If you have internet at home, in the office, or in a small business, your network is not just about plugging in the router and crossing your fingers. Properly configure the router, Windows, and local network It makes the difference between a fast and secure connection, and one full of interruptions, slowness, and risks.
In this guide you will see, step by step and with many practical examples, How to set up, configure, and optimize your network and router in WindowsFrom the physical location of the equipment, to sharing files between computers, activating guest networks, protecting WiFi and avoiding typical errors that later cause many headaches.
1. Network and Internet Settings in Windows: The Control Center
In Windows 10 and Windows 11, everything related to your connection is managed from the control panel. Settings> Network and InternetFrom here you can see at a glance if you are connected, through which interface (Wi-Fi or Ethernet) and access the most important settings.
To enter you can use two very simple paths: from the Start menu using the Settings app (Start > Settings > Network & Internet) or by right-clicking on the network or Wi-Fi icon in the taskbar and choosing “Network & Internet settings”.
Once inside, at the top you will see the current status of your connection: if you have internet access, if you are on a limited network, or if there is a problem that requires the Windows troubleshooter.
1.1 How to view the IP address in Windows
Knowing your local IP address is key for many tasks (accessing your router, setting up internal servers, troubleshooting). From this section you can Easily check your IPv4 address.
The steps are very simple:
- If you're on Wi-FiGo to Settings > Network & Internet > Wi-Fi and tap on the wireless network you are connected to.
- If you're using a wired (Ethernet) connectionGo to Settings > Network & Internet > Ethernet and select the active connection.
In the connection details, look for the network details section: there you will see the IPv4 address, gateway, and DNSThat IPv4 address (usually something like 192.168.xx) is the one you'll use, for example, to access other devices or the router itself.
1.2 Setting a data limit in Windows
If you connect from a 4G/5G router, tethering from your mobile phone, or a data plan with a data cap, you'll want to use the Windows data usage control to avoid any surprises on your bill.
On a specific Wi-Fi network, you can set a limit like this:
- Open Start > Settings > Network & Internet > Wi-Fi.
- Tap the Wi-Fi network you're connected to.
- Select option “Set a data limit” for that network.
- Choose the type of limit (monthly, one-time, unlimited with notification, etc.), specify the maximum data amount, and save the changes.
Windows will take care of to warn you when you approach the top and when you surpass itso you can better control your consumption.
1.3 Activate or deactivate airplane mode
Airplane mode in Windows cuts off abruptly all wireless communicationsWi-Fi, mobile data (on devices with a SIM card), Bluetooth, and even NFC. It's useful when traveling or when you want to completely isolate the device without turning it off.
You can activate or deactivate it in two quick ways:
- By clicking on the network, volume, or battery icons in the taskbar and selecting “Airplane mode”.
- From Settings > Network & Internet > Airplane mode, using the on/off switch.
1.4 Creating a public or private network in Windows
Each time you connect to a network for the first time, Windows decides whether to treat it as a new network. “public” or “private”This is essential for security and for being able to share resources.
The basic differences are:
- Public network (recommended when away from home)The PC remains hidden from other devices; file and printer sharing is not allowed. Ideal for networks in cafes, hotels, universities, or when you don't trust the environment.
- Private networkThe computer is visible on the network and you can share folders and printers. You should only use this option in networks of trust: your house, your small office, etc.
To change a network to public or private:
- Go to Settings > Network & Internet.
- Go to Wi-Fi and tap your current network, or to Ethernet and select the active connection.
- In “Network profile type”, choose “Public network” or “Private network” as it suits you.
1.5 Change TCP/IP and DNS settings over HTTPS
The TCP/IP protocol is the foundation of how devices communicate on a network. For most users, using TCP/IP is the most convenient method. automatic IP addresses via DHCPso the router assigns the IP address, gateway, and DNS servers without you having to touch anything.
If you need to renew your IP address, change it to static, or adjust your DNS, you can do this in Windows from:
- Settings > Network & Internet > Wi-Fi > Manage known networks > select your network, or
- Settings > Network & Internet > Ethernet > select the active connection.
In the connection section, locate “IP Assignment” and click on Edit. You will be able to choose between:
- Automatic (DHCP)The router automatically assigns IP and DNS, which is the recommended option in almost all cases.
- Manual: You enter the IP, mask, gateway and DNS yourself (useful if you want a static IP for a local server, P2P, etc.).
Windows also allows you to configure DNS over HTTPS (DoH), which encrypts DNS queries to prevent them from traveling in plain text:
- DisabledDNS queries are sent in plain text (HTTP).
- Activated (automatic template): It is encrypted and HTTPS is used with the default settings or by attempting to discover it automatically.
- Activated (manual template)You can specify the DoH provider template you want to use.
You can also decide whether to allow “fallback to plain text” (send the query unencrypted if HTTPS fails) or if you prefer that, if there is no DoH, the query is simply not sent.
2. Initial network planning and router selection
Before you rush out to buy devices like there's no tomorrow, it's worth pausing for a moment and define what network you really needIt's very common to end up with top-of-the-range routers or very expensive mesh systems that are then underutilized.
The first thing is to be clear What type of connection do you get at home or in the office?Today, fiber optic is the most common option, but you can also have ADSL, WiMAX, or satellite. Based on this, your internet service provider (ISP) will have recommended a line speed; from there, you should estimate how many devices will be connected and for what purpose (online gaming, 4K streaming, remote work, home automation, etc.).
Once that's defined, you need a main routerThe operator usually installs one, but you might be interested in a third-party model with better features. You should pay particular attention to whether it supports the... contracted speed and offers the features you need (WiFi 6, guest network, parental control, QoS, etc.).
Next, it's time to analyze the property or premises: Where are you going to place the router, and which areas need strong Wi-Fi? And where you want to run Ethernet cables for extra stability (work PC, Smart TV, game consoles, NAS, etc.). This planning will prevent you from having to fill your house with amplifiers later.
3. Router location: coverage, temperature, and interference
The physical position of the router is one of those details that are often overlooked and then costly. Placing it in a good spot can save you a lot of coverage problems. and even money for additional equipment.
Some basic guidelines:
- Place it in a more or less central area of the house, to distribute the Wi-Fi signal as best as possible.
- Avoid corners, storage rooms, closed closets or behind furniture; they are real coverage killers.
- Do not place it near heat sources such as radiators, nor leave it in direct sunlight on a window: Overheating reduces performance and shortens lifespan.
- Keep it away from other electronic devices that generate interference (microwaves, wireless bases, certain speakers, etc.).
If you're thinking of setting up wired network (a very good idea for fixed equipment), try to place the router near a socket or a point from which it is easy to distribute cables through conduits, false ceiling or walls.
4. Physical startup of the router
Once you're clear on where it's going to go, it's time to get it up and running. Ideally, you should consult the manual to identify the correct location. Ethernet ports, power connectors, and buttons (reset, WPS, Wi-Fi on, etc.).
The basic steps are usually:
- connect the power supply plug it into the corresponding port on the router.
- Wait a couple of minutes until the startup is complete and the LEDs stabilize.
- Connect the cable that gives you access to the Internet: fiber, ADSL or the ONT, as the case may be.
Depending on the technology, the wiring varies slightly:
- Fiber with separate ONT: Connect a network cable from the router's "Internet" or "WAN" port to the ONT's Ethernet port.
- Fiber with integrated ONT (HGU and similar): plug the fiber optic patch cable directly into the optical rosette.
- ADSLUse a telephone cable (RJ-11) from the router's DSL port to the telephone jack. If you need a landline, add the necessary microfilters.
Finally, connect a Ethernet cable from the router to your PC or laptop To perform the initial setup via cable. It's much more convenient than doing it over Wi-Fi, because you won't lose your connection when changing security settings.
5. Accessing the router's web interface and basic settings
Almost all home routers have a very typical management IP address: 192.168.1.1 or similar. The username is usually “admin” and the password is “admin” or “1234”, but normally the factory IP address, username, password, and Wi-Fi name/key are printed on the sticker on the bottom of the router.
Before entering, it's a good idea to make sure that the Windows TCP/IP is set to automaticso that the router itself assigns the IP address via DHCP. To do this in Windows 10/11:
- Open the Start Menu and type “View network connections”.
- Right-click on your connection (Ethernet or Wi-Fi) > Properties.
- Double-click on “Internet Protocol version 4 (TCP/IPv4)”.
- Check “Obtain an IP address automatically” and “Obtain DNS server address automatically”.
Next, open your browser and type the Router IP address in the address barIf everything is correct, you will see the login screen. Enter your username and password to access the administration panel.
5.1 Change the router's administration password
One of the first essential steps is change the router access passwordMany models force you to enter the password the first time, but others don't, and leaving the default password is a huge risk.
This setting is usually found in sections such as "System", "Administration", or "Management". Choose one. long and complex password (at least 12 characters with uppercase letters, lowercase letters, numbers and symbols) and save it in a password manager if necessary.
5.2 Configure SSID, Wi-Fi encryption, and wireless security
The SSID is the name of your Wi-Fi networkThis is what you see when searching for networks from your mobile phone or laptop. It's a good idea to replace the factory default with your own, but without including any personal information (name, apartment number, address, etc.).
The security aspect is equally, if not more, important:
- Check which protocols your router supports; ideally these days it should WPA3-PersonalIf not, use at least WPA2-Personal.
- Avoid WEP or WPA altogether; they are broken and vulnerable protocols.
- Choose a strong Wi-Fi password, again at least 12 characters long with a mix of characters. If a password checker tells you it would be cracked in seconds or minutes, change it to a stronger one.
An important point is the WPS (Wi-Fi Protected Setup)It allows you to connect new devices with a button or PIN without entering the full password. It's convenient, but it has had many vulnerabilities, so it's best to disable it unless you absolutely need it.
5.3 Create a guest Wi-Fi network
Almost all modern routers allow you to activate one Additional Wi-Fi network for guests onlyThis option is pure gold for separating your personal equipment (PC, NAS, printers, smart home devices) from visitors' mobile phones and laptops.
The guest network usually allows you to:
- Restrict access to the rest of the local network, so that they only have access to the Internet.
- Put a simpler and easier to dictate password without fear of your master key being leaked.
- Limit the bandwidth of that network, so that the connection is not saturated if several people start downloading or streaming video at the same time.
The great advantage is that you can have this network deactivated and Only turn it on when someone comes.Once they leave, you turn it off and forget about it. That way, no one can log in unexpectedly later.
5.4 DNS and port opening
You can also configure the router itself. DNS servers that are assigned by DHCPIf you want to use alternatives to those of your operator, you can use, for example, Google's (8.8.8.8 and 8.8.4.4) or any other trusted provider.
Regarding ports, the general recommendation is Do not open anything unless you really need to. for a specific server (online games, web server, FTP, P2P, etc.). And if you have to open them, it's best to use the narrowest possible ranges and keep a short list of which port is for which service.
6. Setting up a home local network in Windows (file sharing)
Beyond browsing the internet, it's often useful for your home computers to be able to... share folders, printers, and resourcesWindows offers several ways to do this depending on the version (Windows 7, 8.1, 10, 11), but the concepts are similar.
6.1 Creating local users in Windows 10/11
To control who can access what, it's advisable to work with differentiated usernames and passwordsIn Windows 10/11, the easiest way is to create local accounts:
- Go to Start Menu > Control Panel > User Accounts > User Accounts > Manage another account.
- Tap on “Add a new user in Settings” and then on “Add another person to this team”.
- Choose “I don’t have this person’s sign-in details” and then “Add a user without a Microsoft account”.
- Enter username, secure password and finish the wizard.
Then you can change the account type to Standard user or AdministratorTypically, the accounts you share with other users should be standard, and you should reserve administrator privileges for trusted individuals or for your own account.
6.2 Adjusting the network profile and advanced sharing
On the computer that will share folders, first make sure the connection is marked as Private network (We saw this earlier in the Network and Internet section). On public networks, the firewall blocks incoming connections.
Then, from Network Status > Advanced Settings > Center network and sharingGo to “Change advanced sharing settings” and enable:
- Network detection.
- File and printer sharing.
- If you're interested, you can share the public folder, allowing other users to read and write to it, or disable it if you only want to share certain folders.
- Use of 128-bit encryption to protect connections.
- Shared space with password protection, so that only authorized users can enter.
6.3 Team and working group names
For everything to run smoothly, the PCs on your network must have Different names but belong to the same working groupThis makes it easier for them to see each other.
Configure it from Start Menu > Control Panel > System and Security > System > Advanced system settings > "Computer Name" tab. There you can:
- Give a description of the equipment (optional, but helpful).
- Change the Name of the team for something simple (PC-LIVING ROOM, LAPTOP-OFFICE, etc.).
- Indicate a Workgroup common (for example, HOUSE or LOCAL NETWORK).
After saving, you'll need to restart for the changes to take effect. Repeat this on all computers on the network.
7. IP address, firewall and Samba/shared server
Configure the IP addressing This prevents many "phantom outages" that are very difficult to diagnose. All devices must be on the same subnet (for example, 192.168.1.0/24) and have a unique IP address.
From the network card properties (as we saw earlier), in the IPv4 protocol you can:
- Leave IP and DNS on automatic so that the router's DHCP takes care of everything.
- Or manually assign an IP address (for example, 192.168.1.2/24 with gateway 192.168.1.1) for local servers that need a stable address.
If you decide to manually set an IP address, make sure it is outside the range assigned by DHCP to avoid conflicts. For example, if the router distributes addresses from 192.168.1.100 to 192.168.1.199, it uses addresses below 100 for static addresses.
On Windows networks, the file sharing service operates over SMB/SambaFrom another PC you can access a computer sharing resources using its local IP address, for example by typing the following in Run:
\\192.168.xx
If the credentials are correct and the firewall allows the connection, you will see the folders and shared resources according to the assigned permissions (read only, read/write, full control, etc.).
8. Wi-Fi Security: Passwords, WPA3, Firewall and MAC Filtering
Wireless networks are extremely convenient, but they can also be vulnerable if not properly secured. A neighbor looking to save on their own connection, or a more serious attacker, could try to compromise your Wi-Fi. take advantage of a poorly protected Wi-Fi network to browse at your expense, sneak malware in, or even use your IP for illegal activities.
8.1 Change the factory Wi-Fi name and password
Leaving the SSID and password provided by your ISP's router is one of the worst possible ideas. Many default combinations are predictable and attackable if the router model is known.
As we mentioned, the SSID can be original, but avoid including obvious personal information. And regarding the password, always apply the principle of length + complexityUse a variety of letters, numbers, and symbols, and change it periodically (for example, every six months), using a password manager.
8.2 Activate the WPA3 protocol (or the best available option)
Security protocols have improved over the years. Today, the benchmark is WPA3, which incorporates 192-bit encryption, improved resistance to brute-force attacks, and a more secure method of pairing screenless devices (such as voice assistants) via Wi-Fi Easy Connect.
If your router and devices support it, select WPA3-Personal. Otherwise, use the mixed option. WPA2/WPA3-Personal so that older devices can use WPA2 and newer devices can seamlessly take advantage of WPA3.
8.3 Check and configure the firewall
Almost all routers come with a integrated firewall which filters incoming traffic from the Internet. Make sure in the administration console that it is actually active.
If your model doesn't have a firewall or you want to strengthen perimeter security, you might consider:
- Install a firewall software additional on your computers, besides Windows.
- Or, in more advanced environments, use a dedicated firewall device between the ONT/Router and your local network.
8.4 MAC address filtering and IP control
Another layer of security is the Filtered by MAC addressesThese are unique identifiers for each network card. Many routers allow you to create a "whitelist" of allowed MAC addresses or a "blacklist" of blocked MAC addresses.
Furthermore, if you want even stricter control, you can disable the Automatic DCHP and manually assign IP addresses only to the devices that should connect. It's more tedious to manage, but it greatly reduces the chances of an intruder sneaking in unnoticed.
9. Monitoring, maintenance and additional devices
A well-designed network isn't something you set up once and forget about forever. A minimum of periodic maintenance and monitoring It will save you problems in the medium term.
9.1 Update the router firmware
The firmware is your router's operating system. Just like you update Windows, it's a good idea to check periodically whether your router has the latest firmware. new versions with security patches or stability improvements.
Some models update automatically, but others require you to access the administration panel and look for the "Update firmware" option. If your router is managed by your internet service provider (ISP) and has restricted access, it's most likely the ISP that will push the updates when they're due.
9.2 See which devices are connected
From time to time it's a good idea to take a look at the list of connected devices to your network. You can do it:
- From the router itself (sections “DHCP Clients”, “Connected Devices”, etc.).
- Or with third-party apps like Fing on your mobile, and so on delete saved Wi-Fi networks.
Compare what you see with what you actually have at home: mobile phones, tablets, Smart TVs, game consoles, IoT devices (light bulbs, cameras, vacuum cleaners, smart speakers, etc.). If you spot any device you don't recognize, you can Block it by IP or MAC address And, for security, change your Wi-Fi password.
9.3 Configuration backups
Before touching important things (major security changes, VLANs, advanced QoS, etc.), it is highly recommended export a copy of the router configurationAlmost all models allow you to download a .cfg file or similar from the Administration/System menu.
Save that file in a safe place (USB drive, encrypted cloud storage, etc.). If something goes wrong, you'll be able to restore your network in just a few minutes without having to reconfigure everything from scratch.
9.4 WiFi repeaters, PLC, access points and switches
If, despite positioning the router correctly, some areas of the house still have a poor signal, you have several options:
- WiFi repeatersThey take the signal from the router and amplify it. They are easy to install and perfect for slightly improving coverage in distant rooms, although they are not the fastest option in the world.
- PLC (Powerline)They use the home's electrical wiring to extend the network to other locations. Ideal when Wi-Fi is unavailable but there are power outlets, and they also allow for wired connections at the other end.
- WiFi access pointsThey create a new Wi-Fi cell from a wired connection. They offer performance very close to that of the main router and are the most professional solution, although they require running a cable.
- Network switchesIf you're short on LAN ports on your router, a switch allows you to multiply them at low cost and connect more devices via cable.
The key is not to buy because it's fashionable, but choose what best suits your home and your needsSometimes all it takes is a good PLC or a couple of well-placed APs, and you're good to go.
10. Typical mistakes when setting up a network and how to avoid them
Many home networks fail not due to a lack of equipment, but because planning errors. Some of the most common are:
- Leave default passwords or weak encryption (WPA/WEP).
- Placing the router in unsuitable locations: inside a piece of furniture, next to heat sources, in the furthest corner…
- Saturating the 2,4 GHz band with many devices, Bluetooth and microwave interference, without taking advantage of 5 GHz or Wi-Fi 6.
- Assigning static IPs within the DHCP range or leaving TCP/IP in manual mode without control causes address conflicts.
- Opening ports "just in case" and forgetting about them, unnecessarily increasing the attack surface.
- Put IoT devices, guests, and work teams on the same network without segmentation or a guest network.
- Tweaking QoS and DNS without really knowing what you're doing, ending up with throttled applications or domains not resolving.
- Never update the router's firmware or check what is connected.
- Placing WiFi repeaters in areas where there is almost no signal only amplifies noise and latency.
With a few basic good practices (good location, strong encryption, WPS disabled, well-managed IPs, guest network and up-to-date firmware) you can avoid most headaches.
A well-designed home or small office network makes a difference: The connection is stable, resources are shared without problems, and security is reasonably well covered.By following all these steps to configure your router, adjust Windows, and take care of your Wi-Fi, you'll have a solid foundation on which to add more equipment, services, or automations without turning your network into an unmanageable mess.
