CONSUMERS TEST
Choose the
Right Router
f you accept the tubes or pipes impending failure and take over routing It is quite common to set up a router, and
analogy of the Internet, then routers functions smoothly so network traffic is not if no changes are made to the links up or
Iare essentially the fittings and valves delayed. Most often routers are thought of as down stream, simply forget about it... Until it
in the pipes of the Internet. Since their appliances. There are many name brands fails. Appliance or PC, your router still runs on
invention, their underlying principle is largely on the market: Alcatel, Cisco, Juniper, Linksys, software, and there will be security exploits
unchanged: Netgear to name just a few from enterprise to take advantage of your router's underlying
A router takes traffic from one network class down to home user class. OS and programming. So, as with everything
and relays it to connected networks on a path Less obviously, any computing platform else in the network, you will have to establish
toward each packet's destination network. with two network interfaces can be a method for keeping current with software
Over time many additional functions configured as a router commonly using updates and security patches. Be prepared
have been added: Routers can analyze Linux or BSD, or less often Windows or for routing appliances to require a system
packets in transit. They can be configured OSX. In fact the LiveCD included with this restart to take advantage of most patches.
to block or allow certain types of traffic magazine can turn your computer into a If you already have a systems
between particular hosts or whole router with just a few simple commands management system or approach, you
networks. Routers can also be used to  just look at any of several references to will want to make sure that the router you
prioritize particular packets ahead of others conducting man-in-the-middle attacks, or choose can be integrated into that system.
in queue for transmission. (the command sharing your network connection over WiFi. As the gateway into (and out of) your
structure for achieving this is usually called In the enterprise world, a name brand is network, the router is in the best seat in the
an access control list or ACL) often though to be the best (or only) choice, house to watch for attacks and breaches.
Routers can modify packets in transit. but by giving up the easily defended good You will want to have some form of logging
They can be configured to change packet decision of buying an appliance, a network and log analysis to give you early warning
sizes in order to optimize transmission over engineer can gain greater flexibility and of suspicious events.
some networks. A router may be used to reduced price by building a PC or Server by Matthew Sabin
mask the origin host or network for certain into a routing platform.
packets. An administrator may program Deciding which brand and model, or
a router to direct incoming packets to an whether to build your own, will require a Netgear Router
alternate destination. If your network uses thorough understanding of which routing using 802.11 b/g protocol
network address translation (or NAT) you functions you will need, and also how many My recent experience is with a Netgear
are using some of these features. ports and how much traffic you will need. Router using 802.11 b/g protocol. This router
A router can be programmed to encrypt The concepts involved in router was chosen for home networking as a
packets in transit in order to protect their programming are fairly universal  there compromise between good quality and
contents from prying eyes on the open are only so many commands required reasonable cost. It was not the top of the line
network. One of the most common uses to implement the functions of a router. Yet router from this company but it was far from
for this feature is for building virtual private each appliance vendor has used their the worst. I have troubleshooted Linksys and
networks (VPNs) over the public Internet. own unique syntax and structure. The Netgear routers mostly. Linksys routers were
Finally routers are often able to analyze differences are largely just syntactic, so a more commonly used by the customers
network connections and topology. This skilled programmer of Cisco routers for I had worked with but the IP technician
allows for packets to be diverted on other example can fairly readily pick up the Alcatel who wired the cable connection had
paths if a link or remote router appears to be programming method. In the build-you-own recommended Netgear so it was chosen.
saturated or down. Further a "spare" router world, the differences can be broader, but My father likes the mobility of wireless
can monitor a production router to detect again the concepts remain the same. with his laptop and it is a benefit to him in
70 HAKIN9 4/2008
~tqw~
CHOOSE THE RIGHT ROUTER
his large home. I live in an apartment and the other hand I had some problems while
I prefer the advantage of 100 mbps speed using it. The unit has hung a total of about Cisco 3700 & Cisco 1130
with a wired Ethernet line (giving me much 3/4 times in as many years. Unfortunately Typically my work does not end when I get
faster downloads) compared to a maximum the firmware version of the WRT54G and new home so I happen to use several routers
of 54 mbps speed that my father receives. I models do not all support flashing. I would (most for testing and some for actual
can also quickly configure a wireless card in mostly recommended to anyone buying a connectivity). My current router right now is
a hotel or hotspot if necessary. There were broadband router/wireless AP to investigate it a Cisco 3700 router for my hard line and
many hang-ups, problems using the router if can be flashed with a different firmware. Not a Cisco 1130 Wireless Access Point for
at first. The biggest ones were simple user only is it easy in most cases but in nearly all my wireless users. I went with this router
error  not disconnecting and reconnecting cases it will provide you with so much more because I got several products from
cables or restarting power to the modem, additional features that will greatly benefit you. Cisco and know their quality to be top
router and computer when hardware was notch. The routers are made for enterprise
added or removed or when configurations Notes: environments meaning they support a full
were adjusted; windows errors when list of options that can be configured. I am
configurations did not match between the " Quality/price: Best 50 euro I've spent able to have full control over any traffic that
router data page and the adapter software " Effectiveness: Does exactly what I need leaves or comes into my network and this
including WEP security keys; deciding it to do has proven to be helpful countless of times.
whether to use the built in windows software " Final: Don't buy Netgear, D-link aren't Before I used my Cisco router I was using
for wireless configuration or the CD provided great. If it has wireless investigate better just a simple Linksys wireless router w/
with the adapter and making the chosen one antennas cable modem built in. I had used plenty of
work; making the decision to use adapters Cisco routers both at work and at school
instead of PCMCIA cards and ensuring that by Conor Quigley so I knew what I was getting into when I
the wire antennas they used were positioned switched. I changed mostly because of the
properly to receive the signal. Wading through finer control I could get out of the router. It
the array of Internet literature and the on-line Cisco also helped me to prepare for my up and
router and adapter manuals to correct the We use Cisco and Juniper products in coming Cisco certifications.
connection and speed problems. our company. Cisco is the market leader, I do a lot of testing so I actually own a
I had great results with the router so provides the advanced features we require, couple routers. That being said, I choose
I would definitely buy products from this a roadmap for new features and excellent the 3700 over the rest of them because it
company again but if I buy or recommend support infrastructures. We use some was the newest. It has the most up to date
a new router it would be a newer model Juniper routers, but Cisco was a better fit. IOS and that provides me with the extra
with current technology. IT equipment We did a long technical review of various functionality I was looking for.
advances and price reductions occur so products and Cisco won out. Cisco routers/ This product has helped me immensely
swiftly as we know from Moore s Law about switches are nice, especially when you have at work. I am now able to go home and
processor speed, that after six months I lots  everything is easier to manage and demo out something I may have been
would never buy the same hardware. maintain. We have been using Cisco for working on at work. When I go in the next
years so our staff are comfortable using the day I will already know the solution and
Notes: equipment and it is somewhat easy to find that in itself saves a vast amount of time.
Cisco certified engineers. Its also great because I am able to test out
" Quality/price: 8.0 For we have 100s of router/switches new solutions in a non-production area.
" Effectiveness: 8.0 so the breakdowns happen but Cisco TAC Doing the trial and error at home means
" Final Note: 8.0 generally fix/replace when it is needed I don't have to do it when it comes to the
or we have to find workarounds. The only real thing. The only bad thing about this
by Monroe Dowling weak point about Cisco is the cost which router is that they are typically expensive
may not suit everyone, but its core to our and to get the fullest feature set you need
business so its worth it. to have an account with Cisco. However,
Linksys WRT54G Version 2 there are plenty of routers on e-bay that are
I am using Linksys WRT54G Version 2 router. Notes: pretty cheap and I recommend for anyone
I have chosen this one because it was able looking to gain some practice with Cisco
to flash it with dd-wrt which is a Linux port " Quality/price: 10.0 and a production environment to put out
that provided a lot of additional functionality. " Effectiveness: 10.0 the extra cash. I did not have any hang ups
I have been using Netgear before but to be " Final Note: We have spent over 2 at all. I am used to working with the routers
honest it was crap and in no way had the million Euro on Cisco equipment this at work so it made for a simple transition.
same functionality that the Linksys does. My year, so we are happy for the moment. The only thing I had to do was call my ISP
Linksys router can ssh to my home router/AP because there were issues on their end
and perform WOL to LAN machines. On by Network engineer at ISP once everything was up on mine. I would
4/2008 HAKIN9 71
~tqw~
CONSUMERS TEST
certainly choose this router again. As time on the router that checks for sync and
goes on I may replace it for a newer model, Solwise SAR-600EW reboots if the connection drops I find that I
but Cisco is where my choice will be. Its a I chose this product as I was impressed have few problems.
excellent small business solution, great way with the review of it on RouterTech.org I would recommend this to others.
to practice and fun to have. and happy that I would be dealing with Admittedly I chose this router to allow me
a company I could trust. Also I knew to play with the config and perhaps the
Notes: that it would be compatible with the new average home user doesn't want or need
RouterTech custom firmware which meant to do this, however the platform is solid and
" Quality/Price: 7.0 (high price, rock solid that I could continue to test firmware reliable at a good price.
quality though) changes and to help support the platform
" Effectiveness: 10.0 in the forums. Notes:
" Final: 8.5 I have used several other routers
over the last few years. My first one was " Quality/price: 9.0  the SAR600EW cost
by Brandon Dixon, Information Systems a Safecom ASR-8400 which worked well me about Ł30 which was a good price
Security Engineer once a different vendors firmware was for a wireless router in my mind
installed. I needed to move to a Wireless " Effectiveness: 9.0  the router does
router so changed to a Billion 7402VGP exactly what I would expect it to do
Wifi and 100mbit Ethernet as I was keen to try the built in VoIP " Final: 9.0  the Solwise SAR600EW
Wifi was needed for iPod devices. Thus, functionality in that router. Unfortunately is a good router at a good price. The
we set out to a big electronics superstore the router was unstable despite being GPL based firmware platform means
to find a box as cheap as possible  at on the most recent firmware, the wirless that there is scope to improve the
our companies, we do not believe in lavish performance was eratic and the VoIP functionality beyond the manufacturer
spending. We have used Surecom EP4904 quality poor. Billion were always just about delivered and if you do turn it into an
previously. We resigned from it due to lack to release a firmware to fix the issues but unrecoverable brick (although this is
of WiFi  the box had no WiFi transmitter. I got fed up of waiting. At about this time unlikely) the cost is not so high that you
We looked at a variety of other routers (two years ago) the RouterTech.org site can't replace it quickly and easily.
(including Gigabit ones). However, none was setup and I got back into contact
of them were worth the extra price. We do with the guys who were so involved in the by Sy Borg at RouterTech.org
not have large amounts of data on our ADSLTech/Safecom support a few years
network, so Gigabit didn't pay. ago. I found out about the GPL firmware
As for extra router features: no need for that was being developed and so given my Cisco 2801
these as we have a dedicated server in the annoyance with the Billion router I chose to When I begun my career as security
office. Complicated implementation of WiFi buy a new Safecom SWAMR-54125. This manager I decided to use the Cisco
access control on MAC base  needs to router worked well for me for a year and products. As years were passing I started
be disabled to add a new device to the filter a half but appears have had a hardware employing also the Open Source products.
list. This makes adding new review devices failure fairly recently which prompted me to I chose Cisco 2801 router for being one
difficult and annoying. However, as we can move to the Solwise SAR600EW. of the best scalable products on the market.
just run WPA due to device limitations, we I've not bothered looking at any routers Cisco has produced routers ever since
need the MAC filter for an extra bit of safety. beyond the ones above. These AR7 chipset and provides a great line of products from
Somewhat problematic range. We have based routers have performed well for home to core edge products. What I really
a nice 80m2 office  and cannot use the me and meet all of my functional needs appreciated at that time was the support
WiFi properly with our mobile boxen in (especially with custom firmware on). I and the security concern Cisco offers.
other rooms. A strong receptor definitely work from home sometimes and use a When working for an enterprise you
is needed... We haven't experienced any VPN client to connect to the office. The have to use everything the management
breakdowns yet. All worked fine so far! I SAR600EW allows for easy port forwarding buys. I used many brands like Juniper, D-
would recommend the device to the others! rules to open up connections and gives the link, Extreme, Netgear, to name a few, but
If you do not need an advanced, fancy router stability you need when sharing screens finally I manged to convince them to switch.
 get this box definitely! etc with work colleagues. I couldn't have a single vision of the whole
The only issues I have is with the quality network due to the poor integration of the
Notes: of my ADSL line. I have high attenuation other products.
numbers and find that my SNR margins I used to employ Juniper some
" Quality/price: 8.5 fall in the evenings and occasionally I lose time ago, but found their command line
" Effectiveness: 9.5 sync. The SAR600EW maintains sync far language more complicated than Cisco's.
" Final: 9.0 better than the SWAMR54125 did (partly The router I am currently using is one
perhaps to later dsp drivers as part of the of the best scalable and modular solutions
by Tam Hanna, Tamoggemon RouterTech firmware) and with functionality I know, with a great support and a group
72 HAKIN9 4/2008
~tqw~
CHOOSE THE RIGHT ROUTER
of Cisco engineers who help to tailor the " I can go downstairs still having a good linksys AP. I ve been using BSD (FreeBSD,
solution to our needs. QoS then OpenBSD) for over 9 years. I change
The weakest point is the price which " Proxy server feature my home routers to test out new things.
is often higher than the cost of other " Encryption feature (WEP 64/128 bits) It s been OpenBSD for quite a while and
solutions, however, if you are in favour of a " Dynamic/Static Routing I doubt that will change anytime soon.
quality-price rule it is not so important. " Multicast I ve looked at Mikrotik RouterOS and its
In the last few years I have had no " NAT feature associated hardware and will be using it
breakdowns whatsoever. Sometimes before " Ping test on a clients project in the future.
the 2000 we had some strange behaviours " DHCP configuration OpenBSD, as I m sure you re aware,
in our network. The customer service " D-LINK has excellent support (helpdesk) is an excellent network device; providing
resolved all the problems immediately and both a world class firewall in PF, and
in a very professional manner. Weak points: fastly maturing routing daemons such
Human mistakes like misconfiguration as OpenBGPd, OpenOSPFd, and layer 7
or misunderstanding of the whole features of " The web-based Manager has a poor features such as relayd.
the router still happen sometimes obviously. interface There was a bit of a learning curve
Cisco is a valuable brand and they " Few updates for the interface as well as getting read only mounts right, and
make modular routers with very useful technical manuals squeezing the required stuff into a small
features like network admission control. " Password manager that should be CF card (now negated by vastly larger and
You can have security policy compliance, easier (I think of the beginners out there) cheaper flash memory).
mitigation of viruses, worms plus " The reset button on the rear panel isn t
unauthorized access control. easy to reach with a pen (very annoying) Notes:
" If you have a big house you must
Notes: change the antenna on the rear panel " Quality/price: 10.0
especially with large walls " Effectiveness: 10.0
" Quality/price: 8.0 " The antenna offered within the package " Final: 10.0
" Effectiveness: 10.0  when you work has a poor range for a big house. If you
as system integrator for an enterprises are downstairs for example you might by Aaron Glenn
effectiveness and a very fast support encounter connection problems. I had to
are important. Cisco offers all of the change it, D-link could manage to offer
features needed for the successful something a little better even for this price Netgear DG834g
enterprise networking. I chose this model following extremely
" Final: 10.0 Another thing is that the router is very positive opinions it got on numerous
dependant on temperature: I have technical forums. I used a Digicom router
by Antonio Stano experienced problems during the before but immediately resigned. Its speed
summertime. The ADSL Led was and performance turned out to be really
sometimes off and I had to reset the device disappointing.
D-LINK DSL-G604T and re-enter my connection settings. The other routers that I had taken
I needed a wireless ADSL router with high D-LINK DSL-G604T is a good choice into consideration had exactly the same
speed connection for the home use. for a small office or home use. I have been features but cost much more.
Speed: 54 Mbits/s. using it for 3 years now and I must say that DG834g is easy to configure and has
On the rear panel  Power 7.5 CD 1.5 it works well fro most of the time. no defects that would hamper the proper
A; ADSL Port; 4 Ethernet Ports. functioning of a small network. I have had
On the front panel  4 LED indicators Notes: no problems so far which does not happen
(WLAN: for Wifi; ADSL; Status; Power). too often if it is about networking.
I was searching for a modem/router " Quality/price : 8.0 I recommend this router to all users
having these features since I had several " Effectiveness : 6.0 because of a moderate cost and a very
machines to connect. " Final: 7.0 good quality.
I used a D-LINK modem with only 1
Ethernet Port before. I decided to change by Tony Deslandes Notes:
since I was moving to a much bigger space.
My ISP offered a package with his own " Quality/price: 10.0
modem/router but as a student, I couldn t OpenBSD " Effectiveness: 10.0
afford it (more than $150) at that time. D- I am a network engineer by trade and have " Final: 10.0
LINK DSL-G604T features were identical for 5 years professional experience.
less than 100$ so I chose this one. I have a number of soekris OpenBSD by Giuseppe Caristia
Strong points: boxes at home; in addition to a dd-wrt
4/2008 HAKIN9 73
~tqw~