Networking Policy – Use of Personal Wireless Routers
Setting up personal wireless routers or any network equipment is prohibited in campus academic complex and office buildings. You have the option of installing your own wireless router in the hostel and staff apartment and connecting it to the data network port in your room. However, if you have access to the campus wireless network service in your rooms, no router may be installed.
Before plugging in a wireless router into the wall sockets of hostel or staff apartment please read and adhere to the IT & Security policies. A personal wireless router must be secured and restricted to use by the owner. The owner will assume all responsibility for the device and be accountable for any security issues. A personal router must NOT interfere with the campus network (wired or Wi-Fi). If it does cause interference, it must be immediately disabled.
Below is a list of considerations for setting up wireless router:
Ensure the router is set to route or NAT mode as shown below. Do NOT turn on bridge mode or AP mode, this can cause the network port to shut down.User should ensure the wireless router has “Routed Mode” setting.
Wireless SSID should NOT be set to mimic existing campus SSID such as NTUWL, NTUSECURE or eduroam which may cause confusion. It is also recommended that your router SSID is named according to your room or apartment number. If there is more than one wireless router in the same location, ensure the SSID is unique. One way to do so is by appending it with some numbers like RoomA-1 assign to router 1 and RoomA-2 assign to router 2 etc.
Admin Account Password
The default password to the router should be changed during the first time setup. Avoid leaving blank or no password to the device. Ensure a complex password comprising of at least 8 characters with a mix of alphabets (a-z, A-Z), numerals (0-9) and special characters like @,#,$,% is set to properly secure the router.
The minimum security standard that required to be set is WPA2. Older devices may not be able to use this level of security. In that case, you should choose the highest level of encryption that all devices can use. Avoid using WPA or WEP to minimize any chance of compromising the SSID key thru network traffic sniffing or hacking attempt.
All routers include software known as a firewall, which helps to prevent outsiders from attacking your computer through the router. Ensure that the firewall is enabled. The default firewall settings will provide a good baseline of security.
Ensure that DHCP is enabled. You should not need to change any of the DHCP settings from their defaults. Use the non-routable private IP range from 192.168.x.x (x= 0-255) if user guide from manufacturer's device is not specific about IP addressing. Make sure router is in route/NAT mode before turning on DHCP to prevent network port from being disabled.
Use good quality Lan/Ethernet cables (RJ-45), those graded as Cat6 are the preferred choice. Poor quality cables or damage jack can lead to unstable behavior, intermittent/loose connection or even degraded network performance.
Don'ts: Cable jack without retaining clip
Don'ts: Cable jack with retaining clip and no protective cover
Do's: Cable jack with retaining clip and protective cover
Using an Ethernet (RJ-45) cable, connect the router's "Internet" port to a wall jack socket and another Ethernet cable to connect your computer to one of the LAN ports on the router. Then, plug in the router's power adapter and ensure that it is turned on.
Wireless routers broadcast on various channels, similar to radio stations. For best results, leave the channel setting on “Automatic.” This will minimize interference with other nearby wireless networks. If by chance all of your devices can do 802.11n or 802.11a, then you should disable the other modes. This will provide you with many more channels to use and virtually eliminate the chance of interference. Use the minimum transmit power setting to reduce interference with other devices. A wireless router that provides wider coverage (because of protocol or antenna choices) may experience decreased performance due to interference with other wireless routers.
Where to get wireless routers?
The campus computer shop sells wireless routers and provide service to configure the router you purchased for use in your room. If you purchase the personal wireless router from other source, you are responsible for the configuration of the device according to the settings recommended in this document. You can do that yourself with reference to the manufacturer's website for configuration steps or seek your vendor's assistance.
Based on feedback, the wireless routers purchased by hall residents include:
TP-Link WR902AC AC750 Wireless Travel Router
For TL-WR702N, TL-WR810N (Note: These routers come with factory default to AP mode. User must configure it to Router mode before connect it to the hall network. If not the network port will be automatically disable for a period of around 15min until user set it to correct Router mode.)