15.03.2009 г.

Configuring a wireless router for dummies ... like me :)

Not so far ago (one week) I purchased a wireless router for home usage, because I wanted to make my wife stop using my notebook, but her own PC. Her excuse till now was that her PC is not connected to the Internet. So for me the decision was clear. Before the introduction of the router I had a static IP address set on my notebook's ethernet adapter. With the router, this static IP address should be given to the router itself, and all other members of the network should be given dynamic IP addresses by router's DHCP server.



But first... the hardware. Except the router, some cables are needed too. You need a cable for each PC that doesn't have a wireless network adapter. This cable should not be a cross-over but a straight one. (see the scheme below)



After done that it is time to configure the router. You should do that from a computer that is wired to the router. Routers are accessed by their IP address. Different manufacturers give their routers different default IP address and you should contact check this before you start configuring. The main IP addresses that are used are as follows:
-192.168.0.1
-192.168.1.1
-192.168.2.1

After successfully accessing your router you will probably see its GUI configuration.
Configuration is straightforward even for a dummy like me :).
Let me divide configuration in 4 sections: LAN configuration, WAN configuration, Wireless configuration and Security configuration.

1) LAN configuration

You should give your router IP address, Gateway and Mask. This IP address is not the static one, but the one the router will use in our home network. For example 192.168.0.100.

There should be a section for configuring DHCP server settings.
First of all you should enable DHCP server. Then you should set the start IP address and the end IP address, Mask and Gateway. Gateway should be the IP of the router. DHCP server will now give other members of the network (wired or wireless) IP addresses in the range between start and end IP.

Reservations - This section is for reserving an IP address to a particular network adapter in the LAN. For example if you want your notebook to be known always as 192.168.0.23 in your private network you should reserve this IP address to your notebook's network adapter by associating it with network adapter's MAC address.
Reserving an IP for a MAC is vital for configuring port forwarding.

Port forwarding - this is a very helpful feature of most of the routers. By configuring a port forwarding you expose some LAN member port to the WAN. For me it is helpful because doing this I can still use a remote desktop connection to my PC, which doesn't need a static IP address.

EDIT: For using a remote desktop you need to forward 1723 and 3389 ports.

2) WAN configuration

If you want your private network to access Internet through the router you should enable WAN connection. Then you should choose the WAN connection type: Dynamic, Static IP, PPPoE, PPTP. First two doesn't need an explanation and for the other 2 you can read those:
PPPoE
PPTP
Choose Static IP and fill in the static IP, Mask and Gateway provided for you by your ISP.

3) Wireless configuration

Here you can give your wireless network a meaningful name, known as SSID. My advice is don't give your network name like Simsons (if your family name is Simson) cause if you do so everyone will know this network belongs to you. In my opinion it is a potential vulnerability. Also you should choose to broadcast your SSID.

4) Security configuration.

Firewall - enable it.
Router access password - you should have a default password for your router. Something like 'admin' or 'password'. My advice is to change this password.

Wireless Security Settings - this is the main part. Your main choices here are WEP or WPA.

I chose WEP for me even though WPA is newer and more secure.
Here important are the encryption strength and the pass phrase. You don't need to memorize your Pass phrase. It is needed just for generating the WEP key.
You should carefully write down your WEP key. It is used to connect to your wireless network.
Other important setting before generating the key is the encryption strength. If present you should choose 128 bits.

If you want your wireless network to be safer you may want to configure an Access control list (ACL) too. This list gives you the ability to allow wireless connections only from specific wireless network adapters, presented in the list by their MAC addresses.

That's all I managed to describe from my experience with my router's configuration.
Now I can use my notebook under the shower in my bathroom yoooohoooo :)

1 коментар:

  1. Can anyone recommend the best IT automation tool for a small IT service company like mine? Does anyone use Kaseya.com or GFI.com? How do they compare to these guys I found recently: N-able N-central system management
    ? What is your best take in cost vs performance among those three? I need a good advice please... Thanks in advance!

    ОтговорИзтриване