How do I share my Internet connection securely?

Hi,

You can share your Internet connection with more than one computer by using a device called a "router." The router forwards traffic from the Internet to the computers "behind" it on your private home network or Intranet.

How does this work? The router accepts requests from your personal computers, and then "pretends" to be one very busy computer, forwarding all of the requests to the modem as if they came from a single computer. This is why you don't need to tell your DSL or cable provider that you have more than one computer - although you might find that the legal fine print of your broadband contract requires you to do so.

Some ISPs provide a modem which is also a router. Look for WiFi (wireless) antennas and/or additional wired Ethernet

jacks on the back of the modem before you purchase a separate router.

Wireless Versus Wired Routers:-

Buying a router is a good opportunity to go wireless. For those with laptops, this is usually a no-brainer, because laptops typically have wireless capability built in. And that means you can use the computer from any room you wish. Just be sure to secure your wireless network correctly. Don't use WEP "security," which has long since been cracked. Use WPA instead - and use a truly random password, never a password containing one or more dictionary words. See the manual of your wireless router for more information about WEP and WPA.

Wireless routers are very cheap now ($50 or less), and almost all wireless routers also include a few wired jacks. So you don't have to invest in a wireless adapter for each of your desktop PCs - although USB wireless adapters are available for less than $30 each. And even though you don't move your desktop PCs every day, it's still nice to avoid rewiring your house when you do.

Try a Froogle search for wireless router to get an idea of what's currently available. I have personally had good results with both Linksys and Belkin routers. My Belkin router cost under $50. Nearly all currently available units support Wireless-G, which is the fastest widely supported wireless network technology. Even if some of your PCs have older wireless network interfaces, they should still work with a newer router. So I recommend purchasing a Wireless-G router.

thank you!

From your statement it appears as though this is your goal:

1. Provide wireless internet to a group of users who cannot access a restricted part of your Local Area Network (LAN). I will call the wireless internet users a public access (even though it may not permit the general public to access the LAN).

2. The restricted part of your LAN contains your NAS, some pcs, and other devices. The restricted part needs to exchange files among other devices on the restricted part but not with devices on the public access side.

3. You did not state whether you want to have a wireless access for the restricted side. I will assume you do want wireless on the restricted side also.

There are two ways to do this that come to mind.

Solution # 1 - Purchase a router that supports at least 2 LAN subnets via wireless access points. The Adtran Netvanta 3120 with their Netvanta 150 wireless access point will do this; a Motorola WS 2000 will also do this. Configure subnet # 1 for restricted users and give it a subnet like 192.168.10.0/24 (24 means 24 bit subnet mask of 255.255.255.0); configure subnet # 2 for public users adn give it a subnet like 192.168.20.0/24. Use the MAC address of the restricted devices to permit these devices onto the 192.168.10.0/24 subnet which will automatically put these devices in the proper subnet. All other devices will be automatically sent to 192.168.20.0/24. With separate subnets the 2 groups are separated in their own virtual LANS or VLANS.

Solution # 2 - Have your exsiting router and wireless strongly secured including MAC address validation, WPA or WPA2 with strong preshare key. Note the subnet you have with this router (probably 192.168.0.0 / 24 or 192.168.1.0 / 24; no need to change, just note it. Purchase a second wireless router and give it a different subnet; I suggest using 192.168.20.0/24 and do not provide security on it.

1. Put a Unique SSID (I.e. the name of your Wireless Network should not be WLAN or any other default setting).).

2. Set the system to channel 11 – This no big addition to security but usually will yield better cleaner Wireless. Since the default channel 6 is very busy.

3. Switch On the MAC Filter and enter the MACs of your system. – This will only allow your hardware to connect to the system.

Take into consideration that MAC information is not encrypted. As s a result MAC filtering is a good deterrent against casual intruders. However it is very easy to Hack it.

4. Set Encryption to the most recent secure type that is available on your Wireless hardware (The available method would depend on how old is your hardware).

Most secure is WPA2 (WPA AES), followed by WPA-TKIP, WEP 128 bit and the least secure WEP 64bit.

5. If you are extra worried, and you have WEP only change the WEP key every 3-4 days. Breaking 128bits WEP takes time, frequent changing will make casual hacker affords futile.

6. Set the DHCP to the same number of computers that you have on your Network. (Example, you have 4 computers set it to 101-104).

7. Install NetBEUI, and do the local sharing through NetBEUI. (Most people do not have this arrangement. Their TCP/IP sharing will not get into your files).

8. Disable Auto Broadcast. - Most Wireless Access

You'll need a wireless router. You won't need to configure things like subnets or IP addresses. The router will do that automatically.

If you have a wireless card it might be possible to use your computer as a wireless router. I've never tried doing it, but i think vista and xp have that functionality. Not sure.