home network on office computer w/d...

[ab]

Hi,

I am new to the networking world. I have my office laptop which is part
of a domain. I also have another laptop at home and a desktop at home. I
have wireless internet through a router at home. Now, I want to setup a
home network to transfer files easily between the three computers. How
can I do this? I will really appreciate if someone can point me in the
right direction. a google search yielded:

1. Something about choosing workgroup over domain, but my laptop is
already part of a domain. Can I have both?

thanks,

 

[Chuck]

Hi,

I am new to the networking world. I have my office laptop which is part
of a domain. I also have another laptop at home and a desktop at home. I
have wireless internet through a router at home. Now, I want to setup a
home network to transfer files easily between the three computers. How
can I do this? I will really appreciate if someone can point me in the
right direction. a google search yielded:

1. Something about choosing workgroup over domain, but my laptop is
already part of a domain. Can I have both?

thanks,

Do you have wireless Internet working for the office laptop, when it's at home?
That's the key. Start with this article, which should cover the physical
connectivity issues.
<http://nitecruzr.blogspot.com/2005/05/have-laptop-will-travel.html>
http://nitecruzr.blogspot.com/2005/05/have-laptop-will-travel.html

Now, the office laptop can work just as well being a domain member, and
accessing your home workgroup, as joining the workgroup. You won't see the
other computers in Network Neighborhood, but they will be there. There are
several other connects that you may need to know about, though, so read this
article too.
<http://nitecruzr.blogspot.com/2005/07/windows-networking.html>
http://nitecruzr.blogspot.com/2005/07/windows-networking.html

And please - save yourself (and your LAN admin) a lot of work. Don't go joining
the laptop to the workgroup. If you do that, you'll have to rejoin the domain
when you take the laptop back to your office.

 

[ab]

Do you have wireless Internet working for the office laptop, when it's at home?
That's the key. Start with this article, which should cover the physical
connectivity issues.
<http://nitecruzr.blogspot.com/2005/05/have-laptop-will-travel.html>
http://nitecruzr.blogspot.com/2005/05/have-laptop-will-travel.html

Now, the office laptop can work just as well being a domain member, and
accessing your home workgroup, as joining the workgroup. You won't see the
other computers in Network Neighborhood, but they will be there. There are
several other connects that you may need to know about, though, so read this
article too.
<http://nitecruzr.blogspot.com/2005/07/windows-networking.html>
http://nitecruzr.blogspot.com/2005/07/windows-networking.html

And please - save yourself (and your LAN admin) a lot of work. Don't go joining
the laptop to the workgroup. If you do that, you'll have to rejoin the domain
when you take the laptop back to your office.

okay, unfortunately by the time I read your message, I had already
messed up my network such that it lost the domain. My sys admin was king
enough to explain me and config my domain again.

Another question: I have a wireless card on my notebook. My modem goes
through a router. I want to connect my desktop to the laptop (with the
domain) through a network cable such that I dont have to bring the cable
from the modem to the desktop. Now sure how to do this.

 

[Chuck]

okay, unfortunately by the time I read your message, I had already
messed up my network such that it lost the domain. My sys admin was king
enough to explain me and config my domain again.

Another question: I have a wireless card on my notebook. My modem goes
through a router. I want to connect my desktop to the laptop (with the
domain) through a network cable such that I dont have to bring the cable
from the modem to the desktop. Now sure how to do this.

First, learn the difference between physical connection (using either Ethernet
or WiFi), and Windows Networking / file sharing authentication using domain
membership.
<http://nitecruzr.blogspot.com/2005/07/windows-networking.html>
http://nitecruzr.blogspot.com/2005/07/windows-networking.html
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html

Now, how do you intend to use the wireless card on the notebook? What will it
connect to?

 

[ab]

First, learn the difference between physical connection (using either Ethernet
or WiFi), and Windows Networking / file sharing authentication using domain
membership.
<http://nitecruzr.blogspot.com/2005/07/windows-networking.html>
http://nitecruzr.blogspot.com/2005/07/windows-networking.html

http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html

Now, how do you intend to use the wireless card on the notebook? What will it
connect to?

Okay, let me restate the whole thing along with what I have learnt from
the two links above.

There are two things that I want to accomplish:

1. Access internet from my desktop by using a network cable connected to
a notebook which connects to the internet using wireless router. I
thought this would be possible by simply connecting the two computer via
a network cable but...

2. Setup a small wireless home network to share files between 2
notebooks and the desktop.


Now, what do I have:

one notebook win xp part of a domain, XYZ. Simple file sharing is turned
on.
another notebook win xp, workgroup XYZ
one desktop with xp home, workgroup XYZ

I understand that each computer will have a different ip address
assigned to it by the router.


I read somewhere that I can setup a ICS. I tried sharing my wireless
network on the notebook Network properties>advanced tools>settings. Maybe
I did not enable all the options needed, but after connecting the
notebook to the desktop via a network cable, I could nont access the
network (internet) from the desktop while it was working fine on the
notebook. The network cable port on the notebook was lighted red, while
it was green on the desktop.

This is all I have. How to proceed? I really appreciate your help.

 

[Chuck]

Chuck wrote:




Okay, let me restate the whole thing along with what I have learnt from
the two links above.

There are two things that I want to accomplish:

1. Access internet from my desktop by using a network cable connected to
a notebook which connects to the internet using wireless router. I
thought this would be possible by simply connecting the two computer via
a network cable but...

2. Setup a small wireless home network to share files between 2
notebooks and the desktop.


Now, what do I have:

one notebook win xp part of a domain, XYZ. Simple file sharing is turned
on.
another notebook win xp, workgroup XYZ
one desktop with xp home, workgroup XYZ

I understand that each computer will have a different ip address
assigned to it by the router.


I read somewhere that I can setup a ICS. I tried sharing my wireless
network on the notebook Network properties>advanced tools>settings. Maybe
I did not enable all the options needed, but after connecting the
notebook to the desktop via a network cable, I could nont access the
network (internet) from the desktop while it was working fine on the
notebook. The network cable port on the notebook was lighted red, while
it was green on the desktop.

This is all I have. How to proceed? I really appreciate your help.

OK, I'm starting (just) to get the picture.

You have a total of 3 computers, a router, and a broadband modem. There are 3
possible scenarios to connect them.
1) Connect the router to the modem, and connect all 3 computers to the router.
2) Connect the router to the modem, computers 1 and 2 to the router, and the 3rd
computer to computer 1, thru a second connection.
3) Connect computer 1 to the modem, connect the router to a second connection on
computer 1, and connect computers 2 and 3 to the router.

Scenario #1 is the simplest by far. Scenario #2 is used when computer #3 can't
connect to the router. Scenario #3 is used when the modem doesn't have an
Ethernet port (either USB, or PPP/serial). When scenarios #2 and 3 are
necessary, computer #1 runs ICS to share the Internet connection.

Both scenarios #2 and 3 are hella more work than scenario #1, in the long run.
<http://nitecruzr.blogspot.com/2005/05/ics-is-ok-but-you-can-do-better.html>
http://nitecruzr.blogspot.com/2005/05/ics-is-ok-but-you-can-do-better.html

Which scenario describes your network? Let's start there. First, get the
physical layout described, then we have to mix in the domain issue.

 

[ab]

OK, I'm starting (just) to get the picture.

You have a total of 3 computers, a router, and a broadband modem. There are 3
possible scenarios to connect them.
1) Connect the router to the modem, and connect all 3 computers to the router.
2) Connect the router to the modem, computers 1 and 2 to the router, and the 3rd
computer to computer 1, thru a second connection.
3) Connect computer 1 to the modem, connect the router to a second connection on
computer 1, and connect computers 2 and 3 to the router.

Scenario #1 is the simplest by far. Scenario #2 is used when computer #3 can't
connect to the router. Scenario #3 is used when the modem doesn't have an
Ethernet port (either USB, or PPP/serial). When scenarios #2 and 3 are
necessary, computer #1 runs ICS to share the Internet connection.

Both scenarios #2 and 3 are hella more work than scenario #1, in the long run.
<http://nitecruzr.blogspot.com/2005/05/ics-is-ok-but-you-can-do-better.html>
http://nitecruzr.blogspot.com/2005/05/ics-is-ok-but-you-can-do-better.html

Which scenario describes your network? Let's start there. First, get the
physical layout described, then we have to mix in the domain issue.

Currently, I have all three computers connected to the modem
individually. The workgroup on two of them is the same as the domain on
one. Now, do I have to share specific folders in order to see these
computers on the others?

 

[Chuck]

Currently, I have all three computers connected to the modem
individually. The workgroup on two of them is the same as the domain on
one. Now, do I have to share specific folders in order to see these
computers on the others?

You have to have A share on any computer that you wish to be seen from any
others. Whether it's a default (admin) share, or a root share that you setup,
or a specific folder share that you setup, is your decision.

Now, if you have 3 computers with individual direct connections to the modem,
are you paying for 3 accounts from the ISP? If so, you may wish to read this
article:
<http://nitecruzr.blogspot.com/2005/05/one-unique-case-where-ipxspx-may-help.html>
http://nitecruzr.blogspot.com/2005/05/one-unique-case-where-ipxspx-may-help.html

 

[ab]

You have to have A share on any computer that you wish to be seen from any
others. Whether it's a default (admin) share, or a root share that you setup,
or a specific folder share that you setup, is your decision.

Now, if you have 3 computers with individual direct connections to the modem,
are you paying for 3 accounts from the ISP? If so, you may wish to read this
article:
<http://nitecruzr.blogspot.com/2005/05/one-unique-case-where-ipxspx-may-help.html>
http://nitecruzr.blogspot.com/2005/05/one-unique-case-where-ipxspx-may-help.html

I misspoke, I have a modem and a router. The three computers are
connected to the router (so one ip address and one check to the isp).

I created a share on the desktop with permissions to share over the
network. I can see the two other computers, notebook1 and notebook2,
from this computer but cannot connect to any of them.

I created a share on notebook1, permissions to share over the network. I
cannot see any of the two other computers from this notebook.

On the share on notebook2 (the one with the domain), I am having trouble
enabling the permissions, I have on the sharing tab,

share this folder with 3 users.
under permissions> Add> asks to select user groups. Under location, it
shows only the notebook2 name.

From notebook2, I could not see any of the two computers. On right
click on My Network places> search for computers> I found notebook1 but
on connecting to it, an error message came : \\notebook1 is not
accessible. You may not have permission to use this network resource.
A similar thing happened for the desktop also, I found it but was unable
to connect to it.

I think there is a setting somewhere to allow the computers to share
their folders which i have not enabled.

Thanks for your help,

Merry Christmas and Happy New Year.

 

[Chuck]

I misspoke, I have a modem and a router. The three computers are
connected to the router (so one ip address and one check to the isp).

I created a share on the desktop with permissions to share over the
network. I can see the two other computers, notebook1 and notebook2,
from this computer but cannot connect to any of them.

I created a share on notebook1, permissions to share over the network. I
cannot see any of the two other computers from this notebook.

On the share on notebook2 (the one with the domain), I am having trouble
enabling the permissions, I have on the sharing tab,

share this folder with 3 users.
under permissions> Add> asks to select user groups. Under location, it
shows only the notebook2 name.

From notebook2, I could not see any of the two computers. On right
click on My Network places> search for computers> I found notebook1 but
on connecting to it, an error message came : \\notebook1 is not
accessible. You may not have permission to use this network resource.
A similar thing happened for the desktop also, I found it but was unable
to connect to it.

I think there is a setting somewhere to allow the computers to share
their folders which i have not enabled.

Thanks for your help,

Merry Christmas and Happy New Year.

Merry Christmas and Happy New Year to you too. It's good to use the classical
greeting that captures the real Holiday spirit.

Thanks, I'm glad you're behind a router. That makes this whole thing hella
easier. And you're safer.

OK, you're down to the "...not accessible...not have permission...." bit.
That's well known here. The usual problem is a misconfigured or overlooked
firewall, but there are other possibilities too.
<http://nitecruzr.blogspot.com/2005/10/irregularities-in-workgroup-visibility.html>
http://nitecruzr.blogspot.com/2005/10/irregularities-in-workgroup-visibility.html

If no help yet, provide "browstat status" and "ipconfig /all" from each
computer, so we can diagnose the problem. Read this article, and linked
articles, and follow instructions precisely:
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp

 

[ab]

Merry Christmas and Happy New Year to you too. It's good to use the classical
greeting that captures the real Holiday spirit.

Thanks, I'm glad you're behind a router. That makes this whole thing hella
easier. And you're safer.

OK, you're down to the "...not accessible...not have permission...." bit.
That's well known here. The usual problem is a misconfigured or overlooked
firewall, but there are other possibilities too.
<http://nitecruzr.blogspot.com/2005/10/irregularities-in-workgroup-visibility.html>
http://nitecruzr.blogspot.com/2005/10/irregularities-in-workgroup-visibility.html

If no help yet, provide "browstat status" and "ipconfig /all" from each
computer, so we can diagnose the problem. Read this article, and linked
articles, and follow instructions precisely:
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp

The firewall did not show any blocked messages when I had posted my
earlier message. When I tried to do connect to the desktop again after
restarting notebook2 (domain), a firewall message popped up on the
desktop (ZoneAlarm has blocked access to the NetBIOS.... access to TCP
Port 445 from TCP port 1062 has been blocked). I turned off the firewall
and couuld see the the share folder on the desktop from notebook2.

It seems like in the home version of zonealarm, one cannot creat a trust
network to allow access to some ports on a trusted network. I guess I
will have to find a different firewall.

Another question: how secure is this network? I have a 32-character WEP
key for the secured wireless connection. I know I am mixing the two up,
but is my file share network also secure such that no one outside can
look at these files?

I appreciate your help. There was no way I could have done this on my own!

 

[Chuck]

The firewall did not show any blocked messages when I had posted my
earlier message. When I tried to do connect to the desktop again after
restarting notebook2 (domain), a firewall message popped up on the
desktop (ZoneAlarm has blocked access to the NetBIOS.... access to TCP
Port 445 from TCP port 1062 has been blocked). I turned off the firewall
and couuld see the the share folder on the desktop from notebook2.

It seems like in the home version of zonealarm, one cannot creat a trust
network to allow access to some ports on a trusted network. I guess I
will have to find a different firewall.

Another question: how secure is this network? I have a 32-character WEP
key for the secured wireless connection. I know I am mixing the two up,
but is my file share network also secure such that no one outside can
look at these files?

I appreciate your help. There was no way I could have done this on my own!

I'm glad to help. That's the purpose of these forums.

First, ZoneAlarm Free can and should be configured to allow file sharing. You
simply identify the Local (Trusted) Zone to include the subnet. It's in there,
I promise.

If you're behind a NAT router, you're safe from Internet threats. A personal
firewall protects you from unknown threats from other computers on the subnet,
ie behind the router with you. Both a NAT router, and a personal firewall, are
critical components of a layered security strategy.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

Regretfully, I must warn you that using WEP WiFi protection is better than
nothing, but very little better. WEP is simply not adequate protection. You
need WPA, at a minimum, and WPA2 if your equipment supports it.
<http://nitecruzr.blogspot.com/2005/05/wep-just-isnt-enough-protection.html>
http://nitecruzr.blogspot.com/2005/05/wep-just-isnt-enough-protection.html
<http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html>
http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html

 

[ab]

I'm glad to help. That's the purpose of these forums.

First, ZoneAlarm Free can and should be configured to allow file sharing. You
simply identify the Local (Trusted) Zone to include the subnet. It's in there,
I promise.

If you're behind a NAT router, you're safe from Internet threats. A personal
firewall protects you from unknown threats from other computers on the subnet,
ie behind the router with you. Both a NAT router, and a personal firewall, are
critical components of a layered security strategy.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

Regretfully, I must warn you that using WEP WiFi protection is better than
nothing, but very little better. WEP is simply not adequate protection. You
need WPA, at a minimum, and WPA2 if your equipment supports it.
<http://nitecruzr.blogspot.com/2005/05/wep-just-isnt-enough-protection.html>
http://nitecruzr.blogspot.com/2005/05/wep-just-isnt-enough-protection.html
<http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html>
http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html

I did some looking around in the router configuration. I have NAT
enabled. Inside NAT, of the many options, there is UPnP setting which
seems useful but I am not sure. Then there are ALG settings, all of the
options are enabled.

The router also has a firewall, but I have not enabled it as of now.

Coming to the Wireless configuration. To someone in the non-networking
world, as soon as I saw 128-bit encryption in WEP, I assumed it was
secure like a brick wall. Thank you for pointing me in the right
direction. I can also educate my friends who insist on leaving their
wireless networks unsecured saying that no one can "watch" over their
data as it is being transmitted.

NOw, the router can also have WAP pre-shared key and WPA radius
encryptions. In both of these, there is something called WPA Unicast
cipher suite with three options WPA (TKIP), WPA2(AES), and WPA2(Mixed).
I tried setting up WPA pre-shared key with Hex 64 character pre-shared
key format, but to my surprise the pre-shared key field takes only 63
characters and gives an error (to enter 64 characters) when I press
apply. I have not been able to figure this out. Also, on the notebook
accessing the wireless network, it seems the maximum key length can be
26 characters.

When I enabled the WPA2(AES) with a 26 key Passphrase, I could not
connect the notebook to the wireless network (even after changing the
settings of the wireless connection from WEP to WPA-AES). Dont know why.

Also wondering if I can setup the WPA radius encryption and the IEEE
authentication. Basically, I bought the router and picket the first set
of settings that worked. A resource (book?) which explains all the
various options would be very helpful.

I am still trying to figure out the zone alarm thing.

 

[ab]

I'm glad to help. That's the purpose of these forums.

First, ZoneAlarm Free can and should be configured to allow file sharing. You
simply identify the Local (Trusted) Zone to include the subnet. It's in there,
I promise.

If you're behind a NAT router, you're safe from Internet threats. A personal
firewall protects you from unknown threats from other computers on the subnet,
ie behind the router with you. Both a NAT router, and a personal firewall, are
critical components of a layered security strategy.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

Regretfully, I must warn you that using WEP WiFi protection is better than
nothing, but very little better. WEP is simply not adequate protection. You
need WPA, at a minimum, and WPA2 if your equipment supports it.
<http://nitecruzr.blogspot.com/2005/05/wep-just-isnt-enough-protection.html>
http://nitecruzr.blogspot.com/2005/05/wep-just-isnt-enough-protection.html
<http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html>
http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html

it seems like the zonealarm thing has worked out. The access from the
notebook was from a specific ip address, I allowed it as a trusted zone,
and I can transfer files between the two computers. Cheers!

 

[Chuck]

it seems like the zonealarm thing has worked out. The access from the
notebook was from a specific ip address, I allowed it as a trusted zone,
and I can transfer files between the two computers. Cheers!

Great! That's a good start!

Now, for specific questions about WPA authentication (PSK vs Radius) and
encryption (TKIP, AES, and Mixed), the best place for education is the DSLR WiFi
Security Forum:
http://www.dslreports.com/forum/wsecurity

Do yourself a favour, and register before posting. Registration is free, and
you can use DSLR Forums better when registered.