Reference Manual for the Mobile Broadband Router MBR814X NETGEAR, Inc.
© 2005 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice.
Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung. Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Regulatory Approvals FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Contents Chapter 1 About This Manual Audience, Scope, Conventions, and Formats ................................................................1-1 How to Use This Manual ................................................................................................1-2 How to Print this Manual .................................................................................................1-2 Chapter 2 Introduction About the Router ...........................................................................
Then, connect to the Internet. ..................................................................................3-6 Testing Your Internet Connection ....................................................................................3-7 Manually Configuring Your Internet Connection .............................................................3-7 Chapter 4 Wireless Configuration Considerations for a Wireless Network ..........................................................................
Services ........................................................................................................................5-12 How to Define Services ..........................................................................................5-12 Setting Times and Scheduling Firewall Services ..........................................................5-13 How to Set Your Time Zone ...................................................................................5-13 How to Schedule Firewall Services ..
Configuring LAN IP Settings ...........................................................................................7-3 DHCP .......................................................................................................................7-5 Use Router as DHCP server .............................................................................7-5 Reserved IP addresses .....................................................................................7-6 How to Configure LAN TCP/IP Settings ......
What is a Router? ................................................................................................... B-1 Routing Information Protocol ................................................................................... B-2 IP Addresses and the Internet ................................................................................. B-2 Netmask .................................................................................................................. B-4 Subnet Addressing ............
MacOS 8.6 or 9.x .................................................................................................. C-16 MacOS X ............................................................................................................... C-16 Verifying TCP/IP Properties for Macintosh Computers ......................................... C-17 Verifying the Readiness of Your Internet Account ....................................................... C-18 Are Login Protocols Used? ...............................
Appendix E Virtual Private Networking What is a VPN? ............................................................................................................. E-1 What Is IPSec and How Does It Work? ......................................................................... E-2 IPSec Security Features ......................................................................................... E-2 IPSec Components ................................................................................................
Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC at the Telecommuter’s Home Office .................................................................................F-16 Monitoring the VPN Tunnel (Telecommuter Example) ..................................................F-25 Viewing the PC Client’s Connection Monitor and Log Viewer ................................F-25 Viewing the VPN Router’s VPN Status and Log Information .................................
Chapter 1 About This Manual This chapter describes the intended audience, scope, conventions, and formats of this manual. Audience, Scope, Conventions, and Formats This reference manual assumes that the reader has basic to intermediate computer and Internet skills. However, basic computer network, Internet, firewall, and VPN technologies tutorial information is provided in the Appendices and on the Netgear website. This guide uses the following typographical conventions: Table 1-1.
Reference Manual for the Mobile Broadband Router MBR814 How to Use This Manual The HTML version of this manual includes the following: • Buttons, at a time and , for browsing forwards or backwards through the manual one page • A button that displays the table of contents and an button. Double-click on a link in the table of contents or index to navigate directly to where the topic is described in the manual. • A product model. • Links to PDF versions of the full manual and individual chapters.
Reference Manual for the Mobile Broadband Router MBR814 • Printing the Full Manual. Use the Complete PDF Manual link at the top left of any page. – – Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window. Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature.
Reference Manual for the Mobile Broadband Router MBR814 1-4 202-10005-05, June 2005 About This Manual
Chapter 2 Introduction This chapter describes the features of the NETGEAR 54 Mbps Mobile Broadband Router MBR814. The MBR814 router is a combination of a wireless broadband modem, router, 4-port switch, and firewall which enables your entire network to safely share an Internet connection. Note: If you are unfamiliar with networking and routing, refer to Appendix B, “Network and Routing Basics” to become more familiar with the terms and procedures used in this manual.
Reference Manual for the Broadband Mobile Router MBR814 • Easy, Web-based setup for installation and management. • Extensive Internet protocol support. • A card slot with PC card for wireless broadband access. These features are discussed below. 802.11 Standards-based Wireless Networking The MBR814 router includes an 802.11 g-compliant wireless access point, providing continuous, high-speed 10/100 Mbps access between your wireless and Ethernet devices. The access point provides: • 802.
Reference Manual for the Broadband Mobile Router MBR814 Content Filtering With its content filtering feature, the MBR814 prevents objectionable content from reaching your computers. The router allows you to control access to Internet content by screening for keywords within Web addresses. You can configure the router to log and report attempts to access objectionable Internet sites.
Reference Manual for the Broadband Mobile Router MBR814 • Classical IP (RFC 1577) Some Internet service providers, in Europe for example, use Classical IP in their ADSL services. In such cases, the router is able to use the Classical IP address from the ISP. • Dynamic DNS Dynamic DNS services allow remote users to find your network using a domain name when your IP address is not permanently assigned.
Reference Manual for the Broadband Mobile Router MBR814 What’s in the Box? The product package should contain the following items: • • • • 54 Mbps Mobile Broadband Router MBR814 AC power adapter (varies by region) Category 5 (Cat 5) Ethernet cable Resource CD, including: — This guide — Application Notes • • A Printed Quick Installation Guide Warranty and Support Information Cards If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer.
Reference Manual for the Broadband Mobile Router MBR814 Table 2-1. LED Descriptions LED Activity Description Power On Off Power is supplied to the router. Power is not supplied to the router. Test On Off The system is initializing. The system is ready and running. Wireless On Off Indicates that the Wireless port is initialized. The Wireless Access Point is turned off. Internet On — Green Blink — Green The Internet port has detected a link with an attached device.
Reference Manual for the Broadband Mobile Router MBR814 • Wireless antenna • AC power adapter outlet • Four Local Ethernet RJ-45 ports for connecting the router to the local computers • Factory Default Reset push button • Slot with wireless broadband PC Card Introduction 202-10005-05, June 2005 2-7
Reference Manual for the Broadband Mobile Router MBR814 2-8 202-10005-05, June 2005 Introduction
Chapter 3 Connecting the Router to the Internet This chapter describes how to set up the router on your Local Area Network (LAN) and connect to the Internet. It describes how to configure your Mobile Broadband Router MBR814 for Internet access. Minimum Requirements The MBR814 is designed for easy installation. Make sure that these minimum requirements are met. • You must have an account for wireless broadband service, and you must be located in an area with wireless broadband coverage.
Reference Manual for the Broadband Mobile Router MBR814 Note: Please refer to Appendix C, “Preparing Your Network” for assistance with DHCP configuration.
Reference Manual for the Broadband Mobile Router MBR814 Record Your Internet Connection Information Print this page. Fill in the configuration parameters from your Internet Service Provider (ISP). ISP Multiplexing Method and Virtual Circuit Number: The default settings of your Mobile Broadband Router MBR814 will work fine for most ISPs. ISP Login Name: The login name and password are case sensitive and must be entered exactly as given by your ISP. Some ISPs use your full e-mail address as the login name.
Reference Manual for the Broadband Mobile Router MBR814 Connecting the MBR814 to Your LAN This section provides instructions for connecting the MBR814 router. Note: The Resource CD included with your router contains an animated Installation Assistant to help you through this procedure. There are three steps to connecting your router: 1. Install the router. 2. Log in to the router. 3. Connect to the Internet. Note: Follow the steps below to connect your router to your network.
Reference Manual for the Broadband Mobile Router MBR814 4. Plug in the power adapter to your router. Verify the following: • The power light is lit after applying power to the router. • The Status light comes on briefly and then goes off. Note: If applicable, the status light on the broadband card shows that it is active. Please refer to the broadband card user manual for details. Next, log in to the router. Note: Your computer needs to be configured for DHCP.
Reference Manual for the Broadband Mobile Router MBR814 Figure 3-3: Basic Settings menu Then, connect to the Internet. 1. Check the Router Status page to make sure that wireless broadband coverage is available. 2. Verify connectivity to the Internet by opening a browser or verify access to network resources such as files and printers. 3. Make any needed configuration changes to fit your wireless local area network (WLAN) such as setting up wireless security.
Reference Manual for the Broadband Mobile Router MBR814 Testing Your Internet Connection After completing the Internet connection configuration, your can test your Internet connection. Log in to the router, then, from the Basic Settings link in the Setup menu, click the Test button. If the NETGEAR Web site does not appear within one minute, refer to Chapter 8, “Troubleshooting”. Your router is now configured to provide Internet access for your network.
Reference Manual for the Broadband Mobile Router MBR814 2. Specify the Domain Name Server (DNS) Address: • Select “Get Dynamically from ISP” if your ISP uses DHCP to assign your IP address. Your ISP will automatically assign this address. • If you know that your ISP does not automatically transmit DNS addresses to the router during login, select “Use these DNS servers” and enter the IP address of your ISP’s Primary DNS Server. If a Secondary DNS Server address is available, enter it also.
Chapter 4 Wireless Configuration This chapter describes how to configure the wireless features of your 54 Mbps Mobile Broadband Router MBR814. Considerations for a Wireless Network In planning your wireless network, you should consider the level of security required. You should also select the physical placement of your router in order to maximize the network speed. For further information, refer to Appendix D, “Wireless Networking Basics”.
Reference Manual for the Mobile Broadband Router MBR814 The time it takes to establish a wireless connection can vary depending on both your security settings and placement. WEP connections can take slightly longer to establish. Also, WEP encryption can consume more battery power on a notebook computer. Implement Appropriate Wireless Security Note: Indoors, computers can connect over 802.11g wireless networks at a maximum range of up to 300 feet.
Reference Manual for the Mobile Broadband Router MBR814 • WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared Key authentication and WEP data encryption will block all but the most determined eavesdropper. • WPA-PSK. Wi-Fi Protected Access (WPA) data encryption provides data security. The very strong authentication along with dynamic per frame re-keying of WPA make it virtually impossible to compromise.
Reference Manual for the Mobile Broadband Router MBR814 Figure 4-2: Wireless Settings menu The following parameters are in the Wireless Settings menu: • Wireless Network. — Name (SSID). The Service Set ID, also known as the wireless network name. Enter a value of up to 32 alphanumeric characters. The same Name (SSID) must be assigned to all wireless devices in your network. The default SSID is NETGEAR, but NETGEAR strongly recommends that you change your network Name to a different value.
Reference Manual for the Mobile Broadband Router MBR814 Note: This value is case sensitive. For example, Wireless is not the same as wireless. — Region. The region can not be changed by users — Mode. The default is "g & b", which allows both "g" and "b" wireless stations to access this device. “g only” allows only 802.11g wireless stations to be used. “b only” allows 802.11b wireless stations; 802.11g wireless stations can still be used if they can operate in 802.11b mode. • Wireless Access Point.
Reference Manual for the Mobile Broadband Router MBR814 • Security Options Table 4-1. Wireless Security Options Field Description Disable Wireless security is not used. WEP (Wired Equivalent Privacy) You can select the following WEP options: Authentication Type • Open: the MBR814 does not perform any authentication. • Shared: WEP shared key authentication. For a full explanation of WEP shared key, see “Authentication and WEP Data Encryption” on page D-2.
Reference Manual for the Mobile Broadband Router MBR814 Table 4-1. Field Wireless Security Options Description WPA-PSK WPA Pre-Shared-Key uses a pre-shared key to perform the authentication and generate (Wi-Fi Protected the initial data encryption keys. Then, it dynamically varies the encryption key. For a full Access explanation of WPA, see “WPA Wireless Security” on page D-8. Pre-Shared Key) Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client.
Reference Manual for the Mobile Broadband Router MBR814 6. For initial configuration and test, leave the Wireless Card Access List set to allow everyone access by making sure that “Turn Access Control On” is not selected in the Wireless Station Access List. In addition, leave the Encryption Strength set to “Disabled.” 7. Click Apply to save your changes.
Reference Manual for the Mobile Broadband Router MBR814 Figure 4-3: Wireless Access Point settings Restricting Access to Your Network by Turning Off Wireless Connectivity You can completely turn off the wireless portion of the MBR814. For example, if your notebook computer is used to wirelessly connect to your router and you take a business trip, you can turn off the wireless portion of the router while you are traveling.
Reference Manual for the Mobile Broadband Router MBR814 Figure 4-4: Wireless Access menu 3. Select the Turn Access Control On check box to enable restricting wireless computers by their MAC addresses. 4. If the wireless station is currently connected to the network, you can select it from the Available Wireless Stations list. Click Add to add the station to the Trusted Wireless Stations list. 5. If the wireless station is not currently connected, you can enter its address manually.
Reference Manual for the Mobile Broadband Router MBR814 Note: If you are configuring the router from a wireless computer whose MAC address is not in the Trusted Wireless Stations list, and you select Trusted Wireless Stations only, you will lose your wireless connection when you click Apply. You must then access the router from a wired computer to make any further changes. 6. Make sure the Turn Access Control On check box is selected, then click Apply.
Reference Manual for the Mobile Broadband Router MBR814 • • Open System Shared key Note: The authentication scheme is separate from the data encryption. You can choose an authentication scheme which requires a shared key but still leave the data transmissions unencrypted. If you require strong security, use both the Shared Key and WEP encryption settings. Set your wireless adapter according to the authentication scheme you choose for the MBR814 router.
Reference Manual for the Mobile Broadband Router MBR814 How to Configure WEP To configure WEP data encryption, follow these steps: 1. Log in to the MBR814 firewall at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever LAN address and password you have set up. 2. Click the Wireless Settings link in the main menu of the MBR814 router. 3. Go to the Security Encryption portion of the page: Figure 4-6. Wireless WEP menu 4.
Reference Manual for the Mobile Broadband Router MBR814 8. Click Apply to save your settings. Note: When configuring the router from a wireless computer, if you configure WEP settings, you will lose your wireless connection when you click Apply. You must then either configure your wireless adapter to match the router WEP settings or access the router from a wired computer to make any further changes. How to Configure WPA-PSK Note: Not all wireless adapters support WPA.
Chapter 5 Protecting Your Network This chapter describes how to use the basic firewall features of the 54Mbps Mobile Broadband Router MBR814 to protect your network. Protecting Access to Your 54Mbps Mobile Broadband Router MBR814 For security reasons, the router has its own user name and password. Also, after a period of inactivity for a set length of time, the administrator login will automatically disconnect. When prompted, enter admin for the router User Name and password for the router Password.
Reference Manual for the Broadband Mobile Router MBR814 Figure 5-2: Set Password menu 3. To change the password, first enter the old password, and then enter the new password twice. 4. Click Apply to save your changes. Note: After changing the password, you will be required to log in again to continue the configuration. If you have backed up the router settings previously, you should do a new backup so that the saved settings file includes the new password.
Reference Manual for the Broadband Mobile Router MBR814 Blocking Keywords, Sites, and Services The router provides a variety of options for blocking Internet based content and communications services. With its content filtering feature, the MBR814 router prevents objectionable content from reaching your PCs. The router allows you to control access to Internet content by screening for keywords within Web addresses. Key content filtering options include: • Keyword blocking of HTTP traffic.
Reference Manual for the Broadband Mobile Router MBR814 Figure 5-3: Block Sites menu 3. To enable keyword blocking, select one of the following: • Per Schedule—to turn on keyword blocking according to the settings on the Schedule page. • Always—to turn on keyword blocking all of the time, independent of the Schedule page. 4. Enter a keyword or domain in the Keyword box, click Add Keyword, then click Apply.
Reference Manual for the Broadband Mobile Router MBR814 You can specify one trusted user, which is a computer that will be exempt from blocking and logging. Since the trusted user will be identified by an IP address, you should configure that computer with a fixed IP address. 7. Click Apply to save your settings. Firewall Rules Firewall rules are used to block or allow specific traffic passing through from one side of the router to the other.
Reference Manual for the Broadband Mobile Router MBR814 Figure 5-4: Rules menu • • • To edit an existing rule, select its button on the left side of the table and click Edit. To delete an existing rule, select its button on the left side of the table and click Delete. To move an existing rule to a different position in the table, select its button on the left side of the table and click Move. At the script prompt, enter the number of the desired new position and click OK.
Reference Manual for the Broadband Mobile Router MBR814 Inbound Rule Example: A Local Public Web Server If you host a public Web server on your local network, you can define a rule to allow inbound Web (HTTP) requests from any outside IP address to the IP address of your Web server at any time of day. This rule is shown in Figure 5-5: Figure 5-5: Rule example: A Local Public Web Server The parameters are: • Service From this list, select the application or service to be allowed or blocked.
Reference Manual for the Broadband Mobile Router MBR814 • – Any — all IP addresses are covered by this rule. – Address range — if this option is selected, you must enter the Start and Finish fields. – Single address — enter the required address in the Start field. Log You can select whether the traffic will be logged. The choices are: – Never — no log entries will be made for this service. – Always — any traffic for this service type will be logged.
Reference Manual for the Broadband Mobile Router MBR814 Considerations for Inbound Rules • If your external IP address is assigned dynamically by your ISP, the IP address may change periodically as the DHCP lease expires. Consider using the Dynamic DNS feature in the Advanced menu so that external users can always find your network. • If the IP address of the local server computer is assigned by DHCP, it may change when the computer is rebooted.
Reference Manual for the Broadband Mobile Router MBR814 Figure 5-7: Rule example: Blocking Instant Messenger The parameters are: • Service From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices. Use the Add Custom Service feature to add any additional services or applications that do not already appear. • Action Choose how you want this type of traffic to be handled.
Reference Manual for the Broadband Mobile Router MBR814 • • WAN Users These settings determine which packets are covered by the rule, based on their destination WAN IP address. Select the desired option: – Any — all IP addresses are covered by this rule. – Address range —if this option is selected, you must enter the Start and Finish fields. – Single address — enter the required address in the Start field. Log You can select whether the traffic will be logged.
Reference Manual for the Broadband Mobile Router MBR814 For any traffic attempting to pass through the firewall, the packet information is subjected to the rules in the order shown in the Rules Table, beginning at the top and proceeding to the default rules at the bottom. In some cases, the order of precedence of two or more rules may be important in determining the disposition of a packet. The Move button allows you to relocate a defined rule to a new position in the table.
Reference Manual for the Broadband Mobile Router MBR814 • To edit an existing Service, select its button on the left side of the table and click Edit Service. • To delete an existing Service, select its button on the left side of the table and click Delete Service. 3. Use the page shown below to define or edit a service. Figure 5-10: Add Services menu 4. Click Apply to save your changes.
Reference Manual for the Broadband Mobile Router MBR814 Figure 5-11: Schedule Services menu 3. Select your Time Zone. This setting will be used for the blocking schedule according to your local time zone and for time-stamping log entries. Select the Adjust for daylight savings time check box if your time zone is currently in daylight savings time. 4. The router has a list of NETGEAR NTP servers.
Reference Manual for the Broadband Mobile Router MBR814 2. Select the Schedule link of the Security menu to display menu shown above in the Schedule Services menu. 3. To block Internet services based on a schedule, select Every Day or select one or more days. If you want to limit access completely for the selected days, select All Day. Otherwise, to limit access during certain times for the selected days, enter Start Blocking and End Blocking times. Note: Enter the values in 24-hour time format.
Reference Manual for the Broadband Mobile Router MBR814 5-16 202-10005-05, June 2005 Protecting Your Network
Chapter 6 Managing Your Network This chapter describes how to perform network management tasks with your 54Mbps Mobile Broadband Router MBR814. Backing Up, Restoring, or Erasing Your Settings The configuration settings of the MBR814 router are stored in a configuration file in the router. This file can be backed up to your computer, restored, or reverted to factory default settings. The procedures below explain how to do these tasks. How to Back Up the Configuration to a File 1.
Reference Manual for the Broadband Mobile Router MBR814 4. Store the .cfg file on a computer on your network. How to Restore the Configuration from a File 1. Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the router. 2. From the Maintenance heading of the Main Menu, select the Settings Backup menu as seen in Figure 6-1. 3.
Reference Manual for the Broadband Mobile Router MBR814 How to Upgrade the Router Firmware Note: NETGEAR recommends that you back up your configuration before doing a firmware upgrade. After the upgrade is complete, you may need to restore your configuration settings. 1. Download and unzip the new software file from NETGEAR. The Web browser used to upload new firmware into the router must support HTTP uploads. NETGEAR recommends using Microsoft Internet Explorer 5.0 or above, or Netscape Navigator 4.
Reference Manual for the Broadband Mobile Router MBR814 Viewing Router Status and Usage Statistics From the Main Menu, under Maintenance, select Router Status to view the screen in Figure 6-3. Figure 6-3: Router Status screen The Router Status menu provides status and usage information.
Reference Manual for the Broadband Mobile Router MBR814 Table 6-1. Menu 3.2 - Router Status Fields Field Description Account Name The Host Name assigned to the router in the Basic Settings menu. Firmware Version This field displays the router firmware version. ADSL Port These parameters apply to the Internet (ADSL) port of the router. MAC Address This field displays the Ethernet MAC address being used by the Internet (ADSL) port of the router.
Reference Manual for the Broadband Mobile Router MBR814 Figure 6-4: Router Statistics screen This screen shows the following statistics:. Table 6-1. Router Statistics Fields Field Description WAN, LAN, or Serial Port The statistics for the WAN (Internet), LAN (local), and Serial ports. For each port, the screen displays: Status The link status of the port. TxPkts The number of packets transmitted on this port since reset or manual clear.
Reference Manual for the Broadband Mobile Router MBR814 Figure 6-5: Connection Status screen for Dynamic IP Clicking the Renew button updates the status information. This screen shows the following statistics: Table 6-1. Connection Status Fields for Dynamic IP Field Description IP Address The IP Address assigned to the WAN port by the ADSL Internet Service Provider. Subnet Mask The Network Mask assigned to the WAN port by the ADSL Internet Service Provider.
Reference Manual for the Broadband Mobile Router MBR814 Viewing Attached Devices The Attached Devices menu contains a table of all IP devices that the router has discovered on the local network. From the Main Menu of the browser interface, under the Maintenance heading, select Attached Devices to view the table, shown in Figure 6-6: Figure 6-6: Attached Devices menu For each device, the table shows the IP address, Device Name if available, and the Ethernet MAC address.
Reference Manual for the Broadband Mobile Router MBR814 Figure 6-7: Security Logs menu Log entries are described in Table 6-1 below: Managing Your Network 202-10005-05, June 2005 6-9
Reference Manual for the Broadband Mobile Router MBR814 Table 6-1. Security Log entry descriptions Field Description Date and Time The date and time the log entry was recorded. Description or Action The type of event and what action was taken if any. Source IP The IP address of the initiating device for this log entry.
Reference Manual for the Broadband Mobile Router MBR814 Saving Log Files on a Server You can choose to write the logs to a computer running a syslog program. To activate this feature, select to Broadcast on Lan or enter the IP address of the server where the Syslog file will be written. Examples of Log Messages Following are examples of log messages.
Reference Manual for the Broadband Mobile Router MBR814 Enabling Security Event E-mail Notification In order to receive logs and alerts by e-mail, you must provide your e-mail information in the E-mail subheading: Figure 6-8: E-mail menu • Turn e-mail notification on. Select this check box if you want to receive e-mail logs and alerts from the router. • Send alerts and logs via email. Enter the name or IP address of your ISP’s outgoing (SMTP) mail server (such as mail.myISP.com).
Reference Manual for the Broadband Mobile Router MBR814 If the Weekly, Daily or Hourly option is selected and the log fills up before the specified period, the log is automatically e-mailed to the specified e-mail address. After the log is sent, it is cleared from the router’s memory. If the router cannot e-mail the log file, the log buffer may fill up. In this case, the router overwrites the log and discards its contents.
Reference Manual for the Broadband Mobile Router MBR814 Enabling Remote Management Using the Remote Management page, you can allow a user or users on the Internet to configure, upgrade and check the status of your 54Mbps Mobile Broadband Router MBR814. Note: Be sure to change the router's default password to a very secure password. The ideal password should contain no dictionary words from any language, and should be a mixture of letters (both upper and lower case), numbers, and symbols.
Reference Manual for the Broadband Mobile Router MBR814 When accessing your router from the Internet, you will type your router's WAN IP address in your browser's Address (in IE) or Location (in Netscape) box, followed by a colon (:) and the custom port number. For example, if your external address is 134.177.0.123 and you use port number 8080, enter in your browser: http://134.177.0.123:8080 Note: In this case, the http:// must be included in the address.
Reference Manual for the Broadband Mobile Router MBR814 6-16 202-10005-05, June 2005 Managing Your Network
Chapter 7 Advanced Configuration This chapter describes how to configure the advanced features of your 54Mbps Mobile Broadband Router MBR814.
Reference Manual for the Broadband Mobile Router MBR814 Note: For security reasons, you should avoid using the Default DMZ Server feature. When a computer is designated as the Default DMZ Server, it loses much of the protection of the firewall, and is exposed to many exploits from the Internet. If compromised, the computer can be used to attack your network.
Reference Manual for the Broadband Mobile Router MBR814 Connect Automatically, as Required Normally, this option should be enabled, so that an Internet connection will be made automatically, whenever Internet-bound traffic is detected. If this causes high connection costs, you can disable this setting. If disabled, you must connect manually, using the sub-screen accessed from the "Connection Status" button on the Status screen. If you have an "Always on" connection, this setting has no effect.
Reference Manual for the Broadband Mobile Router MBR814 Figure 7-2: LAN IP Setup Menu The LAN TCP/IP Setup parameters are: • IP Address This is the LAN IP address of the router. • IP Subnet Mask This is the LAN Subnet Mask of the router. Combined with the IP address, the IP Subnet Mask allows a device to know which other addresses are local to it, and which must be reached through a gateway or router.
Reference Manual for the Broadband Mobile Router MBR814 — RIP-1 is universally supported. RIP-1 is probably adequate for most networks, unless you have an unusual network setup. — RIP-2 carries more information. Both RIP-2B and RIP-2M send the routing data in RIP-2 format. — RIP-2B uses subnet broadcasting. — RIP-2M uses multicasting. Note: If you change the LAN IP address of the router while connected through the browser, you will be disconnected.
Reference Manual for the Broadband Mobile Router MBR814 • Primary DNS Server, if you entered a Primary DNS address in the Basic Settings menu; otherwise, the router’s LAN IP address • Secondary DNS Server, if you entered a Secondary DNS address in the Basic Settings menu • WINS Server, short for Windows Internet Naming Service Server, determines the IP address associated with a particular Windows computer.
Reference Manual for the Broadband Mobile Router MBR814 2. From the Main Menu, under Advanced, click the LAN IP Setup link to view the menu, shown in Figure 7-3: . Figure 7-3: LAN IP Setup Menu 3. Enter the TCP/IP, DHCP, or Reserved IP parameters. 4. Click Apply to save your changes. Configuring Dynamic DNS If your network has a permanently assigned IP address, you can register a domain name and have that name linked with your IP address by public Domain Name Servers (DNS).
Reference Manual for the Broadband Mobile Router MBR814 How to Configure Dynamic DNS 1. Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the router. 2. From the Main Menu of the browser interface, under Advanced, select Dynamic DNS to display the page below. Figure 7-4: Dynamic DNS menu 3.
Reference Manual for the Broadband Mobile Router MBR814 10. Click Apply to save your configuration. Note: If your ISP assigns a private WAN IP address such as 192.168.x.x or 10.x.x.x, the dynamic DNS service will not work because private addresses will not be routed on the Internet. Using Static Routes Static Routes provide additional routing information to your router.
Reference Manual for the Broadband Mobile Router MBR814 • A Metric value of 1 will work since the ISDN router is on the LAN. This represents the number of routers between your network and the destination. This is a direct connection so it is set to 1. • Private is selected only as a precautionary security measure in case RIP is activated. How to Configure Static Routes 1. Log in to the router at its default LAN address of http://192.168.0.
Reference Manual for the Broadband Mobile Router MBR814 b. Type a route name for this static route in the Route Name box under the table. This is for identification purpose only. c. Select Private if you want to limit access to the LAN only. The static route will not be reported in RIP. d. Select Active to make this route effective. e. Type the Destination IP Address of the final destination. f. Type the IP Subnet Mask for this destination. If the destination is a single host, type 255.255.255.255. g.
Reference Manual for the Broadband Mobile Router MBR814 2. Fill out the UPnP screen: • Turn UPnP On: UPnP can be enabled or disabled for automatic device configuration. The default setting for UPnP is enabled. If disabled, the Router will not allow any device to automatically control the resources, such as port forwarding (mapping), of the Router. • Advertisement Period: The Advertisement Period is how often the Router will advertise (broadcast) its UPnP information.
Chapter 8 Troubleshooting This chapter gives information about troubleshooting your 54Mbps Mobile Broadband Router MBR814. After each problem description, instructions are provided to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the router on? • Have I connected the router correctly? Go to “Basic Functioning” on page 8-1. • I can’t access the router’s configuration with my browser.
Reference Manual for the Broadband Mobile Router MBR814 If a port’s LED is lit, a link has been established to the connected device. If a LAN port is connected to a 100 Mbps device, verify that the port’s LED is green. If the port is 10 Mbps, the LED will be amber. If any of these conditions does not occur, refer to the appropriate following section.
Reference Manual for the Broadband Mobile Router MBR814 Troubleshooting the Web Configuration Interface If you are unable to access the router’s Web Configuration interface from a computer on your local network, check the following: • If you are using an Ethernet-connected computer, check the Ethernet connection between the computer and the router as described in the previous section. • Make sure your computer’s IP address is on the same subnet as the router.
Reference Manual for the Broadband Mobile Router MBR814 Troubleshooting the ISP Connection If your router is unable to access the Internet, you should check the ADSL connection, then the WAN TCP/IP connection. ADSL link If your router is unable to access the Internet, you should first determine whether you have an ADSL link with the service provider. The state of this connection is indicated with the WAN LED.
Reference Manual for the Broadband Mobile Router MBR814 • Your ISP may check for your computer's host name. Assign the computer Host Name of your ISP account to the router in the browser-based Setup Wizard. • You have poor wireless coverage. • Your ISP only allows one Ethernet MAC address to connect to Internet, and may check for your computer’s MAC address. In this case: Inform your ISP that you have bought a new network device, and ask them to use the router’s MAC address.
Reference Manual for the Broadband Mobile Router MBR814 Testing the LAN Path to Your Router You can ping the router from your computer to verify that the LAN path to your router is set up correctly. To ping the router from a PC running Windows 95 or later: 1. From the Windows toolbar, click the Start button and select Run. 2. In the field provided, type Ping followed by the IP address of the router, as in this example: ping 192.168.0.1 3. Click OK.
Reference Manual for the Broadband Mobile Router MBR814 where is the IP address of a remote device such as your ISP’s DNS server. If the path is functioning correctly, replies as in the previous section are displayed. If you do not receive replies: — Check that your PC has the IP address of your router listed as the default router. If the IP configuration of your PC is assigned by DHCP, this information will not be visible in your PC’s Network Control Panel.
Reference Manual for the Broadband Mobile Router MBR814 Problems with Date and Time The E-mail menu in the Content Filtering section displays the current date and time of day. The MBR814 router uses the Network Time Protocol (NTP) to obtain the current time from one of several Network Time Servers on the Internet. Each entry in the log is stamped with the date and time of day.
Appendix A Technical Specifications This appendix provides technical specifications for the 54Mbps Mobile Broadband Router MBR814. Network Protocol and Standards Compatibility Data and Routing Protocols: TCP/IP, RIP-1, RIP-2, DHCP, RFC 1483 Bridged or Routed Ethernet Power Adapter North America: 120V, 60 Hz, input United Kingdom, Australia: 240V, 50 Hz, input Europe: 230V, 50 Hz, input Japan: 100V, 50/60 Hz, input All regions (output): 15 V AC @ 1.0A output, 24W maximum 12V DC @ 1.
Reference Manual for the Broadband Mobile Router MBR814 Electromagnetic Emissions Meets requirements of: FCC Part 15 Class B Interface Specifications LAN: 10BASE-T or 100BASE-Tx, RJ-45 WAN: PC Card Bus A-2 Technical Specifications 202-10005-05, June 2005
Appendix B Network and Routing Basics This chapter provides an overview of IP networks and routing. Related Publications As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet. The RFC documents outline and define the standard protocols and procedures for the Internet.
Reference Manual for the Broadband Mobile Router MBR814 Routing Information Protocol One of the protocols used by a router to build and maintain a picture of the network is the Routing Information Protocol (RIP). Using RIP, routers periodically update one another and check for changes to add to the routing table. The MBR814 router supports both the older RIP-1 and the newer RIP-2 protocols. Among other improvements, RIP-2 supports subnet and multicast protocols.
Reference Manual for the Broadband Mobile Router MBR814 Class A Network Node Class B Network Node Class C Network Node Figure B-1: Three Main Address Classes The five address classes are: • Class A Class A addresses can have up to 16,777,214 hosts on a single network. They use an eight-bit network number and a 24-bit node number. Class A addresses are in this range: 1.x.x.x to 126.x.x.x. • Class B Class B addresses can have up to 65,354 hosts on a network.
Reference Manual for the Broadband Mobile Router MBR814 This addressing structure allows IP addresses to uniquely identify each physical network and each node on each physical network. For each unique value of the network portion of the address, the base address of the range (host address of all zeros) is known as the network address and is not usually assigned to a host.
Reference Manual for the Broadband Mobile Router MBR814 Subnet addressing allows us to split one IP network address into smaller multiple physical networks known as subnetworks. Some of the node numbers are used as a subnet number instead. A Class B address gives us 16 bits of node numbers translating to 64,000 nodes. Most organizations do not use 64,000 nodes, so there are free bits that can be reassigned. Subnet addressing makes use of those bits that are free, as shown below.
Reference Manual for the Broadband Mobile Router MBR814 Table 8-1. Netmask Notation Translation Table for One Octet Number of Bits Dotted-Decimal Value 1 128 2 192 3 224 4 240 5 248 6 252 7 254 8 255 The following table displays several common netmask values in both the dotted-decimal and the masklength formats. Table 8-2. Netmask Formats Dotted-Decimal Masklength 255.0.0.0 /8 255.255.0.0 /16 255.255.255.0 /24 255.255.255.128 /25 255.255.255.192 /26 255.255.255.
Reference Manual for the Broadband Mobile Router MBR814 When a device broadcasts to its segment neighbors, it uses a destination address of the local network address with all ones for the host address. In order for this scheme to work, all devices on the segment must agree on which bits comprise the host address.
Reference Manual for the Broadband Mobile Router MBR814 Private IP addresses assigned by user IP addresses assigned by ISP 192.168.0.2 192.168.0.3 192.168.0.1 172.21.15.105 Internet 192.168.0.4 192.168.0.5 Figure B-3: Single IP Address Operation Using NAT 7786EA This scheme offers the additional benefit of firewall-like protection because the internal LAN addresses are not available to the Internet through the translated connection. All incoming inquiries are filtered out by the router.
Reference Manual for the Broadband Mobile Router MBR814 Related Documents The station with the correct IP address responds with its own MAC address directly to the sending device. The receiving station provides the transmitting station with the required destination MAC address. The IP address data and MAC address data for each station are held in an ARP table. The next time data is sent, the address can be obtained from the address information in the table.
Reference Manual for the Broadband Mobile Router MBR814 The MBR814 router also functions as a DHCP client when connecting to the ISP. The router can automatically obtain an IP address, subnet mask, DNS server addresses, and a gateway address if the ISP provides this information by DHCP. Internet Security and Firewalls When your LAN connects to the Internet through a router, an opportunity is created for outsiders to access or disrupt your network.
Reference Manual for the Broadband Mobile Router MBR814 Denial of Service Attack A hacker may be able to prevent your network from operating or communicating by launching a Denial of Service (DoS) attack. The method used for such an attack can be as simple as merely flooding your site with more requests than it can handle. A more sophisticated attack may attempt to exploit some weakness in the operating system used by your router or gateway.
Reference Manual for the Broadband Mobile Router MBR814 10 ft. (3 m) from the wall outlet to the desktop device The patch panel and other connecting hardware must meet the requirements for 100 Mbps operation (Category 5). Only 0.5 inch (1.5 cm) of untwist in the wire pair is allowed at any termination point.
Reference Manual for the Broadband Mobile Router MBR814 Figure B-5: Crossover Twisted-Pair Cable Figure B-6: Category 5 UTP Cable with Male RJ-45 Plug at Each End Note: Flat “silver satin” telephone cable may have the same RJ-45 plug. However, using telephone cable results in excessive collisions, causing the attached port to be partitioned or disconnected from the network.
Reference Manual for the Broadband Mobile Router MBR814 When connecting a PC to a PC, or a hub port to another hub port, the transmit pair must be exchanged with the receive pair. This exchange is done by one of two mechanisms. Most hubs provide an Uplink switch which will exchange the pairs on one port, allowing that port to be connected to another hub using a normal Ethernet cable.
Appendix C Preparing Your Network This appendix describes how to prepare your network to connect to the Internet through the 54Mbps Mobile Broadband Router MBR814 and how to verify the readiness of broadband Internet service from an Internet service provider (ISP).
Reference Manual for the Broadband Mobile Router MBR814 In your IP network, each PC and the router must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subnet mask (netmask), a domain name server (DNS) address, and a default gateway address. In most cases, you should install TCP/ IP so that the PC obtains its specific network configuration information automatically from a DHCP server during bootup.
Reference Manual for the Broadband Mobile Router MBR814 You must have an Ethernet adapter, the TCP/IP protocol, and Client for Microsoft Networks. Note: It is not necessary to remove any other network components shown in the Network window in order to install the adapter, TCP/IP, or Client for Microsoft Networks. If you need to install a new adapter, follow these steps: a. Click the Add button. b. Select Adapter, and then click Add. c.
Reference Manual for the Broadband Mobile Router MBR814 If you need Client for Microsoft Networks: 3. a. Click the Add button. b. Select Client, and then click Add. c. Select Microsoft. d. Select Client for Microsoft Networks, and then click OK. Restart your PC for the changes to take effect.
Reference Manual for the Broadband Mobile Router MBR814 Verify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to Windows logon Click on the Properties button. The following TCP/IP Properties window will display.
Reference Manual for the Broadband Mobile Router MBR814 • By default, the IP Address tab is open on this window. • Verify the following: Obtain an IP address automatically is selected. If not selected, click in the radio button to the left of it to select it. This setting is required to enable the DHCP server to automatically assign an IP address. • Click OK to continue. Restart the PC. Repeat these steps for each PC with this version of Windows on your network.
Reference Manual for the Broadband Mobile Router MBR814 2. Type winipcfg, and then click OK. The IP Configuration window opens, which lists (among other things), your IP address, subnet mask, and default gateway. 3. From the drop-down box, select your Ethernet adapter. The window is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends for connecting through a router or gateway: • The IP address is between 192.168.0.
Reference Manual for the Broadband Mobile Router MBR814 DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4 You will find there are many similarities in the procedures for different Windows systems when using DHCP to configure TCP/IP. The following steps will walk you through the configuration process for each of these versions of Windows. DHCP Configuration of TCP/IP in Windows XP Locate your Network Neighborhood icon. • Select Control Panel from the Windows XP new Start Menu.
Reference Manual for the Broadband Mobile Router MBR814 • Now you should be at the Local Area Network Connection Status window. This box displays the connection status, duration, speed, and activity statistics. • Administrator logon access rights are needed to use this window. • Click the Properties button to view details about the connection. • The TCP/IP details are presented on the Support tab page. • Select Internet Protocol, and click Properties to view the configuration information.
Reference Manual for the Broadband Mobile Router MBR814 • Verify that the Obtain an IP address automatically radio button is selected. • Verify that Obtain DNS server address automatically radio button is selected. • Click the OK button. This completes the DHCP configuration of TCP/ IP in Windows XP. Repeat these steps for each PC with this version of Windows on your network.