NETGEAR DG834G - 54 Mbps Wireless ADSL Firewall Router Reference Manual

54 mbps wireless adsl firewall router
Hide thumbs Also See for DG834G - 54 Mbps Wireless ADSL Firewall Router:
Table of Contents

Advertisement

Reference Manual for the
54 Mbps Wireless ADSL
Firewall Router DG834G
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
Phone 1-888-NETGEAR
202-10006-01
March 2004

Advertisement

Table of Contents
loading

Summary of Contents for NETGEAR DG834G - 54 Mbps Wireless ADSL Firewall Router

  • Page 1 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR 202-10006-01 March 2004...
  • Page 2 In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
  • Page 3: Customer Support

    Refer to the Support Information Card that shipped with your DG834G 54 Mbps Wireless ADSL Firewall Router . World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer...
  • Page 5: Table Of Contents

    Contents Chapter 1 About This Guide Audience, Conventions, Scope ..................1-1 How to Use this Manual ....................1-2 How to Print this Manual ....................1-3 Chapter 2 Introduction About the Router ......................2-1 Key Features ........................2-2 802.11 Standards-based Wireless Networking ............2-2 A Powerful, True Firewall ..................2-2 Content Filtering .......................2-3 Auto Sensing and Auto Uplink™...
  • Page 6 Record Your Internet Connection Information ............3-3 Connecting the DG834G to Your LAN ................3-5 How to Connect the Router ..................3-5 Auto-Detecting Your Internet Connection Type ..............3-9 Wizard-Detected PPPoE Login Account Setup ............3-11 Wizard-Detected PPPoA Login Account Setup ............3-11 Wizard-Detected Dynamic IP Account Setup ............3-12 Wizard-Detected IP Over ATM Account Setup ............3-12 Wizard-Detected Fixed IP (Static) Account Setup ..........3-13 Testing Your Internet Connection ..................3-14...
  • Page 7 How to Change the Built-In Password ..............5-1 Changing the Administrator Login Timeout ..............5-2 Configuring Basic Firewall Services ................5-2 Blocking Keywords, Sites, and Services ..............5-3 How to Block Keywords and Sites ................5-3 Firewall Rules .........................5-5 Inbound Rules (Port Forwarding) ................5-6 Inbound Rule Example: A Local Public Web Server ..........5-6 Inbound Rule Example: Allowing Videoconferencing ........5-8 Considerations for Inbound Rules ..............5-8 Outbound Rules (Service Blocking) .................5-9...
  • Page 8 Enabling Security Event E-mail Notification ..............6-13 Running Diagnostic Utilities and Rebooting the Router ..........6-14 Enabling Remote Management ..................6-15 Configuring Remote Management .................6-15 Chapter 7 Advanced Configuration Configuring Advanced Security ..................7-1 Setting Up A Default DMZ Server ................7-1 How to Configure a Default DMZ Server ............7-2 Connect Automatically, as Required ................7-3 Disable Port Scan and DOS Protection ..............7-3 Respond to Ping on Internet WAN Port ..............7-3...
  • Page 9 Troubleshooting PPPoE or PPPoA ................8-6 Troubleshooting Internet Browsing ................8-6 Troubleshooting a TCP/IP Network Using the Ping Utility ..........8-7 Testing the LAN Path to Your Router ...............8-7 Testing the Path from Your Computer to a Remote Device ........8-8 Restoring the Default Configuration and Password ............8-9 Using the Reset button .....................8-9 Problems with Date and Time ..................8-9 Appendix A...
  • Page 10 Appendix C Preparing Your Network Preparing Your Computers for TCP/IP Networking ............C-1 Configuring Windows 95, 98, and Me for TCP/IP Networking ........C-2 Install or Verify Windows Networking Components ..........C-2 Enabling DHCP to Automatically Configure TCP/IP Settings in Windows 95B, 98, and Me Selecting Windows’...
  • Page 11 Overview of WEP Parameters ................D-5 Key Size ........................D-6 WEP Configuration Options ..................D-7 Wireless Channels ......................D-7 WPA Wireless Security ....................D-8 How Does WPA Compare to WEP? ................ D-9 How Does WPA Compare to IEEE 802.11i? ............D-10 What are the Key Features of WPA Security? ............
  • Page 12 Contents...
  • Page 13: About This Guide

    Product Version DG834G 54 Mbps Wireless ADSL Firewall Router Manual Publication Date March 2004 Note: Product updates are available on the NETGEAR, Inc. Web site at http:// www.netgear.com/support/main.asp. Documentation updates are available on the NETGEAR, Inc. Web site at http://www.netgear.com/docs.
  • Page 14: How To Use This Manual

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Use this Manual The HTML version of this manual includes these features. Figure 1 -1: HTML version of this manual 1. Left pane. Use the left pane to view the Contents, Index, Search, and Favorites tabs. To view the HTML version of the manual, you must have a version 4 or later browser with JavaScript enabled.
  • Page 15: How To Print This Manual

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Print this Manual To print this manual you can choose one of the following several options, according to your needs. • Printing a “How To” Sequence of Steps in the HTML View. Use the Print button on the upper right side of the toolbar to print the currently displayed topic.
  • Page 16 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G About This Guide...
  • Page 17: Introduction

    Chapter 2 Introduction This chapter describes the features of the NETGEAR DG834G 54 Mbps Wireless ADSL Firewall Router . The DG834G wireless router is a combination of a built-in ADSL modem, router, 4-port switch, 802.11g wireless access point, and firewall which enables your entire network to safely share an Internet connection that otherwise is used by a single computer.
  • Page 18: Key Features

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Key Features The DG834G wireless router provides the following features: • A powerful, true firewall • 802.11g standards-based wireless networking • Content filtering • Auto Sensing and Auto Uplink™ LAN Ethernet connections •...
  • Page 19: Content Filtering

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Denial of Service (DoS) protection Automatically detects and thwarts Denial of Service (DoS) attacks such as Ping of Death, SYN Flood, LAND Attack and IP Spoofing. • Blocks unwanted traffic from the Internet to your LAN. •...
  • Page 20 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • The Ability to Enable or Disable IP Address Sharing by NAT The DG834G allows several networked computers to share an Internet account using only a single IP address, which may be statically or dynamically assigned by your Internet service provider (ISP).
  • Page 21: Easy Installation And Management

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Easy Installation and Management You can install, configure, and operate the DG834G within minutes after connecting it to the network. The following features simplify installation and management tasks: • Browser-based management Browser-based configuration allows you to easily configure your router from almost any type of personal computer, such as Windows, Macintosh, or Linux.
  • Page 22: The Router's Front Panel

    • Warranty and Support Information cards If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair. The Router’s Front Panel The DG834G 54 Mbps Wireless ADSL Firewall Router front panel shown below contains status LEDs.
  • Page 23: The Router's Rear Panel

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G You can use the LEDs to verify various conditions. Table 2-1 lists and describes each LED on the front panel of the router. These LEDs are green when lit. Table 2-1.
  • Page 24 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • AC power adapter outlet • Four Local Ethernet RJ-45 ports for connecting the router to the local computers • Factory Default Reset push button • ADSL port for connecting the router to an ADSL line •...
  • Page 25: Connecting The Router To The Internet

    Chapter 3 Connecting the Router to the Internet This chapter describes how to set up the router on your Local Area Network (LAN) and connect to the Internet. It describes how to configure your DG834G 54 Mbps Wireless ADSL Firewall Router for Internet access using the Setup Wizard, or how to manually configure your Internet connection.
  • Page 26: Adsl Microfilter With Built-In Splitter

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Each device such as a telephone, fax machine, answering machine, or caller ID display will require an ADSL microfilter. Note: Do not connect the DG834G to the ADSL line through a microfilter unless the microfilter is a combination microfilter/splitter specifically designed for this purpose.
  • Page 27: Internet Configuration Requirements

    For Macintosh computers, open the TCP/IP or Network control panel. • You can also refer to the DG834G Resource CD for the NETGEAR Router ISP Guide which provides Internet connection information for many ISPs. Once you locate your Internet configuration parameters, you may want to record them on the page below according to the instructions in “Record Your Internet Connection Information”...
  • Page 28 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G ISP Multiplexing Method and Virtual Circuit Number: The default settings of your DG834G 54 Mbps Wireless ADSL Firewall Router will work fine for most ISPs. However, some ISPs use a specific Multiplexing Method or a Virtual Circuit Number for either the Virtual Path Identifier (VPI) or Virtual Channel Identifier (VCI).
  • Page 29: Connecting The Dg834G To Your Lan

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Connecting the DG834G to Your LAN This section provides instructions for connecting the DG834G wireless router. Note: The Resource CD included with your router contains an animated Installation Assistant to help you through this procedure.
  • Page 30 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Line Figure 3-4: Connecting an ADSL microfilter and phone Note: To use a one-line filter with a separate splitter, insert the splitter into the phone outlet, connect the one-line filter to the splitter, and connect the phone to the filter. 2.
  • Page 31 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Connect the Ethernet cable (C) from your DG834G’s LAN port to the Ethernet adapter in your computer. Line 54 Mbps Wireless ADSL Firewall Router DG834G Figure 3-6: Connecting a computer to the DG834G wireless router Note: The DG834G wireless router incorporates Auto Uplink technology.
  • Page 32 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G DG834G. OG IN TO THE Note: Your computer needs to be configured for DHCP. For instructions on configuring for DHCP, please see Appendix C, “Preparing Your Network”. Connect to the router by typing http://192.168.0.1 in the address field of Internet Explorer or Netscape...
  • Page 33: Auto-Detecting Your Internet Connection Type

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Figure 3-9: Setup Wizard ONNECT TO THE NTERNET The router is now properly attached to your network. You are now ready to configure your router to connect to the Internet. There are two ways you can configure your router to connect to the Internet: Let the DG834G auto-detect the type of Internet connection you have and configure it.
  • Page 34 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: If instead of the Setup Wizard menu, the main menu of the router’s Configuration Manager as shown in Figure 3-15 appears, click the Setup Wizard link in the upper left to bring up this menu.
  • Page 35: Wizard-Detected Pppoe Login Account Setup

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Wizard-Detected PPPoE Login Account Setup If the Setup Wizard determines that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you will be directed to the PPPoE page shown in Figure 3-10: Figure 3-10: Setup Wizard menu for PPPoE login accounts...
  • Page 36: Wizard-Detected Dynamic Ip Account Setup

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Wizard-Detected Dynamic IP Account Setup If the Setup Wizard determines that your Internet service account uses Dynamic IP assignment, you will be directed to the page shown in Figure 3-12 below: Figure 3-12: Setup Wizard menu for Dynamic IP address Click Apply to set Dynamic IP as the connection method.
  • Page 37: Wizard-Detected Fixed Ip (Static) Account Setup

    DNS server addresses from your ISP and enter them manually here. Click Apply to save the settings. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Chapter 8, “Troubleshooting”.
  • Page 38: Testing Your Internet Connection

    DNS server addresses from your ISP and enter them manually here. Click Apply to save the settings. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Chapter 8, “Troubleshooting”.
  • Page 39: Manually Configuring Your Internet Connection

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Manually Configuring Your Internet Connection You can manually configure your router using the menu below, or you can allow the Setup Wizard to determine your configuration as described in the previous section. ISP Does Not Require Login ISP Does Require Login Figure 3-15: Basic Settings menu...
  • Page 40: How To Perform Manual Configuration

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Perform Manual Configuration We recommend that you start the manual configuration from the Setup Wizard: Select your country and language. Language choices are English, French, German, and Italian. After you change the language, the remaining setup screens change to the language of your choice.
  • Page 41: Internet Connection Requires Login And Uses Pppoa

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Select “Get Automatically from ISP” if your ISP assigns your IP address. • Select “Use Static IP Address” if your ISP gaves you a statically assigned address. The DNS server is used to look up site addresses based on their names. •...
  • Page 42: Internet Connection Does Note Require A Login

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Select “Get Automatically from ISP” if your ISP uses DHCP to assign your DNS servers. Your ISP will automatically assign this address. Select “Use These DNS Servers” if your ISP gave you one or two DNS addresses. Type the primary and secondary addresses.You should only disable NAT if you are sure you do not require it.
  • Page 43: Adsl Settings

    A DNS server is a host on the Internet that translates Internet names (such as www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of one or two DNS servers to your router during login. If the ISP does not transfer an address, you must obtain it from the ISP and enter it manually here.
  • Page 44 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If your ISP provided you with a specific Multiplexing Method or VPI/VCI number, then fill in the following: Select the ADSL Settings link from the main menu. For the Multiplexing Method, select LLC-based or VC-based. Type a number between 0 and 255 for the VPI.
  • Page 45: Wireless Configuration

    Chapter 4 Wireless Configuration This chapter describes how to configure the wireless features of your DG834G 54 Mbps Wireless ADSL Firewall Router . Considerations for a Wireless Network In planning your wireless network, you should consider the level of security required. You should also select the physical placement of your router in order to maximize the network speed.
  • Page 46: Implement Appropriate Wireless Security

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The time it takes to establish a wireless connection can vary depending on both your security settings and placement. WEP connections can take slightly longer to establish. Also, WEP encryption can consume more battery power on a notebook computer.
  • Page 47 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Turn Off the Broadcast of the Wireless Network Name SSID. If you disable broadcast of the SSID, only devices that have the correct SSID can connect. This nullifies wireless network ‘discovery’...
  • Page 48: Understanding Wireless Settings

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Understanding Wireless Settings To configure the Wireless interface of your router, click the Wireless link in the main menu of the browser interface. The Wireless Settings menu will appear, as shown below: Figure 4-2: Wireless Settings menu The following parameters are in the Wireless Settings menu: •...
  • Page 49 32 alphanumeric characters. The same Name (SSID) must be assigned to all wireless devices in your network. The default SSID is NETGEAR, but NETGEAR strongly recommends that you change your network Name to a different value.
  • Page 50: Security Options

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Security Options Table 4-1. Wireless Security Options Field Description Disable Wireless security is not used. WEP (Wired You can select the following WEP options: Equivilant Privacy) Authentication Type •...
  • Page 51: How To Set Up And Test Basic Wireless Connectivity

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 4-1. Wireless Security Options Field Description WPA-PSK WPA Pre-Shared-Key uses a pre-shared key to perform the authentication and generate (Wi-Fi Protected the initial data encryption keys. Then, it dynamically varies the encryption key. For a full Access explanation of WPA, see “WPA Wireless Security”...
  • Page 52: How To Restricting Wireless Access To Your Network

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Set the Channel. The default channel is 11. This field determines which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby wireless router or access point.
  • Page 53: Restricting Access To Your Network By Turning Off Wireless Connectivity

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Figure 4-3: Wireless Access Point settings Restricting Access to Your Network by Turning Off Wireless Connectivity You can completely turn off the wireless portion of the DG834G. For example, if your notebook computer is used to wirelessly connect to your router and you take a business trip, you can turn off the wireless portion of the router while you are travelling.
  • Page 54 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below: Figure 4-4. Wireless Access menu Select the Turn Access Control On check box to enable restricting wireless computers by their MAC addresses.
  • Page 55 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: You can copy and paste the MAC addresses from the router’s Attached Devices menu into the MAC Address box of this menu. To do this, configure each wireless computer to obtain a wireless link to the router.
  • Page 56: Choosing Wep Authentication And Security Encryption Methods

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Choosing WEP Authentication and Security Encryption Methods Figure 4-5. Security Encryption section Restricting wireless access prevents intruders from connecting to your network. However, the wireless data transmissions are still vulnerable to snooping. Using the WEP data encryption settings described below will prevent a determined intruder from eavesdropping on your wireless data communications.
  • Page 57: Encryption Choices

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Set your wireless adapter according to the authentication scheme you choose for the DG834G wireless router. Please refer to “Authentication and WEP Data Encryption” on page D-2 for a full explanation of each of these options, as defined by the IEEE 802.11g wireless communication standard.
  • Page 58 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Click the Wireless Settings link in the main menu of the DG834G router. Go to the Security Encryption portion of the page: Figure 4-6. Wireless WEP menu Select the Authentication Type. Select the Encryption setting.
  • Page 59: How To Configure Wpa-Psk

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: When configuring the router from a wireless computer, if you configure WEP settings, you will lose your wireless connection when you click Apply. You must then either configure your wireless adapter to match the router WEP settings or access the router from a wired computer to make any further changes.
  • Page 60 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 4-16 Wireless Configuration...
  • Page 61: Protecting Your Network

    Note: The user name and password are not the same as any user name or password your may use to log in to your Internet connection. NETGEAR recommends that you change this password to a more secure password. The ideal password should contain no dictionary words from any language, and should be a mixture of both upper and lower case letters, numbers, and symbols.
  • Page 62: Changing The Administrator Login Timeout

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G From the Main Menu of the browser interface, under the Maintenance heading, select Set Password to bring up the menu shown in Figure 5-2. Figure 5-2: Set Password menu To change the password, first enter the old password, and then enter the new password twice.
  • Page 63: Blocking Keywords, Sites, And Services

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Blocking Keywords, Sites, and Services The router provides a variety of options for blocking Internet based content and communications services. With its content filtering feature, the DG834G wireless router prevents objectionable content from reaching your computers.
  • Page 64 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Select the Block Sites link of the Security menu. Figure 5-3: Block Sites menu To enable keyword blocking, select one of the following: • Per Schedule to turn on keyword blocking according to the settings on the Schedule page. •...
  • Page 65: Firewall Rules

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Click Apply to save your settings. Firewall Rules Firewall rules are used to block or allow specific traffic passing through from one side to the other. Inbound rules (WAN to LAN) restrict access by outsiders to private resources, selectively allowing only specific outside users to access specific resources.
  • Page 66: Inbound Rules (Port Forwarding)

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • To edit an existing rule, select its button on the left side of the table and click Edit. • To delete an existing rule, select its button on the left side of the table and click Delete. •...
  • Page 67 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G A Local Public Web Server Figure 5-5: Rule example: The parameters are: • Service From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices.
  • Page 68: Inbound Rule Example: Allowing Videoconferencing

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • You can select whether the traffic will be logged. The choices are: • Never — no log entries will be made for this service. • Always — any traffic for this service type will be logged. •...
  • Page 69: Outbound Rules (Service Blocking)

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Local computers must access the local server using the computer’s local LAN address (192.168.0.11 in the example in Figure 5-6 above). Attempts by local computers to access the server using the external WAN IP address will fail.
  • Page 70 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The parameters are: • Service From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices. Use the Add Custom Service feature to add any additional services or applications that do not already appear.
  • Page 71: Order Of Precedence For Rules

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Order of Precedence for Rules As you define new rules, they are added to the tables in the Rules menu, as shown in Figure 5-8: Figure 5-8: Rules table with examples For any traffic attempting to pass through the firewall, the packet information is subjected to the rules in the order shown in the Rules Table, beginning at the top and proceeding to the default rules at the bottom.
  • Page 72: How To Define Services

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Although the DG834G already holds a list of many service port numbers, you are not limited to these choices. Use the procedure below to create your own service definitions. How to Define Services Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever Password and LAN address you...
  • Page 73: Setting Times And Scheduling Firewall Services

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Click Apply to save your changes. Setting Times and Scheduling Firewall Services The DG834G wireless router uses the Network Time Protocol (NTP) to obtain the current time and date from one of several Network Time Servers on the Internet. How to Set Your Time Zone In order to localize the time for your log entries, you must specify your Time Zone: Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name...
  • Page 74 Enabling Daylight Savings Time will cause one hour to be added to the standard time. The router has a list of NETGEAR NTP servers. If you prefer to use a particular NTP server as the primary server, enter its IP address under Use this NTP Server.
  • Page 75: How To Schedule Firewall Services

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Schedule Firewall Services If you enabled services blocking in the Block Services menu or Port forwarding in the Ports menu, you can set up a schedule for when blocking occurs or when access is not restricted. Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever Password and LAN address you have chosen for the router.
  • Page 76 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 5-16 Protecting Your Network...
  • Page 77: Managing Your Network

    Chapter 6 Managing Your Network This chapter describes how to perform network management tasks with your DG834G 54 Mbps Wireless ADSL Firewall Router . Backing Up, Restoring, or Erasing Your Settings The configuration settings of the DG834G wireless router are stored in a configuration file in the router.
  • Page 78: How To Restore The Configuration From A File

    NETGEAR. Upgrade files can be downloaded from the NETGEAR Web site. If the upgrade file is compressed (.ZIP file), you must first extract the binary (.BIN or .IMG) file before uploading it to the router.
  • Page 79: How To Upgrade The Router Firmware

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Upgrade the Router Firmware Note: NETGEAR recommends that you back up your configuration before doing a firmware upgrade. After the upgrade is complete, you may need to restore your configuration settings.
  • Page 80: Network Management Information

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Network Management Information The DG834G provides a variety of status and usage information which is discussed below. Viewing Router Status and Usage Statistics From the Main Menu, under Maintenance, select Router Status to view the screen in Figure 6-3.
  • Page 81 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 6-1. Menu 3.2 - Router Status Fields Field Description Account Name The Host Name assigned to the router in the Basic Settings menu. Firmware Version This field displays the router firmware version. ADSL Port These parameters apply to the Internet (ADSL) port of the router.
  • Page 82 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 6-1. Menu 3.2 - Router Status Fields Field Description Wireless Port These parameters apply to the wireless port of the router Name (SSID) Wireless network name or Service Set Identifier Region The region in which the wireless device is operating Channel...
  • Page 83 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table 6-1. Router Statistics Fields Field Description WAN, LAN, or The statistics for the WAN (Internet), LAN (local), and Serial ports. For each port, the Serial Port screen displays: Status The link status of the port.
  • Page 84 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Clicking the Renew button updates the status information. This screen shows the following statistics: Table 6-1. Connection Status Fields for Dynamic IP Field Description IP Address The IP Address assigned to the WAN port by the ADSL Internet Service Provider. Subnet Mask Then Network Mask assigned to the WAN port by the ADSL Internet Service Provider.
  • Page 85: Viewing Attached Devices

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Clicking the Renew button updates the status information. This screen shows the following statistics: Table 6-1. Connection Status Fields for PPPoA Field Description Connection Time The time elapsed since the last connection to the Internet via the ADSL port. Connection Method The method the ADSL port acquired its TCP/IP configuration.
  • Page 86: Viewing, Selecting, And Saving Logged Information

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Viewing, Selecting, and Saving Logged Information The router will log security-related events such as denied incoming service requests, hacker probes, and administrator logins. If you enabled content filtering in the Block Sites menu, the Logs page can show you when someone on your network tries to access a blocked site.
  • Page 87: Selecting What Information To Log

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Log entries are described in Table 6-1 below: Table 6-1. Security Log entry descriptions Field Description Date and Time The date and time the log entry was recorded. Description or Action The type of event and what action was taken if any.
  • Page 88: Saving Log Files On A Server

    Following are examples of log messages. In all cases, the log entry shows the timestamp as: Day, Year-Month-Date Hour:Minute:Second Activation and Administration Tue, 2002-05-21 18:48:39 - NETGEAR activated [This entry indicates a power-up or reboot with initial time entry.] Tue, 2002-05-21 18:55:00 - Administrator login successful - IP:192.168.0.2 Thu, 2002-05-21 18:56:58 - Administrator logout - IP:192.168.0.2...
  • Page 89: Enabling Security Event E-Mail Notification

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Enabling Security Event E-mail Notification In order to receive logs and alerts by e-mail, you must provide your e-mail information in the E-mail section: • Turn e-mail notification on. Select this box if you want to receive e-mail logs and alerts from the router.
  • Page 90: Running Diagnostic Utilities And Rebooting The Router

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Send logs according to this schedule. Specifies how often to send the logs: Hourly, Daily, Weekly, or When Full. – Day for sending log Specifies which day of the week to send the log. Relevant when the log is sent weekly or daily.
  • Page 91: Enabling Remote Management

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G From the Main Menu of the browser interface, under the Maintenance heading, select the Router Diagnostics heading to display the menu shown in Figure 6-9. Figure 6-9: Diagnostics menu Enabling Remote Management Using the Remote Management page, you can allow a user or users on the Internet to configure, upgrade and check the status of your DG834G 54 Mbps Wireless ADSL Firewall Router .
  • Page 92 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Select the Turn Remote Management On check box. Specify what external addresses will be allowed to access the router’s remote management. For security, restrict access to as few external IP addresses as practical. To allow access from any IP address on the Internet, select Everyone.
  • Page 93: Advanced Configuration

    Chapter 7 Advanced Configuration This chapter describes how to configure the advanced features of your DG834G 54 Mbps Wireless ADSL Firewall Router . Configuring Advanced Security The DG834G 54 Mbps Wireless ADSL Firewall Router provides a variety of advanced features, such as: •...
  • Page 94: How To Configure A Default Dmz Server

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Note: For security reasons, you should avoid using the Default DMZ Server feature. When a computer is designated as the Default DMZ Server, it loses much of the protection of the firewall, and is exposed to many exploits from the Internet. If compromised, the computer can be used to attack your network.
  • Page 95: Connect Automatically, As Required

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Connect Automatically, as Required Normally, this option should be Enabled, so that an Internet connection will be made automatically, whenever Internet-bound traffic is detected. If this causes high connection costs, you can disable this setting.
  • Page 96 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G These addresses are part of the Internet Engineering Task Force (IETF)-designated private address range for use in private networks, and should be suitable in most applications. If your network has a requirement to use a different IP addressing scheme, you can make those changes in this menu.
  • Page 97: Dhcp

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • RIP Version This controls the format and the broadcasting method of the RIP packets that the router sends. It recognizes both formats when receiving. By default, this is set for RIP-1. —...
  • Page 98: Reserved Ip Addresses

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • An IP Address from the range you have defined • Subnet Mask • Gateway IP Address is the router’s LAN IP address • Primary DNS Server, if you entered a Primary DNS address in the Basic Settings menu; otherwise, the router’s LAN IP address •...
  • Page 99: How To Configure Lan Tcp/Ip Settings

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G How to Configure LAN TCP/IP Settings Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the router.
  • Page 100: How To Configure Dynamic Dns

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The router contains a client that can connect to a dynamic DNS service provider. To use this feature, you must select a service provider and obtain an account with them. After you have configured your account information in the router, whenever your ISP-assigned IP address changes, your router will automatically contact your dynamic DNS service provider, log in to your account, and register your new IP address.
  • Page 101: Using Static Routes

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If your dynamic DNS provider allows the use of wildcards in resolving your URL, you can select the Use wildcards check box to activate this feature. For example, the wildcard feature will cause *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org Click Apply to save your configuration.
  • Page 102: How To Configure Static Routes

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G In this example: • The Destination IP Address and IP Subnet Mask fields specify that this static route applies to all 134.177.x.x addresses. • The Router IP Address fields specifies that all traffic for these addresses should be forwarded to the ISDN router at 192.168.0.100.
  • Page 103 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Figure 7-5: Static Route Entry and Edit Menu Type a route name for this static route in the Route Name box under the table. This is for identification purpose only. Select Private if you want to limit access to the LAN only.
  • Page 104 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 7-12 Advanced Configuration...
  • Page 105: Troubleshooting

    Chapter 8 Troubleshooting This chapter gives information about troubleshooting your DG834G 54 Mbps Wireless ADSL Firewall Router . After each problem description, instructions are provided to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. •...
  • Page 106: Power Led Not On

    • Check that you are using the 12 V DC power adapter supplied by NETGEAR for this product. If the error persists, you have a hardware problem and should contact technical support.
  • Page 107: Troubleshooting The Web Configuration Interface

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Make sure that power is turned on to the connected hub or workstation. • Be sure you are using the correct cable: — When connecting the router’s WAN ADSL port, use the cable that was supplied with the DG834G.
  • Page 108: Troubleshooting The Isp Connection

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Click the Refresh or Reload button in the Web browser. The changes may have occurred, but the Web browser may be caching the old configuration. Troubleshooting the ISP Connection If your router is unable to access the Internet, you should check the ADSL connection, then the WAN TCP/IP connection.
  • Page 109: Obtaining A Wan Ip Address

    To check the WAN IP address from the browser interface: Launch your browser and select an external site such as www.netgear.com. Access the Main Menu of the router’s configuration at http://192.168.0.1.
  • Page 110: Troubleshooting Pppoe Or Pppoa

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Your ISP only allows one Ethernet MAC address to connect to Internet, and may check for your computer’s MAC address. In this case: Inform your ISP that you have bought a new network device, and ask them to use the router’s MAC address.
  • Page 111: Troubleshooting A Tcp/Ip Network Using The Ping Utility

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G A DNS server is a host on the Internet that translates Internet names (such as www addresses) to numeric IP addresses. Typically your ISP will provide the addresses of one or two DNS servers for your use.
  • Page 112: Testing The Path From Your Computer To A Remote Device

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Wrong physical connections — Make sure the LAN port LED is on. If the LED is off, follow the instructions in “LAN or WAN Port LEDs Not On” page 8-2.
  • Page 113: Restoring The Default Configuration And Password

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Restoring the Default Configuration and Password This section explains how to restore the factory default configuration settings, changing the router’s administration password to password and the IP address to 192.168.0.1. You can erase the current configuration and restore factory defaults in two ways: •...
  • Page 114 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G 8-10 Troubleshooting...
  • Page 115: Technical Specifications

    Appendix A Technical Specifications This appendix provides technical specifications for the DG834G 54 Mbps Wireless ADSL Firewall Router . Network Protocol and Standards Compatibility Data and Routing Protocols: TCP/IP, RIP-1, RIP-2, DHCP, PPP over Ethernet (PPPoE) or PPP over ATM (PPPoA), RFC 1483 Bridged or Routed Ethernet, and RFC 1577 Classical IP over ATM Power Adapter North America:...
  • Page 116 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Interface Specifications LAN: 10BASE-T or 100BASE-Tx, RJ-45 WAN: ADSL, Dual RJ-11, pins 2 and 3 T1.413, G.DMT, G.Lite ITU Annex A or B Technical Specifications...
  • Page 117: Network And Routing Basics

    Appendix B Network and Routing Basics This chapter provides an overview of IP networks, routing, and wireless networking. Related Publications As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet.
  • Page 118: What Is A Router

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G What is a Router? A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables maintained by the router. In these routing tables, a router builds up a logical picture of the overall network by gathering and exchanging information with other routers in the network.
  • Page 119 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The latter version is easier to remember and easier to enter into your computer. In addition, the 32 bits of the address are subdivided into two parts. The first part of the address identifies the network, and the second part identifies the host node or station on the network.
  • Page 120: Netmask

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Class C Class C addresses can have 254 hosts on a network. Class C addresses use 24 bits for the network address and eight bits for the node. They are in this range: 192.0.1.x to 223.255.254.x.
  • Page 121: Subnet Addressing

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G As a shorter alternative to dotted-decimal notation, the netmask may also be expressed in terms of the number of ones from the left. This number is appended to the IP address, following a backward slash (/), as “/n.”...
  • Page 122 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Although the preceding example uses the entire third octet for a subnet address, note that you are not restricted to octet boundaries in subnetting. To create more network numbers, you need only shift some bits from the host address to the network address.
  • Page 123: Private Ip Addresses

    255.255.255.248 255.255.255.252 255.255.255.254 255.255.255.255 NETGEAR strongly recommends that you configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighbors, it uses a destination address of the local network address with all ones for the host address.
  • Page 124: Single Ip Address Operation Using Nat

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines explained here. For more information about address assignment, refer to RFC 1597, Address Allocation for Private Internets, and RFC 1466, Guidelines for Management of IP Address Space.
  • Page 125: Mac Addresses And Address Resolution Protocol

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G This scheme offers the additional benefit of firewall-like protection because the internal LAN addresses are not available to the Internet through the translated connection. All incoming inquiries are filtered out by the router. This filtering can prevent intruders from probing your system.
  • Page 126: Domain Name Server

    Many of the resources on the Internet can be addressed by simple descriptive names such as www.NETGEAR.com. This addressing is very helpful at the application level, but the descriptive name must be translated to an IP address in order for a user to actually contact the resource. Just as...
  • Page 127: What Is A Firewall

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G What is a Firewall? A firewall is a device that protects one network from another, while allowing communication between the two. A firewall incorporates the functions of the NAT router, while adding features for dealing with a hacker intrusion or attack.
  • Page 128: Category 5 Cable Quality

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Table B-1. UTP Ethernet cable wiring, straight-through Wire color Signal Orange/White Transmit (Tx) + Orange Transmit (Tx) - Green/White Receive (Rx) + Blue Blue/White Green Receive (Rx) - Brown/White Brown Category 5 Cable Quality Category 5 distributed cable that meets ANSI/EIA/TIA-568-A building wiring standards can be a...
  • Page 129: Inside Twisted Pair Cables

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Inside Twisted Pair Cables For two devices to communicate, the transmitter of each device must be connected to the receiver of the other device. The crossover function is usually implemented internally as part of the circuitry in the device.
  • Page 130: Uplink Switches, Crossover Cables, And Mdi/Mdix Switching

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Figure B-3: Category 5 UTP Cable with Male RJ-45 Plug at Each End Note: Flat “silver satin” telephone cable may have the same RJ-45 plug. However, using telephone cable results in excessive collisions, causing the attached port to be partitioned or disconnected from the network.
  • Page 131 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G The DG834G wireless router incorporates Auto Uplink technology (also called MDI/MDIX). Each LOCAL Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a normal connection (e.g. connecting to a PC) or an uplink connection (e.g. connecting to a router, switch, or hub).
  • Page 132 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G B-16 Network and Routing Basics...
  • Page 133: Appendix C Preparing Your Network

    Appendix C Preparing Your Network This appendix describes how to prepare your network to connect to the Internet through the DG834G 54 Mbps Wireless ADSL Firewall Router and how to verify the readiness of broadband Internet service from an Internet service provider (ISP). Note: If an ISP technician configured your computer during the installation of a broadband modem, or if you configured it using instructions provided by your ISP, you may need to copy the current configuration information for use in the configuration of...
  • Page 134: Configuring Windows 95, 98, And Me For Tcp/Ip Networking

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subnet mask (netmask), a domain name server (DNS) address, and a default gateway address.
  • Page 135 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G You must have an Ethernet adapter, the TCP/IP protocol, and Client for Microsoft Networks. Note: It is not necessary to remove any other network components shown in the Network window in order to install the adapter, TCP/IP, or Client for Microsoft Networks.
  • Page 136 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G If you need Client for Microsoft Networks: Click the Add button. Select Client, and then click Add. Select Microsoft. Select Client for Microsoft Networks, and then click OK. Restart your PC for the changes to take effect. Enabling DHCP to Automatically Configure TCP/IP Settings in Windows 95B, 98, and Me After the TCP/IP protocol components are installed, each PC must be assigned specific...
  • Page 137 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Verify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to Windows logon Click on the Properties button.
  • Page 138: Selecting Windows' Internet Access Method

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • By default, the IP Address tab is open on this window. • Verify the following: Obtain an IP address automatically is selected. If not selected, click in the radio button to the left of it to select it.
  • Page 139: Configuring Windows Nt4, 2000 Or Xp For Ip Networking

    From the drop-down box, select your Ethernet adapter. The window is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends for connecting through a router or gateway: •...
  • Page 140: Dhcp Configuration Of Tcp/Ip In Windows Xp, 2000, Or Nt4

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4 You will find there are many similarities in the procedures for different Windows systems when using DHCP to configure TCP/IP. The following steps will walk you through the configuration process for each of these versions of Windows.
  • Page 141 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Now you should be at the Local Area Network Connection Status window. This box displays the connection status, duration, speed, and activity statistics. • Administrator logon access rights are needed to use this window.
  • Page 142: Dhcp Configuration Of Tcp/Ip In Windows 2000

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Verify that the Obtain an IP address automatically radio button is selected. • Verify that Obtain DNS server address automatically radio button is selected. • Click the OK button. This completes the DHCP configuration of TCP/ IP in Windows XP.
  • Page 143 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Click on the My Network Places icon on the Windows desktop. This will bring up a window called Network and Dial-up Connections. • Right click on Local Area Connection and select Properties. •...
  • Page 144 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • With Internet Protocol (TCP/IP) selected, click on Properties to open the Internet Protocol (TCP/IP) Properties dialogue box. • Verify that • Obtain an IP address automatically is selected. •...
  • Page 145: Dhcp Configuration Of Tcp/Ip In Windows Nt4

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G DHCP Configuration of TCP/IP in Windows NT4 Once you have installed the network card, you need to configure the TCP/IP environment for Windows NT 4.0. Follow this procedure to configure TCP/IP with DHCP in Windows NT 4.0. •...
  • Page 146 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • Highlight the TCP/IP Protocol in the Network Protocols box, and click on the Properties button. C-14 Preparing Your Network...
  • Page 147: Verifying Tcp/Ip Properties For Windows Xp, 2000, And Nt4

    Type ipconfig /all Your IP Configuration information will be listed, and should match the values below if you are using the default TCP/IP settings that NETGEAR recommends for connecting through a router or gateway: • The IP address is between 192.168.0.2 and 192.168.0.254 •...
  • Page 148: Configuring The Macintosh For Tcp/Ip Networking

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • The default gateway is 192.168.0.1 Type exit Configuring the Macintosh for TCP/IP Networking Beginning with Macintosh Operating System 7, TCP/IP is already installed on the Macintosh. On each networked Macintosh, you will need to configure TCP/IP to use DHCP. MacOS 8.6 or 9.x From the Apple menu, select Control Panels, then TCP/IP.
  • Page 149: Verifying Tcp/Ip Properties For Macintosh Computers

    TCP/IP Control Panel. From the Apple menu, select Control Panels, then TCP/IP. The panel is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends: •...
  • Page 150: Verifying The Readiness Of Your Internet Account

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Verifying the Readiness of Your Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL modem. This modem must be a separate physical box (not a card) and must provide an Ethernet port intended for connection to a Network Interface Card (NIC) in a computer.
  • Page 151: Obtaining Isp Configuration Information For Windows Computers

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G • A gateway IP address, which is the address of the ISP’s router • One or more domain name server (DNS) IP addresses • Host name and domain suffix For example, your account’s full server names may look like this: mail.xxx.yyy.com In this example, the domain suffix is...
  • Page 152: Obtaining Isp Configuration Information For Macintosh Computers

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Select the DNS Configuration tab. If any DNS server addresses are shown, write down the addresses. If any information appears in the Host or Domain information box, write it down. Click Disable DNS. Click OK to save your changes and close the TCP/IP Properties dialog box.
  • Page 153: Restarting The Network

    Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Restarting the Network Once you’ve set up your computers to work with the firewall, you must reset the network for the devices to be able to communicate correctly. Restart any computer that is connected to the firewall. After configuring all of your computers for TCP/IP networking and restarting them, and connecting them to the local network of your DG834G wireless router, you are ready to access and configure the firewall.
  • Page 154 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G C-22 Preparing Your Network...
  • Page 155: Wireless Networking Basics

    Appendix D Wireless Networking Basics This chapter provides an overview of Wireless networking. Wireless Networking Overview The FWG114P Wireless Firewall/Print Server conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11b and 802.11g standards for wireless LANs (WLANs). On an 802.11b or g wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz.
  • Page 156: Ad Hoc Mode (Peer-To-Peer Workgroup

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Ad Hoc Mode (Peer-to-Peer Workgroup) In an ad hoc network, computers are brought together as needed; thus, there is no structure or fixed points to the network - each node can generally communicate with any other node. There is no Access Point involved in this configuration.
  • Page 157: 802.11 Authentication

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P • Shared Key. With Shared Key authentication, only those PCs that possess the correct authentication key can join the network. By default, IEEE 802.11 wireless devices operate in an Open System network. Wired Equivalent Privacy (WEP) data encryption is used when the wireless devices are configured to operate in Shared Key authentication mode.
  • Page 158: Shared Key Authentication

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P The access point authenticates the station. The station associates with the access point and joins the network. This process is illustrated below. Figure D-1: Open system authentication Shared Key Authentication The following steps occur when two devices use Shared Key Authentication: The station sends an authentication request to the access point.
  • Page 159: Overview Of Wep Parameters

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Figure D-2: Shared key authentication Overview of WEP Parameters Before enabling WEP on an 802.11 network, you must first consider what type of encryption you require and the key size you want to use. Typically, there are three WEP Encryption options available for 802.11 products: 1.
  • Page 160: Key Size

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Key Size The IEEE 802.11 standard supports two types of WEP encryption: 40-bit and 128-bit. The 64-bit WEP data encryption method allows for a five-character (40-bit) input. Additionally, 24 factory-set bits are added to the forty-bit input to generate a 64-bit encryption key.
  • Page 161: Wep Configuration Options

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P WEP Configuration Options The WEP settings must match on all 802.11 devices that are within the same wireless network as identified by the SSID. In general, if your mobile clients will roam between access points, then all of the 802.11 access points and all of the 802.11 client adapters on the network must have the same WEP settings.
  • Page 162: Wpa Wireless Security

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Table D-2: 802.11b/g Radio Frequency Channels Channel Center Frequency Frequency Spread 2427 MHz 2414.5 MHz - 2439.5 MHz 2432 MHz 2419.5 MHz - 2444.5 MHz 2437 MHz 2424.5 MHz - 2449.5 MHz 2442 MHz 2429.5 MHz - 2454.5 MHz 2447 MHz...
  • Page 163: How Does Wpa Compare To Wep

    Access products. Starting August of 2003, all new Wi-Fi certified products will have to support WPA. NETGEAR will implement WPA on client and access point products and make this available in the second half of 2003. Existing Wi-Fi certified products will have one year to add WPA support or they will lose their Wi-Fi certification.
  • Page 164: How Does Wpa Compare To Ieee 802.11I

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P How Does WPA Compare to IEEE 802.11i? WPA will be forward compatible with the IEEE 802.11i security specification currently under development. WPA is a subset of the current 802.11i draft and uses certain pieces of the 802.11i draft that are ready to bring to market today, such as 802.1x and TKIP.
  • Page 165 Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P The primary information conveyed in the Beacon frames is the authentication method and the cipher suite. Possible authentication methods include 802.1X and Pre-shared key. Pre-shared key is an authentication method that uses a statically configured pass phrase on both the stations and the access point.
  • Page 166: Wpa Authentication: Enterprise-Level User Authentication Via 802.1X/Eap And Radius

    WPA supports Extensible Authentication Protocol (EAP). For environments without a RADIUS infrastructure, WPA supports the use of a pre-shared key. Together, these technologies provide a framework for strong user authentication. Windows XP implements 802.1x natively, and several NETGEAR switch and wireless access point products support 802.1x. D-12...
  • Page 167 Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Client with a WPA- enabled wireless adapter and supplicant (Win XP, Funk, For example, a For example, a Meetinghouse) WPA-enabled AP RADIUS server Figure D-4: 802.1x Authentication Sequence The AP sends Beacon Frames with WPA information element to the stations in the service set. Information elements include the required authentication method (802.1x or Pre-shared key) and the preferred cipher suite (WEP, TKIP, or AES).
  • Page 168: Wpa Data Encryption Key Management

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P The client sends an EAP-response packet containing the identity to the authentication server. The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point.
  • Page 169 Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Temporal Key Integrity Protocol (TKIP) WPA uses TKIP to provide important data encryption enhancements including a per-packet key mixing function, a message integrity check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism.
  • Page 170: Is Wpa Perfect

    Product Support for WPA Starting in August, 2003, NETGEAR, Inc. wireless Wi-Fi certified products will support the WPA standard. NETGEAR, Inc. wireless products that had their Wi-Fi certification approved before August, 2003 will have one year to add WPA so as to maintain their Wi-Fi certification.
  • Page 171: Changes To Wireless Access Points

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Changes to Wireless Access Points Wireless access points must have their firmware updated to support the following: • The new WPA information element To advertise their support of WPA, wireless APs send the beacon frame with a new 802.11 WPA information element that contains the wireless AP's security configuration (encryption algorithms and wireless security configuration information).
  • Page 172: Changes To Wireless Client Programs

    Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P Microsoft has worked with many wireless vendors to embed the WPA firmware update in the wireless adapter driver. So, to update your Microsoft Windows wireless client, all you have to do is obtain the new WPA-compatible driver and install the driver.
  • Page 173: Glossary

    Glossary 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring. IEEE specification for wireless networking at 11 Mbps using direct-sequence 802.11b spread-spectrum (DSSS) technology and operating in the unlicensed radio spectrum at 2.5GHz.
  • Page 174 Domain names are of the form of a registered entity name plus one of a number of predefined top level suffixes such as .com, .edu, .uk, etc. For example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain.
  • Page 175 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G IP Address A four-byte number uniquely defining each host on the Internet. Ranges of addresses are assigned by Internic, an organization formed for this purpose. Usually written in dotted-decimal notation with periods separating the bytes (for example, 134.177.244.57).
  • Page 176 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Netmask A number that explains which part of an IP address comprises the network address and which part is the host address on that network. It can be expressed in dotted-decimal notation or as a number appended to the IP address.
  • Page 177 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G router A device that forwards data between networks. An IP router forwards data based on IP source and destination addresses. Routing Information A protocol in which routers periodically exchange information with one Protocol another so that they can determine minimum distance paths between sources and destinations.
  • Page 178 Reference Manual for the 54 Mbps Wireless ADSL Firewall Router DG834G Windows Internet WINS. Windows Internet Naming Service is a server process for resolving Naming Service Windows-based computer names to IP addresses. If a remote network contains a WINS server, your Windows PCs can gather information from that WINS server about its local hosts.

This manual is also suitable for:

Dg834g

Table of Contents