Page 36 / 71 Scroll up to view Page 31 - 35
33
Setting Up: Advanced
Linksys EA-Series
3.
Follow the on-screen instructions until setup is complete.
To share an Internet connection
NOTE
This is a complex process, so this procedure assumes that you have
some networking knowledge.
To add another router to share an Internet connection:
This topic covers cases one and two above
1.
Determine the IP address range for your upstream (office or building)
network.
To determine the address range by using a Windows computer:
a.
Connect your computer into your upstream network’s router.
b.
Click
Start
,
Run
, type
CMD
, then click
OK
. The command prompt
window appears.
c.
Type
ipconfig
, then press
Enter
.
TIP
Although you can determine your computer’s IP address in many
ways, this method is very fast.
d.
Take note of the IP address. In this example, the IP address is
192.168.100.192.
To determine the address range by using a Mac computer:
a.
Connect your computer into your upstream network’s router.
b.
From the
Dock
, click
System preferences
, click
Network
, then click
Ethernet
in the window to the left. A network status window appears.
c.
Take note of the IP address. In this example, the IP address is
192.168.100.139.
Example: The above examples show that upstream IP addresses are on
the 192.168.100.0 network. (The “0” indicates the entire network.) Your
upstream network’s address may be different. The default address of
your new Linksys router is 192.168.1.1. In setting up one router behind
another, you must make sure that the local network on your new router is
different than the network of your upstream router. In the above example,
because the default local network on your Linksys router 192.168.1.0 is
on a different subnet than the office network’s 192.168.100.0, you will be
able to place your Linksys router behind the other router.
Page 37 / 71
34
Setting Up: Advanced
Linksys EA-Series
2.
Connect an Ethernet network cable to a LAN/Ethernet port on your
upstream network to the yellow
Internet
port on your router.
CAUTION
Connect the upstream network to your router’s yellow
Internet
port,
not
one of the blue Ethernet ports. If you connect to an
Ethernet port, you create IP addressing problems for the office
network.
TIPS
An office network often has a wall plate with an Ethernet port that
you can connect to.
If you are doing this in a home environment (without wall ports),
connect an Ethernet network cable between a LAN port on your
upstream router and the
Internet
port on your Linksys router.
3.
Run Cisco Connect on each computer that you want to connect to
the Linksys router. Each computer needs either a wired or wireless
connection to the Linksys router. For more information, see “How to
connect a computer to your network” on page 12.
The computers that are connected to the Linksys router are now on the same
network, and are isolated from the upstream network. However, you will still
have access to the Internet through the upstream router (by way of your Linksys
router). Because two routers are between your computer and the Internet,
Internet traffic undergoes two network address translations. This is sometimes
referred to as
Double NAT
.
Your computers can also use the built-in capabilities of your Linksys router,
such as parental controls. If you need further control over the type of content
your employees or family access, you can create an account with an Internet
filtering site such as
www.opendns.com
or
www.bsecure.com
. After you
create an account with them, use their DNS in place of your ISP’s DNS.
To use their DNS:
Setup > Basic Setup
1.
Log into the browser-based utility (see “How to open the browser-based
utility” on page 20).
2.
Click the
Setup
tab, then click the
Basic Setup
page.
3.
Complete the
Static DNS
fields with the information provided by your
content filtering provider.
4.
Click
Save Settings
.
To extend your network
This topic covers cases three and four above.
NOTE
This is a complex process, so this procedure assumes that you have
some networking knowledge.
Page 38 / 71
35
Setting Up: Advanced
Linksys EA-Series
To extend your network or add wireless capabilities:
1.
If you want to extend your network, you may also follow the instructions
above. One example of this might be to provide a separate wireless
network for your children to keep their wireless network traffic separate
from your wireless network. You might also want to isolate one network
from another network so that network shares aren’t visible across
networks. In this case, use an Ethernet cable to connect the
Internet
port of the downstream router to one of the LAN ports of the upstream
router. Make sure that the local network subnets on the two routers are
different.
- OR -
You can extend your network by turning the downstream router into an
access point. (See “How to use a router as an access point” on page 31).
When you use a router as an access point, computers connected to the
access point are on the same IP subnet as all other devices connected to
the router. File, printer, and media sharing is much easier if all devices are
on the same subnet.
How to expose a device to the Internet
For
ALL
Why would I expose a device to the Internet?
If you are operating a web
server, a mail server, or a web camera, you may want to expose that device to
the Internet so anybody can access it. Your router includes a
DMZ
(Demilitarized
Zone) feature that forwards all inbound ports presented on the WAN interface,
except those that are specifically forwarded, to an individual IP address or
MAC address. This feature is normally not used, because it presents significant
security risks to the device that you designate for the DMZ. The DMZ device is
not protected by the built-in firewalls, Internet filters, or router web filters, and
is open to attacks from hackers.
A much better way of “exposing” devices to the Internet would be to use port
forwarding. See “How to set up port forwarding” on page 52.
To set up a device in the DMZ:
Applications & Gaming > DMZ
1.
Configure your device with a static IP address. See your device’s
documentation for help with setting a static IP address or use DHCP
reservation (see “How to set up the DHCP server on your router” on
page 24).
2.
Log into the browser-based utility (see “How to open the browser-based
utility” on page 20).
3.
Click the
Applications & Gaming
tab, then click the
DMZ
page.
4.
Select
Enabled
.
5.
In the
Source IP Address
section, select
Any IP Address
to allow access
to your DMZ device from the entire Internet, or select the
source range
button and enter a range of allowed source addresses.
6.
In the
Destination
section, enter the last three digits of the IP address of
the device that will be in the DMZ. The rest of the IP address is already
completed.
7.
Click
Save Settings
to apply your changes.
If you prefer to specify the 12-digit MAC address of the device you want
to place in the DMZ instead of setting up a DHCP address reservation,
you can replace Step 6 with the following steps:
a.
Click
Enabled
.
b.
In the
Source IP Address
section, select
Any IP Address
(default) to
allow access to your DMZ device from the entire Internet, or select the
source range
button and enter a range of allowed source addresses.
Page 39 / 71
36
Setting Up: Advanced
Linksys EA-Series
c.
In the
Destination
section, select
MAC Address
, then click
DHCP
Client Table
. A separate window opens showing the current DHCP
client list.
TIP
The DHCP Client Table is only available if you select
MAC Address
.
d.
Click
Select
next to the device that you want to place in the DMZ. In
this example, the first device was selected. The corresponding MAC
address was copied into the
MAC Address
field as shown below.
e.
Click
Save Settings
to apply your changes.
Page 40 / 71
37
Improving Security
Linksys EA-Series
37
How do I know if my network is secure?
For
ALL
If you configured your router using Cisco Connect, your network is secure.
During setup, Cisco Connect creates a name for your network, enables industry-
standard WPA/WPA2 wireless security, and assigns a highly secure password for
your wireless network and the administrator’s account.
To confirm that your network is secure:
1.
Run Cisco Connect.
2.
In the upper-right corner of the screen, check for the green light that
indicates your router is online and secure. If the green light is on, no
additional action is required to secure your network.
Network security following a manual
setup
For
ALL
If you configured your router manually (not recommended), you must manually
configure security.
To manually set your router’s password:
Administration > Management
1.
Log into the browser-based utility (see “How to open the browser-based
utility” on page 20).
2.
Click the
Administration
tab, then click the
Management
page.
3.
In the
Router Access
section, enter a secure password for your router,
then re-enter the password to confirm it. Your password should be
at least eight characters in length. The most secure type of password
should include a mix of uppercase and lowercase letters, numbers, and
punctuation.
4.
Click
Save Settings
at the bottom of the screen.
To manually set your router’s network name (SSID):
Wireless > Wireless Settings
1.
Log into the browser-based utility (see “How to open the browser-based
utility” on page 20).
2.
Click the
Wireless
tab, then click the
Wireless Settings
page.
3.
For
Configuration View
, select
Manual
.
4.
Enter a new network name in the
Network Name (SSID)
field, then click
Save Settings
at the bottom of the screen.
Improving Security

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top