PDA

View Full Version : Help setting up network


MJB
09-01-2005, 16:25
I've been checking on here for the last 24 hours gathering info on how to set up a home network.

I have a PC, with a Linksys wireless g router (WRT54-G) and a laptop using a wireless card, plus another PC running from a wireless network adaptor.

I thought I was doing OK (as I have internet access working fine) but someone has just informed me that I need to configure encryption on the router to stop neighbours or anyone else "accidentally" looking at my files etc. The downside is I don't know how to do it and now I'm a bit worried :dunce:

Is there anyone who can talk me through whatever I need to do please? All machines are using XP pro BTW.

Aragorn
09-01-2005, 16:33
For starters you could have a look at

http://www.cableforum.co.uk/kb/78/how-to-secure-your-wireless-network in the knowledgebase.

Depends how paranoid you are! At minimum you want to change the default SSID and hide it. Then you either do WEP and/or MAC filtering, all of which should be pretty straightforward on the Linksys.

Have a read an let us know if you get probs.

HTH

MJB
09-01-2005, 16:41
For starters you could have a look at

http://www.cableforum.co.uk/kb/78/how-to-secure-your-wireless-network in the knowledgebase.

Depends how paranoid you are! At minimum you want to change the default SSID and hide it. Then you either do WEP and/or MAC filtering, all of which should be pretty straightforward on the Linksys.

Have a read an let us know if you get probs.

HTH

Thanks for this. I've read it and am even more baffled :shocked: It tells me about different things but not HOW to actually do it. And which one do I choose as there doesn't seem to be a definitive method?

Is 'enabling encrytion' done on my PC or do I have to physically do something to the router?

jellybaby
09-01-2005, 16:42
go to http://192.168.1.1 and enter password (default is admin). You will then be able to change the required settings

Aragorn
09-01-2005, 22:23
Thanks for this. I've read it and am even more baffled :shocked: It tells me about different things but not HOW to actually do it. And which one do I choose as there doesn't seem to be a definitive method?

Is 'enabling encrytion' done on my PC or do I have to physically do something to the router?

MJB,

A quick guide to setting these options:

1. Changing and hiding SSID - This is straightforward as it is an option on the main screen of the Linksys router admin page. Open the page as jellybaby suggested and change the SSID name to something other than Linksys (eg MJB) and disable SSID broadcast. On your wireless clients you will need to add the hidden SSID to the 'Prefered Networks' list in the Wireless Networks properties tab for the wireless card. (If you're using SP2, have a look here for screen shots - http://www.microsoft.com/technet/community/columns/cableguy/cg0804.mspx)
This will make sure that casual observers cannot see your wireless network.

2. MAC address filtering - On the Linksys admin pages there should be a Wireless tab (probably under advanced). On there you will see something like 'Station MAC Filter' enable/disable. With all your own clients active, click on the Active MAC table and write down the MAC addresses shown. Then click on 'Edit MAC Filter' to enter these MAC addresses.
Once this is enabled only those MAC addresses you know about can connect - even if others can work out your hidden SSID.

These two steps above will deter any casual 'freeloaders' wanting to use your bandwidth.

If you are concerned about encryption then you can enable WEP.

The WEP is enabled on the Linksys in the same place as the SSID hiding. Clicking on WEP settings allows you the generate a key using a word of your chosing. This WEP key must be delivered (Cut/paste to file and transfer by floppy/USB key) to each client. Each client must be configured (using the prefered networks tool above) to use the same key.
128 Bit WEP is usually enough to ensure that you home network is not eavesdropped.

HTH

nffc
09-01-2005, 22:29
Cor, didn't know we had a knowledge base on here...

Raistlin
09-01-2005, 22:52
go to http://192.168.1.1 and enter password (default is admin). You will then be able to change the required settings

I would STRONGLY suggest that you change this password as soon as you get a chance.

Raistlin
09-01-2005, 22:54
MJB,

A quick guide to setting these options:

1. Changing and hiding SSID - This is straightforward as it is an option on the main screen of the Linksys router admin page. Open the page as jellybaby suggested and change the SSID name to something other than Linksys (eg MJB) and disable SSID broadcast. On your wireless clients you will need to add the hidden SSID to the 'Prefered Networks' list in the Wireless Networks properties tab for the wireless card. (If you're using SP2, have a look here for screen shots - http://www.microsoft.com/technet/community/columns/cableguy/cg0804.mspx)
This will make sure that casual observers cannot see your wireless network.

2. MAC address filtering - On the Linksys admin pages there should be a Wireless tab (probably under advanced). On there you will see something like 'Station MAC Filter' enable/disable. With all your own clients active, click on the Active MAC table and write down the MAC addresses shown. Then click on 'Edit MAC Filter' to enter these MAC addresses.
Once this is enabled only those MAC addresses you know about can connect - even if others can work out your hidden SSID.

These two steps above will deter any casual 'freeloaders' wanting to use your bandwidth.

If you are concerned about encryption then you can enable WEP.

The WEP is enabled on the Linksys in the same place as the SSID hiding. Clicking on WEP settings allows you the generate a key using a word of your chosing. This WEP key must be delivered (Cut/paste to file and transfer by floppy/USB key) to each client. Each client must be configured (using the prefered networks tool above) to use the same key.
128 Bit WEP is usually enough to ensure that you home network is not eavesdropped.

HTH

Nice post.

One thing that I would add is that when you are changing any settings on your router it is best to do it from a machine that is Hardwired to it. That way (if you nause up the wireless settings) you won't lose connectivity!

Good luck, if you get any problems just post back here. I've got the same router myself and it's an abolute gem!

Neil
09-01-2005, 22:59
All the info you need is right here (http://www.cableforum.co.uk/board/showthread.php?t=8435).

HTH.

MJB
10-01-2005, 09:32
Thanks a million everyone. You're all stars.


I'm hoping to get it sorted by the end of the week :tu:

MJB
10-01-2005, 20:11
OK, I've spsent all day playing around and have hit a few problems.

Firstly, when I renamed my SSID the laptop refused to connect to the internet via the wireless card. As soon as I changed it back to the default, it worked.

My biggest headache now is this:
I've set up my main PC to connect to two laptop which are BOTH hardwired to the router (if that's the correct term i.e. NOT wireless). Both the laptops will see each other's files I've designated and the ones on my main PC. However, my main PC will only see one of the laptops! When I try to look at the other one I'm told it cannot find the network, yet both are set up exactly the same. I've been ythrough the proccess three times today and ended up having a row with myself over it :mad:

Any ideas?

Aragorn
11-01-2005, 11:59
...

Firstly, when I renamed my SSID the laptop refused to connect to the internet via the wireless card. As soon as I changed it back to the default, it worked.



Did you change the SSID on the laptop as well?

With the new name did the laptop connect to the router? Could you ping (**) the router or the other systems at the time?


My biggest headache now is this:
I've set up my main PC to connect to two laptop which are BOTH hardwired to the router (if that's the correct term i.e. NOT wireless). Both the laptops will see each other's files I've designated and the ones on my main PC. However, my main PC will only see one of the laptops! When I try to look at the other one I'm told it cannot find the network, yet both are set up exactly the same. I've been ythrough the proccess three times today and ended up having a row with myself over it :mad:

Any ideas?

First thing I would check as above is whether you can ping all the computers :

** How to Ping (Apologies if you know this!) - On each system open a command prompt (<Start>,<Run>, "cmd") and type

ipconfig /all

When you have all your local IP addresses (should be 192.168.1.nnn, probably 100 upwards for default Linksys) you should verify that all systems can see each other,eg :

ping 192.168.1.100

If any one cannot see the others there is some connectivity issue with the router.

If everyone can see everyone else, try doing :

net view \\computername
or
net view \\<ip address>
on the system with problems

Let us know if these produce errors. If the bottom works but not the top there could be a name resolution problem. If both fail, there could be a security accounts problem. If so, have a look in the event viewer (<start>,<run>,"eventvwr") in the Security log for any failed logins and post back.

HTH (and apologies if I've missed anything obvious)

MJB
12-01-2005, 08:32
First thing I would check as above is whether you can ping all the computers :

** How to Ping (Apologies if you know this!) - On each system open a command prompt (<Start>,<Run>, "cmd") and type

ipconfig /all

When you have all your local IP addresses (should be 192.168.1.nnn, probably 100 upwards for default Linksys) you should verify that all systems can see each other,eg :

ping 192.168.1.100

If any one cannot see the others there is some connectivity issue with the router.


This is now my issue. My main PC cannot see my laptop as the ping times out and all packets lost. Now what? It sees my other laptop!

Mags
12-01-2005, 09:14
This is now my issue. My main PC cannot see my laptop as the ping times out and all packets lost. Now what? It sees my other laptop!

Have you got the Windows XP firewall enabled on either of the machines? If so, this may be blocking the pings from getting through?

at the command prompt, immediately after typing the ping command, type arp -a. e.g, my machine is 192.168.1.100, if I ping 192.168.1.5 which exists on my network, I get the following -

E:\>arp -a

Interface: 192.168.1.100 --- 0x6
Internet Address Physical Address Type
192.168.1.5 00-a0-24-cb-d4-84 dynamic

If I ping 192.168.1.6 which doesn't, I get this -

E:\>arp -a

Interface: 192.168.1.100 --- 0x6
Internet Address Physical Address Type
192.168.1.6 00-00-00-00-00-00 invalid

Note the Physical address is all 0's and type is invalid

If you get the former and the ping isn't working, the most likely cause is you have a firewall on the machine

Mags

Aragorn
12-01-2005, 10:25
This is now my issue. My main PC cannot see my laptop as the ping times out and all packets lost. Now what? It sees my other laptop!

How about the other way around? Can the laptop ping the PC?

Have you tried backing out the wireless changes?

Did you try the Net View command to that laptop anyway? Some firewalls may block a ping but allow Netbeui (netbios?) traffic.

You could also look at differences between the two laptops, eg look at the properties of the connection on each machine and check that they have the same services running (see attachment for example).

HTH

MJB
12-01-2005, 10:28
Have you got the Windows XP firewall enabled on either of the machines? If so, this may be blocking the pings from getting through?

at the command prompt, immediately after typing the ping command, type arp -a. e.g, my machine is 192.168.1.100, if I ping 192.168.1.5 which exists on my network, I get the following -

E:\>arp -a

Interface: 192.168.1.100 --- 0x6
Internet Address Physical Address Type
192.168.1.5 00-a0-24-cb-d4-84 dynamic

If I ping 192.168.1.6 which doesn't, I get this -

E:\>arp -a

Interface: 192.168.1.100 --- 0x6
Internet Address Physical Address Type
192.168.1.6 00-00-00-00-00-00 invalid

Note the Physical address is all 0's and type is invalid

If you get the former and the ping isn't working, the most likely cause is you have a firewall on the machine

Mags

Both XP firewalls are OFF.

Not sure what you mean by the arp -a. I type in ping 192.168.1.105arp -a and get told it's a bad parameter????

Aragorn
12-01-2005, 10:34
Both XP firewalls are OFF.

Not sure what you mean by the arp -a. I type in ping 192.168.1.105arp -a and get told it's a bad parameter????
It should be

ping 192.168.1.105
arp -a

(ie separate commands, one after the other)

HTH

MJB
12-01-2005, 10:39
OK I'm getting somewhere but how do I cut & paste info from the cmd prompt?

SMHarman
12-01-2005, 10:41
I would STRONGLY suggest that you change this password as soon as you get a chance.
And write it on a sticky label and stick this to the router. This does not create a major security risk as if someone is standing next to the router all the wireless security in the world is not going to stop them plugging a piece of Cat 5 in the back of it.

ian@huth
12-01-2005, 10:46
OK I'm getting somewhere but how do I cut & paste info from the cmd prompt?

You have first to mark the area that you want to copy. There is a button with a dotted sqare that you click then drag the white cursor over the area to copy. Then click the copy button.

MJB
12-01-2005, 10:52
OK! This is what I get: 102 is the laptop and 105 my main PC.


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\M Boyt>ping 192.168.1.102
Pinging 192.168.1.102 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.168.1.102:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Documents and Settings\M Boyt>arp -a
Interface: 192.168.1.105 --- 0x2
Internet Address Physical Address Type
192.168.1.1 00-0c-41-9d-d3-48 dynamic
192.168.1.102 00-02-3f-34-39-82 dynamic
C:\Documents and Settings\M Boyt>ping 192.168.1.105
Pinging 192.168.1.105 with 32 bytes of data:
Reply from 192.168.1.105: bytes=32 time<1ms TTL=128
Reply from 192.168.1.105: bytes=32 time<1ms TTL=128
Reply from 192.168.1.105: bytes=32 time<1ms TTL=128
Reply from 192.168.1.105: bytes=32 time<1ms TTL=128
Ping statistics for 192.168.1.105:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
C:\Documents and Settings\M Boyt>arp -a
Interface: 192.168.1.105 --- 0x2
Internet Address Physical Address Type
192.168.1.1 00-0c-41-9d-d3-48 dynamic
C:\Documents and Settings\M Boyt>

Aragorn
12-01-2005, 11:45
The second ping is a loopback - ie PC pinging itself. How about the laptop pinging PC?

Also, can you confirm from the ipconfig /all on the laptop that the MAC address 00-02-3f-34-39-82 is correct. If it is, something on the laptop is blocking the ping - usually a firewall!

Another thing to try on the laptop is ping 127.0.0.1 (a loopback test), and also try pinging the 'problem' laptop from the other laptop.

HTH

MJB
12-01-2005, 12:02
Sorted :D


I'd turned off the XP firewall but still had on the AntiVirus firewall :dunce:

One more time, THANK YOU Aragorn and all. Very sincerely appreciated :tu: