Contents

Chapter 1 About This Guide Audience, Conventions, Scope...1-1 How to Use this Manual...1-2 How to Print this Manual....1-3 Chapter 2 Introduction About the Router...2-1 Key Features....2-2 A Powerful, True Firewall....2-2 Content Filtering...2-2 Auto Sensing and Auto Uplink LAN Ethernet Connections..2-3 Protocol Support....2-3 Easy Installation and Management...2-4 Whats in the Box?....2-5 The Routers Front Panel....2-6 The Routers Rear Panel....2-7 Chapter 3 Connecting the Router to the Internet What You Need Before You Begin....3-1 ADSL Microfilter Requirements...3-1 ADSL Microfilter....3-1 ADSL Microfilter with Built-In Splitter...3-2 Ethernet Cabling Requirements...3-2 Computer Hardware Requirements...3-2 LAN Configuration Requirements...3-2 Internet Configuration Requirements...3-3 Where Do I Get the Internet Configuration Parameters?...3-3 Record Your Internet Connection Information...3-4 Contents v
Connecting the DG834 to Your LAN...3-5 How to Connect the Router...3-5 Auto-Detecting Your Internet Connection Type...3-9 Wizard-Detected PPPoE Login Account Setup..3-10 Wizard-Detected PPPoA Login Account Setup.. 3-11 Wizard-Detected Dynamic IP Account Setup.. 3-11 Wizard-Detected IP Over ATM Account Setup..3-12 Wizard-Detected Fixed IP (Static) Account Setup..3-13 Testing Your Internet Connection....3-14 Manually Configuring Your Internet Connection...3-15 How to Perform Manual Configuration..3-16 Internet Connection Requires Login and Uses PPPoE..3-16 Internet Connection Requires Login and Uses PPPoA..3-17 Internet Connection Does Note Require A Login..3-18 ADSL Settings....3-19 Chapter 4 Protecting Your Network Protecting Access to Your DG834 ADSL Firewall Router..4-1 How to Change the Built-In Password...4-1 Changing the Administrator Login Timeout..4-2 Configuring Basic Firewall Services...4-2 Blocking Keywords, Sites, and Services...4-3 How to Block Keywords and Sites...4-3 Firewall Rules.....4-5 Inbound Rules (Port Forwarding)....4-6 Inbound Rule Example: A Local Public Web Server..4-7 Inbound Rule Example: Allowing Videoconferencing..4-8 Considerations for Inbound Rules...4-9 Outbound Rules (Service Blocking)...4-9 Outbound Rule Example: Blocking Instant Messenger..4-10 Order of Precedence for Rules...4-12 Services....4-12 How to Define Services...4-13 Setting Times and Scheduling Firewall Services...4-14 How to Set Your Time Zone...4-14

Router MAC Address: This section determines the Ethernet MAC address that will be used by the router on the Internet port. Some ISPs will register the Ethernet MAC address of the network interface card in your computer when your account is first opened. They will then only accept traffic from the MAC address of that computer. This feature allows your router to masquerade as that computer by cloning its MAC address. To change the MAC address, select Use this Computers MAC address. The router will then capture and use the MAC address of the computer that you are now using. You must be using the one computer that is allowed by the ISP. Or, select Use this MAC address and enter it.
Click Apply to save your settings. Click the Test button to test your Internet connection. If the NETGEAR Web site does not appear within one minute, refer to Chapter 7, Troubleshooting.

ADSL Settings

The default settings of your DG834 ADSL Firewall Router will work fine for most ISPs. However, some ISPs use a specific Multiplexing Method or a Virtual Circuit Number for either the Virtual Path Identifier (VPI) or Virtual Channel Identifier (VCI).
Note: The correct country must be selected from the Setup Wizards first page for the default ADSL Settings to work.
If your ISP provided you with a specific Multiplexing Method or VPI/VCI number, then fill in the following:

1. 2. 3. 4. 5.

Select the ADSL Settings link from the main menu. For the Multiplexing Method, select LLC-based or VC-based. Type a number between 0 and 255 for the VPI. The default is 8. Type a number between 1 and 65535 for the VCI. The default is 35. Click Apply.
Chapter 4 Protecting Your Network
This chapter describes how to use the basic firewall features of the DG834 ADSL Firewall Router to protect your network.
Protecting Access to Your DG834 ADSL Firewall Router
For security reasons, the router has its own user name and password. Also, after a period of inactivity for a set length of time, the administrator login will automatically disconnect. When prompted, enter admin for the router User Name and password for the router Password. You can use procedures below to change the router's password and the amount of time for the administrators login timeout.
Note: The user name and password are not the same as any user name or password your may use to log in to your Internet connection.
NETGEAR recommends that you change this password to a more secure password. The ideal password should contain no dictionary words from any language, and should be a mixture of both upper and lower case letters, numbers, and symbols. Your password can be up to 30 characters.

Inbound Rule Example: Allowing Videoconferencing If you want to allow incoming videoconferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office, you can create an inbound rule. In the example shown in Figure 4-6, CU-SeeMe connections are allowed only from a specified range of external IP addresses. In this case, we have also specified logging of any incoming CU-SeeMe requests that do not match the allowed parameters.
Figure 4-6: Rule example: Videoconference from Restricted Addresses 4-8 Protecting Your Network
Considerations for Inbound Rules If your external IP address is assigned dynamically by your ISP, the IP address may change periodically as the DHCP lease expires. Consider using the Dynamic DNS feature in the Advanced menus so that external users can always find your network. If the IP address of the local server computer is assigned by DHCP, it may change when the computer is rebooted. To avoid this, use the Reserved IP address feature in the LAN IP menu to keep the computers IP address constant. Local computers must access the local server using the computers local LAN address (192.168.0.11 in the example in Figure 4-6 above). Attempts by local computers to access the server using the external WAN IP address will fail.
Outbound Rules (Service Blocking)
The DG834 allows you to block the use of certain Internet services by computers on your network. This is called service blocking or port filtering. You can define an outbound rule to block Internet access from a local computer based on: IP address of the local computer (source address) IP address of the Internet site being contacted (destination address) Time of day Type of service being requested (service port number)
Following is an application example of outbound rules:
Outbound Rule Example: Blocking Instant Messenger If you want to block Instant Messenger usage by employees during working hours, you can create an outbound rule to block that application from any internal IP address to any external address according to the schedule that you have created in the Schedule menu. You can also have the router log any attempt to use Instant Messenger during that blocked period.
Figure 4-7: Rule example: Blocking Instant Messenger
The parameters are: Service From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices. Use the Add Custom Service feature to add any additional services or applications that do not already appear. Action Choose how you want this type of traffic to be handled. You can block or allow always, or you can choose to block or allow according to the schedule you have defined in the Schedule menu.

Figure 5-7: Attached Devices menu
For each device, the table shows the IP address, Device Name if available, and the Ethernet MAC address. Note that if the router is rebooted, the table data is lost until the router rediscovers the devices. To force the router to look for attached devices, click the Refresh button.
Viewing, Selecting, and Saving Logged Information
The router will log security-related events such as denied incoming service requests, hacker probes, and administrator logins. If you enabled content filtering in the Block Sites menu, the Logs page can show you when someone on your network tries to access a blocked site. If you enabled e-mail notification, you will receive these logs in an e-mail message. If you do not have e-mail notification enabled, you can view the logs here.
An example of the logs file is shown below.
Figure 5-8: Security Logs menu
Log entries are described in Table 5-1 below:
Security Log entry descriptions

Description

Date and Time Description or Action Source IP Source port and interface Destination Destination port and interface
The date and time the log entry was recorded. The type of event and what action was taken if any. The IP address of the initiating device for this log entry. The service port number of the initiating device, and whether it originated from the LAN or WAN The name or IP address of the destination device or Web site. The service port number of the destination device, and whether its on the LAN or WAN.
Log action buttons are described in Table 5-2

Table 5-2.

Security Log action buttons
Refresh Clear Log Send Log Apply Cancel
Refresh the log screen. Clear the log entries. Email the log immediately. Apply the current settings. Clear the current settings.
Selecting What Information to Log Besides the standard information listed above, you can choose to log additional information. Those optional selections are as follows: Attempted access to blocked site Connections to the Web-based interface of the router Router operation (start up, get time, etc.)
Known DoS attacks and Port Scans
Saving Log Files on a Server You can choose to write the logs to a computer running a syslog program. To activate this feature, select to Broadcast Lan or enter the IP address of the server where the Syslog file will be written.

Examples of Log Messages

Following are examples of log messages. In all cases, the log entry shows the timestamp as: Day, Year-Month-Date Hour:Minute:Second Activation and Administration
Tue, 2002-05-21 18:48:39 - NETGEAR activated
[This entry indicates a power-up or reboot with initial time entry.]
Tue, 2002-05-21 18:55:00 - Administrator login successful - IP:192.168.0.2 Thu, 2002-05-21 18:56:58 - Administrator logout - IP:192.168.0.2

[This entry shows an administrator logging in and out from IP address 192.168.0.2.]
Tue, 2002-05-21 19:00:06 - Login screen timed out - IP:192.168.0.2
[This entry shows a time-out of the administrator login.]
Wed, 2002-05-22 22:00:19 - Log emailed
[This entry shows when the log was emailed.] Dropped Packets
Wed, 2002-05-22 07:15:15 - TCP packet dropped - Source:64.12.47.28,4787,WAN Destination:134.177.0.11,21,LAN - [Inbound Default rule match] Sun, 2002-05-22 12:50:33 - UDP packet dropped - Source:64.12.47.28,10714,WAN Destination:134.177.0.11,6970,LAN - [Inbound Default rule match] Sun, 2002-05-22 21:02:53 - ICMP packet dropped - Source:64.12.47.28,0,WAN Destination:134.177.0.11,0,LAN - [Inbound Default rule match]
[These entries show an inbound FTP (port 21) packet, User Datagram Protocol (UDP) packet (port 6970), and Internet Control Message Protocol (ICMP) packet (port 0) being dropped as a result of the default inbound rule, which states that all inbound packets are denied.]
Enabling Security Event E-mail Notification
In order to receive logs and alerts by e-mail, you must provide your e-mail information in the E-mail subheading:
Turn e-mail notification on. Select this box if you want to receive e-mail logs and alerts from the router. Send alerts and logs via email. Enter the name or IP address of your ISPs outgoing (SMTP) mail server (such as mail.myISP.com). You may be able to find this information in the configuration menu of your e-mail program. Enter the e-mail address to which logs and alerts are sent. This e-mail address will also be used as the From address. If you leave this box blank, log and alert messages will not be sent via e-mail. Send alert immediately. Select a box if you would like immediate notification of a significant security event, such as a known attack, port scan, or attempted access to a blocked site. Send logs according to this schedule. Specifies how often to send the logs: Hourly, Daily, Weekly, or When Full. Day for sending log Specifies which day of the week to send the log. Relevant when the log is sent weekly or daily. Time for sending log Specifies the time of day to send the log. Relevant when the log is sent daily or weekly.
If the Weekly, Daily or Hourly option is selected and the log fills up before the specified period, the log is automatically e-mailed to the specified e-mail address. After the log is sent, it is cleared from the routers memory. If the router cannot e-mail the log file, the log buffer may fill up. In this case, the router overwrites the log and discards its contents.
Running Diagnostic Utilities and Rebooting the Router
The DG834 router has a diagnostics feature. You can use the diagnostics menu to perform the following functions from the router: Ping an IP Address to test connectivity to see if you can reach a remote host. Perform a DNS Lookup to test if an Internet name resolves to an IP address to verify that the DNS server configuration is working. Display the Routing Table to identify what other routers the router is communicating with. Reboot the router to enable new network configurations to take effect or to clear problems with the routers network connection.

Note: If your computers IP address is shown as 169.254.x.x: Recent versions of Windows and MacOS will generate and assign an IP address if the computer cannot reach a DHCP server. These auto-generated addresses are in the range of 169.254.x.x. If your IP address is in this range, check the connection from the computer to the router and reboot your computer.
If your routers IP address was changed and you do not know the current IP address, clear the routers configuration to factory defaults. This will set the routers IP address to 192.168.0.1. This procedure is explained in Using the Reset button on page 7-9. Make sure your browser has Java, JavaScript, or ActiveX enabled. If you are using Internet Explorer, click Refresh to be sure the Java applet is loaded. Try quitting the browser and launching it again. Make sure you are using the correct login information. The factory default login name is admin and the password is password. Make sure that CAPS LOCK is off when entering this information.
If the router does not save changes you have made in the Web Configuration Interface, check the following: When entering configuration settings, be sure to click the APPLY button before moving to another menu or tab, or your changes are lost.
Click the Refresh or Reload button in the Web browser. The changes may have occurred, but the Web browser may be caching the old configuration.
Troubleshooting the ISP Connection
If your router is unable to access the Internet, you should check the ADSL connection, then the WAN TCP/IP connection.

ADSL link

If your router is unable to access the Internet, you should first determine whether you have an ADSL link with the service provider. The state of this connection is indicated with the WAN LED. WAN LED Green or Blinking Green If your WAN LED is green or blinking green, then you have a good ADSL connection. You can be confident that the service provider has connected your line correctly and that your wiring is correct. WAN LED Blinking Yellow If your WAN LED is blinking yellow, then your router is attempting to make an ADSL connection with the service provider. The LED should turn green within several minutes. If the WAN LED does not turn green, disconnect all telephones on the line. If this solves the problem, reconnect the telephones one at a time, being careful to use a microfilter on each telephone. If the microfilters are connected correctly, you should be able to connect all your telephones. If disconnecting telephones does not result in a green WAN LED, there may be a problem with your wiring. If the telephone company has tested the ADSL signal at your Network Interface Device (NID), then you may have poor quality wiring in your house. WAN LED Off If the WAN LED is off, disconnect all telephones on the line. If this solves the problem, reconnect the telephones one at a time, being careful to use a microfilter on each telephone. If the microfilters are connected correctly, you should be able to connect all your telephones.

Related Publications

As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet. The RFC documents outline and define the standard protocols and procedures for the Internet. The documents are listed on the World Wide Web at www.ietf.org and are mirrored and indexed at many other sites worldwide.

Basic Router Concepts

Large amounts of bandwidth can be provided easily and relatively inexpensively in a local area network (LAN). However, providing high bandwidth between a local network and the Internet can be very expensive. Because of this expense, Internet access is usually provided by a slower-speed wide-area network (WAN) link such as a cable or DSL modem. In order to make the best use of the slower WAN link, a mechanism must be in place for selecting and transmitting only the data traffic meant for the Internet. The function of selecting and forwarding this data is performed by a router.
Network and Routing Basics

What is a Router?

A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables maintained by the router. In these routing tables, a router builds up a logical picture of the overall network by gathering and exchanging information with other routers in the network. Using this information, the router chooses the best path for forwarding network traffic. Routers vary in performance and scale, number of routing protocols supported, and types of physical WAN connection they support. The DG834 ADSL Firewall Router is a small office router that routes the IP protocol over a single-user broadband connection.
Routing Information Protocol
One of the protocols used by a router to build and maintain a picture of the network is the Routing Information Protocol (RIP). Using RIP, routers periodically update one another and check for changes to add to the routing table. The DG834 router supports both the older RIP-1 and the newer RIP-2 protocols. Among other improvements, RIP-2 supports subnet and multicast protocols. RIP is not required for most home applications.
IP Addresses and the Internet

Because TCP/IP networks are interconnected across the world, every machine on the Internet must have a unique address to make sure that transmitted data reaches the correct destination. Blocks of addresses are assigned to organizations by the Internet Assigned Numbers Authority (IANA). Individual users and small organizations may obtain their addresses either from the IANA or from an Internet service provider (ISP). You can contact IANA at www.iana.org. The Internet Protocol (IP) uses a 32-bit address structure. The address is usually written in dot notation (also called dotted-decimal notation), in which each group of eight bits is written in decimal form, separated by decimal points. For example, the following binary address:

00001100 00000111

is normally written as:

195.34.12.7

The latter version is easier to remember and easier to enter into your computer. In addition, the 32 bits of the address are subdivided into two parts. The first part of the address identifies the network, and the second part identifies the host node or station on the network. The dividing point may vary depending on the address range and the application. There are five standard classes of IP addresses. These address classes have different ways of determining the network and host sections of the address, allowing for different numbers of hosts on a network. Each address type begins with a unique bit pattern, which is used by the TCP/IP software to identify the address class. After the address class has been determined, the software can correctly identify the host section of the address. The follow figure shows the three main address classes, including network and host sections of the address for each address type.

Class A

Network Class B

Network

Class C
Figure 7-1: Three Main Address Classes
The five address classes are: Class A Class A addresses can have up to 16,777,214 hosts on a single network. They use an eight-bit network number and a 24-bit node number. Class A addresses are in this range:

1.x.x.x to 126.x.x.x.

Class B Class B addresses can have up to 65,354 hosts on a network. A Class B address uses a 16-bit network number and a 16-bit node number. Class B addresses are in this range:
128.1.x.x to 191.254.x.x.
Class C Class C addresses can have 254 hosts on a network. Class C addresses use 24 bits for the network address and eight bits for the node. They are in this range:
192.0.1.x to 223.255.254.x.
Class D Class D addresses are used for multicasts (messages sent to many hosts). Class D addresses are in this range:
224.0.0.0 to 239.255.255.255.
Class E Class E addresses are for experimental use.

Class B

Subnet
Figure 7-2: Example of Subnetting a Class B Address
A Class B address can be effectively translated into multiple Class C addresses. For example, the IP address of 172.16.0.0 is assigned, but node addresses are limited to 255 maximum, allowing eight extra bits to use as a subnet address. The IP address of 172.16.97.235 would be interpreted as IP network address 172.16, subnet number 97, and node number 235. In addition to extending the number of addresses available, subnet addressing provides other benefits. Subnet addressing allows a network manager to construct an address scheme for the network by using different subnets for other geographical locations in the network or for other departments in the organization.
Although the preceding example uses the entire third octet for a subnet address, note that you are not restricted to octet boundaries in subnetting. To create more network numbers, you need only shift some bits from the host address to the network address. For instance, to partition a Class C network number (192.68.135.0) into two, you shift one bit from the host address to the network address. The new netmask (or subnet mask) is 255.255.255.128. The first subnet has network number 192.68.135.0 with hosts 192.68.135.1 to 129.68.135.126, and the second subnet has network number 192.68.135.128 with hosts 192.68.135.129 to 192.68.135.254.
Note: The number 192.68.135.127 is not assigned because it is the broadcast address of the first subnet. The number 192.68.135.128 is not assigned because it is the network address of the second subnet.
The following table lists the additional subnet mask bits in dotted-decimal notation. To use the table, write down the original class netmask and replace the 0 value octets with the dotted-decimal value of the additional subnet bits. For example, to partition your Class C network with subnet mask 255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes 255.255.255.240.

Table 7-1.

Number of Bits 7 8
Netmask Notation Translation Table for One Octet
Dotted-Decimal Value 254 255
The following table displays several common netmask values in both the dotted-decimal and the masklength formats.

Table 7-2.

Stateful Packet Inspection
Unlike simple Internet sharing routers, a firewall uses a process called stateful packet inspection to ensure secure firewall filtering to protect your network from attacks and intrusions. Since user-level applications such as FTP and Web browsers can create complex patterns of network traffic, it is necessary for the firewall to analyze groups of network connection states. Using Stateful Packet Inspection, an incoming packet is intercepted at the network layer and then analyzed for state-related information associated with all network connections. A central cache within the firewall keeps track of the state information associated with all network connections. All traffic passing through the firewall is analyzed against the state of these connections in order to determine whether or not it will be allowed to pass through or rejected.

Denial of Service Attack

A hacker may be able to prevent your network from operating or communicating by launching a Denial of Service (DoS) attack. The method used for such an attack can be as simple as merely flooding your site with more requests than it can handle. A more sophisticated attack may attempt to exploit some weakness in the operating system used by your router or gateway. Some operating systems can be disrupted by simply sending a packet with incorrect length information.

Ethernet Cabling

Although Ethernet networks originally used thick or thin coaxial cable, most installations currently use unshielded twisted pair (UTP) cabling. The UTP cable contains eight conductors, arranged in four twisted pairs, and terminated with an RJ45 type connector. A normal straight-through UTP Ethernet cable follows the EIA568B standard wiring as described below in Table B-1
Network and Routing Basics B-11

Table B-1.

Pin 7 8
UTP Ethernet cable wiring, straight-through
Signal Transmit (Tx) + Transmit (Tx) Receive (Rx) +
Wire color Orange/White Orange Green/White Blue Blue/White Green Brown/White Brown

Receive (Rx) -

Category 5 Cable Quality
Category 5 distributed cable that meets ANSI/EIA/TIA-568-A building wiring standards can be a maximum of 328 feet (ft.) or 100 meters (m) in length, divided as follows: 20 ft. (6 m) between the hub and the patch panel (if used) 295 ft. (90 m) from the wiring closet to the wall outlet 10 ft. (3 m) from the wall outlet to the desktop device The patch panel and other connecting hardware must meet the requirements for 100 Mbps operation (Category 5). Only 0.5 inch (1.5 cm) of untwist in the wire pair is allowed at any termination point. A twisted pair Ethernet network operating at 10 Mbits/second (10BASE-T) will often tolerate low quality cables, but at 100 Mbits/second (10BASE-Tx) the cable must be rated as Category 5, or Cat 5, by the Electronic Industry Association (EIA). This rating will be printed on the cable jacket. A Category 5 cable will meet specified requirements regarding loss and crosstalk. In addition, there are restrictions on maximum cable length for both 10 and 100 Mbits/second networks.

DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4
DHCP Configuration of TCP/IP in Windows XP
Locate your Network Neighborhood icon. Select Control Panel from the Windows XP new Start Menu. Select the Network Connections icon on the Control Panel. This will take you to the next step.
Now the Network Connection window displays. The Connections List that shows all the network connections set up on the PC, located to the right of the window. Right-click on the Connection you will use and choose Status.
Now you should be at the Local Area Network Connection Status window. This box displays the connection status, duration, speed, and activity statistics. Administrator logon access rights are needed to use this window. Click the Properties button to view details about the connection.
The TCP/IP details are presented on the Support tab page. Select Internet Protocol, and click Properties to view the configuration information.
Verify that the Obtain an IP address automatically radio button is selected. Verify that Obtain DNS server address automatically radio button is selected. Click the OK button. This completes the DHCP configuration of TCP/ IP in Windows XP. Repeat these steps for each PC with this version of Windows on your network.
DHCP Configuration of TCP/IP in Windows 2000
Once again, after you have installed the network card, TCP/IP for Windows 2000 is configured. TCP/IP should be added by default and set to DHCP without your having to configure it. However, if there are problems, follow these steps to configure TCP/IP with DHCP for Windows 2000.
Click on the My Network Places icon on the Windows desktop. This will bring up a window called Network and Dial-up Connections. Right click on Local Area Connection and select Properties.
The Local Area Connection Properties dialog box appears. Verify that you have the correct Ethernet card selected in the Connect using: box. Verify that at least the following two items are displayed and selected in the box of Components checked are used by this connection: Client for Microsoft Networks and Internet Protocol (TCP/IP)

Click OK.

With Internet Protocol (TCP/IP) selected, click on Properties to open the Internet Protocol (TCP/IP) Properties dialogue box. Verify that Obtain an IP address automatically is selected. Obtain DNS server address automatically is selected.

See Dynamic Host Configuration Protocol. See Domain Name Server.
A descriptive name for an address or group of addresses on the Internet. Domain names are of the form of a registered entity name plus one of a number of predefined top level suffixes such as.com,.edu,.uk, etc. For example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain. A Domain Name Server (DNS) resolves descriptive names of network resources (such as www.NETGEAR.com) to numeric IP addresses. DSL Access Multiplexor. The piece of equipment at the telephone company central office that provides the ADSL signal. DHCP. An Ethernet protocol specifying how a centralized DHCP server can assign network configuration information to multiple DHCP clients. The assigned information includes IP addresses, DNS addresses, and gateway (router) addresses. A local device, usually a router, that connects hosts on a local network to other networks.

See Internet Protocol.

Dynamic Host Configuration Protocol

Gateway

IP Address
A four-byte number uniquely defining each host on the Internet. Ranges of addresses are assigned by Internic, an organization formed for this purpose. Usually written in dotted-decimal notation with periods separating the bytes (for example, 134.177.244.57). Internet Protocol Security. IPSec is a series of guidelines for securing private information transmitted over public networks. IPSec is a VPN method providing a higher level of security than PPTP. Internet service provider. The main internetworking protocol used in the Internet. Used in conjunction with the Transfer Control Protocol (TCP) to form TCP/IP.

See local area network.

ISP Internet Protocol

LAN local area network

LAN. A communications network serving users within a limited area, such as one floor of a building. A LAN typically connects multiple personal computers and shared network devices such as storage and printers. Although many technologies exist to implement a LAN, Ethernet is the most common for connecting personal computers. Media Access Control address. A unique 48-bit hardware address assigned to every Ethernet node. Usually written in the form 01:23:45:67:89:ab. Megabits per second.
See Most Significant Bit or Most Significant Byte. See Maximum Transmission Unit.

MAC address

Mbps MSB MTU Maximum Transmit Unit Most Significant Bit or Most Significant Byte
The size in bytes of the largest packet that can be sent or received.

time of day 7-9 time zone 4-14 timeout, administrator login 4-2 time-stamping 4-14 troubleshooting 7-1 Trusted Host 4-4
Universal Plug and Play 2-4 Uplink switch B-14 URL 4-4 USB C-18
WAN Setup Page 6-2 Windows, configuring for IP routing C-2, C-7 winipcfg utility C-6 WinPOET C-18 WINS 6-6 World Wide Web 1-iii
Secondary DNS Server 3-12, 3-13, 3-19 service blocking 4-9 service numbers 4-12 Setup Wizard 3-1 SMTP 5-13 spoof MAC address 7-6 stateful packet inspection 2-2, B-11 Static Routes 6-7 subnet addressing B-5 subnet mask B-6, C-19, C-20 Syslog 5-12
TCP/IP configuring C-1 network, troubleshooting 7-7 TCP/IP properties verifying for Macintosh C-17 verifying for Windows C-6, C-15