Build a LAN with a WNDR3400v2

I'm trying to make a wifi LAN with 4 devices for sharing. I don't need full time internet as it's a metered connection and I want to keep data usage down to a minimum. (It seems I need the internet c...

Installation

network help

StephenB
Mar 03, 2017
FredReed wrote:

I forgot to mention this, I read about and watched a demonstration on "Pixiedust".

I'm not sure if it was a "brute force" attack over the internet or over the wifi signal.

Do you know? I'm sure there are newer ones since then too.

These attacks are to break into wifi. Your router is not vulnerable to Pixie Dust. I haven't seen anything specific on WPS brute force attacks. But if you simply disable WPS on your router, you won't be vulnerable to this whole class of attacks.

Passphrases (and pins) can always be attacked by brute-force (which amounts to trying all possible passphrases). There are ways to slow these attacks down - for instance, if the router is slow to respond after a couple of failed connection attempts, then the brute-force attack will take a lot longer. Even a small delay is enough to make these attacks useless (because there are so many passphrases to try).

If you are worried about this particular threat, you can reduce the risk by turning your router's wifi off when you aren't using it, and by changing the passphrase from time to time. In general, longer passphrases will be harder to discover by brute force guessing.

StephenB

Guru - Experienced User

Mar 02, 2017

FredReed wrote:
I also see "Link-Local IPv6 Addresses on W7 and W10. Much longer numbers!
As this is a dual band, how do I know which band works better, 2.4 or 5.0?

IPv6 is a different numbering scheme. There are only 4 billion IPv4 addresses - which seemed like a lot in the 1980s, but they ran out this century. There are a variety of stop-gap measures in place to keep Ipv4 running, but IPv6 is intended to be the long range solution. The very long numbers are to accomodate a lot more devices (about 3.4×10^{38 ).}

So those addresses are not about dual band.

But your router does support dual-band. You should see two different WiFi network names for it - the 5G one likely has -5G at the end of its name. It's possible that your PCs won't see this network (they might only use 2.4 ghz). But your S4 should be seeing it. 5G will give you better performance. The signal doesn't travel as far, so there will be less competition from your neighbors.

You'll still only have one private network btw - you just have three different ways to connect to it (ethernet, 2.4 ghz, 5 ghz). All will use the same ipv4 address range.

1) Yes, I was on the S4 tether at the time so, that is the S4 ipconfig, yes?

Yes.

4) Both Android "S4 and M10" don't have CMD.EXE ipconfig functions as they are Android OS?

Yes. There are ways to see the addresses there too, but they are different and I thought the PCs would be enough. If you go into the settings of the phone, you can access the wifi settings (on nougat that's under "connections", I don't recall the marshmallow or kitkat organization). You can tap on the network name, and it will show you the IP address (and the encryption method and some indication of signal strength).

There are also some Android apps that let you run ping.

BTW, I just call the black window the "CMD Box".

2) Did the ipconfig from W7 once, all were "Media disconnected"
Twice with router connected and I'VE was 10.0.0.4
All the rest were "Media disconnected"
3) Did ipconfig on W10, found I'VE to be 10.0.0.2
All others were "Media disconnected"
(Interesting item: W10 computer has two more wireless LAN adapter local area connections)

This is great (and a bit unexpected). Netgear routers use 192.168.1.x addresses out-of-the-box. Yours is using 10.0.0.x (just like mine is).

So if you are untethered on the PCs, you should be able to run CMD and enter ping 10.0.0.2 on the W7 PC, and you should get responses from the W10 PC. You should also be able to ping 10.0.0.4 on the W10 PC and get responses from the W7

And the way to reach your router is to enter http://10.0.0.1 in your browser's address bar. Again, you need to be untethered for this to work.

If you don't know the router's admin password, you might need to do a factory reset on the router. That will reset the router's password to password. It will also switch you back to 192.168.1.x addresses. But let's cross that bridge when we get there.

All the rest were "Media disconnected"

That is usual. For instance, you don't have ethernet connected, but you have an ethernet port. You likely also see several adapters that start with "tunnel". those aren't real devices, they are virtual. All that clutter does make ipconfig a bit messy to look through.

(Interesting item: W10 computer has two more wireless LAN adapter local area connections)

That is interesting and we should look into it after we get through the basic connectivity and get you into your router setup.

I realize this is slow-going but you are getting very close.

Forum Discussion

Build a LAN with a WNDR3400v2