SETTING UP A BROADBAND ROUTER WITH TELUS DSL ******************************************** Registering A MAC Address ------------------------- So you have a bunch of machines you want to hook up to the internet simultaneously, and you are using Telus' DSL service to gain a window on the internet. To start with, be aware of the limits you are working within; a simple hub will not work for your needs, as each machine will have its own MAC address, and Telus only allows you to register two of those. What you need is a router. Start by registering the MAC address of one of your machines with Telus at their Device Registration site: * Device Registration https://registerdevice.telus.com/ Once that is done, shut down the machine, hookup the router and cables appropriately, and restart the machine. If You Are Using A D-Link Router (DI-604, DI-704UP) --------------------------------------------------- Once the machine has restarted, log into your router (using a web browser), which should (by default) be located at the following address: 192.168.0.1 The user name will be admin and there will not be a password. To assign a password, go to "Tools" and fill in the password fields for the admin and user accounts. To change the default login IP address, go to "Home", and then "LAN", and input the desired address in the "IP Address" field. To clone the MAC address, go to "Home", and then to "WAN", and you should see a button that say "Clone MAC Address". Click it and the numbers in the field above the button should now match those of the MAC address you registered with Telus. To stealth your network, go to "Advanced", and then "Virtual Server". By default, port 113 is left visible, making it a possible vector for attack. To prevent such an event, redirect incoming requests for port 113 to a "black hole" on your network (an unused IP address). I am fond of 192.168.0.200. Be sure to indicate that this procedure should always be followed. When you're done, your configuration should look something like this: Enabled Name: IDENT Private IP: 192.168.0.200 Protocol Type: TCP Private Port: 113 Public Port: 113 Schedule: Always To prevent the public WAN IP address from responding to ping commands, go to "Tools", and then "Misc.", and under the "Block WAN Ping" heading, click the "Enabled" radial button. With that done, your network should now be completely invisible to the outside world. You can test your network security using Gibson Networks, ShieldsUP! security scan. * GRC ShieldsUP! https://www.grc.com/x/ne.dll?bh0bkyd2 If you want to change the DNS servers you use (as Telus' DNS servers can be very slow), under "Home", go to "WAN", and fill in the "Primary DNS Address", and "Secondary DNS Address" fields. I use OpenDNS, which uses the following DNS addresses: 208.67.222.222 208.67.220.220 Now click the "Apply" button, the router will restart, and the changes will take effect. If You Are Using A Linksys Router (WRT54G) ------------------------------------------ When the machine has restarted, log into the router (again, using a web browser), which should (by default) be located at the following address: 192.168.1.1. The will be no user name, and the password will be admin. To change the password (the user name--or lack thereof--cannot be changed), go to "Administration", and then "Management", and change the password fields accordingly. If you want to change the login IP address, go to "Setup", and then "Basic Setup", and input the desired numbers in the "Local IP Address" field. To clone the MAC address, go to "Setup", and then "MAC Address Clone", click the "Enable" radial button, and click the "Clone Your PC's MAC" button. To make sure that port 113 is filtered, go to "Security", and then "Firewall"; if the "Filter IDENT (Port 113)" box is checked (as it should be, by default), then no further work is required on your part. Linksys did it for you. To change your DNS server from Telus', go to "Setup", and then "Basic Setup", and input the OpenDNS IP's in the "Static DNS 1", and "Static DNS 2" fields. For those that have already forgotten them, the IP's are: 208.67.222.222 208.67.220.220 To disable the wireless functionality of the (WRT54G) router, go to "Wireless", and then "Basic Wireless Settings", and change the "Wireless Network Mode" to "Disabled". Now click the "Save Settings" button, and the router will restart, and the changes will take effect. To check your network visibility, use the ShieldsUP! security scan. * GRC ShieldsUP! https://www.grc.com/x/ne.dll?bh0bkyd2 Using A Telus-branded Siemens Gigaset se567 With A Linksys WRT54G ----------------------------------------------------------------- First off, this is sort of a sequel to the previous section relating to the Linksys WRT54G, and assumes the changes made above have been made at some point in the past. Start by hooking up the cables as though the se567 were just your run-of-the-mill ADSL modem (I have a fondness for using LAN 1 as the substitute WLAN port--but it should not matter). Next, login to the Linksys WRT54G at the default address (assuming you have not changed it previously): 192.168.1.1. Once you are in, under "Setup" - "Basic Setup", change the "Local IP Address" entry to read something along the lines of: 172.168.1.1 (if it remains as 192.168.1.1, it will conflict with the Siemens se567 IP address, and you will not be able to access the latter). Now save the settings, and exit. Once the changes have taken effect, you should now be able to login to the WRT54G at: 172.168.1.1. Also, you should now be able to access the internet, and the Siemens Gigaset se567, which can be found at this address: 192.168.1.254. Its default login will be "admin", and its default password will be "telus" (you may want to change these for the sake of security). Of course, "should" does not always mean "will". If you run into problems connecting to the internet, you might try some of the following corrective measures. If you are still using an older Telus plan, it may be necessary to clone the MAC Address of a machine that was registered with the Telus User Administration Centre, which can be found at this link: * Device Registration https://registerdevice.telus.com/ To clone a MAC Address with the se567, login to it, and under "Advanced Settings" -- "Internet" -- "Internet Connection" -- "MAC Address", select "Use MAC Address of this PC" (you may want to hook your machine up directly to the se567 to complete this task). You may also want to ensure that the "Use DHCP" option is selected under "Advanced Settings" -- "Internet" -- "Internet Connection". On the security side, you may choose to shut off the firewall on the se567 under "Advanced Settings" -- "Internet" -- "Firewall". Also, you can ensure that the wireless functions are disabled by marking the "Wireless Interface" field, located under "Advanced Settings" -- "Wireless Network", as "Disabled". And lastly, if you want to use OpenDNS' DNS servers, go to "Advanced Settings" -- "Internet" -- "Internet Connection" -- "DNS Servers", check the "Use the following DNS server addresses", and input the following in the provided text boxes: 208.67.222.222 208.67.220.220