background image

Wireless-G Router WGR614v9 Reference Manual

Safeguarding Your Network

2-9

v1.1, May 2008

Configuring WPA-PSK and WPA2-PSK Wireless Security

Wi-Fi Protected Access with Pre-Shared Key (WPA-PSK and WPA2-PSK) data encryption 
provides extremely strong data security, very effectively blocking eavesdropping. Because WPA 
and WPA2 are relatively new standards, older wireless adapters and devices might not support 
them. Check whether newer drivers are available from the manufacturer. Also, you might be able 
to use the Push 'N' Connect feature to configure this type of security if it is supported by your 
wireless clients. See 

“Restricting Wireless Access by MAC Address” on page 2-11

.

WPA–Pre-Shared Key 

does

 perform authentication. WPA-PSK uses TKIP (Temporal Key 

Integrity Protocol) data encryption, and WPA2-PSK uses AES (Advanced Encryption Standard) 
data encryption. Both methods dynamically change the encryption keys making them nearly 
impossible to circumvent.

Mixed mode allows clients using either WPA-PSK (TKIP) or WPA2-PSK (AES). This provides 
the most reliable security, and is easiest to implement, but it might not be compatible with older 
adapters.

To configure WPA-PSK, WPA2-PSK, or WPA-PSK+WPA2-PSK:

1.

Select 

Wireless Settings

 under Setup in the main menu.

2.

Select one of the WPA-PSK or WPA2-PSK options for the security type. The third option 
(WPA-PSK [TKIP] + WP2-PSK [AES]) is the most flexible, since it allows clients using 
either WPA-PSK or WPA2-PSK. 

3.

In the 

Passphrase

 field, enter a word or group of 8–63 printable characters. The passphrase is 

case-sensitive.

Note: 

Not all wireless adapters support WPA. Furthermore, client software is also 

required. Windows XP with Service Pack 2 does include WPA support. 
Nevertheless, the wireless adapter hardware and driver must also support WPA. 
For instructions on configuring wireless computers or PDAs (personal digital 
assistants) for WPA-PSK security, consult the documentation for the product you 
are using.

Summary of Contents for WGR614 - Wireless-G Router Wireless

Page 1: ...202 10308 01 May 2008 NETGEAR Inc 4500 Great America Parkway Santa Clara CA 95054 USA Wireless G Router WGR614v9 Reference Manual...

Page 2: ...EE Standard 802 11 specifications Actual throughput will vary Network conditions and environmental factors including volume of network traffic building materials and construction and network overhead...

Page 3: ...Radiolan overholder de v sentlige krav og vrige relevante krav i direktiv 1999 5 EF Deutsch German Hiermit erkl rt NETGEAR Inc dass sich das Ger t Radiolan in bereinstimmung mit den grundlegenden Anfo...

Page 4: ...gy a Radiolan megfelel a vonatkoz alapvet k vetelm nyeknek s az 1999 5 EC ir nyelv egy b el r sainak Polski Polish Niniejszym NETGEAR Inc o wiadcza e Radiolan jest zgodny z zasadniczymi wymogami oraz...

Page 5: ...tegory information equipment to be used in a residential area or an adjacent area thereto and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipme...

Page 6: ...v1 1 May 2008 vi...

Page 7: ...osing Appropriate Wireless Security 2 1 Recording Basic Wireless Settings Setup Information 2 4 Changing Wireless Security Settings 2 5 Viewing Basic Wireless Settings 2 5 Configuring WEP Wireless Sec...

Page 8: ...6 Responding to a Ping on the Internet WAN Port 4 7 Setting the MTU Size 4 7 Configuring NAT Filtering 4 8 Configuring Static Routes 4 8 Wireless Repeating Also Called WDS 4 10 Wireless Repeating Func...

Page 9: ...ing Automatically to New Router Software 6 9 Upgrading Manually to New Router Software 6 10 Enabling Remote Management Access 6 11 Chapter 7 Troubleshooting Troubleshooting Quick Tips 7 1 Troubleshoot...

Page 10: ...Wireless G Router WGR614v9 Reference Manual x Contents v1 1 May 2008...

Page 11: ...ns This manual uses the following typographical conventions Formats This manual uses the following formats to highlight special messages Italic Emphasis books CDs Bold User input GUI screen text Fixed...

Page 12: ...button to access the full NETGEAR Inc online knowledge base for the product model Links to PDF versions of the full manual and individual chapters How to Print This Manual To print this manual you can...

Page 13: ...anual The PDF version of the complete manual opens in a browser window Click the print icon in the upper left of your browser window Revision History NETGEAR Inc is constantly searching for ways to im...

Page 14: ...Wireless G Router WGR614v9 Reference Manual xiv About This Manual v1 1 May 2008...

Page 15: ...on Using the Smart Setup Wizard You can manually configure your Internet connection using the Basic Settings screen or you can allow the Smart Setup Wizard to determine your Internet Service Provider...

Page 16: ...initial configuration using the Setup Manual you can use the information in this User Manual to configure additional features of your wireless router For installation instructions in a language other...

Page 17: ...e Router Software on page 6 7 for details If no new firmware is available the no new firmware available message displays 3 In the main menu on the left select Basic Settings under Setup The Basic Sett...

Page 18: ...er Web Support in the main menu to view support information or the documentation for the wireless router If you do not click Logout the wireless router will wait for 5 minutes after no activity before...

Page 19: ...he Basic Settings screen from the main menu of the router s Web Configuration Interface under Setup select Basic Settings The content you see in the Basic Settings screen depends on whether your ISP r...

Page 20: ...e Server DNS Address If you know that your ISP does not automatically transmit DNS addresses to the router during login select Use These DNS Servers and enter the IP address of your ISP s primary DNS...

Page 21: ...requires a login After you select Yes the Basic Settings screen displays Internet Service Provider This drop down list contains a few ISPs that need special protocols for connection The list includes...

Page 22: ...the Internet The list includes Always On The router logs in to the Internet immediately after booting and never disconnects Dial on Demand The router logs in only when outgoing traffic is present and...

Page 23: ...ur ISP does not automatically transmit DNS addresses to the router during login select Use These DNS Servers and enter the IP address of your ISP s primary DNS server If a secondary DNS server address...

Page 24: ...Wireless G Router WGR614v9 Reference Manual 1 10 Configuring Basic Connectivity v1 1 May 2008...

Page 25: ...yond your walls Operating an unsecured wireless network creates an opportunity for outsiders to eavesdrop on your network traffic or to enter your network to access your computers and files Indoors co...

Page 26: ...der of increasing effectiveness in Table 2 1 below Other features that affect security are listed in Table 2 2 on page 2 3 For more details on wireless security methods see the online document Wireles...

Page 27: ...Shared Key WPA PSK and WPA2 PSK data encryption provides extremely strong data security very effectively blocking eavesdropping Because WPA and WPA2 are relatively new standards older wireless adapter...

Page 28: ...WEP Encryption Key Size Choose one 64 bit or 128 bit Again the encryption key size must be the same for the wireless adapters and the wireless router Restrict access based on MAC address You can restr...

Page 29: ...hentication is used Passphrase ______________________________ These characters are case sensitive Enter a word or group of printable characters When you use WPA PSK the other devices in the network wi...

Page 30: ...For a wireless device to participate in a particular wireless network it must be configured with the SSID for that network The WGR614v9 default SSID is NETGEAR You can disable this broadcast as descri...

Page 31: ...otebook computer and can cause significant performance degradation with a slow computer Instructions for configuring the security options can be found in Choosing Appropriate Wireless Security on page...

Page 32: ...Generate The passphrase is case sensitive For example NETGEAR is not the same as nETgear The four key fields are automatically populated with key values Manual Enter 10 hexadecimal digits any combina...

Page 33: ...dynamically change the encryption keys making them nearly impossible to circumvent Mixed mode allows clients using either WPA PSK TKIP or WPA2 PSK AES This provides the most reliable security and is e...

Page 34: ...es the wireless settings that you can view and specify in the Advanced Wireless Settings screen which you access under Advanced in the main menu To configure the advanced wireless security settings of...

Page 35: ...of any wireless device attempting a connection and allows only connections to computers identified on the trusted computers list The Wireless Card Access List displays a list of wireless computers tha...

Page 36: ...ess Settings screen click Setup Access List to display the Wireless Card Access List 3 Click Add to add a wireless device to the wireless access control list The Wireless Card Access Setup screen open...

Page 37: ...ct to the Wireless G Router Tip You can copy and paste the MAC addresses from the router s Attached Devices screen into the MAC Address field of this screen To do this configure each wireless computer...

Page 38: ...change the password first enter the old password then enter the new password twice 3 Click Apply Tip Before changing the router password back up your configuration settings with the default password...

Page 39: ...ine whether or not it will be allowed to pass through By default the firewall allows any outbound traffic and prohibits any inbound traffic except for responses to your outbound traffic However you ca...

Page 40: ...bed in Allowing Inbound Connections to Your Network on page 5 1 Allow certain games and applications to function correctly Some games and applications need to allow additional inbound traffic in order...

Page 41: ...Model WGR614v9 provides you with Web content filtering options plus browser activity reporting and instant alerts through e mail Parents and network administrators can establish restricted access pol...

Page 42: ...le or Always To block by schedule be sure to specify a time period in the Schedule screen For information about scheduling see Scheduling Blocking on page 3 5 Block all access to Internet browsing dur...

Page 43: ...ce blocking or port filtering Services are functions performed by server computers at the request of client computers For example Web servers serve Web pages time servers serve time and date informati...

Page 44: ...s configuration you want to block and then enter the IP addresses in the appropriate fields 6 Click Add to enable your Block Services Setup selections Configuring a User Defined Service To define a se...

Page 45: ...computer a range of computers having consecutive IP addresses or all computers on your network Scheduling Blocking The Wireless G Router allows you to specify when blocking is enforced To schedule blo...

Page 46: ...one of several network time servers on the Internet To localize the time for your log entries you must specify your time zone Time Zone Select your local time zone This setting is used for the blockin...

Page 47: ...sted user Select Logs under Content Filtering in the main menu The Logs screen displays Table 3 1 describes the log entries To refresh the log screen click the Refresh button To clear the log entries...

Page 48: ...Wireless G Router WGR614v9 Reference Manual 3 8 Restricting Access From Your Network v1 1 May 2008...

Page 49: ...ynamic DNS Service on page 4 4 Configuring the WAN Setup Options on page 4 6 Configuring Static Routes on page 4 8 Wireless Repeating Also Called WDS on page 4 10 Using the LAN IP Setup Options The LA...

Page 50: ...et Mask The LAN subnet mask of the router Combined with the IP address the IP subnet mask allows a device to know which other addresses are local to it and which must be reached through a gateway or r...

Page 51: ...ettings screen To use another device on your network as the DHCP server or to manually specify the network settings of all of your computers clear the Use Router as DHCP Server check box Otherwise lea...

Page 52: ...ur domain to their IP address and forwards traffic directed at your domain to your frequently changing IP address Your router contains a client that can connect to the Dynamic DNS service provided by...

Page 53: ...box 3 Select the name of your Dynamic DNS service provider 4 Type the host name or domain name that your Dynamic DNS service provider gave you 5 Type the user name for your Dynamic DNS account This i...

Page 54: ...Inspection SPI firewall protects your network and computers against attacks and intrusions A stateful packet firewall carefully inspects incoming traffic packets looking for known exploits such as ma...

Page 55: ...Apply Responding to a Ping on the Internet WAN Port If you want the router to respond to a ping from the Internet select the Respond to Ping on Internet Port check box This should be used only as a d...

Page 56: ...static routes You must configure static routes only for unusual cases such as multiple routers or multiple IP subnets located on your network As an example of when a static route is needed consider t...

Page 57: ...onary security measure in case RIP is activated Select Static Routes under Advanced in the main menu The Static Routes screen displays To add or edit a static route 1 Click Add to expand the Static Ro...

Page 58: ...ction set it to 1 9 Click Apply to have the static route entered into the table Wireless Repeating Also Called WDS The Wireless G Router can be used with a wireless access point AP to build large brid...

Page 59: ...in menu of the browser interface under Advanced click Wireless Repeating Function to display the Wireless Repeating Function screen The wireless router supports two modes of the wireless repeating fun...

Page 60: ...s You must know the MAC address of the remote unit First set up the base station and then set up the repeater To set up the base station 1 Set up both units with exactly the same wireless settings SSI...

Page 61: ...ating Function screen select the Enable Wireless Repeater Mode radio button This IP address must be in the same subnet as the base station but different from the LAN IP of the base station 4 Fill in t...

Page 62: ...Wireless G Router WGR614v9 Reference Manual 4 14 Customizing Your Network Settings v1 1 May 2008...

Page 63: ...14 Changing the MTU Size on page 5 15 Overview of Home and Small Office Networking Technologies on page 5 16 Allowing Inbound Connections to Your Network By default the Wireless G Router blocks any in...

Page 64: ...the following address and port information The source address is your computer s IP address The source port number is 5678 the browser session The destination address is the IP address of www example...

Page 65: ...er session that made the initial request Your router then sends this reply message to your computer which displays the Web page from www example com 6 When you finish your browser session your router...

Page 66: ...igned source port as in the previous example let s say port 33333 as the destination port The IRC server also sends an identify message to your router with destination port 113 6 Upon receiving the in...

Page 67: ...ess of your router The remote computer composes a Web page request message with the following destination information The destination address is the IP address of www example com which is the address...

Page 68: ...ng to Local Servers Using the port forwarding feature you can allow certain types of incoming traffic to reach servers on your local network For example you might make a local Web server FTP server or...

Page 69: ...ddress box enter the last digit of the IP address of your local computer that will provide this service 4 Click Add The service appears in the list in the screen Adding a Custom Service To define a se...

Page 70: ...ending port number of the range in the Ending Port field 6 In the Server IP Address field enter the IP address of your local computer that will provide this service 7 Click Apply The service appears...

Page 71: ...ring Port triggering is a dynamic extension of port forwarding that is useful in these cases More than one local computer needs port forwarding for the same application but not simultaneously An appli...

Page 72: ...lication or user groups or newsgroups To set up port triggering 1 Select Port Forwarding Port Triggering under Advanced in the main menu The Forwarding Port Triggering screen displays 2 Select the Por...

Page 73: ...name 7 In the Service User field select Any the default to allow this service to be used by any computer on the Internet Otherwise select Single address and enter the IP address of one computer to res...

Page 74: ...of the browser interface under Advanced click UPnP The UPnP screen displays 2 The available settings and displays in this screen are Turn UPnP On UPnP can be enabled or disabled for automatic device...

Page 75: ...tly accessing the router and which ports Internal and External that device has opened The UPnP Portmap Table also displays what type of port is open and whether that port is still active for each IP a...

Page 76: ...ell phones no closer than 6 feet Microwave ovens no closer than 10 feet Choose your settings Use a scanning utility to determine what other wireless networks are operating nearby and choose an unused...

Page 77: ...hanging the value might fix one problem but cause another Leave MTU unchanged unless one of these situations occurs You have problems connecting to your ISP or other Internet service and either the te...

Page 78: ...onnections are asymmetrical meaning they have a lower data rate to the Internet upstream than from the Internet downstream Keep in mind that when you connect to another site that also has an asymmetri...

Page 79: ...XE family of products delivers 14 Mbps or 85 Mbps Data transmissions are encrypted for security and you can configure an individual network password to prevent neighbors from connecting The Powerline...

Page 80: ...r due to the availability of inexpensive mass storage Table 5 2 shows the time to transfer 1 gigabyte 1 GB of data using various networking technologies Table 5 2 Theoretical Transfer Time for 1 Gigab...

Page 81: ...apter includes the following sections Viewing Wireless Router Status Information Viewing a List of Attached Devices on page 6 5 Managing the Configuration File in Chapter 6 Upgrading the Router Softwa...

Page 82: ...o use a fixed IP address on the WAN If set to DHCP Client the router is configured to obtain an IP address dynamically from the ISP IP Subnet Mask The IP subnet mask being used by the Internet WAN por...

Page 83: ...illegal to use the wireless features of the router in some parts of the world Channel Identifies the channel of the wireless port being used Click the link to the online document Wireless Networking...

Page 84: ...Connection Status Settings Item Description IP Address The IP address that is assigned to the router Subnet Mask The subnet mask that is assigned to the router Default Gateway The IP address for the d...

Page 85: ...scription System Up Time The time elapsed since the router was last restarted Port The statistics for the WAN Internet and LAN Ethernet ports For each port the screen displays the following Status The...

Page 86: ...ions describe the three available options Backing Up and Restoring the Configuration The Restore and Backup options in the Settings Backup screen let you save and retrieve a file containing your route...

Page 87: ...uration click the Erase button in the Settings Backup screen To restore the factory default configuration settings when you do not know the login password or IP address you must use the restore factor...

Page 88: ...e browser interface under Maintenance select Router Upgrade to display the Router Upgrade screen From this screen you can check for new software versions by clicking the Check button If a new version...

Page 89: ...er to download and install the new software file from NETGEAR When the upload is complete your router automatically restarts The upgrade process typically takes about 1 minute Read the new software re...

Page 90: ...ersion on the NETGEAR website is more recent download the file to your computer 5 Under Maintenance on the main menu select Router Upgrade 6 Click Browse and locate the firmware image that you downloa...

Page 91: ...he main menu of the browser interface under Advanced select Remote Management To configure your router for remote management 1 Select the Turn Remote Management On check box Figure 6 9 Note Be sure to...

Page 92: ...mber for accessing the management interface Normal Web browser access uses the standard HTTP service port 80 For greater security enter a custom port number for the remote management Web interface Cho...

Page 93: ...7 4 Troubleshooting the Internet Connection on page 7 5 Troubleshooting a Network Using the Ping Utility on page 7 7 Problems with Date and Time on page 7 9 Solving Wireless Connection Problems on pag...

Page 94: ...ss by MAC address you must add the wireless computer s MAC address to the router s wireless card access list Make sure that the network settings of the computer are correct Wired and wirelessly connec...

Page 95: ...ter and that the power adapter is properly connected to a functioning power outlet Check that you are using the 12V DC 1A power adapter that NETGEAR supplied for this product If the Power light blinks...

Page 96: ...ght does not come on verify that the wireless feature is turned on according to the instructions in Viewing Advanced Wireless Settings on page 2 10 Troubleshooting the Web Configuration Interface If y...

Page 97: ...access the Internet you should first determine whether the router can obtain an IP address from your Internet Service Provider ISP Unless your ISP provides a static IP address your router must reques...

Page 98: ...t on the Internet that translates Internet names such as www addresses to numeric IP addresses Typically your ISP provides the addresses of one or two DNS servers for your use If you entered a DNS add...

Page 99: ...hould see a message like this one Pinging IP address with 32 bytes of data If the path is working you see this message Reply from IP address bytes 32 time NN ms TTL xxx If the path is not working you...

Page 100: ...your computer s Network Control Panel Verify that the IP address of the router is listed as the default gateway as described in the online document you can access from Preparing Your Network in Append...

Page 101: ...mail screen select the Adjust for Daylight Savings Time check box Solving Wireless Connection Problems The first steps in solving wireless connection problems are these 1 Using your wireless card s s...

Page 102: ...r router too far from your computer or too close Place your computer near the router but at least 6 feet away and see whether the signal strength improves Is your wireless signal obstructed by objects...

Page 103: ...frequency is used It should not be necessary to change the wireless channel unless you notice interference problems with another nearby wireless router or access point Select a channel that is not bei...

Page 104: ...er of your computer to have the same SSID and channel that you specified in the router and disable encryption Check that your computer has a wireless link and can obtain an IP address by DHCP from the...

Page 105: ...r panel of the router Use this method for cases when the administration password or IP address is not known To restore the factory default configuration settings when you do not know the administratio...

Page 106: ...Wireless G Router WGR614v9 Reference Manual 7 14 Troubleshooting v1 1 May 2008...

Page 107: ...20V 60 Hz input United Kingdom Australia 230V 50 Hz input Europe 230V 50 Hz input Japan 100V 50 60 Hz input All regions output 12V DC 1A output 12W maximum Physical Specifications Dimensions 28 x 175...

Page 108: ...imited by the amount of wireless network traffic each node generates Typically 30 70 nodes Operating frequency ranges 2 412 2 462 GHz US 2 412 2 472 GHz Japan 2 412 2 472 GHz Europe ETSI 802 11 securi...

Page 109: ...your wireless router in the Document Link TCP IP Networking Basics http documentation netgear com reference enu tcpip index htm Wireless Networking Basics http documentation netgear com reference enu...

Page 110: ...Wireless G Router WGR614v9 Reference Manual B 2 Related Documents v1 1 May 2008...

Page 111: ...ogout 1 4 automatic software upgrade 6 9 B backing up configuration file 6 6 backing up transfer time 5 18 base station setting up 4 12 basic settings 2 5 basic wireless connectivity 7 10 Big Pond 1 8...

Page 112: ...Server DNS addresses current 6 2 entering 1 6 1 9 troubleshooting 7 6 Dynamic DNS 4 4 dynamic IP addresses 1 6 DynDNS org 4 4 E electromagnetic emissions specifications A 1 encryption 2 1 encryption k...

Page 113: ...7 local servers port forwarding to 5 6 logging in 1 2 login required 1 7 logout automatic 1 4 logs time stamping entries 3 6 viewing 3 7 M MAC addresses attached devices 6 6 current 6 2 entering 1 6...

Page 114: ...6 4 repeater units 4 13 requirements speed 5 17 reserved IP adresses 4 3 Resource CD 1 2 restarting network 7 1 restoring configuration 6 6 default factory settings 7 13 restricting access by MAC addr...

Page 115: ...iewing advanced wireless settings 2 10 attached devices 6 5 basic security settings 2 5 logs 3 7 status 6 1 W WAN IP address troubleshooting 7 5 WAN setup 4 6 Web Configuration Interface troubleshooti...

Page 116: ...Wireless G Router WGR614v9 Reference Manual Index 6 v1 1 May 2008...

Reviews: