Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

2-2

Introduction

M-10153-01

•

Built-in 4-port 10/100 Mbps Switch.

•

LAN port 4 is a built-in hardware DMZ port

•

Ethernet connection to a wide area network (WAN) device, such as a cable modem or DSL

modem.

•

Extensive protocol support.

•

Login capability

•

Front panel LEDs for easy monitoring of status and activity.

•

Flash memory for firmware upgrades.

802.11 a/g Wireless Networking

The WGU624 wireless router includes 802.11 a and 802.11g wireless access points, providing

continuous, high-speed access between your wireless and Ethernet devices. The router provides:

•

802.11g and 802.11a wireless networking at up to 108 Mbps.

•

802.11g wireless networking, with the ability to operate in 802.11g-only, 802.11-turbo-g-only,

or 802.11b+g modes, providing backwards compatibility with 802.11b devices or dedicating

the wireless network to the higher bandwidth 802.11g devices.

•

802.11a wireless networking, with the ability to operate in 802.11a-only, 108 Mbps only, or

Auto 108 Mbps modes.

•

When Super G Modes is enabled, the wireless router will enable channel bonding, data

compression, packet bursting and large frame support. Channel bonding takes two of the three

usable channels in 2.4GHz 802.11b/g and uses them to double the speed.

•

64-, 128-, and 152-bit WEP encryption security.

•

WEP keys can be generated manually or by passphrase.

•

WPA and WPA-PSK wireless security.

•

Wireless access can be restricted by MAC address.

•

Wireless network name broadcast can be turned off so that only devices that have the network

name (SSID) can connect.

Comparing the 802.11a, 802.11b, and 802.11g Modes

The Double 108 Mbps Wireless Firewall Router WGU624 offers a variety of wireless modes. The

table below compares some of the features of each mode.

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

Introduction

2-3

M-10153-01

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the WGU624 is a true firewall, using stateful packet

inspection to defend against hacker attacks. Its firewall features include:

•

Denial of Service (DoS) protection.

Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND

Attack, and IP Spoofing.

•

Blocks unwanted traffic from the Internet to your LAN.

•

Blocks access from your LAN to Internet locations or services that you specify as off-limits.

•

Logs security incidents.

The WGU624 will log security events such as blocked incoming traffic, port scans, attacks,

and administrator logins. You can configure the router to e-mail the log to you at specified

intervals. You can also configure the router to send immediate alert messages to your e-mail

address or e-mail pager whenever a significant event occurs.

•

The WGU624 prevents objectionable content from reaching your PCs. The router allows you

to control access to Internet content by screening for keywords within Web addresses. You can

configure the router to log and report attempts to access objectionable Internet sites.

Table 2-1.

Comparison of Wireless Modes

Features

802.11b

802.11a

Super A

802.11g

Super G

Performance

11 Mbps

54 Mbps

108 Mbps

54 Mbps

108 Mbps

Range

In practice,

about 100 feet

indoors. Up to

1500 feet in the

open.

Less than “b”

More than “a”

Two times “b”

Four times “b”

Compatibility

802.11b only

Only with

normal 802.11a

802.11a

802.11g and

802.11b

(Can use a “g”

router with a “b”

adapter.)

802.11g and

802.11b

Channel

Any

Any

Any

Any

6

Frequency

2.4 GHz

5 GHz

5 GHz

2.4 GHz

2.4 GHz

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

2-4

Introduction

M-10153-01

Security

The WGU624 wireless router is equipped with several features designed to maintain security, as

described in this section.

•

PCs Hidden by NAT

NAT opens a temporary path to the Internet for requests originating from the local network.

Requests originating from outside the LAN are discarded, preventing users outside the LAN

from finding and directly accessing the PCs on the LAN.

•

DMZ Hardware Port

A Demilitarized Zone (DMZ) is used by a company that wants to host its own Internet services

without sacrificing unauthorized access to its private network.

The DMZ sits between the Internet and an internal network's line of defense, usually some

combination of firewalls and bastion hosts. Typically, the DMZ contains devices accessible to

Internet traffic, such as Web (HTTP) servers, FTP servers, SMTP (e-mail) servers and DNS

servers.

•

Port Forwarding with NAT

Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the

router allows you to direct incoming traffic to specific PCs based on the service port number

of the incoming request, or to one designated “DMZ” host computer. You can specify

forwarding of single ports or ranges of ports.

Autosensing Ethernet Connections with Auto Uplink

With its internal 8-port 10/100 switch, the WGU624 can connect to either a 10 Mbps standard

Ethernet network or a 100 Mbps Fast Ethernet network. Both the LAN and WAN interfaces are

autosensing and capable of full-duplex or half-duplex operation.

The router incorporates Auto Uplink

TM

technology. Each Ethernet port automatically senses

whether the Ethernet cable plugged into the port should have a ‘normal’ connection such as to a

PC or an ‘uplink’ connection such as to a switch or hub. That port then configures itself to the

correct configuration. This feature also eliminates the need to worry about crossover cables, as

Auto Uplink accommodates either type of cable to make the right connection.

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

Introduction

2-5

M-10153-01

Extensive Protocol Support

The WGU624 wireless router supports the Transmission Control Protocol/Internet Protocol

(TCP/IP) and Routing Information Protocol (RIP). For further information about TCP/IP, refer to

Appendix B, “Network, Routing, Firewall, and Basics”

.

•

IP Address Sharing by NAT

The WGU624 wireless router allows several networked PCs to share an Internet account using

only a single IP address, which may be statically or dynamically assigned by your Internet

service provider (ISP). This technique, known as NAT, allows the use of an inexpensive

single-user ISP account.

•

Automatic Configuration of Attached PCs by DHCP

The WGU624 wireless router dynamically assigns network configuration information,

including IP, gateway, and domain name server (DNS) addresses, to attached PCs on the LAN

using the Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies

configuration of PCs on your local network.

•

DNS Proxy

When DHCP is enabled and no DNS addresses are specified, the router provides its own

address as a DNS server to the attached PCs. The router obtains actual DNS addresses from

the ISP during connection setup and forwards DNS requests from the LAN.

•

PPP over Ethernet (PPPoE)

PPPoE is a protocol for connecting remote hosts to the Internet over a DSL connection by

simulating a dial-up connection. This feature eliminates the need to run a login program such

as Entersys or WinPOET on your PC.

Easy Installation and Management

You can install, configure, and operate the Double 108 Mbps Wireless Firewall Router WGU624

within minutes after connecting it to the network. The following features simplify installation and

management tasks:

•

Browser-based management

Browser-based configuration allows you to easily configure your router from almost any type

of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is

provided and online help documentation is built into the browser-based Web Management

Interface.

•

Smart Wizard

The WGU624 wireless router Smart Wizard automatically senses the type of Internet

connection, asking you only for the information required for your type of ISP account.

Reference Manual for the Double 108 Mbps Wireless Firewall Router WGU624

2-6

Introduction

M-10153-01

•

Firmware Auto-Update

The WGU624 wireless router automatically checks the Internet to see if a newer version of

firmware is available. If so, it asks if you want to install the upgrade. This lets you take

advantage of product enhancements for your WGU624 as soon as they become available.

•

Visual monitoring

The WGU624 wireless router’s front panel LEDs provide an easy way to monitor its status

and activity.

Maintenance and Support

NETGEAR offers the following features to help you maximize your use of the WGU624 wireless

router:

•

Flash memory for firmware upgrades

•

Free technical support seven days a week, twenty-four hours a day

Package Contents

The product package should contain the following items:

•

Double 108 Mbps Wireless Firewall Router WGU624.

•

AC power adapter.

•

Vertical stand.

•

Category 5 (CAT5) Ethernet cable.

•

Double 108 Mbps Wireless Router WGU624 Resource CD

, including:

— The

Setup Manual for the WGU624

.

—

Application Notes and other helpful information.

•

Installation Guide for the WGU624.

•

Registration and Warranty Card.

•

Support Information Card.

If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the

carton, including the original packing materials, in case you need to return the router for repair.