3G Broadband Wireless Router MBR624GU User Manual

Managing Your Network

4-11

v1.1, March 2009

Examples of Log Messages

Following are examples of log messages. In all cases, the log entry shows the timestamp as: Day,

Year-Month-Date Hour:Minute:Second.

Activation and Administration

Tue, 2002-05-21 18:48:39 - NETGEAR activated

[This entry indicates a power-up or reboot with initial time entry.]

Tue, 2002-05-21 18:55:00 - Administrator login successful - IP:192.168.0.2

Thu, 2002-05-21 18:56:58 - Administrator logout - IP:192.168.0.2

[This entry shows an administrator logging in and out from IP address 192.168.0.2.]

Tue, 2002-05-21 19:00:06 - Login screen timed out - IP:192.168.0.2

[This entry shows a time-out of the administrator login.]

Wed, 2002-05-22 22:00:19 - Log emailed

[This entry shows when the log was e-mailed.]

Dropped Packets

Wed, 2002-05-22 07:15:15 - TCP packet dropped - Source:64.12.47.28,4787,WAN -

Destination:134.177.0.11,21,LAN - [Inbound Default rule match]

Sun, 2002-05-22 12:50:33 - UDP packet dropped - Source:64.12.47.28,10714,WAN -

Destination:134.177.0.11,6970,LAN - [Inbound Default rule match]

Sun, 2002-05-22 21:02:53 - ICMP packet dropped - Source:64.12.47.28,0,WAN -

Destination:134.177.0.11,0,LAN - [Inbound Default rule match]

These entries show an inbound FTP (port 21) packet, User Datagram Protocol (UDP) packet (port

6970), and Internet Control Message Protocol (ICMP) packet (port 0) being dropped as a result of

the default inbound rule, which states that all inbound packets are denied.

3G Broadband Wireless Router MBR624GU User Manual

4-12

Managing Your Network

v1.1, March 2009

Enabling Security Event E-mail Notification

To set up the router so that you can receive logs and alerts by e-mail, select Email from the router

menu to display the following screen:

•

Turn e-mail notification on

. Select this check box if you want to receive e-mail logs and

alerts from the router.

•

Send alerts and logs via email

.

–

Send To This E-mail Address.

Enter the e-mail address where you want to send the alerts

and logs. Use a full e-mail address, such as [email protected].

–

Outgoing Mail Server

. Enter the name or IP address of the outgoing SMTP mail server of

your ISP (such as mail.myISP.com).

–

My Mail Server requires authentication

. Select this check box if you need to log in to

your SMTP server to send E-mail. If you select this feature, you must enter the user name

and password for the mail server.

Figure 4-8

Tip:

If you cannot remember this information, check the settings in your

e-mail program.

3G Broadband Wireless Router MBR624GU User Manual

Managing Your Network

4-13

v1.1, March 2009

•

Send alert immediately

. Select the corresponding check box if you would like immediate

notification of a significant security event, such as a known attack, port scan, or attempted

access to a blocked site.

•

Send logs according to this schedule

. Specifies how often to send the logs: Hourly, Daily,

Weekly, or When Full.

–

Day for sending log

. Specifies which day of the week to send the log. Relevant when the

log is sent weekly.

–

Time for sending log

. Specifies the time of day to send the log. Relevant when the log is

sent daily or weekly.

If the

Weekly

,

Daily

, or

Hourly

option is selected and the log fills up before the specified

period, the log is automatically e-mailed to the specified e-mail address. After the log is sent, it

is cleared from the router’s memory. If the router cannot e-mail the log file, the log buffer

might fill up. In this case, the router overwrites the log and discards its contents.

Running Diagnostic Utilities and Rebooting the Router

The router has a diagnostics feature. You can use the Diagnostics screen to perform the following

functions from the router:

•

Ping an IP address to test connectivity to see if you can reach a remote host. If Ping VPN is

enabled, the ping packet always goes through the VPN if the VPN tunnel is enabled and

working.

•

Perform a DNS lookup to test if an Internet name resolves to an IP address to verify that the

DNS server configuration is working.

•

Display the routing table to identify what other routers the router is communicating with.

•

Reboot the router to enable new network configurations to take effect or to clear problems

with the router’s network connection.

3G Broadband Wireless Router MBR624GU User Manual

4-14

Managing Your Network

v1.1, March 2009

From the main menu, under the Maintenance heading, select Router Diagnostics to display the

Diagnostics screen:

Enabling Remote Management

Using the Remote Management screen, you can allow a user or users on the Internet to configure,

upgrade, and check the status of your router.

Configuring Remote Management

1.

Log in to the router at its default LAN address of

with its default user name

of

admin

default password of

password

, or using whatever user name, password and LAN

address you have chosen for the router.

Figure 4-9

Tip:

Be sure to change the router default password to a very secure password. The ideal

password should contain no dictionary words from any language, and should be a

mixture of letters (both upper-case and lower-case), numbers, and symbols. Your

password can be up to 30 characters.

3G Broadband Wireless Router MBR624GU User Manual

Managing Your Network

4-15

v1.1, March 2009

2.

Under the Advanced heading of the main menu, select Remote Management to display the

Remote Management screen:

3.

Select the

Turn Remote Management On

check box.

4.

Specify which external addresses will be allowed to access the router’s remote management.

For security, restrict access to as few external IP addresses as practical:

•

To allow access from any IP address on the Internet, select

Everyone

.

•

To allow access from a range of IP addresses on the Internet, select

IP address range

.

Enter a beginning and ending IP address to define the allowed range.

•

To allow access from a single IP address on the Internet, select

Only This Computer

.

Enter the IP address that will be allowed access.

5.

Specify the port number that will be used for accessing the management interface.

Web browser access normally uses the standard HTTP service port 80. For greater security,

you can change the remote management Web interface to a custom port by entering that

number in the field provided. Choose a number between 1024 and 65535, but do not use the

number of any common service port. The default is 8080, which is a common alternate for

HTTP.

6.

Click

Apply

to have your changes take effect.

When accessing your router from the Internet, you will type your router WAN IP address in

your Internet browser address or location field, followed by a colon (:) and the custom port

number. For example, if your external address is 134.177.0.123 and you use port number

8080, enter:

Figure 4-10