Reference Manual for the Wireless Cable Modem Gateway CG814WG v2

Protecting Your Network

5-1

Chapter 5

Protecting Your Network

This chapter describes how to use the firewall features of the CG814WG v2 Wireless Cable

Modem Gateway to protect your network.

Protecting Access to Your CG814WG v2 Gateway

For security reasons, the gateway has its own user name and password. Also, after a period of

inactivity for a set length of time, the administrator login will automatically disconnect. When

prompted, enter

admin

for the gateway User Name and

password

for the gateway Password. You

can use procedures below to change the gateway's password and the amount of time for the

administrator’s login timeout.

Note:

The user name and password are not the same as any user name or password your may use

to log in to your Internet connection.

NETGEAR recommends that you change this password to a more secure password. The ideal

password should contain no dictionary words from any language, and should be a mixture of both

upper and lower case letters, numbers, and symbols.

Your password can be up to 30 characters.

Procedure 5-1:

Changing the Built-In Password

1.

Log in to the gateway at its default LAN address of

with its default User

Name of

admin

, default password of

password

, or using whatever Password and LAN

address you have chosen for the gateway.

Figure 5-1:

Log in to the gateway

Reference Manual for the Wireless Cable Modem Gateway CG814WG v2

5-2

Protecting Your Network

2.

From the main menu of the browser interface, under the Maintenance heading, select Set

Password to bring up the dialog box shown below.

Figure 5-2:

Set Password dialog box

3.

To change the password, first enter the old password, and then enter the new password twice.

4.

Click

Apply

to save your changes.

Note:

After changing the password, you will be required to log in again to continue the

configuration.

If you have backed up the gateway settings previously, you should do a new

backup so that the saved settings file includes the new password.

Blocking Keywords, Sites, and Services

The

gateway provides a variety of options for blocking Internet based content and

communications services.

With its content filtering feature, the CG814WG v2 Gateway

prevents objectionable content from reaching your PCs. The CG814WG v2 allows you to control

access to Internet content by screening for keywords within Web addresses.

It also has the

capability to block access to all sites except those that are explicitly allowed.

Key content

filtering options include:

•

Blocking access from your LAN to Internet locations that contain keywords that your specify.

•

Blocking access to Web sites that you specify as off-limits.

•

Allowing access to only Web sites that you specify as allowed.

The section below explains how to configure your

gateway to perform these functions.

Reference Manual for the Wireless Cable Modem Gateway CG814WG v2

Protecting Your Network

5-3

Blocking Keywords and Domains

The CG814WG v2 Gateway allows you to restrict access to Internet content based on functions

such as Web address keywords and Web domains.

A domain name is the name of a particular Web site. For example, for the address

www.NETGEAR.com, the domain name is NETGEAR.com.

1.

Log in to the gateway at its default LAN address of

with its parent default

User Name of

superuser

, default password of

password

, or using whatever Password and

LAN address you have chosen for the gateway in parent mode.

2.

Click on the Block Sites link of the Content Filtering menu.

Figure 5-3:

Block Sites menu

Note:

The Block Sites feature must be configured while logged in as a parent.

Reference Manual for the Wireless Cable Modem Gateway CG814WG v2

5-4

Protecting Your Network

3.

To enable keyword blocking or Domain Blocking, check the appropriate Enable box.

4.

Enter Keywords into the Keyword List by typing then in the Add Keyword box, then, click

Add Keyword.

Some examples of Keyword applications follow:

•

If the keyword “XXX” is specified, the URL <http://www.badstuff.com/xxx.html> is

blocked.

•

If the keyword “.com” is specified, only Web sites with other domain suffixes (such as

.edu or .gov) can be viewed.

•

Enter the keyword “.” to block all Internet browsing access.

Up to eight entries are supported in the Keyword list.

5.

Enter Domains into the Domain List by typing then in the Add Domain box, then, click Add

Domain.

If the domain “badstuff.com” is specified, the URL <http://www.badstuff.com/xxx.html> is

blocked, along with all other urls in the badstuff.com site.

Up to eight entries are supported in the Keyword list.

6.

To block access to the domains in the Domain List, select Deny Domains.

To allow access to only the domains in the Domain List, select Allow Domains. If the domain

“goodstuff.com” is specified, you will be able to access only sites on the goodstuff site.

7.

To delete a keyword or domain, select it from the list, click Remove Keyword or Remove

Domain.

8.

Click

Apply

to save your settings.

Using MAC Filtering

By default, any PC will be allowed access to the Internet through your Gateway. MAC Filtering

allows you to block access to the Internet to any PC on your LAN based on the hardware address

of its ethernet or wireless adapter: the MAC address.

Note:

The MAC Filtering feature must be configured while logged in as a parent.

Reference Manual for the Wireless Cable Modem Gateway CG814WG v2

Protecting Your Network

5-5

1.

Log in to the gateway at its default LAN address of

with its parent default

User Name of

superuser

, default password of

password

, or using whatever Password and

LAN address you have chosen for the gateway in parent mode.

2.

Click the MAC Filtering link on the Advanced menu. At the top of the page is a list of

Trusted

Devices

that are currently connected to the Gateway.

To add a device to the MAC Filtering list:

1.

Enter the MAC address:

•

If the desired device is in the

Trusted

Devices

table, click the radio button of

that PC to capture is MAC address.

•

If the desired device is not in the

Trusted

Devices

table, you can manually enter

the MAC address of the PC you wish to

block.

•

If no Device Name automatically

appears, you can type a descriptive name

for the PC that you are adding.

2.

When you have finished entering the MAC

address, click

Add

, and click

Apply

.

To delete a device from the MAC Filtering

list:

1.

Select the MAC address of the PC you want

to delete from the list.

2.

Click

Delete

to delete the entry.

3.

Click

Apply

to activate the settings.

Figure 5-4:

MAC Filtering menu