NETGEAR CG814WG V2 Скачать руководство пользователя страница 38 | Manualshive

Страница: 38 / 122

background image

Reference Manual for the Wireless Cable Modem Gateway CG814WG v2

5-8

Protecting Your Network

Considerations for Port Forwarding

•

If the IP address of the local server PC is assigned by DHCP, it may change when the PC is
rebooted. To avoid this, you can assign a static IP address to your server outside the range that
is assigned by DHCP, but in the same subnet as the rest of your LAN. By default, the IP
addresses in the range of 192.168.0.2 through 192.168.0.9 are reserved for this.

•

Local PCs must access the local server using the PCs’ local LAN address (192.168.0.XXX, by
default). Attempts by local PCs to access the server using the external WAN IP address will
fail.

Remember that allowing inbound services opens holes in your firewall. Only enable those ports
that are necessary for your network.

The following are two application examples of inbound rules.

.

•

To forward inbound traffic:

1. Select the service you would like to forward from the drop-down list of predefined

services.

Figure 5-6: Port Forwarding menu

Note:

Some residential broadband ISP accounts do not allow you to run any server

processes (such as a Web or FTP server) from your location. Your ISP may periodically
check for servers and may suspend your account if it discovers any active services at
your location. If you are unsure, refer to the Acceptable Use Policy of your ISP.

«
...
36
37
38
39
40
...
»

Содержание CG814WG V2

Страница 1: ...NETGEAR Inc 4500 Great America Parkway Santa Clara CA 95054 USA Phone 1 888 NETGEAR 202 10074 01 January 2005 Reference Manual for the Wireless Cable Modem Gateway CG814WG v2...

Страница 2: ...nstallation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the...

Страница 3: ...to be used in a residential area or an adjacent area thereto and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Mach...

Страница 4: ...iv...

Страница 5: ...Ethernet Connection 2 2 USB Port 2 3 Protocol Support 2 3 Easy Installation and Management 2 3 What s in the Box 2 4 The Gateway s Front Panel 2 4 The Gateway s Rear Panel 2 6 Chapter 3 Connecting th...

Страница 6: ...Day 5 6 Using Port Blocking 5 6 Port Forwarding 5 7 Using Port Triggering 5 9 Setting Up A Default DMZ Host 5 10 Respond to Ping on Internet WAN Port 5 11 Enabling or Disabling Content Filtering Servi...

Страница 7: ...l Specifications A 1 Appendix B Networks Routing and Firewall Basics B 1 Related Publications B 1 Basic Router Concepts B 1 What is a Router B 1 Routing Information Protocol B 2 IP Addresses and the I...

Страница 8: ...Get the Internet Configuration Parameters C 2 Record Your Internet Connection Information C 3 Preparing Your Computers for TCP IP Networking C 4 Configuring Windows 95 98 and Me for TCP IP Networking...

Страница 9: ...work C 20 Appendix D Wireless Networking Basics D 1 Wireless Networking Overview D 1 Infrastructure Mode D 1 Ad Hoc Mode Peer to Peer Workgroup D 2 Network Name Extended Service Set Identification ESS...

Страница 10: ...vi Contents...

Страница 11: ...skills However basic computer network Internet firewall and networking technology tutorial information is provided in the Appendices This guide uses the following typographical conventions This guide...

Страница 12: ...on of the chapter you were viewing Click the print icon in the upper left of the window Tip If your printer supports printing two pages on a single sheet of paper you can save paper and printer ink by...

Страница 13: ...ur network from attacks and intrusions Unlike simple Internet sharing routers that rely on Network Address Translation NAT for security the CG814WG v2 uses Stateful Packet Inspection for Denial of Ser...

Страница 14: ...teway allows you to control access to Internet content by screening for keywords within Web addresses Dual login allows an adult to configure content filtering while still allowing a child to configur...

Страница 15: ...PCs to share an Internet account using only a single IP address which may be statically or dynamically assigned by your Internet service provider ISP This technique known as Network Address Translati...

Страница 16: ...nitoring The gateway s front panel LEDs provide an easy way to monitor its status and activity What s in the Box The product package should contain the following items CG814WG v2 Wireless Cable Modem...

Страница 17: ...he cable interface is still in progress Upload Traffic Blink Off Data is being transmitted to the cable interface The cable interface is idle Download Traffic Blink Off Data is being received from the...

Страница 18: ...way s Rear Panel The rear panel of the CG814WG v2 Figure 2 2 contains the connections identified below Figure 2 2 CG814WG v2 Rear Panel AC power adapter input wireless antenna reset button USB port 4...

Страница 19: ...on for your cable modem account Hardware Requirements The CG814WG v2 Gateway connects to your LAN using either its twisted pair Ethernet USB or 802 11b or 802 11g wireless port To use the CG814WG v2 G...

Страница 20: ...cting the CG814WG v2 Gateway Before using your gateway you need to do the following Connect to your computer using either Ethernet USB or wireless Connect the line from your cable service provider to...

Страница 21: ...rates Auto UplinkTM technology Each LOCAL Ethernet port will automatically sense whether the cable plugged into the port should have a normal connection e g connecting to a PC or an uplink connection...

Страница 22: ...rdware Wizard window Browse to the Resource CD and install the USB driver by clicking through the Windows wizard prompts e Plug in your CG814WG v2 and wait about 30 seconds for the lights to stop blin...

Страница 23: ...ns as shown below Figure 3 4 Login window b For security reasons the gateway has two sets of user names and passwords one for a parent and one for children Only the parent s login can be used to set u...

Страница 24: ...has assigned you a permanent fixed static IP address for your PC select Static IP If you select Static IP enter the IP address that your ISP assigned Also enter the Static IP Mask also known as netmas...

Страница 25: ...Networks Routing and Firewall Basics Implement Appropriate Security Unlike wired network data your wireless data transmissions can extend beyond your walls and can be received by anyone with a compati...

Страница 26: ...lacement of the wireless gateway For best results place your gateway Near the center of the area in which your PCs will operate In an elevated location such as a high shelf Away from potential sources...

Страница 27: ...Configuration 4 3 Configuring Wireless Settings To configure the Wireless interface of your gateway click on the Wireless Settings heading in the Setup section of the browser interface The Wireless S...

Страница 28: ...default is to enable the wireless network Allow Broadcast of Name SSID Use this checkbox to turn on or turn off broadcast of the wireless network Name SSID The default is to broadcast the wireless net...

Страница 29: ...list of Connected Wireless Devices or by manual entering MAC addresses To restrict access based on MAC addresses 1 For your convenience this menu displays a list of currently Connected Wireless Devic...

Страница 30: ...em 64 bit sometimes called 40 bit encryption 128 bit encryption Authentication Type Select the appropriate value Open System or Shared Key Check your wireless card s documentation to see what method t...

Страница 31: ...es below to change the gateway s password and the amount of time for the administrator s login timeout Note The user name and password are not the same as any user name or password your may use to log...

Страница 32: ...e new password Blocking Keywords Sites and Services The gateway provides a variety of options for blocking Internet based content and communications services With its content filtering feature the CG8...

Страница 33: ...ticular Web site For example for the address www NETGEAR com the domain name is NETGEAR com 1 Log in to the gateway at its default LAN address of http 192 168 0 1 with its parent default User Name of...

Страница 34: ...n If the domain badstuff com is specified the URL http www badstuff com xxx html is blocked along with all other urls in the badstuff com site Up to eight entries are supported in the Keyword list 6 T...

Страница 35: ...ice to the MAC Filtering list 1 Enter the MAC address If the desired device is in the Trusted Devices table click the radio button of that PC to capture is MAC address If the desired device is not in...

Страница 36: ...e side to the other Inbound rules WAN to LAN restrict access by outsiders to private resources selectively allowing only specific outside users to access specific resources Instructions for setting up...

Страница 37: ...would like to block and select whether the ports are TCP UDP or Both Click Add To delete an existing rule select its button on the left side of the table and click Delete Port Forwarding Because the...

Страница 38: ...default Attempts by local PCs to access the server using the external WAN IP address will fail Remember that allowing inbound services opens holes in your firewall Only enable those ports that are ne...

Страница 39: ...it is static and has some limitations Ports will be open to traffic from the internet until the port forwarding rule is removed Additionally port forwarding does not work well for some applications wh...

Страница 40: ...ure 5 7 Port Triggering menu with IRC example Setting Up A Default DMZ Host The Default DMZ Server feature is helpful when using some online games and videoconferencing applications that are incompati...

Страница 41: ...e DMZ Host enter 0 and click Apply Respond to Ping on Internet WAN Port If you want the gateway to respond to a ping from the Internet click the Respond to Ping on WAN Port check box This should only...

Страница 42: ...Reference Manual for the Wireless Cable Modem Gateway CG814WG v2 5 12 Protecting Your Network...

Страница 43: ...to perform network management tasks with your CG814WG v2 Wireless Cable Modem Gateway Network Status Information The CG814W provides a variety of status and usage information which is discussed below...

Страница 44: ...ervice Provider Device MAC Address The MAC address of the router side of the gateway This is the equivalent of your PC when connected to a cable modem You can use the MAC Cloning feature to replace th...

Страница 45: ...detailed information about the status of the connection to your cable service provider that can be used for troubleshooting The gateway goes through the following steps to be provisioned 1 Acquire and...

Страница 46: ...of the IETF designated private address range for use in private networks and should be suitable in most applications If your network has a requirement to use a different IP addressing scheme you can...

Страница 47: ...g the Starting IP Address and Ending IP Address These addresses should be part of the same IP address subnet as the gateway s LAN IP address Using the default addressing scheme you should define a ran...

Страница 48: ...to which the logs will be sent Use a full e mail address for example ChrisXY myISP com In the SMTP Server Name box type the outgoing SMTP mail server of your ISP for example mail myISP com You may be...

Страница 49: ...under Maintenance select Set Password Select Yes for Restore Factory Defaults and click Apply 2 The gateway will then reboot automatically After an erase the gateway s password will be password the LA...

Страница 50: ...PC using the Ping command From the main menu of the browser interface under the Maintenance heading select the Diagnostics menu shown below Figure 6 5 Diagnostics menu To perform a Ping test 1 In the...

Страница 51: ...gement Web interface to a custom port by entering that number in the box provided Choose a number between 1024 and 65535 but do not use the number of any common service port The default is 8080 which...

Страница 52: ...Reference Manual for the Wireless Cable Modem Gateway CG814WG v2 6 10 Managing Your NetworkSoftware Version BNX v1 2...

Страница 53: ...ateway but I can t access the Internet Go to Troubleshooting the ISP Connection on page 7 4 I can t remember the gateway s configuration password I want to clear the configuration and start over again...

Страница 54: ...e a hardware problem and should contact technical support Local Link LEDs Not On If the Local Port Link LEDs do not light when the Ethernet connection is made check the following Make sure that the Et...

Страница 55: ...the computer cannot reach a DHCP server These auto generated addresses are in the range of 169 254 x x If your IP address is in this range check the connection from the PC to the gateway and reboot y...

Страница 56: ...ontain a ping utility that sends an echo request packet to the designated device The device then responds with an echo reply Troubleshooting a TCP IP network is made easier by using the ping utility i...

Страница 57: ...s your ISP s DNS server If the path is functioning correctly replies as in the previous section are displayed If you do not receive replies Check that your PC has the IP address of your gateway listed...

Страница 58: ...Reference Manual for the Wireless Cable Modem Gateway CG814WG v2 7 6 TroubleshootingSoftware Version BNX v1 2...

Страница 59: ...c PPTP Power Adapter North America input 120V 60 Hz input All regions output 12 V DC 1 25A output 15W maximum Physical Specifications Dimensions 175 by 114 by 30 mm 6 9 by 4 5 by 1 2 in Weight 0 31 kg...

Страница 60: ...Reference Manual for the Wireless Cable Modem Gateway CG814WG v2 A 2 Technical Specifications...

Страница 61: ...ocal network and the Internet can be very expensive Because of this expense Internet access is usually provided by a slower speed wide area network WAN link such as a cable or DSL modem In order to ma...

Страница 62: ...ernet Protocol IP uses a 32 bit address structure The address is usually written in dot notation also called dotted decimal notation in which each group of eight bits is written in decimal form separa...

Страница 63: ...65 354 hosts on a network A Class B address uses a 16 bit network number and a 16 bit node number Class B addresses are in this range 128 1 x x to 191 254 x x Class C Class C addresses can have 254 ho...

Страница 64: ...C addresses are 255 0 0 0 255 255 0 0 and 255 255 255 0 respectively For example the address 192 168 170 237 is a Class C IP address whose network portion is the upper 24 bits When combined using an A...

Страница 65: ...ng the number of addresses available subnet addressing provides other benefits Subnet addressing allows a network manager to construct an address scheme for the network by using different subnets for...

Страница 66: ...t mask 255 255 255 0 into 16 subnets 4 bits the new subnet mask becomes 255 255 255 240 The following table displays several common netmask values in both the dotted decimal and the mask length format...

Страница 67: ...tically assign private addresses Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines explained here For more information about address assignment...

Страница 68: ...r on your local network to be accessible to outside users MAC Addresses and Address Resolution Protocol An IP address alone cannot be used to deliver data from one LAN device to another To send data b...

Страница 69: ...n the table For more information about address assignment refer to the IETF documents RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space For m...

Страница 70: ...Firewalls When your LAN connects to the Internet through a router an opportunity is created for outsiders to access or disrupt your network A NAT router provides some protection because by the very n...

Страница 71: ...flooding your site with more requests than it can handle A more sophisticated attack may attempt to exploit some weakness in the operating system used by your router or gateway Some operating systems...

Страница 72: ...workgroup and allows workgroup members to exchange data or share printers as supported by Microsoft networking in the various Windows operating systems Some vendors also refer to ad hoc networking as...

Страница 73: ...events must occur before an 802 11b Station can communicate with an Ethernet network through an access point such as the one built in to the CG814WG v2 1 Turn on the wireless station 2 The station li...

Страница 74: ...he station 3 The station uses its configured 64 bit or 128 bit default key to encrypt the challenge text and sends the encrypted text to the access point 4 The access point decrypts the encrypted text...

Страница 75: ...Authentication 2 Use WEP for Encryption A transmitting 802 11b device encrypts the data portion of every packet it sends using a configured WEP Key The receiving 802 11b device decrypts the data using...

Страница 76: ...c hexadecimal characters to ease encryption key entry 128 bit encryption is stronger than 40 bit encryption but 128 bit encryption may not be available outside of the United States due to U S export r...

Страница 77: ...fic and Medical band between 2 4 GHz and 2 5 GHz Neighboring channels are 5 MHz apart However due to spread spectrum effect of the signals a node sending signals using a particular channel will utiliz...

Страница 78: ...do not overlap Ethernet Cabling Although Ethernet networks originally used thick or thin coaxial cable most installations currently use unshielded twisted pair UTP cabling The UTP cable contains eight...

Страница 79: ...the transmit and receive pairs are exchanged at one of the two cable connectors Crossover cables are often unmarked as such and must be identified by comparing the two connectors Since the cable conne...

Страница 80: ...Reference Manual for the Wireless Cable Modem Gateway CG814WG v2 B 20 Networks Routing and Firewall Basics...

Страница 81: ...ided with your router The cable or DSL broadband modem must provide a standard 10 Mbps 10BASE T or 100 Mbps 100BASE Tx Ethernet interface Computer Network Configuration Requirements The router include...

Страница 82: ...her the required Internet connection information Your Internet service provides all the information needed to connect to the Internet If you cannot locate this information you can ask your Internet se...

Страница 83: ...alid IP address Fixed or Static Internet IP Address ______ ______ ______ ______ Gateway IP Address ______ ______ ______ ______ Subnet Mask ______ ______ ______ ______ ISP DNS Server Addresses If you w...

Страница 84: ...or Linux include TCP IP components Follow the instructions provided with your operating system or networking software to install TCP IP on your computer In your IP network each computer and the route...

Страница 85: ...ngs and then click Control Panel 2 Double click the Network icon The Network window opens and displays a list of installed components 3 Make sure that the following components are installed Client for...

Страница 86: ...rks and then click OK 6 Restart your computer for the changes to take effect Enabling DHCP to Automatically Configure TCP IP Settings in Windows 95B 98 and Me After the TCP IP protocol components are...

Страница 87: ...utton If the icon is not on the desktop On the Windows taskbar click the Start button point to Settings and then click Control Panel Locate the Network Neighborhood icon and click on it The Network pa...

Страница 88: ...n of Windows on your network Selecting the Windows Internet Access Method 1 On the Windows taskbar click the Start button point to Settings and then click Control Panel 2 Double click the Internet Opt...

Страница 89: ...y components for IP networking 1 On the Windows taskbar click the Start button then click Control Panel 2 Double click the Network Connections icon 3 If an Ethernet adapter is present in your computer...

Страница 90: ...ation of TCP IP in Windows XP 1 Open the Network Connection Window a Select Control Panel from the Windows XP Start menu b Select the Network Connections icon on the Control Panel The Network Connecti...

Страница 91: ...ort tab page b Select Internet Protocol and click Properties to view the configuration information 4 Set DHCP for TCP IP a Verify that the following two radio buttons are selected Obtain an IP address...

Страница 92: ...HCP for Windows 2000 1 Check the Local Area Connection Properties Settings a Click the My Network Places icon on the Windows desktop The Network and Dial up Connections window opens b Right click on L...

Страница 93: ...rnet Protocol TCP IP Properties dialog box b Verify that the following items are selected Obtain an IP address automatically Obtain DNS server address automatically c Click OK to return to Local Area...

Страница 94: ...ronment for Windows NT 4 0 Follow this procedure to configure TCP IP with DHCP in Windows NT 4 0 1 Open the Network panel a Choose Settings from the Start menu b Select Control Panel to display Contro...

Страница 95: ...2000 and NT4 To check your computer s TCP IP configuration 1 On the Windows taskbar click the Start button and then click Run The Run window opens 2 Type cmd and then click OK A command window opens...

Страница 96: ...the Apple menu select Control Panels then TCP IP The TCP IP Control Panel opens 2 From the Connect via box select your Macintosh s Ethernet interface 3 From the Configure box select Using DHCP Server...

Страница 97: ...rnet you need to contract with an Internet service provider ISP for a single user Internet access account using a cable modem or DSL modem This modem must be a separate physical box not a card and mus...

Страница 98: ...m such as WinPOET or EnterNet then your account uses Point to Point Protocol over Ethernet PPPoE When you configure your router you need to enter your login name and password in the router s configura...

Страница 99: ...1 On the Windows taskbar click the Start button point to Settings and then click Control Panel 2 Double click the Network icon The Network window opens and displays a list of installed components 3 Se...

Страница 100: ...n this case close the Control Panel and skip the rest of this section 2 If an IP address and subnet mask are shown write down the information 3 If an IP address appears under Router address write down...

Страница 101: ...omoting interoperability among 802 11 devices The 802 11 standard offers two methods for configuring a wireless network ad hoc and infrastructure Infrastructure Mode With a wireless access point you c...

Страница 102: ...reless network with no access points the Basic Service Set Identification BSSID is used In an infrastructure wireless network that includes an access point the ESSID is used but may still be referred...

Страница 103: ...channels in the United States It is recommended that you start using channel 1 and grow to use channel 6 and 11 when necessary as these three channels do not overlap Table D 1 802 11g Radio Frequency...

Страница 104: ...eral services that govern how two 802 11 devices communicate The following events must occur before an 802 11 Station can communicate with an Ethernet network through an access point such as the one b...

Страница 105: ...e following steps occur when two devices use Open System Authentication 1 The station sends an authentication request to the access point 2 The access point authenticates the station 3 The station ass...

Страница 106: ...e text If the decrypted text matches the original challenge text then the access point and the station share the same WEP key and the access point authenticates the station 5 The station connects to t...

Страница 107: ...ryption 802 11 products typically support up to four WEP keys Each 40 bit WEP Key is expressed as five sets of two hexadecimal digits 0 9 and A F For example 12 34 56 78 90 is a 40 bit WEP key When co...

Страница 108: ...entication and Encryption A transmitting 802 11 device encrypts the data portion of every packet it sends using a configured WEP Key The receiving 802 11 device decrypts the data using the same WEP Ke...

Страница 109: ...2284 With 802 11 WEP all access points and client wireless adapters on a particular wireless LAN must use the same encryption key A major problem with the 802 11 standard is that the keys are cumberso...

Страница 110: ...ity Protocol TKIP Michael message integrity code MIC AES Support Support for a Mixture of WPA and WEP Wireless Clients These features are discussed below WPA addresses most of the known WEP vulnerabil...

Страница 111: ...ns successfully authenticated The supplicant in the station uses the authentication and cipher suite information contained in the information elements to decide which authentication method and cipher...

Страница 112: ...type such as Transport Layer Security EAP TLS or EAP Tunneled Transport Layer Security EAP TTLS defines how the authentication takes place Note For environments with a Remote Authentication Dial In Us...

Страница 113: ...esponses AP to station and Association Requests station to AP also contain WPA information elements 1 Initial 802 1x communications begin with an unauthenticated supplicant i e client device attemptin...

Страница 114: ...P type without needing to upgrade an 802 1x compliant access point As a result you can update the EAP authentication type to such devices as token cards Smart Cards Kerberos one time passwords certifi...

Страница 115: ...pted payload and update the encrypted ICV without being detected by the receiver With WPA a method known as Michael specifies a new algorithm that calculates an 8 byte message integrity code MIC using...

Страница 116: ...ireless Wi Fi certified products will support the WPA standard NETGEAR Inc wireless products that had their Wi Fi certification approved before August 2003 will have one year to add WPA so as to maint...

Страница 117: ...ation element and respond with a specific security configuration The WPA two phase authentication Open system then 802 1x EAP or preshared key TKIP Michael AES optional To upgrade your wireless networ...

Страница 118: ...cs Changes to Wireless Client Programs Wireless client programs must be updated to permit the configuration of WPA authentication and preshared key and the new WPA encryption algorithms TKIP and the o...

Страница 119: ...iptive name for an address or group of addresses on the Internet Domain names are of the form of a registered entity name plus one of a number of predefined top level suffixes such as com edu uk etc F...

Страница 120: ...network devices such as storage and printers Although many technologies exist to implement a LAN Ethernet is the most common for connecting personal computers MAC address Media Access Control address...

Страница 121: ...connection PPTP Point to Point Tunneling Protocol A method for establishing a virtual private network VPN by embedding Microsoft s network protocol into Internet packets PSTN Public Switched Telephon...

Страница 122: ...4 bit or 128 bit Shared Key for data encryption wide area network WAN A long distance link used to extend or connect remotely located local area networks The Internet is a large WAN Wi Fi See 802 11b...

Отзывы:

Нет отзывов

Похожие инструкции для CG814WG V2

Бренд: RTA Страницы: 73

Бренд: Yeastar Technology Страницы: 15

Бренд: Telco Systems Страницы: 30

PRESTIGE 660RU Series

Бренд: ZyXEL Communications Страницы: 14

OFFICE CONNECT CABLE/DSL SECURE GATEWAY...

Бренд: 3Com Страницы: 102

Бренд: Ericsson Страницы: 12

EAC Mini EACIL21

Бренд: Winmate Страницы: 20

Бренд: AMI Страницы: 11

Бренд: Maxis Страницы: 25

Бренд: ERT Страницы: 45

SC10E4IM Series

Бренд: San Telequip Страницы: 65

CG-ARM7/GTI HS/LS

Бренд: EMS Страницы: 22

Бренд: EMS Страницы: 22

Kona Mega Gateway

Бренд: TEKTELIC Communications Страницы: 16

Kona Macro Gateway

Бренд: TEKTELIC Communications Страницы: 32

Бренд: schmalenberger Страницы: 28

Бренд: PR Elecronics Страницы: 24

DC-GW/EO-IP V3.1

Бренд: EnOcean Страницы: 6

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды