Page 1
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR 202-10006-01 October 2003 202-10006-01...
Page 2
EN 55 022 Declaration of Conformance This is to certify that the DG834G 54 Mbps Wireless ADSL Firewall Router is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN 55 022 Class B (CISPR 22).
Page 3
Certificate of the Manufacturer/Importer It is hereby certified that the DG834G 54 Mbps Wireless ADSL Firewall Router has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions.
Chapter 1 About This Guide Audience, Conventions, Scope ...1-1 How to Use this Manual ...1-2 How to Print this Manual ...1-3 Chapter 2 Introduction About the Router ...2-1 Key Features ...2-2 802.11 Standards-based Wireless Networking ...2-2 A Powerful, True Firewall ...2-2 Content Filtering ...2-3 Auto Sensing and Auto Uplink™...
Page 6
Choosing WEP Authentication and Security Encryption Methods ...4-9 Authentication Type Selection ...4-9 Encryption Choices ...4-10 How to Configure WEP ...4-10 Chapter 5 Protecting Your Network Protecting Access to Your DG834G 54 Mbps Wireless ADSL Firewall Router ...5-1 How to Change the Built-In Password ...5-1 202-10006-01 Contents...
Page 7
Changing the Administrator Login Timeout ...5-2 Configuring Basic Firewall Services ...5-2 Blocking Keywords, Sites, and Services ...5-3 How to Block Keywords and Sites ...5-3 Firewall Rules ...5-5 Inbound Rules (Port Forwarding) ...5-6 Inbound Rule Example: A Local Public Web Server ...5-7 Inbound Rule Example: Allowing Videoconferencing ...5-8 Considerations for Inbound Rules ...5-9 Outbound Rules (Service Blocking) ...5-9...
Page 8
Running Diagnostic Utilities and Rebooting the Router ...6-14 Enabling Remote Management ...6-15 Configuring Remote Management ...6-15 Chapter 7 Advanced Configuration Configuring Advanced Security ...7-1 Setting Up A Default DMZ Server ...7-1 How to Configure a Default DMZ Server ...7-2 Connect Automatically, as Required ...7-3 Disable Port Scan and DOS Protection ...7-3 Respond to Ping on Internet WAN Port ...7-3 MTU Size ...7-3...
Page 9
Troubleshooting Internet Browsing ...8-6 Troubleshooting a TCP/IP Network Using the Ping Utility ...8-7 Testing the LAN Path to Your Router ...8-7 Testing the Path from Your Computer to a Remote Device ...8-8 Restoring the Default Configuration and Password ...8-9 Using the Reset button ...8-9 Problems with Date and Time ...8-9 Appendix A Technical Specifications...
Page 10
Configuring Windows 95, 98, and Me for TCP/IP Networking ... C-2 Install or Verify Windows Networking Components ... C-2 Enabling DHCP to Automatically Configure TCP/IP Settings in Windows 95B, 98, and Me Selecting Windows’ Internet Access Method ... C-6 Verifying TCP/IP Properties ... C-6 Configuring Windows NT4, 2000 or XP for IP Networking ...
Page 11
Wireless Channels ... D-7 Glossary Index Contents 202-10006-01...
Screen text, file and server names, extensions, commands, IP addresses courier font Note: This format is used to highlight information of importance or special interest. This manual is written for the DG834G wireless router according to these specifications: Table 1-1. Manual Specifications...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Use this Manual The HTML version of this manual includes these features. Figure 1 -1: HTML version of this manual 1. Left pane. Use the left pane to view the Contents, Index, Search, and Favorites tabs.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Print this Manual To print this manual you can choose one of the following several options, according to your needs. • Printing a “How To” Sequence of Steps in the HTML View. Use the Print button on the upper right side of the toolbar to print the currently displayed topic.
Page 16
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G About This Guide 202-10006-01...
This chapter describes the features of the NETGEAR DG834G 54 Mbps Wireless ADSL Firewall Router . The DG834G wireless router is a combination of a built-in ADSL modem, router, 4-port switch, 802.11g wireless access point, and firewall which enables your entire network to safely share an Internet connection that otherwise is used by a single computer.
• Wireless access can be restricted by MAC address. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the DG834G is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include: • Denial of Service (DoS) protection Automatically detects and thwarts Denial of Service (DoS) attacks such as Ping of Death, SYN Flood, LAND Attack and IP Spoofing.
Auto Sensing and Auto Uplink™ LAN Ethernet Connections With its internal 4-port 10/100 switch, the DG834G can connect to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. The local LAN ports are autosensing and capable of full-duplex or half-duplex operation.
Easy Installation and Management You can install, configure, and operate the DG834G within minutes after connecting it to the network. The following features simplify installation and management tasks: 202-10006-01...
These functions allow you to test Internet connectivity and reboot the router. You can use these diagnostic functions directly from the DG834G when your are connect on the LAN or when you are connected over the Internet via the remote management function.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair.
Blink (Green) On (Amber) Blink (Amber) The Router’s Rear Panel The rear panel of the DG834G 54 Mbps Wireless ADSL Firewall Router port connections. 54 Mbps Wireless ADSL Firewall Router DG834G Figure 2-2: DG834G Rear Panel Viewed from left to right, the rear panel contains the following elements: •...
Page 24
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Introduction 202-10006-01...
Active Internet service such as that provided by an ADSL account. The Internet Service Provider (ISP) configuration information for your DSL account. Note: If you purchased the DG834G in a country where a microfilter is not included, you must acquire one.
Each device such as a telephone, fax machine, answering machine, or caller ID display will require an ADSL microfilter. Note: Do not connect the DG834G to the ADSL line through a microfilter unless the microfilter is a combination microfilter/splitter specifically designed for this purpose. Doing so will prevent the built-in ADSL modem in the DG834G from establishing a connection to the Internet.
For Macintosh computers, open the TCP/IP or Network control panel. • You can also refer to the DG834G Resource CD for the NETGEAR Router ISP Guide which provides Internet connection information for many ISPs. Once you locate your Internet configuration parameters, you may want to record them on the page below according to the instructions in 3-3.
Page 28
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G ISP Multiplexing Method and Virtual Circuit Number: The default settings of your DG834G 54 Mbps Wireless ADSL Firewall Router will work fine for most ISPs. However, some ISPs use a specific Multiplexing Method or a Virtual Circuit Number for either the Virtual Path Identifier (VPI) or Virtual Channel Identifier (VCI).
With Splitter Phone Figure 3-3: ADSL microfilters Note: If you purchased the DG834G in a country where the filter is not included, you must acquire one. Two-Line Filter Example. Insert the two-line filter into the phone outlet and connect the...
Page 30
Note: Improperly connecting a filter to your DG834G wireless router will block your ADSL connection. Turn off your computer. Connect the ADSL port of the DG834G to the ADSL port (B) of the two-line filter: Line 54 Mbps Wireless ADSL...
Page 31
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Connect the Ethernet cable (C) from your DG834G’s LAN port to the Ethernet adapter in your computer. 54 Mbps Wireless ADSL Firewall Router DG834G Figure 3-6: Connecting a computer to the DG834G wireless router...
Page 32
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G DG834G. OG IN TO THE Note: Your computer needs to be configured for DHCP. For instructions on configuring for DHCP, please see Appendix C, “Preparing Your Connect to the router by typing or Netscape Navigator.
Internet. There are two ways you can configure your router to connect to the Internet: Let the DG834G auto-detect the type of Internet connection you have and configure it. See “Auto-Detecting Your Internet Connection Type” on page 3-9 Manually choose which type of Internet connection you have and configure it.
Page 34
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: If instead of the Setup Wizard menu, the main menu of the router’s Configuration Manager as shown in Figure 3-15 bring up this menu. You must select a country and language. Language choices are English, French, German, and Italian.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Wizard-Detected PPPoE Login Account Setup If the Setup Wizard determines that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you will be directed to the PPPoE page shown in...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Wizard-Detected Dynamic IP Account Setup If the Setup Wizard determines that your Internet service account uses Dynamic IP assignment, you will be directed to the page shown in Figure 3-12: Setup Wizard menu for Dynamic IP address Click Apply to set Dynamic IP as the connection method.
DNS server addresses from your ISP and enter them manually here. Click Apply to save the settings. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to...
DNS server addresses from your ISP and enter them manually here. Click Apply to save the settings. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Testing Your Internet Connection After completing the Internet connection configuration, your can test your Internet connection.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Manually Configuring Your Internet Connection You can manually configure your router using the menu below, or you can allow the Setup Wizard to determine your configuration as described in the previous section.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Perform Manual Configuration We recommend that you start the manual configuration from the Setup Wizard: Select your country and language. Language choices are English, French, German, and Italian.
Note: Disabling NAT will reboot the router and reset all the DG834G configuration settings to the factory default. Disable NAT only if you plan to install the DG834G in a setting where you will be manually administering the IP address space on the LAN side of the router.
Note: Disabling NAT will reboot the router and reset all the DG834G configuration settings to the factory default. Disable NAT only if you plan to install the DG834G in a setting where you will be manually administering the IP address space on the LAN side of the router.
Note: Disabling NAT will reboot the router and reset all the DG834G configuration settings to the factory default. Disable NAT only if you plan to install the DG834G in a setting where you will be manually administering the IP address space on the LAN side of the router...
Page 44
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If your ISP provided you with a specific Multiplexing Method or VPI/VCI number, then fill in the following: Select the ADSL Settings link from the main menu. For the Multiplexing Method, select LLC-based or VC-based.
This chapter describes how to configure the wireless features of your DG834G 54 Mbps Wireless ADSL Firewall Router . Considerations for a Wireless Network In planning your wireless network, you should consider the level of security required. You should also select the physical placement of your router in order to maximize the network speed. For further information, refer to Appendix D, “Wireless Networking...
For this reason, use the security features of your wireless equipment. The DG834G wireless router provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs.
32 alphanumeric characters. The same Name (SSID) must be assigned to all wireless devices in your network. The default SSID is Wireless, but NETGEAR strongly recommends that you change your network Name to a different value.
Page 48
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G — Mode. The default is "g & b", which allows both "g" and "b" wireless stations to access this device. “g only” allows only 802.11g wireless stations to be used. “b only” allows 802.11b wireless stations;...
32 alphanumeric characters. The default SSID is Wireless. Note: The SSID of any wireless access adapters must match the SSID you configure in the DG834G 54 Mbps Wireless ADSL Firewall Router . If they do not match, you will not get a wireless connection to the DG834G.
Restricting Access to Your Network by Turning Off Wireless Connectivity You can completely turn off the wireless portion of the DG834G. For example, if your notebook computer is used to wirelessly connect to your router and you take a business trip, you can turn off the wireless portion of the router while you are travelling.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: The SSID of any wireless access adapters must match the SSID you configure in the DG834G 54 Mbps Wireless ADSL Firewall Router . If they do not match, you will not get a wireless connection to the DG834G.
Page 52
Make sure the Turn Access Control On check box is selected, then click Apply. Now, only devices on this list will be allowed to wirelessly connect to the DG834G. This prevents unauthorized access to your network.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Choosing WEP Authentication and Security Encryption Methods Figure 4-5. Security Encryption section Restricting wireless access prevents intruders from connecting to your network. However, the wireless data transmissions are still vulnerable to snooping. Using the WEP data encryption settings described below will prevent a determined intruder from eavesdropping on your wireless data communications.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Set your wireless adapter according to the authentication scheme you choose for the DG834G wireless router. Please refer to each of these options, as defined by the IEEE 802.11g wireless communication standard.
Page 55
Be sure you clearly understand how the WEP key settings are configured in your wireless adapter. Wireless adapter configuration utilities such as the one included in Windows XP only allow entry of one key which must match the default key you set in the DG834G. Click Apply to save your settings.
Page 56
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 4-12 Wireless Configuration 202-10006-01...
This chapter describes how to use the basic firewall features of the DG834G 54 Mbps Wireless ADSL Firewall Router to protect your network. Protecting Access to Your DG834G 54 Mbps Wireless ADSL Firewall Router For security reasons, the router has its own user name and password. Also, after a period of inactivity for a set length of time, the administrator login will automatically disconnect.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G From the Main Menu of the browser interface, under the Maintenance heading, select Set Password to bring up the menu shown in Figure 5-2: Set Password menu To change the password, first enter the old password, and then enter the new password twice.
The section below explains how to configure your How to Block Keywords and Sites The DG834G wireless router allows you to restrict access to Internet content based on functions such as Web addresses and Web address keywords. Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever Password and LAN address you have chosen for the router.
Page 60
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Select the Block Sites link of the Security menu. Figure 5-3: Block Sites menu To enable keyword blocking, select one of the following: • Per Schedule to turn on keyword blocking according to the settings on the Schedule page.
See “Order of Precedence for Rules” on page 11 for more details. To access the rules configuration of the DG834G, click the Firewall Rules link on the main menu, then click Add for either an Outbound or Inbound Service.
OK. Inbound Rules (Port Forwarding) Because the DG834G uses Network Address Translation (NAT), your network presents only one IP address to the Internet, and outside users cannot directly address any of your local computers. However, by defining an inbound rule you can make a local server (for example, a Web server or game server) visible and available to the Internet.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Remember that allowing inbound services opens holes in your firewall. Only enable those ports that are necessary for your network. Following are two application examples of inbound rules: Inbound Rule Example: A Local Public Web Server...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • WAN Users These settings determine which packets are covered by the rule, based on their source (WAN) IP address. Select the desired option: • Any — all IP addresses are covered by this rule.
WAN IP address will fail. Outbound Rules (Service Blocking) The DG834G allows you to block the use of certain Internet services by computers on your network. This is called service blocking or port filtering. You can define an outbound rule to block Internet access from a local computer based on: •...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Outbound Rule Example: Blocking Instant Messenger If you want to block Instant Messenger usage by employees during working hours, you can create an outbound rule to block that application from any internal IP address to any external address according to the schedule that you have created in the Schedule menu.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Address range — if this option is selected, you must enter the Start and Finish fields. • Single address — enter the required address in the Start fields.
1024 to 65535 by the authors of the application. Although the DG834G already holds a list of many service port numbers, you are not limited to these choices. Use the procedure below to create your own service definitions.
Click Apply to save your changes. Setting Times and Scheduling Firewall Services The DG834G wireless router uses the Network Time Protocol (NTP) to obtain the current time and date from one of several Network Time Servers on the Internet. How to Set Your Time Zone In order to localize the time for your log entries, you must specify your Time Zone: Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name...
Page 70
Enabling Daylight Savings Time will cause one hour to be added to the standard time. The router has a list of NETGEAR NTP servers. If you prefer to use a particular NTP server as the primary server, enter its IP address under Use this NTP Server.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Schedule Firewall Services If you enabled services blocking in the Block Services menu or Port forwarding in the Ports menu, you can set up a schedule for when blocking occurs or when access is not restricted.
Page 72
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 5-16 Protecting Your Network 202-10006-01...
Wireless ADSL Firewall Router . Backing Up, Restoring, or Erasing Your Settings The configuration settings of the DG834G wireless router are stored in a configuration file in the router. This file can be backed up to your computer, restored, or reverted to factory default settings.
Router’s Rear Panel” on page Upgrading the Router’s Firmware The software of the DG834G wireless router is stored in FLASH memory, and can be upgraded as new software is released by NETGEAR. Upgrade files can be downloaded from the NETGEAR Web site. If the upgrade file is compressed (.ZIP file), you must first extract the binary (.BIN or .IMG) file before uploading it to the router.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Upgrade the Router Firmware Note: NETGEAR recommends that you back up your configuration before doing a firmware upgrade. After the upgrade is complete, you may need to restore your configuration settings.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Network Management Information The DG834G provides a variety of status and usage information which is discussed below. Viewing Router Status and Usage Statistics From the Main Menu, under Maintenance, select Router Status to view the screen in Figure 6-3.
Page 77
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 6-1. Menu 3.2 - Router Status Fields Field Account Name Firmware Version ADSL Port MAC Address IP Address DHCP IP Subnet Mask Domain Name Server (DNS) This field displays the DNS Server IP addresses being used by the...
Page 78
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 6-1. Menu 3.2 - Router Status Fields Field Wireless Port Name (SSID) Region Channel Wireless AP Broadcast Name Click the Show Statistics button to display router usage statistics, as shown in...
Page 79
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 6-1. Router Statistics Fields Field Description WAN, LAN, or The statistics for the WAN (Internet), LAN (local), and Serial ports. For each port, the Serial Port screen displays: Status The link status of the port.
Page 80
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Clicking the Renew button updates the status information. This screen shows the following statistics: Table 6-1. Connection Status Fields for Dynamic IP Field Description IP Address The IP Address assigned to the WAN port by the ADSL Internet Service Provider.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Clicking the Renew button updates the status information. This screen shows the following statistics: Table 6-1. Connection Status Fields for PPPoA Field Description Connection Time The time elapsed since the last connection to the Internet via the ADSL port.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Viewing, Selecting, and Saving Logged Information The router will log security-related events such as denied incoming service requests, hacker probes, and administrator logins. If you enabled content filtering in the Block Sites menu, the Logs page can show you when someone on your network tries to access a blocked site.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Log entries are described in Table 6-1 Table 6-1. Security Log entry descriptions Field Description Date and Time The date and time the log entry was recorded. Description or Action The type of event and what action was taken if any.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Saving Log Files on a Server You can choose to write the logs to a computer running a syslog program. To activate this feature, select to Broadcast Lan or enter the IP address of the server where the Syslog file will be written.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Enabling Security Event E-mail Notification In order to receive logs and alerts by e-mail, you must provide your e-mail information in the E-mail section: • Turn e-mail notification on. Select this box if you want to receive e-mail logs and alerts from the router.
In this case, the router overwrites the log and discards its contents. Running Diagnostic Utilities and Rebooting the Router The DG834G wireless router has a diagnostics feature. You can use the diagnostics menu to perform the following functions from the router: •...
Using the Remote Management page, you can allow a user or users on the Internet to configure, upgrade and check the status of your DG834G 54 Mbps Wireless ADSL Firewall Router . Note: Be sure to change the router's default password to a very secure password. The ideal password should contain no dictionary words from any language, and should be a mixture of letters (both upper and lower case), numbers, and symbols.
Page 88
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G When accessing your router from the Internet, you will type your router's WAN IP address in your browser's Address (in IE) or Location (in Netscape) box, followed by a colon (:) and the custom port number.
This chapter describes how to configure the advanced features of your DG834G 54 Mbps Wireless ADSL Firewall Router . Configuring Advanced Security The DG834G 54 Mbps Wireless ADSL Firewall Router provides a variety of advanced features, such as: • Setting up a Demilitarized Zone (DMZ) Server •...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: For security reasons, you should avoid using the Default DMZ Server feature. When a computer is designated as the Default DMZ Server, it loses much of the protection of the firewall, and is exposed to many exploits from the Internet. If compromised, the computer can be used to attack your network.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Connect Automatically, as Required Normally, this option should be Enabled, so that an Internet connection will be made automatically, whenever Internet-bound traffic is detected. If this causes high connection costs, you can disable this setting.
Page 92
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G These addresses are part of the Internet Engineering Task Force (IETF)-designated private address range for use in private networks, and should be suitable in most applications. If your network has a requirement to use a different IP addressing scheme, you can make those changes in this menu.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • RIP Version This controls the format and the broadcasting method of the RIP packets that the router sends. It recognizes both formats when receiving. By default, this is set for RIP-1.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • An IP Address from the range you have defined • Subnet Mask • Gateway IP Address is the router’s LAN IP address • Primary DNS Server, if you entered a Primary DNS address in the Basic Settings menu;...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Configure LAN TCP/IP Settings Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the router.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The router contains a client that can connect to a dynamic DNS service provider. To use this feature, you must select a service provider and obtain an account with them. After you have...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If your dynamic DNS provider allows the use of wildcards in resolving your URL, you can select the Use wildcards check box to activate this feature. For example, the wildcard feature will cause *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G In this example: • The Destination IP Address and IP Subnet Mask fields specify that this static route applies to all 134.177.x.x addresses. • The Router IP Address fields specifies that all traffic for these addresses should be forwarded to the ISDN router at 192.168.0.100.
Page 99
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Figure 7-5: Static Route Entry and Edit Menu Type a route name for this static route in the Route Name box under the table. This is for identification purpose only.
Page 100
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 7-12 Advanced Configuration 202-10006-01...
This chapter gives information about troubleshooting your DG834G 54 Mbps Wireless ADSL Firewall Router . After each problem description, instructions are provided to help you diagnose and solve the problem. For the common problems listed, go to the section indicated.
• Check that you are using the 12 V DC power adapter supplied by NETGEAR for this product. If the error persists, you have a hardware problem and should contact technical support.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Make sure that power is turned on to the connected hub or workstation. • Be sure you are using the correct cable: — When connecting the router’s WAN ADSL port, use the cable that was supplied with the DG834G.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Click the Refresh or Reload button in the Web browser. The changes may have occurred, but the Web browser may be caching the old configuration. Troubleshooting the ISP Connection If your router is unable to access the Internet, you should check the ADSL connection, then the WAN TCP/IP connection.
ADSL service. It may be necessary to use a swapper if you ADSL signal is on pins 1 and 4 or the RJ-11 jack. The DG834G wireless router uses pins 2 and 3.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Your ISP only allows one Ethernet MAC address to connect to Internet, and may check for your computer’s MAC address. In this case: Inform your ISP that you have bought a new network device, and ask them to use the router’s MAC address.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G A DNS server is a host on the Internet that translates Internet names (such as www addresses) to numeric IP addresses. Typically your ISP will provide the addresses of one or two DNS servers for your use.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Wrong physical connections — Make sure the LAN port LED is on. If the LED is off, follow the instructions in or WAN Port LEDs Not On” — Check that the corresponding Link LEDs are on for your network interface card and for the hub ports (if any) that are connected to your workstation and router.
The E-mail menu in the Content Filtering section displays the current date and time of day. The DG834G wireless router uses the Network Time Protocol (NTP) to obtain the current time from one of several Network Time Servers on the Internet. Each entry in the log is stamped with the date and time of day.
Page 110
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 8-10 Troubleshooting 202-10006-01...
This appendix provides technical specifications for the DG834G 54 Mbps Wireless ADSL Firewall Router . Network Protocol and Standards Compatibility Data and Routing Protocols: Power Adapter North America: United Kingdom, Australia: Europe: Japan: All regions (output): Physical Specifications Dimensions: Weight:...
Page 112
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Interface Specifications LAN: WAN: 10BASE-T or 100BASE-Tx, RJ-45 ADSL, Dual RJ-11, pins 2 and 3 T1.413, G.DMT, G.Lite ITU Annex A or B 202-10006-01 Technical Specifications...
This chapter provides an overview of IP networks, routing, and wireless networking. Related Publications As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet.
Information Protocol (RIP). Using RIP, routers periodically update one another and check for changes to add to the routing table. The DG834G wireless router supports both the older RIP-1 and the newer RIP-2 protocols. Among other improvements, RIP-2 supports subnet and multicast protocols. RIP is not required for most home applications.
Page 115
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The latter version is easier to remember and easier to enter into your computer. In addition, the 32 bits of the address are subdivided into two parts. The first part of the address identifies the network, and the second part identifies the host node or station on the network.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Class C Class C addresses can have 254 hosts on a network. Class C addresses use 24 bits for the network address and eight bits for the node. They are in this range: 192.0.1.x to 223.255.254.x.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G As a shorter alternative to dotted-decimal notation, the netmask may also be expressed in terms of the number of ones from the left. This number is appended to the IP address, following a backward slash (/), as “/n.”...
Page 118
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Although the preceding example uses the entire third octet for a subnet address, note that you are not restricted to octet boundaries in subnetting. To create more network numbers, you need only shift some bits from the host address to the network address.
255.255.255.248 255.255.255.252 255.255.255.254 255.255.255.255 NETGEAR strongly recommends that you configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighbors, it uses a destination address of the local network address with all ones for the host address.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines explained here. For more information about address assignment, refer to RFC 1597, Address Allocation for Private Internets, and RFC 1466, Guidelines for Management of IP Address Space.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G This scheme offers the additional benefit of firewall-like protection because the internal LAN addresses are not available to the Internet through the translated connection. All incoming inquiries are filtered out by the router. This filtering can prevent intruders from probing your system.
IP addresses, along with other information (such as gateway and DNS addresses) that it may assign to the other devices on the network. The DG834G wireless router has the capacity to act as a DHCP server.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G What is a Firewall? A firewall is a device that protects one network from another, while allowing communication between the two. A firewall incorporates the functions of the NAT router, while adding features for dealing with a hacker intrusion or attack.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Inside Twisted Pair Cables For two devices to communicate, the transmitter of each device must be connected to the receiver of the other device. The crossover function is usually implemented internally as part of the circuitry in the device.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Figure B-3: Category 5 UTP Cable with Male RJ-45 Plug at Each End Note: Flat “silver satin” telephone cable may have the same RJ-45 plug. However, using telephone cable results in excessive collisions, causing the attached port to be partitioned or disconnected from the network.
Page 127
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The DG834G wireless router incorporates Auto Uplink technology (also called MDI/MDIX). Each LOCAL Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a normal connection (e.g. connecting to a PC) or an uplink connection (e.g.
Page 128
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G B-16 Network and Routing Basics 202-10006-01...
This appendix describes how to prepare your network to connect to the Internet through the DG834G 54 Mbps Wireless ADSL Firewall Router and how to verify the readiness of broadband Internet service from an Internet service provider (ISP). Note: If an ISP technician configured your computer during the installation of a...
DHCP server during bootup. For a detailed explanation of the meaning and purpose of these configuration items, refer to The DG834G wireless router is shipped preconfigured as a DHCP server. The firewall assigns the following TCP/IP configuration information automatically when the PCs are rebooted: •...
Page 131
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G You must have an Ethernet adapter, the TCP/IP protocol, and Client for Microsoft Networks. Note: It is not necessary to remove any other network components shown in the Network window in order to install the adapter, TCP/IP, or Client for Microsoft Networks.
Page 132
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If you need Client for Microsoft Networks: Click the Add button. Select Client, and then click Add. Select Microsoft. Select Client for Microsoft Networks, and then click OK. Restart your PC for the changes to take effect.
Page 133
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Verify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to Windows logon Click on the Properties button.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • By default, the IP Address tab is open on this window. • Verify the following: Obtain an IP address automatically is selected. If not selected, click in the radio button to the left of it to select it.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Type , and then click OK. winipcfg The IP Configuration window opens, which lists (among other things), your IP address, subnet mask, and default gateway. From the drop-down box, select your Ethernet adapter.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4 You will find there are many similarities in the procedures for different Windows systems when using DHCP to configure TCP/IP.
Page 137
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Now you should be at the Local Area Network Connection Status window. This box displays the connection status, duration, speed, and activity statistics. • Administrator logon access rights are needed to use this window.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Verify that the Obtain an IP address automatically radio button is selected. • Verify that Obtain DNS server address automatically radio button is selected. • Click the OK button.
Page 139
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Click on the My Network Places icon on the Windows desktop. This will bring up a window called Network and Dial-up Connections. • Right click on Local Area Connection and select Properties.
Page 140
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • With Internet Protocol (TCP/IP) selected, click on Properties to open the Internet Protocol (TCP/IP) Properties dialogue box. • Verify that • Obtain an IP address automatically is selected.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G DHCP Configuration of TCP/IP in Windows NT4 Once you have installed the network card, you need to configure the TCP/IP environment for Windows NT 4.0. Follow this procedure to configure TCP/IP with DHCP in Windows NT 4.0.
Page 142
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Highlight the TCP/IP Protocol in the Network Protocols box, and click on the Properties button. C-14 202-10006-01 Preparing Your Network...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • The TCP/IP Properties dialog box now displays. • Click the IP Address tab. • Select the radio button marked Obtain an IP address from a DHCP server. • Click OK. This completes the configuration of TCP/IP in Windows NT.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • The default gateway is 192.168.0.1 Type exit Configuring the Macintosh for TCP/IP Networking Beginning with Macintosh Operating System 7, TCP/IP is already installed on the Macintosh. On each networked Macintosh, you will need to configure TCP/IP to use DHCP.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If not already selected, select Built-in Ethernet in the Configure list. If not already selected, Select Using DHCP in the TCP/IP tab. Click Save. Verifying TCP/IP Properties for Macintosh Computers After your Macintosh is configured and has rebooted, you can check the TCP/IP configuration by returning to the TCP/IP Control Panel.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Verifying the Readiness of Your Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL modem. This modem must be a separate physical box (not a card) and must provide an Ethernet port intended for connection to a Network Interface Card (NIC) in a computer.
As mentioned above, you may need to collect configuration information from your PC so that you can use this information when you configure the DG834G wireless router. Following this procedure is only necessary when your ISP does not dynamically supply the account information.
As mentioned above, you may need to collect configuration information from your Macintosh so that you can use this information when you configure the DG834G wireless router. Following this procedure is only necessary when your ISP does not dynamically supply the account information.
Restart any computer that is connected to the firewall. After configuring all of your computers for TCP/IP networking and restarting them, and connecting them to the local network of your DG834G wireless router, you are ready to access and configure the firewall.
Page 150
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G C-22 Preparing Your Network 202-10006-01...
This chapter provides an overview of Wireless networking. Wireless Networking Overview The DG834G wireless router conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11g standard for wireless LANs (WLANs). On an 802.11g wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Ad Hoc Mode (Peer-to-Peer Workgroup) In an ad hoc network, computers are brought together as needed; thus, there is no structure or fixed points to the network - each node can generally communicate with any other node. There is no Access Point involved in this configuration.
The 802.11b standard defines several services that govern how two 802.11b devices communicate. The following events must occur before an 802.11b Station can communicate with an Ethernet network through an access point such as the one built in to the DG834G: Turn on the wireless station.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 802.11b Authentication Open System Steps 1) Authentication request sent to AP 3) Client connects to network Client attempting to connect Figure D-1: 802.11b open system authentication Shared Key Authentication The following steps occur when two devices use Shared Key Authentication: The station sends an authentication request to the access point.
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 802.11b Authentication Shared Key Steps 1) Authentication request sent to AP 2) AP sends challenge text Client 3) Client encrypts attempting challenge text and to connect sends it back to AP...
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Key Size The IEEE 802.11b standard supports two types of WEP encryption: 40-bit and 128-bit. The 64-bit WEP data encryption method, allows for a five-character (40-bit) input. Additionally, 24 factory-set bits are added to the forty-bit input to generate a 64-bit encryption key. (The 24 factory-set bits are not user-configurable).
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: Whatever keys you enter for an AP, you must also enter the same keys for the client adapter in the same order. In other words, WEP key 1 on the AP must match WEP key 1 on the client adapter, WEP key 2 on the AP must match WEP key 2 on the client adapter, etc.
Page 158
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 8-1. 802.11 Radio Frequency Channels Channel Center Frequency 2462 MHz 2467 MHz 2472 MHz Note: The available channels supported by the wireless products in various countries are different.
Page 159
Domain names are of the form of a registered entity name plus one of a number of predefined top level suffixes such as .com, .edu, .uk, etc. For example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain.
Page 160
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Gateway A local device, usually a router, that connects hosts on a local network to other networks. See Internet Protocol. IP Address A four-byte number uniquely defining each host on the Internet. Ranges of addresses are assigned by Internic, an organization formed for this purpose.
Page 161
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Netmask A number that explains which part of an IP address comprises the network address and which part is the host address on that network. It can be expressed in dotted-decimal notation or as a number appended to the IP address.
Page 162
Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Unshielded twisted pair. The cable used by 10BASE-T and 100BASE-Tx Ethernet networks. Virtual Channel Identifier. Together with the VPI, defines a Virtual Channel through an ATM network. Used by ATM switching equipment to route data through the network.
Page 163
Numerics 64 or 128 bit WEP 4-10 802.11b D-1 Account Name 3-18 Address Resolution Protocol B-9 ad-hoc mode D-2 Auto MDI/MDI-X B-15 Auto Uplink 2-3, B-15 backup configuration 6-1 Basic Wireless Connectivity 4-5 BSSID D-2 Cabling B-11 Cat5 cable 3-2, B-12 Classical IP 2-4 configuration automatic by DHCP 2-4...
Page 164
FLASH memory 6-2 front panel 2-6 gateway address C-19, C-20 host name 3-18 IANA contacting B-2 IETF B-1 Web site address B-8 inbound rules 5-6 infrastructure mode D-2 installation 2-4 Internet account address information C-18 establishing C-18 Internet Service Provider 3-1, 3-5 IP addresses C-19, C-20 and NAT B-8 and the Internet B-2...
Page 165
ping 7-3 placement 4-1 port filtering 5-9 port forwarding 5-6 port forwarding behind NAT B-9 port numbers 5-12 PPP over Ethernet 2-4, C-18 PPPoE 2-4, 3-11, C-18 Primary DNS Server 3-12, 3-14, 3-18 protocols Address Resolution B-9 DHCP 2-4, B-10 Routing Information 2-3, B-2 support 2-3 TCP/IP 2-3...