how do I setup a secure internet connection using my wireless router. I have netgear WGT624 v3. Please help...

Question

I have a Netgear WGT624 v3 internet wireless router. I need to secure my wireless internet connection because I dont want everybody logging on to my internet. Please help.

Answer 1

1) Change Default Administrator Passwords (and Usernames)
At the core of most Wi-Fi home networks is an access point or router. To set up these pieces of equipment, manufacturers provide Web pages that allow owners to enter their network address and account information. These Web tools are protected with a login screen (username and password) so that only the rightful owner can do this. However, for any given piece of equipment, the logins provided are simple and very well-known to hackers on the Internet. Change these settings immediately.

2) Turn on (Compatible) WPA / WEP Encryption
All Wi-Fi equipment supports some form of "encryption." Encryption technology scrambles messages sent over wireless networks so that they cannot be easily read by humans. Several encryption technologies exist for Wi-Fi today. Naturally you will want to pick the strongest form of encryption that works with your wireless network. To function, though, all Wi-Fi devices on your LAN must share the identical encryption settings. Therefore you may need to find a "lowest common demoninator" setting.

3) Change the Default SSID
Access points and routers all use a network name called the SSID. Manufacturers normally ship their products with the same SSID set. For example, the SSID for Linksys devices is normally "linksys." True, knowing the SSID does not by itself allow anyone to break into your network, but it is a start. More importantly, when someone finds a default SSID, they see it is a poorly configured network and are much more likely to attack it. Change the default SSID immediately when configuring your LAN.


4) Enable MAC Address Filtering
Each piece of Wi-Fi gear possesses a unique identifier called the "physical address" or "MAC address." Access points and routers keep track of the MAC addresses of all devices that connect to them. Many such products offer the owner an option to key in the MAC addresses of their home equipment, that restricts the network to only allow connections from those devices. Do this, but also know that the feature is not so powerful as it may seem. Hacker software programs can fake MAC addresses easily.


5) Disable SSID Broadcast
In Wi-Fi networking, the access point or router typically broadcasts the network name (SSID) over the air at regular intervals. This feature was designed for businesses and mobile hotspots where Wi-Fi clients may come and go. In the home, this feature is unnecessary, and it increases the likelihood an unwelcome neighbor or hacker will try to log in to your home network. Fortunately, most Wi-Fi access points allow the SSID broadcast feature to be disabled by the network administrator.


6) Do Not Auto-Connect to Open Wi-Fi Networks
Connecting to an open Wi-Fi network such as a free wireless hotspot or your neighbor's router exposes your computer to security risks. Although not normally enabled, most computers have a setting available allowing these connections to happen automatically without notifying you (the user). This setting should not be enabled except in temporary situations.


7) Assign Static IP Addresses to Devices
Most home networkers grativate toward using dynamic IP addresses. DHCP technology is indeed quick and easy to set up. Unfortunately, this convenience also works to the advantage of network attackers, who can easily obtain valid IP addresses from a network's DHCP pool. Turn off DHCP on the router or access point, set a fixed IP address range, then set each connected device to match. Use a private IP range (like 10.0.0.x) to prevent computers from being directly reached from the Internet.


8) Enable Firewalls On Each Computer and the Router
Modern routers contain built-in firewall capability, but the option exists to disable them. Ensure that your router's firewall is turned on. Additionally, consider installing and running personal firewall software on each computer connected to the router for extra protection.


9) Position the Router or Access Point Safely
Wi-Fi signals normally reach to the exterior of a home. A small amount of "leakage" outdoors is not a problem, but the further this signal reaches, the easier it is for others to detect and exploit. Wi-Fi signals often reach through neighboring homes and into streets, for example. When installing a wireless home network, the position of the access point or router determines its reach. Try to position these devices near the center of the home rather than near windows to minimize leakage.


10) Turn Off the Network During Extended Periods of Non-Use
The ultimate in security measures, shutting down the network will most certainly prevent outside hackers from breaking in! While impractical to turn off and on the devices frequently, at least consider doing so during travel or extended periods offline. Computer disk drives have been known to suffer from power cycle wear-and-tear, but this is not a concern for broadband modems and routers.

Source:
From Bradley Mitchell,
Your Guide to Wireless / Networking.

regards,
Philip T

Answer 2

Most wireless routers are configured through your Internet browser. So you must connect your wireless router to a computer.

Type your router's IP address into your browser's address bar. You can find the IP address in your router's manual. You'll be prompted for a user name and password. These will also be listed in your manual.

You want to use WPA2 (Wi-Fi Protected Access) encryption to protect your network. You'll typically see this setting as WPA-PSK (pre-shared key). You'll be prompted to enter a password of eight to 63 characters--letters, numbers and symbols. The router will use the password to build an encryption key.

WPA2 is the latest and safest version of WPA. The only weak point of WPA2 is your password. So make it as strong as possible. Here is a tip that will help.

http://www.microsoft.com/athome/security/privacy/password.mspx

http://www.microsoft.com/athome/security/privacy/password_checker.mspx

Your router may use WPA, the forerunner to WPA2. If so, be sure your password has at least 21 characters.

The earliest security standard is WEP (Wired Equivalent Privacy). Don't use that; it is easily broken. Check the router manufacturer's site for updates. If there aren't any, don't use the router to go online.

Now you must update your computers. Click Start>>Control Panel. Double-click Network Connections. Right-click Wireless Network Connection. Select Properties from the pop-up menu and select the Wireless Networks tab. You should see your network listed under "Preferred networks." Select it and click Properties. If it's not listed, click the Add button. In the box labeled "Network name (SSID)," enter your network's name.

Under Network Authentication, select WPA-PSK. Select AES under "Data encryption." Under "Network key," enter the same password you used for your router. You must enter it twice to confirm it. Make sure "The key is provided for me automatically" is not checked. Click OK>>OK.

Answer 3

No, it can't be done. Ask your neighbor to increase the signal, there is an option on his router that let you increase or attenuate the signal (handy when you get weaker signals on some parts of the house or apartment).