I've got a hard wire network with 3 computers hooked up all running XP pro,
with one computer using dailup (ICS) to get on the net. All 3 computers can
surf the net nicely and file share. So, what I want to do is add wireless
capability to the network for a little more freedom of movment for my laptop.
I purchased a Motorola WR850G wireless router and hooked into the network.
I can get the wired and wireless computers to share files, but can not get on
the internet with the wireless laptop.
I've gotten some ideas on how to get the dailup to work with
the wireless router. But when I get into the configration of the router I
just don't know quite where to start.
I'm hoping someone might know how to config the Motorola WR850G wireless
router to work with the dailup and the steps involved.
Help please THANKS
I presume you have Computer A with a modem, and an Ethernet connection, running
ICS. Computer A Ethernet is connected to a hub or switch, which then connects
to Computers B and C.
If I'm correct, you need to connect Computer D, thru the WR850G, to the other
computers. You're going to have to use the WR850G as a WAP, not as a router.
Computer A will provide DHCP, and routing, for your LAN.
1) Disable DHCP on the WR850G.
2) Connect Computers A, B, and C, as peers to the LAN side of the WR850G.
3) Change the LAN address of the WR850G from 192.168.n.1 to something like
192.168.0.99 (gotta keep it on 192.168.0/24 subnet).
4) Computers B, C, and D will have to use DHCP to get their settings from
Computer A.
Step 4 is unfortunately where you have to compromise your security. Normally,
for a wireless LAN, I recommend all computers use fixed IP addresses, with no
DHCP, to give one more barrier to a wireless connection hijacker.
Unfortunately, ICS comes with DHCP.
Here's a story about somebody's very stupid wireless neighbor. Don't expect all
wireless neighbors to be this stupid.
<
http://www.canoe.ca/NewsStand/LondonFreePress/News/2003/11/22/264890.html>.
The point is, you need to protect a wireless LAN with more precautions than just
the NAT protection on the router.
Change the router management password, and disable remote (WAN) management.
Enable WPA, with non-trivial (non-guessable) values for encryption. (No "My dog
has fleas").
Enable MAC filtering.
Install a software firewall on every computer, and enable file sharing for the
subnet only.
Don't disable SSID broadcast - some configurations require the SSID broadcast.
But change the SSID itself - to something that doesn't identify you, or the
equipment.
Enable the router activity log. Examine it regularly. Know what each
connection listed represents - you? a neighbor?.
Use non-trivial accounts and passwords on every computer connected to a wireless
LAN. Disable or delete the Guest userid. Rename Administrator, to a
non-trivial value, and give it a non-trivial password. Never use the
Administrator renamed account for day to day activities, only when intentionally
doing administrative tasks. Disable Simple File Sharing.
Stay educated - know what the threats are. Newsgroups alt.internet.wireless and
microsoft.public.windows.networking.wireless are good places to start.
--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.
