connection uses PPPoE, the IP address is normally assigned automatically. However, the DG834G allows this address to be set manually. · · Select "Get Automatically from ISP" if your ISP assigns your IP address. Select "Use Static IP Address" if your ISP gave you a statically assigned address. 6. The DNS server is used to look up site addresses based on their names. · · Select "Get Automatically from ISP" if your ISP uses DHCP to assign your DNS servers. Your ISP will automatically assign this address. Select "Use These DNS Servers" if your ISP gave you one or two DNS addresses. Type the primary and secondary addresses. Connecting the Router to the Internet v3.0, September 2005 3-15 DG834G Reference Manual 7. You should only disable NAT if you are sure you do not require it. NAT automatically assigns private IP addresses (192.168.0.x) to LAN connected devices. When NAT is disabled, only standard routing is performed by this router. Classical routing lets you directly manage the IP addresses the DG834G uses. Classical routing should be selected only by experienced users. Note: Disabling NAT will reboot the router and reset all the DG834G configuration settings to the factory default. Disable NAT only if you plan to install the DG834G in a setting where you will be manually administering the IP address space on the LAN side of the router. Internet Connection Requires Login and Uses PPPoA 1. If your Internet connection does require login, select Yes and fill in the settings according to the instructions below. Note: You will no longer need to launch the ISP's login program on your computer in order to access the Internet. When you start an Internet application, your ADSL modem router automatically logs you in. 2. Choose PPPoA for the encapsulation method. 3. Enter the login name (frequently the email address your ISP provided), and password. 4. If you want to change the login timeout, enter a new value in minutes. This determines how long the ADSL modem router keeps the Internet connection active after there is no Internet activity from the LAN. Entering an Idle Timeout value of zero means never log out. 5. When a connection uses PPPoA, the IP address is normally assigned automatically. However, the DG834G allows this address to be set manually. · · Select "Get Automatically from ISP" if your ISP assigns your IP address. Select "Use Static IP Address" if your ISP gave you a statically assigned address. 6. The DNS server is used to look up site addresses based on their names. · Select "Get Automatically from ISP" if your ISP uses DHCP to assign your DNS servers. Your ISP will automatically assign this address. 7. Select "Use These DNS Servers" if your ISP gave you one or two DNS addresses. Type the primary and secondary addresses.You should only disable NAT if you are sure you do not require it. NAT automatically assigns private IP addresses (192.168.0.x) to LAN connected devices. When NAT is disabled, only standard routing is performed by this router. Classical routing lets you directly manage the IP addresses the DG834G uses. Classical routing should be selected only by experienced users. 3-16 v3.0, September 2005 Connecting the Router to the Internet DG834G Reference Manual Note: Disabling NAT will reboot the router and reset all the DG834G configuration settings to the factory default. Disable NAT only if you plan to install the DG834G in a setting where you will be manually administering the IP address space on the LAN side of the router. Internet Connection Does Note Require A Login 1. If your Internet connection does not require a login, select No and fill in the settings according to the instructions below. 2. Enter your Account Name (may also be called Host Name) and Domain Name. These parameters may be necessary to access your ISP's mail or news servers. 3. Internet IP Address: · · Select "Get Dynamically from ISP" if your ISP uses DHCP to assign your IP address. Your ISP will automatically assign these addresses. Select "Use Static IP Address" if your ISP has assigned you a permanent, fixed (static) IP address. Enter the IP address that your ISP assigned. Also enter the IP Subnet Mask and the Gateway IP Address. The gateway is the ISP's ADSL modem router to which your ADSL modem router will connect. Select "IP Over ATM (IPoA)" if your ISP uses Classical IP Addresses (RFC1577). Enter the IP address, IP Subnet Mask, and Gateway IP Addresses that your ISP assigned. · 4. Domain Name Server (DNS) Address: · Select "Get Dynamically from ISP" if your ISP uses DHCP to assign your IP address. Your ISP will automatically assign this address. · If you know that your ISP does not automatically transmit DNS addresses to the ADSL modem router during login, select "Use these DNS servers" and enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. A DNS server is a host on the Internet that translates Internet names (such as www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of one or two DNS servers to your ADSL modem router during login. If the ISP does not transfer an address, you must obtain it from the ISP and enter it manually here. 5. You should only disable NAT if you are sure you do not require it. NAT automatically assigns private IP addresses (192.168.0.x) to LAN connected devices. When NAT is disabled, only standard routing is performed by this router. Classical routing lets you directly manage the IP addresses the DG834G uses. Classical routing should be selected only by experienced users. Connecting the Router to the Internet v3.0, September 2005 3-17 DG834G Reference Manual Note: Disabling NAT will reboot the router and reset all the DG834G configuration settings to the factory default. Disable NAT only if you plan to install the DG834G in a setting where you will be manually administering the IP address space on the LAN side of the router 6. ADSL Modem Router MAC Address: This section determines the Ethernet MAC address that will be used by the ADSL modem router on the Internet port. Some ISPs will register the Ethernet MAC address of the network interface card in your computer when your account is first opened. They will then only accept traffic from the MAC address of that computer. This feature allows your ADSL modem router to masquerade as that computer by "cloning" its MAC address. To change the MAC address, select "Use this Computer's MAC address". The ADSL modem router will then capture and use the MAC address of the computer that you are now using. You must be using the one computer that is allowed by the ISP. Alternatively, select "Use this MAC address" and enter it. 7. Click Apply to save your settings. 8. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Chapter 9, "Troubleshooting". ADSL Settings The default settings of your 54 Mbps Wireless ADSL Modem Router Model DG834G will work fine for most ISPs. However, some ISPs use a specific Multiplexing Method and Virtual Circuit Number for the Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI). Note: The correct country must be selected from the Setup Wizard's first page for the default ADSL Settings to work. If your ISP provided you with a specific Multiplexing Method or VPI/VCI number, then fill in the following: 1. Select the ADSL Settings link from the main menu. 2. For the Multiplexing Method, select LLC-based or VC-based. 3. Type a number between 0 and 255 for the VPI. The default is 8. 4. Type a number between 1 and 65535 for the VCI. The default is 35. 5. Click Apply. 3-18 v3.0, September 2005 Connecting the Router to the Internet Chapter 4 Wireless Configuration This chapter describes how to configure the wireless features of your 54 Mbps Wireless ADSL Modem Router Model DG834G. Considerations for a Wireless Network In planning your wireless network, you should consider the level of security required. You should also select the physical placement of your ADSL modem router in order to maximize the network speed. To ensure proper compliance and compatibility between similar products in your area, the operating channel and region must be set correctly. Observe Performance, Placement, and Range Guidelines The operating distance or range of your wireless connection can vary significantly based on the physical placement of the wireless firewall. The latency, data throughput performance, and notebook power consumption also vary depending on your configuration choices. Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the router. For complete range/performance specifications, please see Appendix A, "Technical Specifications". For best results, place your firewall: · · · · · Near the center of the area in which your computers will operate In an elevated location such as a high shelf where the wirelessly connected computers have line-of-sight access (even if through walls) Away from sources of interference, such as computers, microwaves, and cordless phones With the Antenna tight and in the upright position Away from large metal surfaces 4-1 v3.0, September 2005 Wireless Configuration DG834G Reference Manual The time it takes to establish a wireless connection can vary depending on both your security settings and placement. WEP connections can take slightly longer to establish. Also, WEP encryption can consume more battery power on a notebook computer. Implement Appropriate Wireless Security Note: Indoors, computers can connect over 802.11g wireless networks at a maximum range of up to 300 feet. Such distances can allow for others outside of your immediate area to access your network. Unlike wired network data, your wireless data transmissions can extend beyond your walls and can be received by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The Wireless ADSL Modem Router provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs. Figure 4-1 There are several ways you can enhance the security of your wireless network: · Restrict Access Based on MAC Address. You can allow only trusted PCs to connect so that unknown PCs cannot wirelessly connect to the DG834G. Restricting access by MAC address adds an obstacle against unwanted access to your network, but the data broadcast over the wireless link is fully exposed. 4-2 v3.0, September 2005 Wireless Configuration DG834G Reference Manual · Turn Off the Broadcast of the Wireless Network Name SSID. If you disable broadcast of the SSID, only devices that have the correct SSID can connect. This nullifies wireless network `discovery' feature of some products, such as Windows XP, but the data is still exposed. WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared Key authentication and WEP data encryption will block all but the most determined eavesdropper. WPA. Wi-Fi Protected Access (WPA) data encryption provides data security. The very strong authentication along with dynamic per frame re-keying of WPA make it virtually impossible to compromise. Because this is a new standard, wireless device driver and software availability may be limited. · · Wireless Configuration v3.0, September 2005 4-3 DG834G Reference Manual Understanding Wireless Settings To configure the Wireless interface of your ADSL modem router, click the Wireless link in the main menu of the browser interface. The Wireless Settings menu will appear, as shown below: Figure 4-2 The following parameters are in the Wireless Settings menu: 4-4 v3.0, September 2005 Wireless Configuration DG834G Reference Manual · Wireless Network. -- Name (SSID). The Service Set ID, also known as the wireless network name. Enter a value of up to 32 alphanumeric characters. The same Name (SSID) must be assigned to all wireless devices in your network. The default SSID is NETGEAR, but NETGEAR strongly recommends that you change your network Name to a different value. Note: This value is case sensitive. For example, Wireless is not the same as wireless. -- Region. Select your region from the drop-down list. This field displays the region of operation for which the wireless interface is intended. It may not be legal to operate the ADSL modem router in a region other than the region shown here. -- Channel. This field determines which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby access point. -- Mode. The default is "g & b", which allows both "g" and "b" wireless stations to access this device. "g only" allows only 802.11g wireless stations to be used. "b only" allows 802.11b wireless stations; 802.11g wireless stations can still be used if they can operate in 802.11b mode. · Wireless Access Point. -- Enable Wireless Access Point. This field lets you turn off or turn on the wireless access point built in to the ADSL modem router. The wireless icon on the front of the ADSL modem router will also display the current status of the Wireless Access Point to let you know if it is disabled or enabled. The wireless access point must be enabled to allow wireless stations to access the Internet. -- Allow Broadcast of Name (SSID). If enabled, the SSID is broadcast to all Wireless Stations. Stations which have no SSID (or a "null" value) can then adopt the correct SSID for connections to this Access Point. -- Wireless Isolation. If enabled, Wireless Stations will not be able to communicate with each other or with Stations on the wired network. This feature should normally be disabled. · Wireless Station Access List. -- By default, any wireless computer that is configured with the correct wireless network name or SSID will be allowed access to your wireless network. For increased security, you can restrict access to the wireless network to only specific computers based on their MAC addresses. Click Setup Access List to display the Wireless Station Access List menu. Wireless Configuration v3.0, September 2005 4-5 DG834G Reference Manual · Security Options Wireless Security Options Description Wireless security is not used. You can select the following WEP options: Authentication Type · Open: the DG834G does not perform any authentication. · Shared: WEP shared key authentication. For a full explanation of WEP shared key, see "Wireless Communications:" on page A-1. Encryption Strength · If Shared or Open Network Authentication is enabled, you can choose 64- or 128-bit WEP data encryption. Note: With Open Network Authentication and 64- or 128-bit WEP Data Encryption, the DG834G does perform 64- or 128-bit data encryption but does not perform any authentication. Security Encryption (WEP) Key These key values must be identical on all wireless devices in your network (key 1 must be the same for all, key 2 must be the same for all, and so on). The DG834G provides two methods for creating WEP encryption keys: · Passphrase. These characters are case sensitive. Enter a word or group of printable characters in the Passphrase box and click the Generate button. Note: Not all wireless adapters support passphrase key generation. · Manual. These values are not case sensitive. 64-bit WEP: enter 10 hexadecimal digits (any combination of 0-9, a-f, or A-F). 128-bit WEP: enter 26 hexadecimal digits (any combination of 0-9, a-f, or A-F). Table 4-1. Field Disable WEP (Wired Equivalent Privacy) WPA-PSK (WiFi Protected Access PreShared Key) WPA Pre-Shared-Key uses a pre-shared key to perform the authentication and generate the initial data encryption keys. Then, it dynamically varies the encryption key. For a full explanation of WPA, see "Wireless Communications:" on page A-1. Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client. Windows XP and Windows 2000 with Service Pack 3 do include the client software that supports WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA. 4-6 v3.0, September 2005 Wireless Configuration DG834G Reference Manual Table 4-1. Field WPA-802.1x Wireless Security Options Description User authentication is implemented using 802.1x and RADIUS servers. For a full explanation of WPA, see "Wireless Communications:" on page A-1. Fill in the following: · Radius Server Name/IP Address This field is required. Enter the name or IP address of the Radius Server on your LAN. · Radius Port Enter the port number used for connections to the Radius Server. · Radius Shared Key Enter the desired value for the Radius shared key. This key enables the DG834G to log in to the Radius server and must match the value used on the Radius server. How to Set Up and Test Basic Wireless Connectivity Follow the instructions below to set up and test basic wireless connectivity. Once you have established basic wireless connectivity, you can enable security settings appropriate to your needs. 1. Log in to the DG834G firewall at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever LAN address and password you have set up. 2. Click the Wireless Settings link in the main menu of the DG834G firewall. 3. Choose a suitable descriptive name for the wireless network name (SSID). In the SSID box, enter a value of up to 32 alphanumeric characters. The default SSID is Wireless. Note: The SSID of any wireless access adapters must match the SSID you configure in the 54 Mbps Wireless ADSL Modem Router Model DG834G. If they do not match, you will not get a wireless connection to the DG834G. 4. Set the Region. Select the region in which the wireless interface will operate. 5. Set the Channel. The default channel is 11. This field determines which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby wireless router or access point. Select a channel that is not being used by any other wireless networks within several hundred feet of your firewall. For more information on the wireless channel frequencies please refer to "Wireless Communications:" on page A-1. Wireless Configuration v3.0, September 2005 4-7 DG834G Reference Manual 6. For initial configuration and test, leave the Wireless Card Access List set to allow everyone access by making sure that "Turn Access Control On" is not selected in the Wireless Station Access List. In addition, leave the Encryption Strength set to "Disabled." 7. Click Apply to save your changes. Note: If you are configuring the firewall from a wireless computer and you change the firewall's SSID, channel, or security settings, you will lose your wireless connection when you click Apply. You must then change the wireless settings of your computer to match the firewall's new settings. 8. Configure and test your computers for wireless connectivity. Program the wireless adapter of your computers to have the same SSID and channel that you configured in the router. Check that they have a wireless link and are able to obtain an IP address by DHCP from the firewall. Once your computers have basic wireless connectivity to the firewall, you can configure the advanced wireless security functions of the firewall. How to Restricting Wireless Access to Your Network By default, any wireless PC that is configured with the correct SSID will be allowed access to your wireless network. For increased security, the 54 Mbps Wireless ADSL Modem Router Model DG834G provides several ways to restrict wireless access to your network: · · · Turn off wireless connectivity completely Restrict access based on the Wireless Network Name (SSID) Restrict access based on the Wireless Card Access List These options are discussed below. Figure 4-3 4-8 v3.0, September 2005 Wireless Configuration