Netgear orporated 05100002 User Manual

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

How to Configure WPA-PSK Wireless Security

Note: Not all wireless adapters support WPA. Furthermore, client software is also required.
Windows XP and Windows 2000 with service pack 3 do include WPA support. Nevertheless, the
wireless adapter hardware and driver must also support WPA. For instructions on configuring
wireless computers or PDAs for WPA-PSK security, consult the documentation for the product
you are using.

To configure WPA-PSK, follow these steps:

1. Click Security Settings in the Setup section of the main menu and select WPA-PSK for the

Security Type.

Figure 4-6: WPA Settings menu

2.

Enter a word or group of 8-63 printable characters in the Password Phrase box.

3. Click Apply to save your settings.

How to Restrict Wireless Access by MAC Address

To restrict access based on MA C address es, follow these steps:

Wireless Configuration 4-11

June 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

Log in to the WGR614 v6 firewall at its default LAN address of http://www.routerlogin.net

1.

with its default user name of admin and default password of password, or using whatever
LAN address and password you have set up.

Note: When configuring the firewall from a wireless computer whose MAC address is

not in the Trusted PC list, if you select Turn Access Control On, you will lose your
wireless connection when you click on Apply. You must then access the wireless router
from a wired computer or from a wireless computer which is on the access control list to
make any further changes.

2. Click Advanced Wireless Setup in the main menu of the WGR614 v6 firewall.

3. From the Wireless Settings menu, click Setup Access List to display the Wireless Access

menu shown below.

Figure 4-7: Wireless Card Access List Setup

4.

Click Add to add a wireless device to the wireless access control list. The Available Wireless
Cards list displays.

4-12 Wireless Configuration

June 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

Click the Turn Access Control On check box.

5.

6. Then, either select from the list of available wireless cards the WGR614 v6 has found in your

area, or enter the MAC address and device name for a device you plan to use. You can usually
find the MAC address printed on the wireless adapter.

Note: You can copy and paste the MAC addresses from the firewall’s Attached Devices menu
into the MAC Address box of this menu. To do this, configure each wireless computer to
obtain a wireless link to the firewall. The computer should then appear in the Attached
Devices menu.

7. Click Add to add this wireless device to the Wireless Card Access List. The screen changes

back to the list screen. Repeat these steps for each additional device you wish to add to the list.

8. Be sure to click Apply to save your wireless access control list settings.

Now, only devices on this list will be allowed to wirelessly connect to the WGR614 v6.

Wireless Configuration 4-13

June 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

4-14 Wireless Configuration

June 2004 202-10036-01

Chapter 5

Content Filtering

This chapter describes how to use the content filtering features of the 54 Mbps Wireless Router
WGR614 v6 to protect your network. These features can be found by clicking on the Content
Filtering heading in the Main Menu of the browser interface.

Content Filtering Overview

The 54 Mbps Wireless Router WGR614 v6 provides you with Web content filtering options, plus
browsing activity reporting and instant alerts via e-mail. Parents and network administrators can
establish restricted access policies based on time of day, Web addresses and Web address
keywords. You can also block Internet access by applications and services, such as chat or games.

To configure these features of your router, click on the subheadings under the Content Filtering
heading in the Main Menu of the browser interface. The subheadings are described below:

Content Filtering 5-1

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

Blocking Access to Internet Sites

The WGR614 v6 router allows you to restrict access based on Web addresses and Web address
keywords. Up to 255 entries are supported in the Keyword list. The Block Sites menu is shown in

Figure 5-1 below:

Figure 5-1: Block Sites menu

To enable keyword blocking, select either “Per Schedule” or “Always”, then click Apply. If you
want to block by schedule, be sure that a time period is specified in the Schedule menu.

To add a keyword or domain, type it in the Keyword box, click Add Keyword, then click Apply.
To delete a keyword or domain, select it from the list, click Delete Keyword, then click Apply.
Keyword application examples:

• If the keyword “XXX” is specified, the URL <http://www.badstuff.com/xxx.html> is blocked.

5-2 Content Filtering

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

• If the keyword “.com” is specified, only Web sites with other domain suffixes (such as .edu or
.gov) can be viewed.

• If you wish to block all Internet browsing access during a scheduled period, enter the keyword
“.” and set the schedule in the Schedule menu.

To specify a Trusted User, enter that PC’s IP address in the Trusted User box and click Apply.

You may specify one Trusted User, which is a PC that will be exempt from blocking and
logging. Since the Trusted User will be identified by an IP address, you should configure that
PC with a fixed IP address.

Blocking Access to Internet Services

The WGR614 v6 router allows you to block the use of certain Internet services by PCs on your
network. This is called services blocking or port filtering. The Block Services menu is shown
below:

Figure 5-2: Block Services menu

Services are functions performed by server computers at the request of client computers. For
example, Web servers serve Web pages, time servers serve time and date information, and game
hosts serve data about other players’ moves. When a computer on your network sends a request for
service to a server computer on the Internet, the requested service is identified by a service or port
number. This number appears as the destination port number in the transmitted IP packets. For
example, a packet that is sent with destination port number 80 is an HTTP (Web server) request.

To enable service blocking, select either Per Schedule or Always, then click Apply. If you want to
block by schedule, be sure that a time period is specified in the Schedule menu.

Content Filtering 5-3

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

T o specify a service for blocking, cl ick Add. The Add Services menu will appear, as shown below:

Figure 5-3: Add Services menu

From the Service Type list, select the application or service to be allowed or blocked. The list
already displays several common services, but you are not limited to these choices. To add any
additional services or applications that do not already appear, select User Defined.

Configuring a User Defined Service

To define a service, first you must determine which port number or range of numbers is used by
the application. The service numbers for many common protocols are defined by the Internet
Engineering Task Force (IETF) and published in RFC1700, “Assigned Numbers.” Service
numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of
the application. This information can usually be determined by contacting the publisher of the
application or from user groups of newsgroups.

Enter the Starting Port and Ending Port numbers. If the application uses a sing le port number , enter
that number in both boxes.

If you know that the application uses either TCP or UDP , select the appropriate protocol. If you are
not sure, select Both.

5-4 Content Filtering

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

Configuring Services Blocking by IP Address Range

Under “Filter Services For”, you can block the specified service for a single computer, a range of
computers (having consecutive IP addresses), or all computers on your network.

Scheduling When Blocking Will Be Enforced

The WGR614 v6 router allows you to specify when blocking will be enforced. The Schedule menu
is shown below:

Figure 5-4: Schedule menu

• Use this schedule for blocking content. Check this box if you wish to enable a schedule for
Content Filtering. Click Apply .

• Days to Block. Select days to block by checking the appropriate boxes. Select Everyday to
check the boxes for all days. Click Apply.

• Time of Day to Block. Select a start and end time in 23:59 format. Select All day for 24 hour
blocking. Click Apply.

Be sure to select your Time Zone in the E-Mail menu.

Content Filtering 5-5

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

Viewing Logs of Web Access or Attempted Web Access

The log is a detailed record of what W eb sites you have accessed or attempted to access. Up to 128
entries are stored in the log. Log entries will only appear when keyword blocking is enabled, and
no log entries will be made for the Trusted User. An example is shown below:

Figure 5-5: Logs menu

Log entries are described in Table 5-1

Table 5-1. Log entry descriptions

Field Description

Number The index number of the content filter log entries. 128 entries

are available numbered from 0 to 127. The log will keep the

record of the latest 128 entries.
Date and Time The date and time the log entry was recorded.
Source IP The IP address of the initiating device for this log entry.
Action This field displays whether the access was blocked or allowed.

The name or IP address of the Web site or newsgroup visited or

attempted to access.

5-6 Content Filtering

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

Log action buttons are described in Table 5-2

Table 5-2. Log action buttons

Field Description

Refresh Click this button to refresh the log screen.
Clear Log Click this button to clear the log entries.
Send Log Click this button to E-mail the log immediately.

Configuring E-Mail Alert and Web Access Log Notifications

In order to receive logs and alerts by E-mail, you must provide your E-mail information in the
E-Mail menu, shown below:

Figure 5-6: Email menu

Content Filtering 5-7

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

• Turn e-mail notification on
Check this box if you wish to receive e-mail logs and alerts from the router.

• Your outgoing mail server
Enter the name of your ISP’s outgoing (SMTP) mail server (such as mail.myISP.com). You
may be able to find this information in the configuration menu of your e-mail program. If you
leave this box blank, log and alert messages will not be sent via e-mail.

• Send to this e-mail address
Enter the e-mail address to which logs and alerts are sent. This e-mail address will also be used
as the From address. If you leave this box blank, log and alert messages will not be sent via
e-mail.

You can specify that logs are automatically sent to the specified e-mail address with these options:

• Send alert immediately
Check this box if you would like immediate notification of attempted access to a blocked site.

• Send logs according to this schedule
Specifies how often to send the logs: Hourly, Daily, Weekly, or When Full.

– Day for sending log

Specifies which day of the week to send the log. Relevant when the log is sent weekly or
daily.

– Time for sending log

Specifies the time of day to send the log. Relevant when the log is sent daily or weekly.

If the Weekly, Daily or Hourly option is selected and the log fills up before the specified
period, the log is automatically e-mailed to the specified e-mail address. After the log is sent,
the log is cleared from the router’s memory. If the router cannot e-mail the log file, the log
buffer may fill up. In this case, the router overwrites the log and discards its contents.

The WGR614 v6 router uses the Network Time Protocol (NTP) to obtain the current time and date
from one of several Network Time Servers on the Internet. In order to localize the time for your
log entries, you must specify your Time Zone:

•Time Zone
Select your local time zone. This setting will be used for the blocking schedule and for
time-stamping log entries.

• Daylight Savings Time
Check this box if your time zone is currently under daylight savings time.

5-8 Content Filtering

July 2004 202-10036-01

Chapter 6

Maintenance

This chapter describes how to use the maintenance features of your 54 Mbps Wireless Router
WGR614 v6. These features can be found by clicking on the Maintenance heading in the Main
Menu of the browser interface.

Viewing Wireless Router Status Information

The Router Status menu provides status and usage information. From the Main Menu of the
browser interface, click on Maintenance, then select Router Status to view the System Status
screen, shown below.

Figure 6-1: Router Stat us screen

Maintenance 6-1

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

This screen shows the following parameters:

Table 6-1. Wireless Router Status Fields

Field Description

Account Name This field displays the Host Name assigned to the router.
Firmware Version This field displays the router firmware version.
Internet Port These parameters apply to the Internet (WAN) port of the router.

MAC Address This field displays the Media Access Control address being used by the

Internet (WAN) port of the router.

IP Address This field displays the IP address being used by the Internet (WAN) port

of the router. If no address is shown, the router cannot connect to the
Internet.

DHCP If set to None, the router is configured to use a fixed IP address on the

WAN.
If set to Client, the router is configured to obtain an IP address
dynamically from the ISP.

IP Subnet Mask This field displays the IP Subnet Mask being used by the Internet (WAN)

port of the router.

DNS This field displays the Domain Name Server addresses being used by

the router.

LAN Port These parameters apply to the Local (LAN) port of the router.

MAC Address This field displays the Media Access Control address being used by the

LAN port of the router.

IP Address This field displays the IP address being used by the Local (LAN) port of

the router. The default is 192.168.0.1

IP Subnet Mask This field displays the IP Subnet Mask being used by the Local (LAN)

port of the router. The default is 255.255.255.0

DHCP Identifies if the router’s built-in DHCP server is active for the LAN

attached devices.

6-2 Maintenance

July 2004 202-10036-01

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

Table 6-1. Wireless Router Status Fields

Field Description

Wireless Port These parameters apply to the Wireless port of the router.

MAC Address This field displays the Media Access Control address being used by the

Wireless port of the router.

Name (SSID) This field displays the wireless network name (SSID) being used by the

wireless port of the router. The default is NETGEAR.

Region This field displays the geographic region where the router being used. It

may be illegal to use the wireless features of the router in some parts of
the world.

Channel Identifies the channel of the wireless port being used. See “Wireless

Channels” on page D-2 for the frequencies used on each channel.

Click on the “Connection Status” button to display the connection status, as shown below.

Figure 6-2: Connection Status screen

This screen shows the following statistics:.

Table 6-2: Connect ion Status Items

Item Description

IP Address The WAN (Internet) IP Address assigned to the router.
Subnet Mask The WAN (Internet) Subnet Mask assigned to the router.

Maintenance 6-3

July 2004 202-10036-01