Using a Site s Wireless Connection for TWO October 4, 2011

Transcription

1 Summary. This document provides procedures for setting up a Tax-Aide TaxWise Online (TWO) site network and connecting it to the Internet when the only existing access to the Internet is a wireless connection. For background, the connection of a wired network to the Internet is briefly introduced. If the only connection to the Internet is via a wired connection, then you should, instead, accomplish the procedures in the Extranet document, Using a Site s Wired Connection for TWO (Technology Software tab, TaxWise Online group). Level of Expertise Required. This procedure requires an intermediate level of expertise. The user should have at least an introductory level of knowledge of computers and routers. Additional References. The Networking TaxWise for AARP Tax-Aide document on the Extranet, Technology Hardware tab, Networking group, provides more detail on setting up the equipment for networking. Windows Help is also a good source of supplemental information to the instructions in this document. Useful Concepts. DHCP Server. Dynamic Host Configuration Protocol (DHCP) is an auto configuration protocol used on Internet Protocol (IP) networks. Computers that are connected to IP networks must be properly configured before they can communicate with other devices on the network. DHCP servers assign unique IP addresses to the devices on its network. In this way network traffic can be routed to the correct device as determined by the router. It also provides a central database for keeping track of computers that have been connected to the network. This prevents two computers from accidentally being configured with the same IP address which would create network errors and prevent those computers from joining the network. Access Point. Access points provide wireless access to a wired network. An access point plugs into a hub, switch, or wired router and sends and receives wireless signals. This enables computers and devices to connect to a wired network wirelessly. If you want to connect your computers wirelessly and you have a router that provides wireless capability, you don't need an access point the router is also the access point. Access points don't have built-in technology for sharing Internet connections. To share an Internet connection, you must plug an access point into a router or a modem with a built-in router. Router. Routers connect Local Area Networks (LANs) to each other and to Wide Area Networks (WANs) that provide access to the Internet. If the router is termed a wireless router, then it incorporates the functions of an Access Point into the router. AARP Foundation Tax-Aide Page 1 of 8

2 Network Switch. Network switches connect devices on a LAN to one another, e.g., computers and printers. They do not connect (bridge) LANs to LANs or LANs to the Internet as routers do. Network Printers. Network printers connect directly to the network via an Ethernet or Wireless connection. When using network printers with any of the connection methods shown in this document, they must be setup with a static IP address. Most routers assign dynamic IP addresses to network equipment each time the equipment is turned on that means that the equipment can have a different IP address from session to session. Without a consistent IP address for the printer your computers will be unable to find it. Therefore, the router configuration has to be changed to assign a static IP address to network printers. Refer to your printer manual for procedures to configure it with a static IP address. Refer to your router manual for procedures for limiting the address space of dynamic IP addresses. IP addresses outside of this space will be available for static IP addressing. You can alternatively configure the router to assign an IP address to the MAC address of your printer. Introduction. The easiest and recommended way of establishing a Tax-Aide wireless network for use with TaxWise Online is to gain access to the host site s network via a cable connection to the router. A network cable is connected from the Internet access plug to the WAN interface of your wireless router. The router can then wirelessly distribute the Internet connection to your network as shown in the diagram below. [Refer to: Using a Site s Wired Connection for TWO (Technology Software tab, TaxWise Online group) for procedures. The below diagram used for comparison to the wireless connection configurations described in this document.] When a wired connection is not available, but a wireless signal is available, then a different configuration must be established to connect the network to the host s wireless system as described in this document. AARP Foundation Tax-Aide Page 2 of 8

3 Convention: This document assumes use of the Windows Zero Configuration (WZC) service to configure the wireless network adapter. Depending on your adapter software installation, you may have a third party wireless manager installed and the Windows Zero Configuration (WZC) service disabled. You can use the third party manager or enable the Windows Zero Configuration (WZC) service Using A Site s Wired Internet Service With A Router SITE EQUIPMENT Host Router Wired Connection [Site Jack] TAX-AIDE EQUIPMENT Wired Connection Wired Connections Wired TWO Tax preparation Computers Tax-Aide Wired/Wireless Router Wireless Connections Wireless TWO Tax preparation computers Wireless printer(s) Wired USB Printer(s) Wired N/W Printer(s) NOTE: The Tax-Aide router* does not need to be in the same room as your computers if you are only using wireless connections. It can be anywhere in the building that has a wired Internet connection. A good location may be with the host modem and router(s). This will permit the use of your own secure wireless network, without the restrictions mandated by an unsecured wireless network. (*A Tax-Aide router is not a specific brand; it s simply the router you provide) CAUTION: Wireless signals deteriorate as the distance between the router and wireless equipment increases. The signal is further degraded by walls and other barriers such as concrete, tile, metal, etc., that are in the path from the router to the equipment. Be sure to test the signal strength at each device before going into full operation with a remote router. If the signal strength is marginally insufficient, you may consider upgrading your router n routers have a stronger signal than b/g routers. AARP Foundation Tax-Aide Page 3 of 8

4 Using A Site s Wireless Internet Service With An Access Point SITE EQUIPMENT TAX-AIDE EQUIPMENT Host Wireless Router Internet Access Computer w/shared Internet connection Wireless Connection Wired Tax-Aide Wired /Wireless Router Wired Connections Wireless Connections Wired TWO Tax preparation Computers Wireless TWO Tax preparation computers Wireless printer(s) Wired USB Printer(s) Wired N/W Printer(s) Sometimes a site only has a wireless connection or a local district decides to use a cell based (Verizon, T-Mobile, etc.) data connection to gain access to the Internet. In this case a computer can be used to connect to the wireless network and gain access to the Internet. This connection is then shared using the Internet Connection Sharing (ICS) capability built into Windows. For a good explanation of ICS and how to set it up, use the Windows Help and Support option on your computer (this is located off the Start button). This shared connection can then be distributed wirelessly to other equipment by configuring a wireless router as an access point rather than as a wireless router. When configured as an access point the router acts more like a wireless switch and does not provide DHCP or routing services, it simply provides access to the wired network for the wirelessly connected computers. This is shown in the diagram above. AARP Foundation Tax-Aide Page 4 of 8

5 Implementation Steps 1. Setup the wireless router. a. Turn on the router and wait for it to stabilize (about 30 seconds). b. Turn on the IAC and wireless adapter and wait for it to stabilize (about 30 seconds). c. Connect to the wireless network you will be using and verify you can connect to the Internet d. Connect the IAC to one of the router ports (not the WAN port) with a patch cable and wait for it to stabilize (about 30 seconds). e. Enter the router Setup Menu by opening Internet Explorer and entering the IP address of the router many times this is or , but it can be other choices as well refer to the Extranet document, Using a Site s Wired Connection for TWO if you need help setting up the router. [CAUTION: Patience is a virtue here. After you make a configuration change and Save the change, WAIT until the configuration menu appears again. The Save can take awhile.] i. Create a Password to protect the router. ii. Create a unique SSID that does not indicate this is a tax preparation computer, e.g., do not name it as IRSNetwork, TaxReturnNetwork, etc. It is strongly suggested that the SSID follow the naming convention, TAV[sitename], e.g., TAVLibrary, TAVMainSenCtr, etc, where TAV indicates Tax-Aide Volunteer. iii. Create a WPA2 Security Key (Passphrase). It is strongly suggested that the WPA2 Security Key follow the naming convention, [this year s depot computer password][last 8 digits of the router WAN MAC code], e.g., if the depot computer password is, Gofish$, and the MAC code is, F4-85, then the Security Key would be, Gofish$1225F485. The actual password wasn t used in the last examples, for obvious reasons. The WAN MAC code is found on the bottom of most routers. If not there, it can be obtained from the router configuration menu. The Security Key is case sensitive. iv. Set the wireless router to Access point mode (Your router may have a different name for this mode, but the intent of this mode is to turn off the DHCP function). This will turn off DHCP and gateway functions in the router and allow the router to simply act as a wireless switch between the IAC computer and your network components. The Internet Access Computer will act as the DHCP server. f. Close Internet Explorer AARP Foundation Tax-Aide Page 5 of 8

6 2. Set up the Internet Access Computer a. Share the wireless connection as described in the below table. Procedures To Configure Internet Connection Sharing On A Computer (See Windows Help, Internet Connection Sharing for more details) XP Vista/Win 7 b. Click Start -> Control Panel -> Network and Internet Connections - > Network Connections c. Right-click on the Wireless Network Connection and select Properties d. Click the Advanced tab d. Check the box for Allow other network users to connect through this computer s Internet connection. e. Click OK f. Close all windows Use Option 1 or Option 2 then continue with step c. OPTION 1: a. Click Start and type View Network Connections in the Search Box [ Do not press Enter and do not enter Networks ] b. Click on View Network Connections in the list that appears [probably the top item] OPTION 2: a. Click Start -> Control Panel -> Network and Internet -> Network and Sharing Center b. Click on Change Adapter Setting CONTINUE WITH BOTH OPTIONS: c. Right click on Wireless Network Connection and select Properties d. Click on the Sharing tab e. Check the box for Allow other network users to connect through this computer s Internet connection. f. Click OK g. Close all windows The router and IAC are now set up and ready to accept connections from the other network devices. Restart the computer and allow it to stabilize. 3. Turn on and connect the wired, wireless computers by connecting to the Access Point with a patch cable or wirelessly using the SSID and WPA2 Security Key you established previously. Also turn on and connect any shared/networked/wired printer(s). If using Windows 7, you may be asked for the network type choose Work. AARP Foundation Tax-Aide Page 6 of 8

7 Likely issues The WAN connection on the wireless router is not used in this configuration. Using this connection would isolate the Internet Access Computer from the other computers and printer(s). Make sure the WAN port is not used. Since the Internet Access Computer provides the network addressing function (DHCP) this computer must be fully booted and operational before the other systems are started. You shared the Local Area Connection instead of the Wireless Connection. ICS must be installed on the Wireless Connection. You didn t wait for the router to Save changed data before closing Internet Explorer. The data isn t saved until the router returns to the setup page. There will normally be an indication that the data is in the save mode, e.g., screen indication, Saving Data, or similar notice. Using A Site s Wireless Internet Service Without A Router Or Access Point SITE EQUIPMENT TAX-AIDE EQUIPMENT Host Wireless Router Wireless TWO Tax preparation computers Wireless Connection Host wired network printers Wireless printer(s) Wired USB Printer(s) NOT shared Wireless networks, including Public WiFi networks, are allowed to be used for TWO, with the following restrictions: If the wireless network is unsecured, then Windows File and Printer Sharing must be turned off on all computers. This restriction mandates the following: a. All printing can be accomplished on a single computer that has the target printer locally attached. Since File and Printer Sharing must be turned off on all computers, shared printers can t be used. OR AARP Foundation Tax-Aide Page 7 of 8

8 b. Network printers directly attached to the network can be used they can be wireless or wired. They can be AARP printers or the host site s printers. You will need assistance from the site s IT department to set up the static IP address for the AARP printers or to gain access to the host site s printers. If the wireless network is secured with WPA2 security that you have reasonable control over, meaning that the Security Key is not posted on the bulletin board of the library or senior center, then Windows File and Printer Sharing is allowed to be turned on and any computer can print to any printer that is shared on the secured wireless network. The wireless computers used must be of the following types: 1. IRS Computer Loan Program laptops 2. AARP Tax-Aide purchased and imaged laptops 3. Site-owned or personally-owned or donated computers with NTCregistered clean malware and security scans. The scan sites URLs are: a. Secunia Online Software Inspector - b. Norton Security Scan - AARP Foundation Tax-Aide Page 8 of 8