Sunday, October 5, 2008

Part 7 - Configure the Linksys WRTU54G-TM

Alright, now that we have the Gateway setup, we need to set up our VOIP Router.

In this case it is a T-Mobile@Home VOIP Cisco Linksys WRTU54G-TM.

The reason I went with T-Mobile is for the following reasons:
1. I already had a T-Mobile Account
2. The service was only an additional $10 a month
3. Free Long Distance US and Canada

We have tried Magic Jack and other cheaper solutions, but they cause the same kind of problems that we are trying to fix. We want a clean stable connection at all times with a low ping.

1. Log-in to the VOIP Router and go to the Internet Connection Type Setup.

2. Set your IP Address to one of the User Assignable IP Addresses out of your Block of IP Addresses.
3. Update your Subnet.
4. Enter in your Gateway IP Address.
5. Enter in Static DNS Servers.

If you don't know them, enter in the Gateway IP Address for now.

You can come back here later and update this once you log into the Gateway and determine the DNS Servers the Gateway is using by looking at the Connection Status.

6. Make sure the Operating Mode is Router
7. Disable RIP.

If you determine you need it later you can turn it on, but on this router it usually causes more trouble than it worth. If you notice that websites are too slow to load through the router, try enabling Version 1.

I prefer to use Static Routes where ever possible for performance.
8. Enable the Firewall
9. Enable VPN Passthrough in case there are other VPNs on the network.

Even though this is enabled, you will still loose you VOIP Connection from Time to Time if you have this enabled.

If you would rather not have to worry about the risk of a lost connection with your VOIP Provider. Disable IPSec Passthrough, this will keep any other VPN On the Network using Protocal 50 from connecting.

I have mine enabled just in case applications require it, but I have moved all known VPNs to the Gateway Level of the Network.
10. Set Router Admin User and Password.

These passwords don't need to be as robust as the one on the gateway, but you need to have a complex but memorable password 15+ chars.
11. Disable Remote Access
12. Disable UPnP unless you know you need it for a specific application.

Opions are wide, but my opion is that it isn't secure.

At this point, if you have loaded the correct DNS Servers, you should be able to load a web page in your browser. If you still need to do this, go into your Gateway now and Add the Correct DNS Servers.

If you can't, you did something wrong and need to go back.

Click on the images on this blog, they will open up and you can look carefully for something that you may have miss-understood or I may have left out.

No comments: