Configuring A SOHO Router

Question 1

Wireless Channels & Encryptions

Answer 1

• Configure for the highest encryption
  
  • WPA2 - AES
  • Choose WPA2 over WPA

-WEP is not an appropriate option

• Check your devices
  
  • Not all allow highest encryption

-Use an open frequency

Question 2

Configuring NAT

Answer 2

• NAT = Network Address Translation
• For SOHO devices , this is automatic
• Source NAT , also called PAT (Port Address Translation)
• All internal devices are translated to a single external address

Question 3

Port Forwarding

Answer 3

• 24/7 Access to a service hosted internally
  
  • Web server , gaming , server , etc
• External IP / port numbers maps to an internal IP / port
  
  • Doesn’t have to be same port numbers
• Also called destination NAT or static NAT
  
  • Destination address translated from public to private IP (Does not expire or timeout)

Question 4

Port Triggering

Answer 4

• Similar to port forward (not static)
• Internal client communication externally on a particular port
• Reverse port forward is dynamically created
• Only one person can trigger at a time

Question 5

Firewall & DMZ Ports

Answer 5

-Every SOHO router is also firewall
-No external device can directly access internal network
Normally cannot disable

• DMZ ports can be configured to allow unrestricted access
  
  • Almost always a bad idea
  • Consider creating more specific port forwarding rules

Question 6

Managing QoS

Quality of Service

Answer 6

• Change the priority of you r traffic
• Prioritize applications , ports or MAC address
• May cause applications to slow down

Question 7

Firmware Update

Answer 7

• Wireless firmware updates
  
  • Doesn’t happen often
• Can have dramatic changes on wireless performance
  
  • Can improve performance
  • Can decrease performance

-May improve compatibility with chipsets from other devices

Question 8

Universal Plug & Play

UPnP

Answer 8

• Allows network devices to automatically configure & find other network devices
  
  • Zero configuration
• Application on internal networks can open inbound parts using UPnP
  
  • No approval needed
  • Used for peer-to-peer (P2P) apps

-Best practice is to disable UPnP