PPP over Ethernet (PPPoE) PPP over Ethernet is a protocol for connecting remote hosts to the Internet over an ADSL connection by simulating a dial-up connection. This feature eliminates the need to run a login program such as EnterNet or WinPOET on your computer. PPP over ATM (PPPoA) PPP over ATM is a protocol for connecting remote hosts to the Internet over an ADSL connection by simulating an ATM connection. Dynamic DNS Dynamic DNS services allow remote users to find your network using a domain name when your IP address is not permanently assigned. The router contains a client that can connect to many popular Dynamic DNS services to register your dynamic IP address. Universal Plug and Play (UPnP) UPnP is a networking architecture that provides compatibility among networking technology. UPnP compliant routers provide broadband users at home and small businesses with a seamless way to participate in online games, videoconferencing and other peer-to-peer services.
Easy Installation and Management
You can install, configure, and operate the DG834 within minutes after connecting it to the network. The following features simplify installation and management tasks: Browser-based management Browser-based configuration allows you to easily configure your router from almost any type of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. Smart Wizard The router automatically senses the type of Internet connection, asking you only for the information required for your type of ISP account. Remote management The router allows you to login to the Web management interface from a remote location via the Internet. For security, you can limit remote management access to a specified remote IP address or range of addresses, and you can choose a nonstandard port number.
Diagnostic functions The router incorporates built-in diagnostic functions such as Ping, DNS lookup, and remote reboot. These functions allow you to test Internet connectivity and reboot the router. You can use these diagnostic functions directly from the DG834 when your are connect on the LAN or when you are connected over the Internet via the remote management function. Visual monitoring The routers front panel LEDs provide an easy way to monitor its status and activity. Flash erasable programmable read-only memory (EPROM) for firmware upgrade

Whats in the Box?

The product package should contain the following items: DG834 ADSL Firewall Router AC power adapter (varies by region) Category 5 (Cat 5) Ethernet cable Telephone cable Microfilters (quantity and type vary by region) ADSL Firewall Router Resource CD, including: This guide Application Notes A Printed Quick Installation Guide Warranty and Support Information Cards
If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair.

The Routers Front Panel

The DG834 ADSL Firewall Router front panel shown below contains status LEDs.

Internet

Figure 2-1: DG834 Front Panel
You can use the LEDs to verify various conditions. Table 2-1 lists and describes each LED on the front panel of the router. These LEDs are green when lit.

Table 2-1.

Label Power Test Internet

LED Descriptions

Activity On Off On Off Blink Amber On Green Blink Green On (Green) Blink (Green) On (Amber) Blink (Amber) Off Description Power is supplied to the router. Power is not supplied to the router. The system is initializing. The system is ready and running. Indicates ADSL training. The Internet port has detected a link with an attached device. Data is being transmitted or received by the Internet port. The Local port has detected link with a 100 Mbps device. Data is being transmitted or received at 100 Mbps. The Local port has detected link with a 10 Mbps device. Data is being transmitted or received at 10 Mbps. No link is detected on this port.

The Routers Rear Panel

The rear panel of the DG834 ADSL Firewall Router (Figure 2-2) contains port connections.
Figure 2-2: DG834 Rear Panel
Viewed from left to right, the rear panel contains the following elements: AC power adapter outlet Four Local Ethernet RJ-45 ports for connecting the router to the local computers Factory Default Reset push button ADSL port for connecting the router to an ADSL line
Chapter 3 Connecting the Router to the Internet
This chapter describes how to set up the router on your Local Area Network (LAN) and connect to the Internet. It describes how to configure your DG834 ADSL Firewall Router for Internet access using the Setup Wizard, or how to manually configure your Internet connection.
What You Need Before You Begin
You need to prepare these three things before you can establish an Internet connection through your router:

Now, turn on your computer. If software usually logs you in to your Internet connection, do not run that software or cancel it if it starts automatically. The local lights are lit for any connected computers.

LOG IN TO THE DG834.

Note: Your computer needs to be configured for DHCP. For instructions on configuring for DHCP, please see Appendix C in the Reference Manual on the ADSL Firewall Router Resource CD.
Reference Manual for the Model DG834 ADSL Firewall Router a.
Connect to the router by typing http://192.168.0.1 in the address field of Internet Explorer or Netscape Navigator.
Figure 3-7: Log in to the router
A login window opens as shown below:
Figure 3-8: Login window b.
When prompted, enter admin for the user name and password for the password, both in lower case letters. After logging in, you will see the menu below.

Figure 3-9: Setup Wizard

Reference Manual for the Model DG834 ADSL Firewall Router 4.

CONNECT TO THE INTERNET

The router is now properly attached to your network. You are now ready to configure your router to connect to the Internet. There are two ways you can configure your router to connect to the Internet:
Let the DG834 auto-detect the type of Internet connection you have and configure it. Manually choose which type of Internet connection you have and configure it. These options are described below. In either case, unless your ISP automatically assigns your configuration automatically via DHCP, you need the configuration parameters from your ISP you recorded in Record Your Internet Connection Information on page 3-4.
Auto-Detecting Your Internet Connection Type
The Web Configuration Manager built in to the router contains a Setup Wizard that can automatically determine your network connection type.
If your router has not yet been configured, the Setup Wizard shown in Figure 3-9 should launch automatically. Note: If instead of the Setup Wizard menu, the main menu of the routers Configuration Manager as shown in Figure 3-15 appears, click the Setup Wizard link in the upper left to bring up this menu.
You must select a country and language. Language choices are English, French, German, and Italian. After you change the language, the remaining setup screens change to the language of your choice. Select Yes to allow the router to automatically determine your connection. Click Next. The Setup Wizard will now check for the following connection types: Dynamic IP assignment A login protocol such as PPPoE or PPPoA Classical IP over ATM (RFC1577) Fixed IP address assignment
Next, the Setup Wizard will report which connection type it has discovered, and then display the appropriate configuration page. If the Setup Wizard finds no connection, you will be prompted to check the physical connection between your router and the ADSL line. When the connection is properly made, the routers Internet LED should be on.

Note: The correct country must be selected from the Setup Wizards first page for the default ADSL Settings to work.
If your ISP provided you with a specific Multiplexing Method or VPI/VCI number, then fill in the following:

1. 2. 3. 4. 5.

Select the ADSL Settings link from the main menu. For the Multiplexing Method, select LLC-based or VC-based. Type a number between 0 and 255 for the VPI. The default is 8. Type a number between 1 and 65535 for the VCI. The default is 35. Click Apply.
Chapter 4 Protecting Your Network
This chapter describes how to use the basic firewall features of the DG834 ADSL Firewall Router to protect your network.
Protecting Access to Your DG834 ADSL Firewall Router
For security reasons, the router has its own user name and password. Also, after a period of inactivity for a set length of time, the administrator login will automatically disconnect. When prompted, enter admin for the router User Name and password for the router Password. You can use procedures below to change the router's password and the amount of time for the administrators login timeout.
Note: The user name and password are not the same as any user name or password your may use to log in to your Internet connection.
NETGEAR recommends that you change this password to a more secure password. The ideal password should contain no dictionary words from any language, and should be a mixture of both upper and lower case letters, numbers, and symbols. Your password can be up to 30 characters.
How to Change the Built-In Password
Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever Password and LAN address you have chosen for the router.
Figure 4-1: Log in to the router

Protecting Your Network

Reference Manual for the Model DG834 ADSL Firewall Router 2.
From the Main Menu of the browser interface, under the Maintenance heading, select Set Password to bring up the menu shown in Figure 4-2.

Inbound Rule Example: A Local Public Web Server If you host a public Web server on your local network, you can define a rule to allow inbound Web (HTTP) requests from any outside IP address to the IP address of your Web server at any time of day. This rule is shown in Figure 4-5:
Figure 4-5: Rule example: A Local Public Web Server
The parameters are: Service From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices. Use the Services menu to add any additional services or applications that do not already appear. Action Choose how you want this type of traffic to be handled. You can block or allow always, or you can choose to block or allow according to the schedule you have defined in the Schedule menu. Send to LAN Server Enter the IP address of the computer or server on your LAN which will receive the inbound traffic covered by this rule.
WAN Users These settings determine which packets are covered by the rule, based on their source (WAN) IP address. Select the desired option: Any all IP addresses are covered by this rule. Address range if this option is selected, you must enter the Start and Finish fields. Single address enter the required address in the Start fields.
Log You can select whether the traffic will be logged. The choices are: Never no log entries will be made for this service. Always any traffic for this service type will be logged. Match traffic of this type which matches the parameters and action will be logged. Not match traffic of this type which does not match the parameters and action will be logged.
Inbound Rule Example: Allowing Videoconferencing If you want to allow incoming videoconferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office, you can create an inbound rule. In the example shown in Figure 4-6, CU-SeeMe connections are allowed only from a specified range of external IP addresses. In this case, we have also specified logging of any incoming CU-SeeMe requests that do not match the allowed parameters.
Figure 4-6: Rule example: Videoconference from Restricted Addresses 4-8 Protecting Your Network
Considerations for Inbound Rules If your external IP address is assigned dynamically by your ISP, the IP address may change periodically as the DHCP lease expires. Consider using the Dynamic DNS feature in the Advanced menus so that external users can always find your network. If the IP address of the local server computer is assigned by DHCP, it may change when the computer is rebooted. To avoid this, use the Reserved IP address feature in the LAN IP menu to keep the computers IP address constant. Local computers must access the local server using the computers local LAN address (192.168.0.11 in the example in Figure 4-6 above). Attempts by local computers to access the server using the external WAN IP address will fail.

Outbound Rules (Service Blocking)
The DG834 allows you to block the use of certain Internet services by computers on your network. This is called service blocking or port filtering. You can define an outbound rule to block Internet access from a local computer based on: IP address of the local computer (source address) IP address of the Internet site being contacted (destination address) Time of day Type of service being requested (service port number)
Following is an application example of outbound rules:
Outbound Rule Example: Blocking Instant Messenger If you want to block Instant Messenger usage by employees during working hours, you can create an outbound rule to block that application from any internal IP address to any external address according to the schedule that you have created in the Schedule menu. You can also have the router log any attempt to use Instant Messenger during that blocked period.
Figure 4-7: Rule example: Blocking Instant Messenger
The parameters are: Service From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices. Use the Add Custom Service feature to add any additional services or applications that do not already appear. Action Choose how you want this type of traffic to be handled. You can block or allow always, or you can choose to block or allow according to the schedule you have defined in the Schedule menu.
LAN Users These settings determine which packets are covered by the rule, based on their source LAN IP address. Select the desired option: Any all IP addresses are covered by this rule. Address range if this option is selected, you must enter the Start and Finish fields. Single address enter the required address in the Start fields.
WAN Users These settings determine which packets are covered by the rule, based on their destination WAN IP address. Select the desired option: Any all IP addresses are covered by this rule. Address range if this option is selected, you must enter the Start and Finish fields. Single address enter the required address in the Start fields.
Log You can select whether the traffic will be logged. The choices are: Never no log entries will be made for this service. Always any traffic for this service type will be logged. Match traffic of this type that matches the parameters and action will be logged. Not match traffic of this type that does not match the parameters and action will be logged.
Order of Precedence for Rules
As you define new rules, they are added to the tables in the Rules menu, as shown in Figure 4-8:

Click Apply to have your changes take effect. When accessing your router from the Internet, you will type your router's WAN IP address in your browser's Address (in IE) or Location (in Netscape) box, followed by a colon (:) and the custom port number. For example, if your external address is 134.177.0.123 and you use port number 8080, enter in your browser: http://134.177.0.123:8080 Note: In this case, the http:// must be included in the address.
Chapter 6 Advanced Configuration
This chapter describes how to configure the advanced features of your DG834 ADSL Firewall Router.
Configuring Advanced Security
The DG834 ADSL Firewall Router provides a variety of advanced features, such as: Setting up a Demilitarized Zone (DMZ) Server Connecting Automatically, as Required Disabling Port Scan and DOS Protection Responding to a Ping on the Internet WAN Port MTU Size The flexibility of configuring your LAN TCP/IP settings Using the Router as a DHCP Server Configuring Dynamic DNS Configuring Static Routes
Setting Up A Default DMZ Server
The Default DMZ Server feature is helpful when using some online games and videoconferencing applications that are incompatible with NAT. The router is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, one local computer can run the application properly if that computers IP address is entered as the Default DMZ Server.

Advanced Configuration

Note: For security reasons, you should avoid using the Default DMZ Server feature. When a computer is designated as the Default DMZ Server, it loses much of the protection of the firewall, and is exposed to many exploits from the Internet. If compromised, the computer can be used to attack your network.
Incoming traffic from the Internet is normally discarded by the router unless the traffic is a response to one of your local computers or a service that you have configured in the Ports menu. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the Default DMZ Server. How to Configure a Default DMZ Server To assign a computer or server to be a Default DMZ server, follow these steps:
Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever Password and LAN address you have chosen for the router. From the Main Menu, under Advanced, click the WAN Setup link to view the page shown in Figure 6-1
Figure 6-1: WAN Setup Page 3. 4. 5. 6-2
Click Default DMZ Server. Type the IP address for that server. Click Apply to save your changes.
Connect Automatically, as Required
Normally, this option should be Enabled, so that an Internet connection will be made automatically, whenever Internet-bound traffic is detected. If this causes high connection costs, you can disable this setting. If disabled, you must connect manually, using the sub-screen accessed from the "Connection Status" button on the Status screen. If you have an "Always on" connection, this setting has no effect.

Reserved IP addresses When you specify a reserved IP address for a computer on the LAN, that computer will always receive the same IP address each time it access the routers DHCP server. Reserved IP addresses should be assigned to servers that require permanent IP settings. To reserve an IP address:
Click the Add button. In the IP Address box, type the IP address to assign to the computer or server. Choose an IP address from the routers LAN subnet, such as 192.168.0.x. Type the MAC Address of the computer or server. Tip: If the computer is already present on your network, you can copy its MAC address from the Attached Devices menu and paste it here. Click Apply to enter the reserved address into the table. Note: The reserved address will not be assigned until the next time the computer contacts the router's DHCP server. Reboot the computer or access its IP configuration and force a DHCP release and renew.
To edit or delete a reserved address entry:
Click the button next to the reserved address you want to edit or delete. Click Edit or Delete.
How to Configure LAN TCP/IP Settings
Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the router. From the Main Menu, under Advanced, click the LAN IP Setup link to view the menu, shown in Figure 6-3 below.
Figure 6-3: LAN IP Setup Menu 3. 4.
Enter the TCP/IP, DHCP, or Reserved IP parameters. Click Apply to save your changes.

Configuring Dynamic DNS

If your network has a permanently assigned IP address, you can register a domain name and have that name linked with your IP address by public Domain Name Servers (DNS). However, if your Internet account uses a dynamically assigned IP address, you will not know in advance what your IP address will be, and the address can change frequently. In this case, you can use a commercial dynamic DNS service that will allow you to register your domain to their IP address, and will forward traffic directed at your domain to your frequently-changing IP address.
The router contains a client that can connect to a dynamic DNS service provider. To use this feature, you must select a service provider and obtain an account with them. After you have configured your account information in the router, whenever your ISP-assigned IP address changes, your router will automatically contact your dynamic DNS service provider, log in to your account, and register your new IP address.
How to Configure Dynamic DNS
Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the router. From the Main Menu of the browser interface, under Advanced, select Dynamic DNS to display the page below.

Basic Functioning

After you turn on power to the router, the following sequence of events should occur:
When power is first applied, verify that the Power LED is on (see The Routers Front Panel on page 2-6 for an illustration and explanation of the LEDs). Verify that the Test LED lights within a few seconds, indicating that the self-test procedure is running. After approximately 10 seconds, verify that:
The Test LED is not lit. The LAN port LEDs are lit for any local ports that are connected. The WAN port LED is lit.

Troubleshooting

If a ports LED is lit, a link has been established to the connected device. If a LAN port is connected to a 100 Mbps device, verify that the ports LED is green. If the port is 10 Mbps, the LED will be amber. If any of these conditions does not occur, refer to the appropriate following section.

Power LED Not On

If the Power and other LEDs are off when your router is turned on: Make sure that the power cord is properly connected to your router and that the power supply adapter is properly connected to a functioning power outlet. Check that you are using the 12 V DC power adapter supplied by NETGEAR for this product.
If the error persists, you have a hardware problem and should contact technical support.
Test LED Never Turns On or Test LED Stays On
When the router is turned on, the Test LED turns on for about 10 seconds and then turns off. If the Test LED does not turn on, or if it stays on, there is a fault within the router. If you experience problems with the Test LED: Cycle the power to see if the router recovers and the LED blinks for the correct amount of time.
If all LEDs including the Test LED are still on one minute after power up: Cycle the power to see if the router recovers. Clear the routers configuration to factory defaults. This will set the routers IP address to 192.168.0.1. This procedure is explained in Using the Reset button on page 7-9.
If the error persists, you might have a hardware problem and should contact technical support.
LAN or WAN Port LEDs Not On
If either the LAN LEDs or WAN LED do not light when the Ethernet connection is made, check the following: Make sure that the Ethernet cable connections are secure at the router and at the hub or workstation.

Internet Security and Firewalls
When your LAN connects to the Internet through a router, an opportunity is created for outsiders to access or disrupt your network. A NAT router provides some protection because by the very nature of the Network Address Translation (NAT) process, the network behind the NAT router is shielded from access by outsiders on the Internet. However, there are methods by which a determined hacker can possibly obtain information about your network or at the least can disrupt your Internet access. A greater degree of protection is provided by a firewall router.

What is a Firewall?

A firewall is a device that protects one network from another, while allowing communication between the two. A firewall incorporates the functions of the NAT router, while adding features for dealing with a hacker intrusion or attack. Several known types of intrusion or attack can be recognized when they occur. When an incident is detected, the firewall can log details of the attempt, and can optionally send email to an administrator notifying them of the incident. Using information from the log, the administrator can take action with the ISP of the hacker. In some types of intrusions, the firewall can fend off the hacker by discarding all further packets from the hackers IP address for a period of time.
Stateful Packet Inspection
Unlike simple Internet sharing routers, a firewall uses a process called stateful packet inspection to ensure secure firewall filtering to protect your network from attacks and intrusions. Since user-level applications such as FTP and Web browsers can create complex patterns of network traffic, it is necessary for the firewall to analyze groups of network connection states. Using Stateful Packet Inspection, an incoming packet is intercepted at the network layer and then analyzed for state-related information associated with all network connections. A central cache within the firewall keeps track of the state information associated with all network connections. All traffic passing through the firewall is analyzed against the state of these connections in order to determine whether or not it will be allowed to pass through or rejected.

Denial of Service Attack

A hacker may be able to prevent your network from operating or communicating by launching a Denial of Service (DoS) attack. The method used for such an attack can be as simple as merely flooding your site with more requests than it can handle. A more sophisticated attack may attempt to exploit some weakness in the operating system used by your router or gateway. Some operating systems can be disrupted by simply sending a packet with incorrect length information.

Glossary

10BASE-T 100BASE-Tx ADSL Asymmetric Digital Subscriber Line Denial of Service attack DHCP DNS Domain Name
IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring.
See Asymmetric Digital Subscriber Line
A technology for sending data over regular telephone lines. ADSL allows data rates up to 8 Mbps downstream and 640 Kbps upstream. DoS. A hacker attack designed to prevent your computer or network from operating or communicating.
See Dynamic Host Configuration Protocol. See Domain Name Server.
A descriptive name for an address or group of addresses on the Internet. Domain names are of the form of a registered entity name plus one of a number of predefined top level suffixes such as.com,.edu,.uk, etc. For example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain. A Domain Name Server (DNS) resolves descriptive names of network resources (such as www.NETGEAR.com) to numeric IP addresses. DSL Access Multiplexor. The piece of equipment at the telephone company central office that provides the ADSL signal. DHCP. An Ethernet protocol specifying how a centralized DHCP server can assign network configuration information to multiple DHCP clients. The assigned information includes IP addresses, DNS addresses, and gateway (router) addresses. A local device, usually a router, that connects hosts on a local network to other networks.

See Internet Protocol.

Dynamic Host Configuration Protocol

Gateway

IP Address
A four-byte number uniquely defining each host on the Internet. Ranges of addresses are assigned by Internic, an organization formed for this purpose. Usually written in dotted-decimal notation with periods separating the bytes (for example, 134.177.244.57). Internet Protocol Security. IPSec is a series of guidelines for securing private information transmitted over public networks. IPSec is a VPN method providing a higher level of security than PPTP. Internet service provider. The main internetworking protocol used in the Internet. Used in conjunction with the Transfer Control Protocol (TCP) to form TCP/IP.

See local area network.

ISP Internet Protocol

LAN local area network

LAN. A communications network serving users within a limited area, such as one floor of a building. A LAN typically connects multiple personal computers and shared network devices such as storage and printers. Although many technologies exist to implement a LAN, Ethernet is the most common for connecting personal computers. Media Access Control address. A unique 48-bit hardware address assigned to every Ethernet node. Usually written in the form 01:23:45:67:89:ab. Megabits per second.

See Most Significant Bit or Most Significant Byte. See Maximum Transmission Unit.

MAC address

Mbps MSB MTU Maximum Transmit Unit Most Significant Bit or Most Significant Byte
The size in bytes of the largest packet that can be sent or received.
The portion of a number, address, or field that is farthest left when written as a single number in conventional hexadecimal ordinary notation. The part of the number having the most value.
See Network Address Translation.

NAT Netmask

A number that explains which part of an IP address comprises the network address and which part is the host address on that network. It can be expressed in dotted-decimal notation or as a number appended to the IP address. For example, a 28-bit mask starting from the MSB can be shown as 255.255.255.192 or as /28 appended to the IP address.
Network Address Translation packet
A technique by which several hosts share a single IP address for access to the Internet. A block of information sent over a network. A packet typically contains a source and destination network address, some protocol and length information, a block of data, and a checksum.
See Point-to-Point Protocol. See PPP over ATM See PPP over Ethernet
PPP PPPoA PPPoE PPP over ATM
PPPoA. PPP over ATM is a protocol for connecting remote hosts to the Internet over an always-on connection by simulating a dial-up connection. PPPoE. PPP over Ethernet is a protocol for connecting remote hosts to the Internet over an always-on connection by simulating a dial-up connection. Point-to-Point Tunneling Protocol. A method for establishing a virtual private network (VPN) by embedding Microsofts network protocol into Internet packets. Public Switched Telephone Network. PPP. A protocol allowing a computer using TCP/IP to connect directly to the Internet. Request For Comment. Refers to documents published by the Internet Engineering Task Force (IETF) proposing standard protocols and procedures for the Internet. RFCs can be found at www.ietf.org.
See Routing Information Protocol.

PPP over Ethernet

PSTN Point-to-Point Protocol RFC

RIP router

A device that forwards data between networks. An IP router forwards data based on IP source and destination addresses. A protocol in which routers periodically exchange information with one another so that they can determine minimum distance paths between sources and destinations.

See netmask.

subnet mask UTP
Unshielded twisted pair. The cable used by 10BASE-T and 100BASE-Tx Ethernet networks.
Virtual Channel Identifier. Together with the VPI, defines a Virtual Channel through an ATM network. Used by ATM switching equipment to route data through the network. Virtual Path Identifier. Together with the VCI, defines a Virtual Channel through an ATM network. Used by ATM switching equipment to route data through the network.

See wide area network.

WAN wide area network
WAN. A long distance link used to extend or connect remotely located local area networks. The Internet is a large WAN. WINS. Windows Internet Naming Service is a server process for resolving Windows-based computer names to IP addresses. If a remote network contains a WINS server, your Windows PCs can gather information from that WINS server about its local hosts. This allows your PCs to browse that remote network using Network Neighborhood.
See Windows Internet Naming Service.
Windows Internet Naming Service
Account Name 3-18 Address Resolution Protocol B-9 Auto MDI/MDI-X B-15 Auto Uplink 2-3, B-15
DHCP Setup field, Ethernet Setup menu 5-5 DMZ Server 6-1 DNS Proxy 2-3 DNS server 3-18, C-20 DNS, dynamic 6-7 domain C-20 Domain Name 3-18 domain name server (DNS) B-10 DoS attack B-11 Dynamic DNS 2-4, 6-7

backup configuration 5-1

Cabling B-11 Cat5 cable 3-2, B-12 Classical IP 2-3 configuration automatic by DHCP 2-3 backup 5-1 erasing 5-2 router, initial 3-1 content filtering 2-2 crossover cable 2-3, B-14, B-15 customer support 1-iii
EnterNet C-18 EPROM, for firmware upgrade 2-5 Ethernet 2-3 Ethernet cable B-11
factory settings, restoring 5-2 features 2-2 firewall features 2-2 FLASH memory 5-2 front panel 2-6
date and time 7-9 Daylight Savings Time 4-15, 7-9 daylight savings time 4-14 Default DMZ Server 6-1 default reset button 7-9 Denial of Service (DoS) protection 2-2, 4-3 denial of service attack B-11 DHCP 2-3, 6-5, B-10 DHCP Client ID C-16

gateway address C-20

host name 3-18
IANA contacting B-2 IETF B-1 Web site address B-7 inbound rules 4-6 installation 2-4 Internet account address information C-18 establishing C-18 Internet Service Provider 3-1, 3-5 IP addresses C-19, C-20 and NAT B-8 and the Internet B-2 assigning B-2, B-9 auto-generated 7-3 private B-7 translating B-9 IP configuration by DHCP B-10 IP networking for Macintosh C-16 for Windows C-2, C-7 ISP 3-1, 3-5
MDI/MDI-X B-15 MDI/MDI-X wiring B-14 metric 6-11 multicasting 6-5
NAT C-18 NAT. See Network Address Translation netmask translation table B-6 Network Address Translation 2-3, B-8, C-18 Network Time Protocol 4-14, 7-9 NTP 4-14, 7-9
order of precedence 4-12 outbound rules 4-9
Password 3-11 password restoring 7-9 PC, using to configure C-21 ping 6-3 port filtering 4-9 port forwarding 4-6 port forwarding behind NAT B-9 port numbers 4-12 PPP over Ethernet 2-4, C-18 PPPoE 2-4, 3-10, 3-11, C-18 Primary DNS Server 3-12, 3-13, 3-19 protocols Address Resolution B-9 DHCP 2-3, B-10 Routing Information 2-3, B-2 support 2-3 TCP/IP 2-3 publications, related B-1