Nowadays, many households have more than one computer at home. Using a (wireless) gateway router, it is very easy to share your broadband internet connection (DSL, Cable). The advantages of a network (LAN/WLAN) are diverse: sharing files, sharing printers, wireless connections, printer server, fileserver, gaming, but the biggest advantage is simultaneously connecting to the internet. This page is a manual for creating a safe (wireless) network (how to share files and printers included).
TIP: The costs of a (wireless) router are relatively low. Use a router instead of sharing the internet connection of the master computer (this gives always a lot of troubles)!
Wireless router
Generally you can choose between two types of routers: wired or wireless. The
price difference is not that big, that's why I prefer to buy a wireless router (be
prepared for the future..... (if you don't use the wireless function of the
router, disable it!)). For a wireless router you can choose between different
speeds, I prefer the 54 Mbit router (the g-standard). Don't buy a 11 Mbit router
(b-standard), although this is probably still faster then your broadband
connection. The 54 Mbit standard is more stable and covers a bigger area (place
the wireless router central in your home, try some places for best performance).
|
|
Most routers have 3 or 4 connections for CAT5 ethernet cables, which means you are able to connect 3 or 4 computers wired. I prefer to connect as much as possible computers wired, unless you especially want it to be wireless (every wireless computer gives extra problems...). Don't use cross cables: they are used to connect to computers without a router!
TIP: Don't ever buy a cheap wireless router! I have seen many unexplainable troubles!
Ethernet modem
The ethernet modem is connected to the router (WAN port), so: every computer
connected to the router will be able to access the internet. I prefer to use the
ethernet modem, provided by your internet provider. If there is something wrong
with your internet connection, you won't be in troubles calling the helpdesk of
your service provider (you just temporarily remove the router...). If you are
using a modem which is not supported by the internet provider they probably
aren't able or willing to help you. This is also the case if you use a combined
modem-router!
Network adapter and UTP cables
All your computers must be provided with a network card/adapter (most computers
are provided with a network connection). This can be by PCI, USB or Cardbus
(laptop). If you are going wireless, I prefer to use the same manufacturer as
the router because of possible compatibility problems. You need CAT5 UTP cables
to connect your computers to the router.
TIP: CAT6-cables are prefered to realize a fast and stable connection if you are using a Gigabit-router/switch (1.000 Mbit instead of 100 Mbit).
If you open the network connection, you will probably see something like this (Control Panel, Network Connections):
If the router supports DHCP, the internet connection is generated automatically. If you are not connected automatically, make sure that the LAN connection is enabled and the TCP/IP settings are retrieved automatically (Control Panel, Network Connections, right click the LAN-connection and choose Properties, select the Internet Protocol TCP/IP and press button Properties, both TCP and DNS should be obtained automatically.
If you are not sharing files and/or printers on your computer, disable the File and Printer Sharing for Microsoft Networks for the LAN connection (this will not disable the possibility to use shared files and printers on other computers). This gives a higher security level, because it's more difficult to reach your files.
If you would like to hide your PC from other PC's in the network, you can achieve this with the command NET CONFIG SERVER /HIDDEN:YES in the commandprompt (Start, Run and enter the command CMD). By changing YES to NO you can make your computer visible again. The current status can be determined with the command NET CONFIG SERVER.
As shown above, enable the option Show icon in notification area when connected. This will show your internet connection in the system tray, which makes it fast accessible. By double clicking on the internet connection icon in the system tray, you are able to view the network connection.
The tab Support shows the IP address you have received from the DHCP server (most times it is something like 10.0.0.xxx or 192.168.1.xxx. If the IP address starts with 169, there is something wrong with the connection settings. The Gateway IP address is the IP address of the router, which should be in the same range. By using this IP address in the Internet Explorer you are probably able to change the router or modem settings.
Sometimes, it's possible you still don't have an internet connection. The reason can be simple: Internet Explorer doesn't know how to connect to the internet. Start Internet Explorer, Tools, Internet Options, tab Connections, you have to choose Never dial a connection. Start the internet connection wizard as well by clicking the button Setup: choose Next, option 1 (Connect to the internet), option 2 (Set up my connection manually) followed by option 3 (Connect using a broadband connection that is always on). The LAN-settings can be disabled (button LAN-settings).
Probably you are not using NetBIOS. If you don't, switch off this option to achieve a higher security level. This is done by editing the settings of the TCP/IP protocol as shown above. Select the Internet Protocol TCP/IP, button Properties, button Advanced, tab WINS, disable the option NetBIOS over TCP/IP. Note: now it's not possible anymore to find computers in your network using their name, as shown at the end of this page (you can still find them using their IP address).
First, setup your ethernet modem following the instruction of your internet provider. Most times, the ethernet modem supports DHCP, which means that the modem automatically gives an IP address to every connected computer (read between the lines: your router is also a computer). If this is done, you connect your computer to the router (use one of the 4 ports) and the modem to the WAN port of the router. In most cases, you are already online (the router must be set to Obtain IP automatically, use DHCP or something like that.
TIP: If you are not able to setup the modem and/or router with a setup utility, temporarily disable your personal firewall. Temporarily allow all network traffic. Most modem and router settings are reachable using the Internet Explorer (use the IP address like 10.0.0.x or 192.168.1.x). The IP address of your router can be found on the tab Support of your internet connection (double click the connection icon).
TIP: If there have been problems with the electricity and you have no internet access anymore, reset your modem and router. Most times your problems are solved.
With the command PING (example: PING 192.168.1.1), you are able to check if the a c computer/router is correctly connected and how fast the internet connection is (you should receive packages within a certain amount of time). With the command IPCONFIG you are able to see the current internet connection settings. These commands can be useful analyzing problems. Both are available in the command console: Start, Run, and type CMD.
Provide your router and/or modem with a password, don't use the default password! Use a PrintScreen tool to make screen dumps of your router and/or modem settings. If you got messed up with your router and/or modem (forgotten password, ...), reset it to the default factory settings (read the (online) manual how to do that).
If you need to open a port on your router for some software application, but you don't know how or which port? Visit www.portforward.com for more information and details on most known routers! Be carefull: opening ports is the same as removing the locks on your doors.
The first steps to create a wireless connection are not that difficult. You have to provide the wireless router with a SSID. The SSID is the name of the wireless network, which is used to make a wireless connection. With SP2 installed on your Windows, you will almost automatically get a wireless connection: double click the wireless icon in the system tray, and you will see all available wireless networks, yours included.
TIP HARDWARE DRIVERS: If you don't have any wireless connection icon in the system tray, you probably didin't install the drivers yet. You can use the software shipped with the hardware, personally I prefer to disable this software and use the Windows XP buildin software. Disabling the software is easely done with the tool MSCONFIG.
TIP SSID BROADCAST: Once you have a successful wireless connection, disable the SSID broadcast of the router (most wireless routers support this option). Now you have to enter the SSID correctly before the wireless router will communicate with a computer. This makes your router invisible to others.
TIP MAC CONTROL: With the routers option MAC control, you are able to select your specific (wireless) hardware ID's, and deny all other. This gives some extra security: if someone tries to crack your wireless network, they have to clone one of your MAC addresses (it's not difficult to change the MAC address, but it is an extra defense). Especially if you decide not to use any wireless encryption, I advise to enable MAC address control.
TIP G-STANDARD: If you only use wireless devices capable of using the g-standard (54 Mbit), then enable the G-only setting in the wireless router. This option will eventualy improve the wireless connection quality.
TIP PREFERED NETWORKS: If you are frequently connected with the wireless connection of one of your neighbours, you need to move up your own wireless network as a preferred network. You can do this on the tab Wireless Networks of the Wireless Network Connection Properties. Select your own wireless network and press Move up.
A wireless router needs some extra attention, you need some extra security to make sure you are not providing your neighbors with free internet (and possibly also your personal data). The wireless traffic needs to be encrypted. Most routers support WEP and WPA encryption (if WPA is not available check for a firmware upgrade). Using WPA (or the even better WPA2 encryption) is not that difficult. First you have to change the router settings to use a WPA key for encryption. The next step is double clicking the wireless icon in the systemtray. You will see your wireless netwerk name (SSID), by selecting it you will be asked to enter the WPA key.
You can also check these settings manually by editing the wireless connection settings in advanced mode. On the tab Association you have to use the following settings after you have entered the SSID: choose for WPA-PSK (Pre Shared Key) in the first combo box and TKIP (Temporal Key Integrity Protocol) in the second combo box (as shown below), use the pass phrase (used by your wireless router) as security key.
If you don't have WPA-PSK, check for Windows updates (SP2) and driver updates of your wireless adapter. Most times the drivers of your wireless adapter include a configuration utility. In some cases the utility works better then the Wireless Zero Configuration from Windows, in other cases I prefer the Wireless Zero Configuration (most times you can disable the installed utility by removing the icon from the Startup folder in Start, All Programs (make sure that the wireless zero configuration service is running). In other cases you have to disable the service.
WEP or WPA encryption
WEP encryption will encrypt every wireless package with the same key (64, 128 or
even 256 bit encryption). WEP security is very easy to crack, you only need to
capture a lot of package and calculate the original key. If you use WEP
encryption, regularly change the key. WPA encryption gives much higher security
because every package is encrypted with a different key. Only the first package
of the wireless connection is always the same, mostly a pass phrase. If
possible always use WPA security.
A dropping WPA connection is normal, you can always right click the connection icon and choose Repair if needed. Sometimes the wireless WPA connection drops to frequently. If this is the case, make sure it's not caused by the firewall (for example I have seen this problem with Sygate Personall Firewall version 5.6, I prefer version 5.5 for a WPA connection), update the firmware of the wireless router and/or the drivers of your wireless adapter. If nothing helps, you have to go back to WEP encryption. Don't buy cheap wireless routers, always ask if you are allowed to return the router if it doesn't work to your satisfaction!
TIP: If the WPA wireless connection drops frequently because of noise,
try the following registry tweak: add the DWORD value AuthMode=2 in the
following key (if it doesn't work, go one step back to WEP encryption):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EAPOL\Parameters\General\Global
If you have a wireless network, make sure you provide every PC with a firewall. But also if you don't have a wireless network it is better to secure your pc's with a software firewall. Nowadays security is important then ever! If you are sharing files (see below) and/or printers , you need to add exception rules to your firewall settings.
With the Sygate Personal Firewall you can do this by Tools, Advanced Rules. Give a rule name (for example the name of the other computer you want to allow on your computer), choose Allow this traffic and on the tab Hosts you can enter the MAC address or IP address of the allowed computer. Take into account that IP addresses can change after a reset of the DHCP server (you can always use fixed IP addresses to solve this problem). You can also allow a complete IP range as shown below (but I prefer to use MAC addresses to control access).
Now it's time to share a folder with some files. I prefer to create a folder the name NETWORK on the D: partition and share this folder also with the name NETWORK. Sharing the folder is done by right clicking the folder and choose for Sharing and Security. Confirm you understand the security risks but don't use the wizard. Now you see that you are able to share this folder on the network. Enable the sharing option and the share name will NETWORK will be filled in (enable the option Allow network users to change my files as well, if you would like that others are allowed to change your shared files). The folder icon will change, a hand will be added.
TIP: Be careful which files and folders you share, don't share your whole C: partition or your My Documents folder! I have seen badly secured wireless networks with all files shared. Consequences: all your personal information are easy found (passwords, e-mail, personal files, Live Messenger chats, visited websites, favorites, possibly your income (tax papers),.....)!
IMPORTANT TIP: To make sure the shared folder isn't visible by exploring the network-neighbourhood, you can add a dollar-sign ($) at the end of the share name (in this case NETWORK$ in stead of NETWORK). The share can only be accessed by creating a networkconnection with the exact same share-name (see below).
If you would like to have an overview of the shared folders on your computer, use a Windows build-in tool. Start, Run and enter the following command: Rundll32.exe ntlanui.dll,ShareManage. Of course, you can also create a shortcut.
First you have to make sure all computer in your network are operating in the same workgroup. This is done by Control Panel, System, tab Computername, button Change. Use a short and simple name for the workgroup (default is MSHOME or WORKGROUP) and use a short and simple computername for all computers in your network.
To view the shared files on the other computer, you can browse your network. This is done by starting the Windows Explorer and navigate to Desktop, My Networklocations (if needed, right click and choose Explore), Full network, Microsoft Windows network. Here you will see the name of your network (default is MSHOME or WORKGROUP). Double clicking this icon will show all available computers in your network.
If you are not able to see the other computers in your network, make sure you are not blocked by the firewall (don't forget to switch of the Windows firewall if you are using firewall software!). Check if the other computer has shared files (else there is nothing to find) and that File and printersharing for Microsoft networks hasn't been switched of (see the internet connection settings above)!
It can take some time to find another computer on your network. First, your
computer searches for a WINS-server, where all connected computers are registered.
First you have to wait until your computer comes to the conclusion that there is
no WINS-server. Then you have to wait for the next step: at 'randomly'
broadcasting packages until a computer is found. To skip the search for a
WINS-server, you have to do a
registry tweak. Add (or change) the DWORD-value NodeType=1 to the
following registry key:
HKEY_LOCAL_MACHINE\
SYSTEM\ CurrentControlSet\ Services\ NetBT\Parameters. See also the earlier
mentioned tip about disabling NETBIOS.
Of course you can use Live Messenger to send messages over your network. You can also use the freeware tool NTSend (download: www.ntsend.freeserve.co.uk). This tool needs the Messenger service for proper functioning!
This is a very time consuming and irritating way of opening a shared folder (sometimes you will never see the shared files and folders!). However, I prefer to create a network connection which always works quickly (if there is no firewall blocking the access). The network connection will receive a driver letter (I prefer to begin at the ending of the alphabet: X,Y, Z).
TIP: If you use the first available letter, you will get troubles connecting an external hard disk or card reader.
Creating a network connection with a drive letter is very easy: in the Windows Explorer you choose Tools, Map Network Drive and you will see the following screen:
If you have named the shared folder NETWORK (see above, topic sharing
files/folders) on the computer with the name LAPTOP, use the command (as shown
above in the folder area):
\\LAPTOP\NETWORK
(Change the name LAPTOP with the name of the specific computer in your network.
If you use the name of your current computer you can also create a
shortcut to your own shared folder!)
TIP: Change the name of the mapped drive by right clicking on the created X:, Y: or Z: drive and choose Rename.
TIP: I prefer to use the same letter on all computers for the same folder. This makes communication a bit easier: The remark "I have put the files on the Z: drive" is clear for everybody using your network.
Every time your computer reboots, it searches for the mapped shared folders. This will slow down the boot process enormously, especially if the other computers are turned off. You are able to prevent this delay by creating the mapped network drives with a batch file, this way you can create them at the time you actually need them. Create a file called network.bat using a simple text editor and place it for example (as a shortcut) on your desktop. For every network connection, create a line in the bat-file, like one of the following (you can also use IP addresses, the username and password are optional):
NET USE Z: \\computername\sharename /persistent:no /user:username
password
or
NET USE Z: \\192.168.1.110\sharename /persistent:no /user:administrator
password
or
NET USE Z: \\LAPTOP\NETWORK /persistent:no
If you would like to synchronize data between two computers, you need external software. Use the free tool SyncBack (download: www.2brightsparks.com). This tool is a must have for synchronizing purposes!
TIP: Synchronization only works if your
useraccount is provided with a password. You need a
registry tweak (workaround) for
this problem. Change or add the DWORD value limitblankpassworduse=0 to
the following key (change the value to 1 to disable this option):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Optimizing Windows Home Install Windows XP Optimize Windows XP