Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

6-16

Advanced Configuration

202-10090-01, April 2005

3.

Select Private if you want to limit access to the LAN only. The static route will not be reported

in RIP.

4.

Select Active to make this route effective.

5.

Type the Destination IP Address of the final destination.

6.

Type the IP Subnet Mask for this destination.

If the destination is a single host, type 255.255.255.255.

7.

Type the Gateway IP Address, which must be a router on the same LAN segment as the router.

8.

Type a number between 1 and 15 as the Metric value.

This represents the number of routers between your network and the destination. Usually, a

setting of 2 or 3 works, but if this is a direct connection, set it to 1.

9.

Click Apply to have the static route entered into the table.

As an example of when a static route is needed, consider the following case:

•

Your primary Internet access is through a cable modem to an ISP.

•

You have an ISDN router on your home network for connecting to the company where

you are employed. This router’s address on your LAN is 192.168.1.100.

•

Your company’s network is 134.177.0.0.

When you first configured your router, two implicit static routes were created. A default route was

created with your ISP as the gateway, and a second static route was created to your local network

for all 192.168.1.x addresses. With this configuration, if you attempt to access a device on the

134.177.0.0 network, your router will forward your request to the ISP. The ISP forwards your

request to the company where you are employed, and the request will likely be denied by the

company’s firewall.

In this case you must define a static route, telling your router that 134.177.0.0 should be accessed

through the ISDN router at 192.168.1.100. The static route would look like

Figure 6-8

.

In this example:

•

The Destination IP Address and IP Subnet Mask fields specify that this static route applies to

all 134.177.0.x addresses.

•

The Gateway IP Address fields specifies that all traffic for these addresses should be

forwarded to the ISDN router at 192.168.1.100.

•

A Metric value of 1 will work since the ISDN router is on the LAN.

•

Private is selected only as a precautionary security measure in case RIP is activated.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

Advanced Configuration

6-17

202-10090-01, April 2005

Enabling Remote Management Access

Using the Remote Management page, you can allow a user or users on the Internet to configure,

upgrade and check the status of your WGT624 v3 wireless router.

Figure 6-9:

Remote Management screen

To configure your router for Remote Management:

1.

Select the Turn Remote Management On check box.

2.

Specify what external addresses will be allowed to access the router’s remote management.

Note:

For enhanced security, restrict access to as few external IP addresses as practical.

a.

To allow access from any IP address on the Internet, select Everyone.

Note:

Be sure to change the router's default configuration password to a very secure

password. The ideal password should contain no dictionary words from any language,

and should be a mixture of letters (both upper and lower case), numbers, and symbols.

Your password can be up to 30 characters.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

6-18

Advanced Configuration

202-10090-01, April 2005

b.

To allow access from a range of IP addresses on the Internet, select IP address range.

Enter a beginning and ending IP address to define the allowed range.

c.

To allow access from a single IP address on the Internet, select Only this PC.

Enter the IP address that will be allowed access.

3.

Specify the Port Number that will be used for accessing the management interface.

web browser access normally uses the standard HTTP service port 80. For greater security,

you can change the remote management web interface to a custom port by entering that

number in the box provided. Choose a number between 1024 and 65535, but do not use the

number of any common service port. The default is 8080, which is a common alternate for

HTTP.

4.

Click Apply to have your changes take effect.

Note:

When accessing your router from the Internet, you will type your router's WAN IP address

into your browser's Address (in IE) or Location (in Netscape) box, followed by a colon (:) and the

custom port number. For example, if your external address is 134.177.0.123 and you use port

number 8080, you must enter

in your browser.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

Advanced Configuration

6-19

202-10090-01, April 2005

Using Universal Plug and Play (UPnP)

Universal Plug and Play (UPnP) helps devices, such as Internet appliances and computers,

access the network and connect to other devices as needed. UPnP devices can

automatically discover the services from other registered UPnP devices on the network.

Figure 6-10.

UPnP Menu

Turn UPnP On:

UPnP can be enabled or disabled for automatic device configuration. The default

setting for UPnP is enabled. If disabled, the router will not allow any device to automatically

control the resources, such as port forwarding (mapping), of the router.

Advertisement Period

: The Advertisement Period is how often the router will broadcast its UPnP

information. This value can range from 1 to 1440 minutes. The default period is 30 minutes.

Shorter durations will ensure that control points have current device status at the expense of

additional network traffic. Longer durations may compromise the freshness of the device status but

can significantly reduce network traffic.

Advertisement Time To Live

: The time to live for the advertisement is measured in hops (steps)

for each UPnP packet sent. The time to live hop count is the number of steps a broadcast packet is

allowed to propagate for each UPnP advertisement before it disappears. The number of hops can

range from 1 to 255. The default value for the advertisement time to live is 4 hops, which should

be fine for most home networks. If you notice that some devices are not being updated or reached

correctly, then it may be necessary to increase this value a little.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

6-20

Advanced Configuration

202-10090-01, April 2005

UPnP Portmap Table

: The UPnP Portmap Table displays the IP address of each UPnP device that

is currently accessing the router and which ports (Internal and External) that device has opened.

The UPnP Portmap Table also displays what type of port is opened and if that port is still active for

each IP address.