Saturday, March 08, 2008

Installing a Router Properly

How many clients have I been to that have a router? Probably around 95%. How many have them properly setup with optimal security settings? About 5%.
The problem with setting up your own router is that, yes, they're easy to plug in and get working, however in most cases you're leaving yourself wide open to security vulnerabilities.
The most common problem is that the wireless network has not been secured - anybody can sit outside your home or office and use your internet connection. So what's the problem with that you say? Well, if they use your internet connection to perform activities or visit web sites that are not legal, it will get traced back to you. When that person accesses the internet, there's no way to tell which computer on your network requested the page, just that your modem did. The other major vulnerability is if you have file or printer sharing enabled. If you do, your files and folders are exposed to the person using the computer, simply by them clicking on "My Network Places" icon and browsing the network. I've been at several clients where I've shown them that I could actually sit out in their parking lot and start printing pages to their printer from outside using my laptop and no special techniques.
There are many other features that get unused on the router if not properly setup, like DHCP Reservations, MAC Address Filtering, Web Access Policies and Schedules, Firewall optimization, IP address range minimization to name just a few. Also, a lot of people are still using WEP encryption when they should really be using WPA or WPA2 for optimal security. WEP encryption (and the associated wireless password) can be cracked quite easily with easily available downloads.
So what routers do I recommend? For home users and small offices I really recommend the D-LINK DIR-655 Xtreme N Gigabit Router ($169.00+tax). This router is rock solid reliable, has wireless 'n' technology (6x the speed and 4x the range of current wireless 'g' standard) and is backwards compatible with wireless 'b' and 'g' technologies. It also has Gigabit LAN speeds (1000Mb/s) versus the current 100Mb/s standard. What that means is you can, at optimal network conditions, transfer files and data between computers on your network at over 50MB/s (about 35 floppy disks per second). Now that's fast!
For small businesses with 5 or more computers I really recommend the Cisco 800 or 810. Cisco is THE brand in routers. Their products are extremely reliable, extremely customizable, and can meet the needs of any business who can't afford downtime. They usually run between $550-$750 and you'll probably never need to buy another router again - that is, it's more likely that you'll have a change in networking requirements than the router will stop working.

Until next time,
Ben

No comments: