Page 1
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10042-01 Version 1.0 September 2004 September 2004 202-10042-01...
Page 2
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
Page 3
WGX102. World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer or Netscape are required.
Maintenance and Support ...2-3 Package Contents ...2-4 The WGX102 Front Panel ...2-5 The Label on the Rear Panel of the WGX102 ...2-6 The WGX102 Bottom Panel ...2-6 A Road Map for ‘How to Get There From Here’ ...2-6 Chapter 3 Installing the XE102 and the WGX102 Prepare to Install Your Range Extender ...3-1...
Page 6
Chapter 4 Configuring the WGX102 in Router Mode Connecting the WGX102 to the Internet in Router Mode ...4-2 Manually Configuring Your Internet Connection ...4-7 Manual PPPoE Configuration ...4-9 Manual PPTP Configuration ...4-10 Configuring the WGX102 in Router Mode ...4-13 Chapter 5 Wireless Configuration Observing Performance, Placement, and Range Guidelines ...5-1...
Page 7
Multiple Computers for Half Life, KALI or Quake III Example ...8-6 Configuring the WAN Setup Options ...8-7 Configuring the LAN IP Setup Options in Router Mode ...8-9 Using the WGX102 as a DHCP server ... 8-11 Using Address Reservation ...8-12 Configuring Dynamic DNS ...8-12 Configuring Static Routes ...8-13...
Page 8
Appendix A Technical Specifications Appendix B Network, Routing, Firewall, and Basics Related Publications ... B-1 Basic Router Concepts ... B-1 What is a Router? ... B-1 Routing Information Protocol ... B-2 IP Addresses and the Internet ... B-2 Netmask ... B-4 Subnet Addressing ...
Page 9
Install or Verify Windows Networking Components ... C-5 Enabling DHCP to Automatically Configure TCP/IP Settings in Windows 95B, 98, and Me Selecting Windows’ Internet Access Method ... C-9 Verifying TCP/IP Properties ... C-9 Configuring Windows NT4, 2000 or XP for IP Networking ... C-10 Install or Verify Windows Networking Components ...
Page 10
WPA Wireless Security ... D-8 How Does WPA Compare to WEP? ... D-9 How Does WPA Compare to IEEE 802.11i? ... D-10 What are the Key Features of WPA Security? ... D-10 WPA Authentication: Enterprise-level User Authentication via 802.1x/EAP and RADIUS ... D-12 WPA Data Encryption Key Management ...
SMALL CAPS This guide uses the following format to highlight special messages: Note: This format is used to highlight information of importance or special interest. This manual is written for the WGX102 Wall-Plugged Range Extender according to these specifications. Table 1-2.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 How to Use This Manual The HTML version of this manual includes a variety of navigation features as well as links to PDF versions of the full manual and individual chapters.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 How to Print this Manual To print this manual you can choose one of the following several options, according to your needs. • Printing a “How To” Sequence of Steps in the HTML View.
Page 14
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 About This Manual September 2004 202-10042-01...
WGX102. The 54 Mbps Wall-Plugged Wireless Range Extender WGX102 connects your local area network (LAN) to the Internet through an XE102 Wall-Plugged Ethernet Bridge and an external access device such as a cable modem or DSL modem.
Front panel LEDs for easy monitoring of status and activity. • Flash memory for firmware upgrades. 802.11g Wireless Networking The WGX102 Wall-Plugged Range Extender includes an 802.11g wireless access point, providing continuous, high-speed 54 Mbps access between your wireless and wall-plugged devices. The access point provides: •...
Wizard is provided and online help documentation is built into the browser-based Web Management Interface. • Firmware Updates The WGX102 Wall-Plugged Range Extender can be updated if a newer version of firmware is available. This lets you take advantage of product enhancements for your WGX102 as soon as they become available. •...
• Registration, Warranty Card, and Support Information Card. If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the range extender for repair.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 The WGX102 Front Panel The front panel of the WGX102 Wall-Plugged Range Extender contains the status lights described below. Figure 2-1: WGX102 Front Panel You can use the status lights to verify connections. Viewed from top to bottom, the table below describes the lights on the front panel of the range extender.
Figure 1-2: WGX102 Underside If you press the reset button for less than 15 seconds, the WGX102 does a soft reset, similar to unplugging and then plugging the device in again. When you press the reset button for 15 seconds or more, the WGX102 resets to the factory defaults, as described in “Restoring the Default Configuration and Password”...
Page 21
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 To help overcome potential barriers to successfully using home networks, the table below identifies how to accomplish such things as connecting to a wireless network, assuring appropriate security measures are taken, browsing the Internet through your wireless connection, exchanging files with other computers and using printers in the combined wireless and wired network.
Page 22
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Table 2-1. A Road Map for How to Get There From Here If I Want To? What Do I Do? Share 1. Use the Windows Windows PC Printers and Fax...
Installing the XE102 and the WGX102 This chapter describes how to set up the XE102 and WGX102 on your local area network (LAN) and connect to the Internet. There are two operation modes for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 — Access Point Mode and Router Mode. The WGX102 can be used immediately with no further configuration in Access Point Mode as described in this chapter and in the WGX102 Installation Guide.
Note: The WGX102 is designed for easy installation in access point mode, and can be used with multiple XE102 Wall-Plugged Ethernet Bridges in this mode. However, if you choose to configure the WGX102 in Router Mode, you can only use one XE102 and you must be sure of the correct IP addresses during the configuration procedure.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Router Mode In Router Mode, the WGX102 provides all the functions of Access Point Mode, plus the following services: • Shared Internet Access — the wall plug port becomes the WAN port, and if a broadband modem is connected to it through an XE102, the WGX102 can provide Internet access to your entire wireless LAN.
Page 26
2. P WGX102 LUG THE INTO A a. Plug the WGX102 into an electrical outlet near the wireless computer that you want to connect, and wait one minute. All three LEDs on the WGX102 will light up. Router Power Internet...
Page 27
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Figure 3-4: WGX102 located near a wireless computer b. Check the range extender status lights to verify the following: • Power: The power light should turn solid green. If it does not, see Troubleshooting Tips”...
Page 28
Name (SSID) and security is disabled by default, as shown below. Figure 3-6: NETGEAR Adapter screen, Settings page b. For a non-NETGEAR wireless adapter, configure it to match your settings exactly. If you changed the default Network Name (SSID), be sure to use the correct Network Name (SSID) you set in the range extender.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 c. You may connect additional XE102 bridges to connect more computers to your network. Note: Wireless security is disabled by default on the WGX102. For information about configuring the WGX102 to use security settings, see 4.
Internet connection. Figure 3-7: Login window 3. Once you have entered your user name and password, your Web browser should find the WGX102 Wall-Plugged Range Extender and display the AP/Router page as shown below. http://192.168.0.101 Installing the XE102 and the WGX102...
Page 31
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Figure 3-8: Login result in Access Point Mode 4. The WGX102 Wall-Plugged Range Extender is in Access Point Mode by default. For information on using the WGX102 in Router Mode, see in Router Mode”...
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Configuring the WGX102 in Access Point Mode The figure below shows the menu choices available when the WGX102 Wall-Plugged Range Extender is in Access Point Mode. To continue configuring the WGX102 in Access Point Mode, see the...
Page 33
Figure 3-10: LAN IP Setup menu in Access Point Mode DHCP If selected, the WGX102 will obtain its IP address automatically from a DHCP (Dynamic Host Configuration Protocol) server. Select this option only if your LAN has a DHCP server.
Page 34
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 3-12 Installing the XE102 and the WGX102 September 2004 202-10042-01...
Page 35
Configuring the WGX102 in Router Mode This chapter describes how to set up the WGX102 as the only router on your local area network (LAN) and connect to the Internet. If you already have another router on your LAN, you do not need to configure the WGX102 in Router Mode and do not need to read this chapter.
OMPUTER a. Start your computer’s wireless utility program. b. NETGEAR, Inc. wireless adapters display a list of available wireless networks, and, when wireless security is disabled, you simply choose yours from the list on the Networks tab and click Connect. On the Settings tab page, NETGEAR is the default Network Name (SSID) and security is initially disabled by default, as shown below.
Page 37
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Figure 4-3: NETGEAR Adapter screen, Settings page c. For a non-NETGEAR wireless adapter, configure it to match your settings exactly. If you changed the default Network Name (SSID), be sure to use the correct Network Name (SSID) you set in the range extender.
Page 38
Ethernet cable from your modem into the Ethernet port of the XE102 as shown in the diagram below. Wall-Plugged Ethernet Bridge XE102 Figure 4-4: Connect the bridge to the modem b. Make sure the WGX102 is plugged into securely into a power outlet. Room 1 Room 1 XE102 Desktop Broadband...
Page 39
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 5. U SE THE MART IZARD TO CONFIGURE THE RANGE EXTENDER a. From a wireless computer, open a browser such as Internet Explorer or Netscape® Navigator. Connect to the range extender by typing http://192.168.0.101 in the address field of your browser, then click Enter.
Page 40
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Note: If you have trouble connecting to the Internet, see on page 3-7 to correct basic problems. You can also manually configure your Internet settings, as described in “Manually Configuring Your Internet Connection” on page 6.
ISP Does Not Require Login ISP Does Require Login Figure 4-7: Browser-based configuration Basic Settings menus You can manually configure the WGX102 using the Basic Settings menu shown in Figure 4-7 using these steps: Configuring the WGX102 in Router Mode...
Page 42
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 1. Connect to the range extender by typing http://192.168.0.101 in the address field of your browser, then click Enter. 2. For security reasons, the range extender has its own user name and password. When prompted, enter admin for the user name and password for the password, both in lower case letters.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 5. If your Internet connection does require a login, fill in the settings according to the instructions below. a. Select your Internet service provider from the drop-down list. Your choices are: •...
• Click Apply to save your settings. • Click Test to verify that your Internet connection works. If the NETGEAR Web site does not appear within one minute, refer to Manual PPTP Configuration If your ISP uses PPTP, select PPTP for the Internet Service Provider and you will see the...
Page 45
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Figure 4-9: PPTP menu • Enter your Login and Password. These fields are case sensitive. • To change the login timeout, enter a new value in minutes. This determines how long the range extender keeps the Internet connection active after there is no Internet activity from the LAN.
Page 46
PC that is allowed by the ISP. Or, select “Use this MAC address” and enter it. • Click Apply to save your settings. • Click Test to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Chapter 9, 4-12 “Troubleshooting”.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Configuring the WGX102 in Router Mode The figure below shows the menu choices available when the WGX102 Wall-Plugged Range Extender is in Router Mode. To configure the WGX102 in Router Mode, continue with the...
Page 48
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 4-14 Configuring the WGX102 in Router Mode September 2004 202-10042-01...
This chapter describes how to configure the wireless features of your WGX102 Wall-Plugged Range Extender. In planning your wireless network, you should consider the level of security required. You should also select the physical placement of your range extender in order to maximize the network speed.
Restrict Access Based on MAC address. You can restrict access to only trusted computers so that unknown computers cannot wirelessly connect to the WGX102. MAC address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the wireless link is fully exposed.
Page 51
Windows XP. • Region. This field identifies the region where the WGX102 can be used. It may not be legal to operate the wireless features of the range extender in a region other than one of those identified in this field.
Page 52
Mode. This field determines which data communications protocol will be used. You can select “g only,” “b only,” or “g and b.” “g only” dedicates the WGX102 to communicating with the higher bandwidth 802.11g wireless devices exclusively. “b only” dedicates the WGX102 to communicating with the higher bandwidth 802.11b wireless devices exclusively.
WPA-PSK as well and are configured with the correct Passphrase. Use the procedures described in the following sections to configure the WGX102. Store this information in a safe place.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Default Factory Settings When you first receive your WGX102, the default factory settings are shown below. You can restore these defaults with the factory default reset button on the bottom of the unit.
Page 55
32 alphanumeric characters. The default SSID is NETGEAR. Note: The SSID is case sensitive; NETGEAR is not the same as nETgear. Also, the SSID of any wireless adapters must match the SSID you configure in the 54 Mbps Wall-Plugged Wireless Range Extender WGX102.
Program the wireless adapter of your computers to have the same SSID and channel that you configured in the WGX102. Check that they have a wireless link and are able to obtain an IP address by DHCP from the range extender.
Page 57
Automatic — enter a word or group of printable characters in the Passphrase box and click the Generate button. The passphrase is case sensitive; NETGEAR is not the same as nETgear. The four key boxes are automatically populated with key values.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Configuring WPA-PSK Wireless Security Note: Not all wireless adapters support WPA. Furthermore, client software is also required. Windows XP and Windows 2000 with Service Pack 3 do include WPA support. Nevertheless, the wireless adapter hardware and driver must also support WPA.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Restricting Wireless Access by MAC Address Note: When configuring the WGX102 from a wireless computer whose MAC address is not in the Trusted PC list, if you select Turn Access Control On, you will lose your wireless connection when you click Apply.
Page 60
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 4. Then, either select from the list of available wireless cards the WGX102 has found in your area, or enter the MAC address and device name for a device you plan to use. You can usually find the MAC address printed on the wireless adapter.
Configuring the HomePlug Password All Wall Plugged devices must use the same HomePlug Network Password. You can assign a Network Password to the WGX102 on the Wall Plug Settings screen, and optionally apply the password to other HomePlug devices on your LAN.
Page 62
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 You can also assign this password to other HomePlug stations on your LAN. Click the Add button to add a HomePlug Station to the list. Figure 6-2: Add HomePlug Station screen To assign the Network Password to other HomePlug Stations: 1.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Viewing Access Point Status Information Note: You must be in Access Point Mode to view the Access Point Status screen. If you are in Router Mode, see “Viewing Router Status Information” on page 6-6 for status information instead.
Page 64
The Media Access Control address used by the LAN port of the WGX102. The IP address used by the local port of the WGX102. The default is 192.168.0.101 The IP Subnet Mask used by the local port of the WGX102. The default is 255.255.255.0...
Page 65
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Click the Show Statistics button to display access point usage statistics, as shown below. Figure 6-4: Access Point Statistics screen The Access Point Statistics screen fields are described in the table below:...
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Viewing Router Status Information Note: You must be in Router Mode to view the Router Status Mode. If you are in Access Point Mode, see “Viewing Access Point Status Information” on page 6-3 for status information instead.
Page 67
Internet. If set to None, the WGX102 is configured to use a fixed IP address on the WAN. If set to a client, such as PPPOE, the WGX102 is configured to obtain an IP address dynamically from the ISP.
Page 68
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 From the Router Status screen, click the Connection Status button to display the connection status, as shown below. Figure 6-6: Connection Status screen This screen shows the following fields:.
Name (if available), and Ethernet MAC address. Note that if the range extender is rebooted, the table data is lost until the WGX102 rediscovers the devices. To force the range extender to look for attached devices, click the Refresh button.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Configuration File Management The configuration settings of the WGX102 Wall-Plugged Range Extender are stored within the range extender in a configuration file. This file can be saved (backed up) to a PC, retrieved (restored) from the PC, or cleared to factory default settings.
To erase the configuration, click and hold the reset button for at least 15 seconds. Warning: Do not turn off the power to the WGX102 until the power LED has turned solid green. To restore the factory default configuration settings without knowing the login password or IP address, you must use the default reset button on the bottom panel of the WGX102.
If after changing the password, you forget the new password you assigned, you will have to reset the WGX102 back to the factory defaults to be able to log in using the default password of password. This means you will have to restore all the range extender configuration settings.
Page 73
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Figure 6-10: Set Password menu To change the password, first enter the old password, then enter the new password twice. Click Apply. Maintenance 6-13 September 2004 202-10042-01...
Page 74
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 6-14 Maintenance September 2004 202-10042-01...
This chapter describes how to use the content filtering features of the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 to protect your network. These features are only available if you are running the WGX102 in Router Mode. See Router Mode”...
Page 76
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 The Block Sites menu is shown in the figure below: Figure 7-1: Block Sites menu • To enable keyword blocking, select either “Per Schedule” or “Always”, then click Apply. If you want to block by schedule, be sure that a time period is specified in the Schedule menu.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Blocking Access to Internet Services The WGX102 Wall-Plugged Range Extender allows you to block the use of certain Internet services by PCs on your network. This is called services blocking or port filtering. The Block...
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 To specify a service for blocking, click Add. The Add Services menu appears, as shown below: Figure 7-3: Add Services menu From the Service Type list, select the application or service to be allowed or blocked. The list already displays several common services, but you are not limited to these choices.
Under “Filter Services For”, you can block the specified service for a single computer, a range of computers (having consecutive IP addresses), or all computers on your network. Scheduling When Blocking is Enforced The WGX102 Wall-Plugged Range Extender allows you to specify when blocking is enforced. The Schedule menu is shown below: Figure 7-4: Schedule menu •...
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Viewing Logs of Web Access or Attempted Web Access The log is a detailed record of what Web sites you have accessed or attempted to access. Up to 128 entries are stored in the log.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Log action buttons are described in Table 7-2. Log action buttons Button Description Refresh Refresh the log screen. Clear Log Clear the log entries. Send Log E-mail the log immediately.
Page 82
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • Turn e-mail notification on Select this check box if you wish to receive e-mail logs and alerts from the WGX102. • Your outgoing mail server Enter the name of your ISP’s outgoing (SMTP) mail server (such as mail.myISP.com). You may be able to find this information in the configuration menu of your e-mail program.
• If you are using the WGX102 Wall-Plugged Range Extender in Access Point Mode, the only Advanced menu option is LAN IP Setup and the configuration options are different than the Router Mode options. See page 3-10 for more information.
Page 84
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Port Triggering opens an incoming port temporarily and does not require the server on the Internet to track your IP address if it is changed by DHCP, for example. Port Triggering monitors outbound traffic.
Page 85
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • Incoming Ports — the port or port range used by the remote system when it responds to the outgoing request. A response using one of these ports is forwarded to the PC that triggered this rule.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 4. For the Outgoing (Trigger) Port Range, enter the range of port numbers used by the application when it generates an outgoing request. 5. For the Incoming (Response) Port Range, enter the range of port numbers used by the remote system when it responds to the PC's request.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Note: To assure that the same computer always has the same IP address, use the reserved IP address feature of your WGX102 Wall-Plugged Range Extender. See Reservation” on page 8-12 1.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 4. Type the IP address of the computer in the Server IP Address box. 5. Click Apply to save your changes. Local Web and FTP Server Example If a local computer with a private IP address of 192.168.0.33 acts as a Web and FTP server, configure the Ports menu to forward HTTP (port 80) and FTP (port 21) to local address 192.168.0.33.
Some online games and videoconferencing applications are incompatible with NAT. The WGX102 Wall-Plugged Range Extender is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, one local computer can run the application properly if that computer’s IP address is...
Page 90
3. Click Apply. Respond to Ping on Internet WAN Port. If you want the WGX102 to respond to a 'ping' from the Internet, select the Respond to Ping on Internet WAN Port check box. This should only be used as a diagnostic tool, since it allows your range extender to be discovered.
Configuring the LAN IP Setup Options in Router Mode LAN IP Setup is under the Advanced heading on both the Access Point Mode and Router Mode menus. If you are using the WGX102 in Access Point Mode, see Options in Access Point Mode” on page 3-10 This menu allows configuration of LAN IP services such as DHCP and RIP in Router Mode.
Page 92
The RIP Direction selection controls how the WGX102 sends and receives RIP packets. Both is the default. — When set to Both or Out Only, the WGX102 broadcasts its routing table periodically. — When set to Both or In Only, it incorporates the RIP information that it receives.
LAN. The assigned default gateway address is the LAN address of the WGX102. IP addresses are assigned to the attached computers from a pool of addresses specified in this menu. Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Using Address Reservation When you specify a reserved IP address for a computer on the LAN, that computer always receives the same IP address each time it accesses the range extender’s DHCP server. Reserved IP addresses should be assigned to servers that require permanent IP settings.
DNS service will not work because private addresses will not be routed on the Internet. The WGX102 contains a client that can connect to many popular dynamic DNS services. You can select one of these services and obtain an account with them. Then, whenever your ISP-assigned IP address changes, your range extender automatically contacts your dynamic DNS service provider, log in to your account, and register your new IP address.
Page 96
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 From the main menu of the browser interface, under Advanced, click Static Routes to view the Static Routes menu, shown below. Figure 8-7. Static Route Summary Table To add a Static Route: 1.
Page 97
• Your company’s network is 134.177.0.0. When you first configured your WGX102, two implicit static routes were created. A default route was created with your ISP as the gateway, and a second static route was created to your local network for all 192.168.0.x addresses. With this configuration, if you attempt to access a device on the 134.177.0.0 network, your range extender forwards your request to the ISP.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • A Metric value of 1 will work since the ISDN router is on the LAN. • Private is selected only as a precautionary security measure in case RIP is activated.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Note: When accessing your WGX102 from the Internet, type your range extender's WAN IP address into your browser's Address (in IE) or Location (in Netscape) box, followed by a colon (:) and the custom port number.
Page 100
UPnP Portmap Table: The UPnP Portmap Table displays the IP address of each UPnP device that is currently accessing the WGX102 and which ports (Internal and External) that device has opened. The UPnP Portmap Table also displays what type of port is opened and if that port is still active for each IP address.
Basic Functioning After you turn on power to the WGX102, the following sequence of events should occur: 1. When power is first applied, verify that the Power light is on. 2. After approximately 10 seconds, verify that: a.
• Make sure your computer’s IP address is on the same subnet as the WGX102. If you are using the recommended addressing scheme, your computer’s address should be in the range of 192.168.0.2 to 192.168.0.254. Refer to “Verifying TCP/IP Properties for Macintosh Computers”...
If 0.0.0.0 is shown, your WGX102 has not obtained an IP address from your ISP. If your WGX102 is unable to obtain an IP address from the ISP, you may need to force your cable or DSL modem to recognize your new router by performing the following procedure: 1.
Page 104
Configure your WGX102 to spoof your computer’s MAC address. This can be done in the Basic Settings menu. If your WGX102 can obtain an IP address, but your computer is unable to load any Web pages from the Internet: •...
To ping the range extender from a PC running Windows 95 or later: 1. From the Windows toolbar, click the Start button and select Run. 2. In the field provided, type Ping followed by the IP address of the WGX102, as in this example: ping 192.168.0.101 3.
— Verify that the Ethernet card driver software and TCP/IP software are both installed and configured on your computer or workstation. — Verify that the IP address for your WGX102 and your workstation are correct and that the addresses are on the same subnet.
Use the Erase function of the range extender (see • Use the default reset button on the bottom of the WGX102. Use this method for cases when the administration password or IP address is not known. To restore the factory default configuration settings without knowing the administration password or IP address, you must use the default reset button on the bottom panel of the WGX102.
Page 108
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Troubleshooting September 2004 202-10042-01...
Page 109
This appendix provides technical specifications for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102. Network Protocol and Standards Compatibility Data and Routing Protocols: Power Requirements North America: United Kingdom, Australia: Europe: Physical Specifications Dimensions: Weight: Environmental Specifications Operating temperature: Operating humidity:...
Page 110
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Data Encoding: Maximum Computers Per Wireless Network: Operating Frequency Ranges: 802.11 Security HomePlug Frequency Data Encoding HomePlug Security 802.11b: Direct Sequence Spread Spectrum (DSSS) 802.11g: Orthogonal Frequency Division Multiplexing (OFDM) Limited by the amount of wireless network traffic generated by each node.
Appendix B Network, Routing, Firewall, and Basics This chapter provides an overview of IP networks, routing, and networking. Related Publications As you read this document, you may be directed to various Request For Comment (RFC) documents for further information. An RFC is a document published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet.
Routers vary in performance and scale, number of routing protocols supported, and types of physical WAN connection they support. The 54 Mbps Wall-Plugged Wireless Range Extender WGX102 is a small office router that routes the IP protocol over a single-user broadband connection.
Page 113
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 There are five standard classes of IP addresses. These address classes have different ways of determining the network and host sections of the address, allowing for different numbers of hosts on a network.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • Class D Class D addresses are used for multicasts (messages sent to many hosts). Class D addresses are in this range: 224.0.0.0 to 239.255.255.255. • Class E Class E addresses are for experimental use.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Subnet Addressing By looking at the addressing structures, you can see that even with a Class C address, there are a large number of hosts per network. Such a structure is an inefficient use of addresses if each end of a routed link requires a different network number.
Page 116
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Note: The number 192.68.135.127 is not assigned because it is the broadcast address of the first subnet. The number 192.68.135.128 is not assigned because it is the network address of the second subnet.
172.16.0.0 - 172.31.255.255 192.168.0.0 - 192.168.255.255 Choose your private network number from this range. The DHCP server of the WGX102 Wall-Plugged Range Extender is preconfigured to automatically assign private addresses. Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines explained here.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Single IP Address Operation Using NAT In the past, if multiple computers on a LAN needed to access the Internet simultaneously, you had to obtain a range of IP addresses from the ISP. This type of Internet account is more costly than a single-address account typically used by a single user with a modem, rather than a router.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 This scheme offers the additional benefit of firewall-like protection because the internal LAN addresses are not available to the Internet through the translated connection. All incoming inquiries are filtered out by the router. This filtering can prevent intruders from probing your system.
(such as gateway and DNS addresses) that it may assign to the other devices on the network. The WGX102 Wall-Plugged Range Extender has the capacity to act as a DHCP server. The WGX102 Wall-Plugged Range Extender also functions as a DHCP client when connecting to the ISP.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 What is a Firewall? A firewall is a device that protects one network from another, while allowing communication between the two. A firewall incorporates the functions of the NAT router, while adding features for dealing with a hacker intrusion or attack.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Inside Twisted Pair Cables For two devices to communicate, the transmitter of each device must be connected to the receiver of the other device. The crossover function is usually implemented internally as part of the circuitry in the device.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Figure B-6: Category 5 UTP Cable with Male RJ-45 Plug at Each End Note: Flat “silver satin” telephone cable may have the same RJ-45 plug. However, using telephone cable results in excessive collisions, causing the attached port to be partitioned or disconnected from the network.
Page 125
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Most routers incorporates Auto Uplink technology (also called MDI/MDIX). Each LOCAL Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a normal connection (e.g. connecting to a computer) or an uplink connection (e.g. connecting to a router, switch, or hub).
Page 126
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 B-16 Network, Routing, Firewall, and Basics September 2004 202-10042-01...
You need to prepare these three things before you begin: Cabling and Computer Hardware To use the WGX102 Wall-Plugged Range Extender on your network, each computer must have an 802.11g or 802.11b wireless adapter or an installed Ethernet Network Interface Card (NIC) and an Ethernet cable.
The WGX102 includes a built-in Web Configuration Manager. To access the configuration menus on the WGX102, your must use a Java-enabled Web browser program which supports HTTP uploads such as Microsoft Internet Explorer or Netscape Navigator. Use Internet Explorer or Netscape Navigator 4.0 or above.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Once you locate your Internet configuration parameters, you may want to record them on the page below. Record Your Internet Connection Information Print this page. Fill in the configuration parameters from your Internet Service Provider (ISP).
DHCP server during bootup. For a detailed explanation of the meaning and purpose of these configuration items, refer to Firewall, and Basics.” The WGX102 Wall-Plugged Range Extender is shipped preconfigured as a DHCP server. The WGX102 assigns the following TCP/IP configuration information automatically when the PCs are rebooted: •...
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Configuring Windows 95, 98, and Me for TCP/IP Networking As part of the PC preparation process, you need to manually install and configure TCP/IP on each networked PC. Before starting, locate your Windows CD; you may need to insert it during the TCP/IP installation process.
Page 132
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Note: It is not necessary to remove any other network components shown in the Network window in order to install the adapter, TCP/IP, or Client for Microsoft Networks. If you need to install a new adapter, follow these steps: Click the Add button.
Page 133
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 The following steps will walk you through the configuration process for each of these versions of Windows. Locate your Network Neighborhood icon. • If the Network Neighborhood icon is on the Windows desktop, position your mouse pointer over it and right-click your mouse button.
Page 134
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Verify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to Windows logon Click on the Properties button.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • By default, the IP Address tab is open on this window. • Verify the following: Obtain an IP address automatically is selected. If not selected, click in the radio button to the left of it to select it.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Type , and then click OK. winipcfg The IP Configuration window opens, which lists (among other things), your IP address, subnet mask, and default gateway. 3. From the drop-down box, select your Ethernet adapter.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4 You will find there are many similarities in the procedures for different Windows systems when using DHCP to configure TCP/IP.
Page 138
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • Now you should be at the Local Area Network Connection Status window. This box displays the connection status, duration, speed, and activity statistics. • Administrator logon access rights are needed to use this window.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • Verify that the Obtain an IP address automatically radio button is selected. • Verify that Obtain DNS server address automatically radio button is selected. • Click the OK button.
Page 140
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • Click on the My Network Places icon on the Windows desktop. This will bring up a window called Network and Dial-up Connections. • Right click on Local Area Connection and select Properties.
Page 141
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • With Internet Protocol (TCP/IP) selected, click on Properties to open the Internet Protocol (TCP/IP) Properties dialogue box. • Verify that • Obtain an IP address automatically is selected.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 DHCP Configuration of TCP/IP in Windows NT4 Once you have installed the network card, you need to configure the TCP/IP environment for Windows NT 4.0. Follow this procedure to configure TCP/IP with DHCP in Windows NT 4.0.
Page 143
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • Highlight the TCP/IP Protocol in the Network Protocols box, and click on the Properties button. Preparing Your Network C-17 September 2004 202-10042-01...
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • The TCP/IP Properties dialog box now displays. • Click the IP Address tab. • Select the radio button marked Obtain an IP address from a DHCP server. • Click OK. This completes the configuration of TCP/IP in Windows NT.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 • The default gateway is 192.168.0.101 4. Type exit. Configuring the Macintosh for TCP/IP Networking Beginning with Macintosh Operating System 7, TCP/IP is already installed on the Macintosh. On each networked Macintosh, you will need to configure TCP/IP to use DHCP.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 MacOS X From the Apple menu, choose System Preferences, then Network. 2. If not already selected, select Built-in Ethernet in the Configure list. 3. If not already selected, Select Using DHCP in the TCP/IP tab.
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Verifying the Readiness of Your Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL modem. This modem must be a separate physical box (not a card) and must provide an Ethernet port intended for connection to a Network Interface Card (NIC) in a computer.
As mentioned above, you may need to collect configuration information from your PC so that you can use this information when you configure the WGX102 Wall-Plugged Range Extender. Following this procedure is only necessary when your ISP does not dynamically supply the account information.
As mentioned above, you may need to collect configuration information from your Macintosh so that you can use this information when you configure the WGX102 Wall-Plugged Range Extender. Following this procedure is only necessary when your ISP does not dynamically supply the account information.
Restart any computer that is connected to the firewall. After configuring all of your computers for TCP/IP networking and restarting them, and connecting them to the local network of your WGX102 Wall-Plugged Range Extender, you are ready to access and configure the firewall. C-24...
This chapter provides an overview of Wireless networking. Wireless Networking Overview The WGU624 wireless router conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standard for wireless LANs (WLANs) and a product update will bring the WGU624 into conformance to the 802.11g standard when it is ratified. On an 802.11b or g wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 In the infrastructure mode, the wireless access point converts airwave data into wired Ethernet data, acting as a bridge between the wired LAN and wireless clients. Connecting multiple Access Points via a wired Ethernet backbone can further extend the wireless network coverage.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 Authentication and WEP The absence of a physical connection between nodes makes the wireless links vulnerable to eavesdropping and information theft. To provide a certain level of security, the IEEE 802.11 standard has defined two types of authentication methods, Open System and Shared Key.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 • Shared Key Authentication requires that the station and the access point have the same WEP Key to authenticate. These two authentication procedures are described below. Open System Authentication The following steps occur when two devices use Open System Authentication: The station sends an authentication request to the access point.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 The station connects to the network. If the decrypted text does not match the original challenge text (i.e., the access point and station do not share the same WEP Key), then the access point will refuse to authenticate the station and the station will be unable to communicate with either the 802.11 network or Ethernet network.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 3. Use WEP for Authentication and Encryption: A transmitting 802.11 device encrypts the data portion of every packet it sends using a configured WEP Key. The receiving 802.11 device decrypts the data using the same WEP Key.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 WEP Configuration Options The WEP settings must match on all 802.11 devices that are within the same wireless network as identified by the SSID. In general, if your mobile clients will roam between access points, then all of the 802.11 access points and all of the 802.11 client adapters on the network must have the same WEP settings.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 The radio frequency channels used are listed in Table 9-1. 802.11 Radio Frequency Channels Channel Center Frequency 2412 MHz 2417 MHz 2422 MHz 2427 MHz 2432 MHz 2437 MHz 2442 MHz 2447 MHz 2452 MHz...
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 The IEEE introduced the WEP as an optional security measure to secure 802.11b (Wi-Fi) WLANs, but inherent weaknesses in the standard soon became obvious. In response to this situation, the Wi-Fi Alliance announced a new security architecture in October 2002 that remedies the shortcomings of WEP.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 How Does WPA Compare to IEEE 802.11i? WPA will be forward compatible with the IEEE 802.11i security specification currently under development. WPA is a subset of the current 802.11i draft and uses certain pieces of the 802.11i draft that are ready to bring to market today, such as 802.1x and TKIP.
Page 161
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 The primary information conveyed in the Beacon frames is the authentication method and the cipher suite. Possible authentication methods include 802.1X and Pre-shared key. Pre-shared key is an authentication method that uses a statically configured pass phrase on both the stations and the access point.
WPA supports Extensible Authentication Protocol (EAP). For environments without a RADIUS infrastructure, WPA supports the use of a pre-shared key. Together, these technologies provide a framework for strong user authentication. Windows XP implements 802.1x natively, and several NETGEAR switch and wireless access point products support 802.1x. D-12...
Page 163
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 Client with a WPA- enabled wireless adapter and supplicant (Win XP, Funk, Meetinghouse) Figure D-2: 802.1x Authentication Sequence The AP sends Beacon Frames with WPA information element to the stations in the service set. Information elements include the required authentication method (802.1x or Pre-shared key) and the preferred cipher suite (WEP, TKIP, or AES).
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 The client sends an EAP-response packet containing the identity to the authentication server. The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point.
Page 165
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 Temporal Key Integrity Protocol (TKIP) WPA uses TKIP to provide important data encryption enhancements including a per-packet key mixing function, a message integrity check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism.
Product Support for WPA Starting in August, 2003, NETGEAR, Inc. wireless Wi-Fi certified products will support the WPA standard. NETGEAR, Inc. wireless products that had their Wi-Fi certification approved before August, 2003 will have one year to add WPA so as to maintain their Wi-Fi certification.
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 Changes to Wireless Access Points Wireless access points must have their firmware updated to support the following: • The new WPA information element To advertise their support of WPA, wireless APs send the beacon frame with a new 802.11 WPA information element that contains the wireless AP's security configuration (encryption algorithms and wireless security configuration information).
Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624 Microsoft has worked with many wireless vendors to embed the WPA firmware update in the wireless adapter driver. So, to update your Microsoft Windows wireless client, all you have to do is obtain the new WPA-compatible driver and install the driver.
Glossary Use the list below to find definitions for technical terms used in this manual. List of Glossary Terms 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring. 802.1x 802.1x defines port-based, network access control used to provide authenticated network access and automated data encryption key management.
Page 170
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 ADSL requires a special ADSL modem. ADSL is growing in popularity as more areas around the world gain access. Advanced Encryption Standard, a symmetric 128-bit block data encryption technique.
Page 171
.com, .edu, .uk, etc. For example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain. Short for Denial of Service. A hacker attack designed to prevent your computer or network from operating or communicating.
Page 172
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 user requests connection to a WLAN through an AP, which then requests the identity of the user and transmits that identity to an authentication server such as RADIUS. The server asks the AP for proof of identity, which the AP gets from the user and then sends back to the server to complete the authentication.
Page 173
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 A communications network serving users within a limited area, such as one floor of a building. LDAP A set of protocols for accessing information directories. Lightweight Directory Access Protocol LDAP.
Page 174
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Most Significant Bit or Byte. The portion of a number, address, or field that is farthest left when written as a single number in conventional hexadecimal ordinary notation. The part of the number having the most value.
Page 175
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 PPPoA PPP over ATM is a protocol for connecting remote hosts to the Internet over an always-on connection by simulating a dial-up connection. PPPoE PPP over Ethernet is a protocol for connecting remote hosts to the Internet over an always-on connection by simulating a dial-up connection.
Page 176
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 Routing Information Protocol RIP. A protocol in which routers periodically exchange information with one another so that they can determine minimum distance paths between sources and destinations. SSID A Service Set Identification is a thirty-two character (maximum) alphanumeric key identifying a wireless local area network.
Page 177
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 The TLS protocol is made up of two layers. The TLS Record Protocol ensures that a connection is private by using symmetric data encryption and ensures that the connection is reliable. The second TLS layer is the TLS Handshake Protocol, which allows authentication between the server and client and the negotiation of an encryption algorithm and cryptographic keys before data is transmitted or received.
Page 178
Reference Manual for the 54 Mbps Wall-Plugged Wireless Range Extender WGX102 If a remote network contains a WINS server, your Windows PCs can gather information from that WINS server about its local hosts. This allows your PCs to browse that remote network using the Windows Network Neighborhood feature.
Page 180
Half Life 8-6 host name 4-8 IANA contacting B-2 IETF B-1 Web site address B-7 infrastructure mode D-2 installation 2-3 Internet account address information C-21 establishing C-21 IP addresses C-22, C-23 and NAT B-8 and the Internet B-2 assigning B-2, B-9 auto-generated 9-2 private B-7 translating B-9...
Page 181
PPP over Ethernet C-21 PPPoE C-21 Primary DNS Server 4-8, 4-10, 4-12 protocols Address Resolution B-9 DHCP B-10 Routing Information B-2 support 2-2 publications, related B-1 Quake 8-6 range 5-1 remote management 8-16 reserved IP adresses 8-12 restore configuration 6-12 restore factory settings 6-11 1466 B-7, B-9 1597 B-7, B-9...