D6300 - Router NETGEAR - Free user manual and instructions

USER MANUAL D6300 NETGEAR

3D rendering of a black NETGEAR router with red LED and control buttons (no visible text or symbols beyond branding)

December 2015

202-11039-06

350 East Plumeria Drive

San Jose, CA 95134

USA

Abstract geometric composition with overlapping colored triangles (no text or symbols)

Support

Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources.

Conformity

For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.

Compliance

For regulatory compliance information, visit http://www.netgear.com/about/regulatory.

See the regulatory compliance document before connecting the power supply.

Trademarks

© NETGEAR, Inc., NETGEAR and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only.

Contents

Chapter 1 Hardware Setup

Product Highlights....8

Product Specifications 9

Unpack Your New Router 11

Hardware Features 12

Label 12

Back Panel 13

Front Panel....14

Side Panel....16

Position Your Wireless Router 17

ADSL Microfilters 18

One-Line ADSL Microfilter (Not Included) 18

Two-Line ADSL Microfilter (Included)....19

Summary 19

Cable Your D6300 WiFi DSL Modem Router 19

Verify the Cabling 20

Chapter 2 Get Started with NETGEAR genie

Prepare to Set Up the WiFi DSL Modem Router 22

Use Standard TCP/IP Properties for DHCP 22

Gather ISP Information 22

WiFi devices and Security Settings 22

Types of Logins and Access 22

NETGEAR genie Setup. 23

Use NETGEAR genie after Installation 24

Upgrade WiFi DSL Modem Router Firmware....24

WiFi DSL Modem Router Dashboard (BASIC Home Screen)....25

Add WiFi devices or Computers to Your Network 25

Manual Method....25

Wi-Fi Protected Setup (WPS) Method 26

Chapter 3 NETGEAR genie BASIC Settings

Internet Basic Settings 28

Internet Basic Settings Screen Fields 28

Attached Devices....29

Parental Controls....30

ReadySHARE USB Storage and Printer 31

USB Storage (Basic Settings) 31

Basic Wireless Settings 31

Wireless Settings Screen Fields. 32

Change WPA Security Option and Passphrase 34

Guest Network Wireless Security Options 36

Access the Router With NETGEAR genie Apps 36

Chapter 4 NETGEAR genie ADVANCED Home

Setup Wizard 39

WPS Wizard 39

VPN Wizard 40

VPN Policies 42

Add or Edit an Auto VPN Policy 43

Add or Edit a Manual VPN Policy 46

VPN Status 48

Setup Menu 48

ADSL Setup. 49

WAN Setup 49

Default DMZ Server 50

Change the MTU Size 51

LAN Setup....53

LAN Setup Screen Settings 53

Use the WiFi DSL Modem Router as a DHCP Server 54

Address Reservation....55

Quality of Service Setup 56

Chapter 5 USB Storage

USB Drive Requirements 61

ReadySHARE Access 61

File-Sharing Scenarios 61

USB Storage Basic Settings 63

Add or Edit a Network Folder 63

USB Storage Advanced Settings 64

Safely Remove a USB Storage Device 65

Media Server Settings 66

Specify Approved USB Devices....66

Connect to the USB Drive from a Remote Computer 67

Access the WiFi DSL Modem Router's USB Drive Remotely Using FTP . . . 67

Chapter 6 Share a USB Printer

Install the Printer Driver and Cable the Printer....69

Download the ReadySHARE Printer Utility 69

Install the ReadySHARE Printer Utility 69

Print Using the NETGEAR USB Control Center 71

View or Change the Status of a Printer 73

Use the Scan Feature of a Multifunction USB Printer 74

Change NETGEAR USB Control Center Settings 74

D6300 WiFi DSL Modem Router

Turn Off Automatic Startup for NETGEAR USB Control Center ..... 75

Change the Language in NETGEAR USB Control Center 76

Specify the Time-Out for NETGEAR USB Control Center....76

Chapter 7 Security

Keyword Blocking of HTTP Traffic 79

Firewall Rules 79

Add Custom Services to Allow or Block 82

Schedule for Firewall Rules....83

Security Event Email Notifications 83

Allow or Block Access to Your Network 84

Chapter 8 Administration

Upgrade the WiFi DSL Modem Router Firmware 87

View WiFi DSL Modem Router Status 87

Router Information 88

Internet Port 88

Wireless Settings (2.4 GHz and 5 GHz) 90

Guest Network (2.4 GHz and 5 GHz) 90

View Logs of Web Access or Attempted Web Access 91

Manage the Configuration File 92

Back Up Settings 92

Restore Configuration Settings. 92

Erase 93

Set Password 93

Password Recovery....94

Diagnostics....94

Chapter 9 Advanced Settings

Enable WiFi Radio....97

Set Up a WiFi Schedule 97

Specify WPS Settings 98

Use the Modem Router as a Wireless Access Point 99

Port Forwarding and Triggering....100

Remote Computer Access Basics 100

Port Triggering to Open Incoming Ports 102

Port Forwarding to Permit External Host Communications ..... 103

How Port Forwarding Differs from Port Triggering. 104

Set Up Port Forwarding to Local Servers.... 104

Add a Custom Service 105

Edit or Delete a Port Forwarding Entry 106

Set Up Port Triggering 107

Dynamic DNS 108

Static Routes 109

Remote Management 111

Universal Plug and Play....112

IPv6 113

Traffic Meter 114

Chapter 10 Troubleshooting

Quick Tips....117

Sequence to Restart Your Network 117

Check Ethernet Cable Connections 117

Wireless Settings....117

Network Settings 117

Troubleshoot with the LEDs. 118

Power LED Is Off or Blinking....118

Power LED Stays Red 118

LEDs Never Turn Off 118

Internet or Ethernet Port LEDs Are Off. 119

Wireless LEDs Are Off 119

The Push 'N' Connect (WPS) Button Blinks Green....119

Cannot Log In to the Router 119

Cannot Access the Internet 120

Troubleshoot PPPoE 121

Troubleshoot Internet Browsing 122

Changes Not Saved 123

Incorrect Date or Time 123

Wireless Connectivity 123

Wireless Signal Strength 124

Restore the Factory Settings and Password 124

Troubleshoot Your Network Using the Ping Utility 124

Test the LAN Path to Your Router....124

Test the Path from Your Computer to a Remote Device 125

Appendix A Supplemental Information

Factory Settings 128

Technical Specifications 129

Index

Get to know your wireless router

The NETGEAR D6300 WiFi DSL Modem Router offers maximum-performance wireless speeds of up to 300+1300 ^1 Mbps ^2 needed for demanding applications, such as large file transfers, streaming HD video, and multiplayer gaming. Complete with a built-in DSL modem, it is compatible with all major DSL Internet service providers. Simultaneous dual-band technology runs both 2.4 and 5 GHz bands at the same time, ensuring top speeds and the greatest range, while Gigabit offers ultrafast wired connections. The unit supports a wide range of premium features and applications such as ReadySHARE ^ Printer, and NETGEAR genie ^ .

The modem router automatically uses NETGEAR Beamforming+ technology to enhance WiFi performance. Because it's automatic, you don't have to turn on Beamforming+ or configure it. When you connect to the WiFi network, Beamforming+ focuses on your location for even better WiFi performance and speed. Beamforming+ locks onto your laptop, tablet, or smartphone, and follows as you move from place to place, so you keep your optimal WiFi connection.

This chapter contains the following sections:

• Product Highlights
  • Product Specifications
• Unpack Your New Router
• Hardware Features
• Position Your Wireless Router
• ADSL Microfilters
  • Cable Your D6300 WiFi DSL Modem Router
• Verify the Cabling

For more information about the topics covered in this manual, visit the support website at http://support.netgear.com.

Product Highlights

The modem router has the following capabilities:

• All-in-one. Built-in ADSL2+ modem and WAN Gigabit Ethernet port for cable or fiber combined with a wireless router create an integrated home gateway.
• ReadySHARE Printer. Wirelessly print from your Mac or PC to a connected USB printer.

- ReadySHARE USB. Wirelessly share a USB hard drive with Macs and PCs.

- Faster multimedia streaming. Provides up to 450 Mbps wireless speed for streaming HD videos, simultaneous downloads, and online gaming in addition to basic Internet applications.

- Simultaneous dual band. Runs both 2.4 and 5 GHz bands concurrently, ensuring top speeds and the greatest range while minimizing interference.

- NETGEAR genie. Easy setup and dashboard control to manage, monitor, and repair home networks.

- Ultrafast wired. Four Gigabit Ethernet ports deliver ultrafast wired connections for gaming and video.

• Live Parental Controls. Keeps your Internet experience safe using flexible and customizable filter settings.

- Guest network access. Provides separate security and access restrictions for guests using the network.

- Broadband usage meter. Monitors Internet traffic and sends customized reports to help keep costs under control.

- Secured connection. Push 'N' Connect ensures a quick and secure network connection.

- NETGEAR green features. Use Power and WiFi On/Off buttons, and schedule WiFi to turn on and off to save energy when not in use.

- Compatibility. Compatible with all major ADSL Internet service providers (ISPs).

Product Specifications

Package Contents

• D6300 WiFi DSL Modem Router
- Ethernet cable
• Phone cable and filter
• Power adapter, localized to country of sale

Warranty

- Localized to country of sale

System Requirements

• Broadband Internet service

• ADSL broadband Internet service

• Cable or fiber. Connects to cable modem or fiber termination node through the Gigabit Ethernet WAN port

• 802.11-a/b/g/n 2.4-GHz or 5.0-GHz specification wireless adapter or an Ethernet adapter and cable for each computer
  • Microsoft Windows 7, Vista, XP, 2000, Me, Mac OS, UNIX, or Linux

• Microsoft Internet Explorer 5.0, Firefox 2.0, Safari 1.4, or later
• Use with an N600 Wireless Dual Band USB Adapter (WNDA3100 for maximum performance)

Standards

• IEEE 802.11-b/g/n 2.4 GHz
• IEEE 802.11-a/n 5.0 GHz
- Five (5) 10/100/1000 (1 WAN and 4 LAN) Gigabit Ethernet ports
- Two (2) USB 2.0 ports
• One (1) ADSL2+ port

Performance

• All-in-one. High-speed ADSL2+ modem (built-in) and WAN Gigabit Ethernet port for cable or fiber
• Powerful dual-core (400 MHz each) processor
  • High-speed access to external USB storage using two USB 2.0 ports
  • Memory. 128 MB flash and 128 MB RAM
• Five (5) (1 WAN, 4 LAN) Gigabit-Ethernet ports
  • Advanced Quality of Service (QoS)

Security

• Wi-Fi Protected Access® (WPA/WPA2-PSK) and WEP

• Double firewall protection (SPI and NAT firewall)
  • Denial of service (DoS) attack prevention
• Easy installation. Connect to computer and open your browser to install
• Push 'N' Connect using Wi-Fi Protected Setup® (WPS)

Ease of Use

Physical Specifications

- Dimensions: 205 × 255 × 77 ~mm (8.07 x 10.04 x 3.03 inches)

• W eight: 654g (1.44 lb)

Premium Feature:

- ReadySHARE PRINTER. Wirelessly access and share a USB printer

Advanced Features

• Live Parental Controls with flexible and customizable filter settings.
- Simultaneous dual band. 2.4 GHz and 5 GHz operation.
- T wo (2) ports for ReadySHARE® USB storage access. Supports FAT16/32, NTFS Read/Write.
- DLNA®. Stream media to DLNA media players.
- Multiple SSID guest networks (separate security and access restrictions).
- Broadband usage meter measures Internet usage.
• Power and Wi-Fi On/Of f buttons.

NETGEAR Green Features

Power On/Off button

80% recycled packaging

CEC (California Efficiency)

RoHS

WEEE

If you have not already set up your new router using the installation guide that comes in the box, this chapter walks you through the hardware setup. Chapter 3, NETGEAR genie BASIC Settings, explains how to set up your Internet connection.

For more information about the topics covered in this manual, visit the support website at http://support.netgear.com/general/contact/default.aspx.

Unpack Your New Router

Your box should contain the following items:

• D6300 WiFi DSL Modem Router
• AC power adapter (plug varies by region)
• Category 5 (Cat 5) Ethernet cable
• T elephone cable with RJ-11 connector
- Microfilters and splitters (quantity and type vary by region)
• Installation guide with cabling and router setup instructions

If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair. See Position Your Wireless Router on page 17 for information about where to place and how to position your router.

3D rendering of a black NETGEAR wireless router with red ventilation grille and control buttons (no visible text beyond branding)

D6300
Modem Router

Yellow Ethernet cable with two connectors and a ring, labeled 'Ethernet cable' below (no other text or symbols)

Ethernet cable

Illustration of a white USB router with two ports and a cable (no text or symbols)

Filter splitter Reversible (Cronics)

Power adapter (2 parts)

Illustration of a telephone cable with two connectors and a strap (no text or symbols on the cable itself)

Coiled electrical plug with terminal connector (no text or symbols visible)

Figure 1. Box contents

Hardware Features

Before you cable your router, take a moment to become familiar with the label and the front and back panels. Pay particular attention to the LEDs on the front panel.

Label

The label on the bottom of the modem router shows the router's WiFi network name (SSID) and network key (password).

NETGEAR® D6300 WiFi DSL Modem Router Model: D6300 POWER ADSL Internet WiFi USB On/Off ReadySHARE Access on Windows: Start -> RUN -> \readyshare (Type \readyshare) 12V==5A 10 N10047 CE ! Designed by NETGEAR in California 272-11479-01 Made in China WiFi network name (SSID) and Network key (password)

Figure 2. Label on router bottom

Back Panel

The back panel has the Power On/Off button and port connections shown in the figure:

USB ADSL 4 3 2 1 Internet Reset Power DC 2. ADSL line 3. Gigabit Ethernet LAN ports 4. Gigabit Ethernet WAN port 5. Reset button 6. AC power adapter input 7. Power 1. USB port On/Off button

Figure 3. Back panel port connections

Viewed from left to right, the back panel contains the following elements:

1. USB port for connecting USB storage devices like flash drives, hard drives, or USB printers.
2. RJ-1 1 asynchronous DSL (ADSL) port for connecting the modem router to an ADSL line

Note: An ADSL port can send data over an ADSL line at one speed and receive it at another speed.

1. Four Gigabit Ethernet RJ-45 LAN ports for cabling the modem router to the local computers

2. One Gigabit Ethernet WAN port for connecting the modem router to a fiber or cable modem

Note: You can use either the ADSL or Gigabit Ethernet port for WAN connectivity.

1. Reset button

See Factory Settings on page 128 for information about the Restore Factory Settings button and the factory setting values.

1. Power On/Of f button
2. AC power adapter input

Front Panel

The modem router front panel has the 5 status LEDs, icons, and ports shown in the figure.

NETGEAR Power DSL Internet Wireless USB

Figure 4. Front panel LEDs

The following tables describe the LEDs and icons on the front panel from left to right.

Table 1. Power On/Off LED

Icon LED Activity Description
	Solid green The router is ready.
	Solid amber The router is starting.
	Off Power is not supplied to the router.
	Restore Factory Settings

Table 2. DSL LED

Icon LED Activity Description
	Solid green You have an ADSL connection. In technical terms, the ADSL port is synchronized with an ISP's network-access device.
	Blinking green Indicates that the modem router is negotiating the best possible speed on the ADSL line.
	Off The unit is off or there is no ADSL connection.

Table 3. Internet LED

Icon LED Activity Description
	Solid green You have	an Internet connection. If this connection is dropped due to an idle time-out but the connection is still present, the LED stays green. If the Internet connection is dropped for any other reason, the LED turns off.
	Solid amber	The Internet (IP) connection failed. See Cannot Access the Internet on page 120 for troubleshooting information.
	Off No Internet connection is detected or the device is in bridge mode (an external device handles the ISP connection).

Table 4. Wireless LED

Icon LED Activity Description
	Solid blue There is wireless connectivity.
	Blinking blue A WPS-capable device is connecting to the device.
	Off There is no wireless connectivity. You can still plug an Ethernet cable into one of the LAN ports to get wired connectivity.

Table 5. USB LED

Icon LED Activity Description
	Solid blue A USB port has detected a USB device.
	Blinking blue A USB device is plugged in and is trying to connect.
	Off No link is detected on these ports.

Side Panel

The modem router side panel has the port and buttons shown in the figure.

Wireless On/Off button WPS On/Off button USB port

Figure 5. Side panel buttons and port

The following tables describe the buttons and port on the side panel from top to bottom.

Table 6. Wireless button

Icon Description
	For information about the use of this button, see Wireless Connectivity on page 123.

Table 7. WPS button

Icon Description
	For information about the use of this button, see Wi-Fi Protected Setup (WPS) Method on page 26.

Table 8. USB port

Icon Description
	USB port for connecting USB storage devices like flash drives or hard drives.

Position Your Wireless Router

The modem router lets you access your network from anywhere within the operating range of your wireless network. However, the operating distance or range of your wireless connection can vary significantly depending on the physical placement of your router. For example, the thickness and number of walls the wireless signal passes through can limit the range. For best results, place your router:

• Near the center of the area where your computers and other devices operate, and preferably within line of sight to your WiFi devices.
• So it is accessible to an AC power outlet and near Ethernet cables for wired computers.
• In an elevated location such as a high shelf, keeping the number of walls and ceilings between the modem router and your other devices to a minimum.

- A way from electrical devices that are potential sources of interference, such as ceiling fans, home security systems, microwaves, computers, or the base of a cordless phone or 2.4-GHz cordless phone.

- A way from any large metal surfaces, such as a solid metal door or aluminum studs. Large expanses of other materials such as glass, insulated walls, fish tanks, mirrors, brick, and concrete can also affect your wireless signal.

Note: The D6300 should be put in a vertical position only.

Also be aware that when you use multiple access points, it is better if adjacent access points use different radio frequency channels to reduce interference. The recommended channel spacing between adjacent access points is five channels (for example, use Channels 1 and 6, or 6 and 11).

ADSL Microfilters

If this is the first time you have cabled a wireless router between an ADSL phone line and your computer or laptop, you might not be familiar with ADSL microfilters. If you are, you can skip this section and proceed to Cable Your D6300 WiFi DSL Modem Router on page 19.

An ADSL microfilter is a small inline device that filters ADSL interference out of standard phone equipment that shares line with your ADSL service. Every telephone device that connects to a telephone line that provides ADSL service needs an ADSL microfilter to filter out the ADSL interference. Example devices are telephones, fax machines, answering machines, and caller ID displays. Not every phone line in your home necessarily carries ADSL service. That depends on the ADSL service setup in your home.

Note: Often the ADSL microfilter is included in the box with the wireless modem router. If you purchased the modem router in a country where a microfilter is not included, you have to acquire the ADSL microfilter separately.

One-Line ADSL Microfilter (Not Included)

Plug the ADSL microfilter into the wall outlet and plug your phone equipment into the jack labeled Phone. The wireless modem router plugs directly into a separate ADSL line. Plugging the wireless modem router into the phone jack blocks the Internet connection. If you do not have a separate ADSL line for the router, the best thing to do is to use an ADSL microfilter with a built-in splitter.

Illustration of a USB port with plug and cable, labeled 'Plugs into ADSL line' (no other text or symbols)

Figure 6. One-line ADSL microfilter

Second best when you do not have a separate ADSL line for the router is to get a separate splitter. To use a one-line filter with a separate splitter, insert the splitter into the phone outlet, connect the one-line filter to the splitter, and connect the phone to the filter.

Two-Line ADSL Microfilter (Included)

Use an ADSL microfilter with a built-in splitter when there is a single wall outlet that provides connectivity for both the modem router and your telephone equipment. Plug the ADSL microfilter into the wall outlet, plug your phone equipment into the jack labeled Phone, and plug the wireless modem router into the jack labeled ADSL.

Plugs into the ADSL line

Figure 7. Two-line ADSL microfilter with built-in splitter

Summary

• One-line ADSL microfilter (not included). Use with a phone or fax machine.
• Splitter (not included). Use with a one-line ADSL microfilter to share an outlet with a phone and the modem router.
• T wo-line ADSL microfilter with built-in splitter (included). Use to share an outlet with a phone and the modem router.

Cable Your D6300 WiFi DSL Modem Router

WARNING:

DO not stack equipment, or place equipment in tight spaces, or in drawers. Be sure that your equipment is surrounded by at least 2 inches of air space. The unit should not be wall mounted.

The installation guide that came in the box has a cabling diagram on the second page.

Figure 8. Cabling diagram

CAUTION:

Incorrectly connecting a filter to your modem router blocks your ADSL connection.

Verify the Cabling

Verify that your router is cabled correctly by checking the modem router LEDs. Turn on the wireless router by pressing the Power On/Off button on the back.

• The Power LED is green when the modem router is turned on.
• The Wireless LED is lit when the modem router is turned on.
• The DSL LED is green when you have an ADSL connection.
• The Internet LED is green when there is an Internet connection.

Turn on your computer. If software usually logs you in to your Internet connection, do not run that software. Cancel it if it starts automatically.

Get Started with NETGEAR genie

2

Connect to the modem router

This chapter explains how to use NETGEAR genie to set up your modem router after you complete cabling as described in the installation guide and in the previous chapter in this book.

This chapter contains the following sections:

• Prepare to Set Up the WiFi DSL Modem Router
- Types of Logins and Access
• NETGEAR genie Setup
- Use NETGEAR genie after Installation
- Upgrade WiFi DSL Modem Router Firmware
- WiFi DSL Modem Router Dashboard (BASIC Home Screen)
- Add WiFi devices or Computers to Your Network

Prepare to Set Up the WiFi DSL Modem Router

You can set up your modem router with the NETGEAR genie automatically, or you can use the genie menus and screens to set up your modem router manually. However, before you start the setup process, you need to have your ISP information on hand and make sure the laptops, computers, and other devices in the network have the settings described here.

Use Standard TCP/IP Properties for DHCP

If you set up your computer to use a static IP address, you need to change the settings so that it uses Dynamic Host Configuration Protocol (DHCP).

Gather ISP Information

If you have DSL broadband service, you might need the following information to set up your modem router and to check that your Internet configuration is correct. Your Internet service provider (ISP) should have provided you with all of the information needed to connect to the Internet. If you cannot locate this information, ask your ISP to provide it. When your Internet connection is working, you no longer need to launch the ISP's login program on your computer to access the Internet. When you start an Internet application, your modem router automatically logs you in.

• The ISP configuration information for your DSL account
• ISP login name and password
• Fixed or static IP address settings (special deployment by ISP; this situation is rare)

WiFi devices and Security Settings

Make sure that the WiFi device or computer that you are using supports WPA or WPA2 wireless security, which is the wireless security supported by the modem router. See Basic Wireless Settings on page 31 for information about the modem router's preconfigured security settings.

Types of Logins and Access

There are two separate types of logins that have different purposes. It is important that you understand the difference so that you know which login to use when.

- Wireless modem router login logs you in to the modem router interface from NETGEAR genie. See Use NETGEAR genie after Installation on page 24 for details about this login.

Wireless network key or password. Your modem router is preset with a unique wireless network name (SSID) and password for wireless access. This information is on the label located on the bottom of your modem router.

- ISP login logs you in to your Internet service. Your service provider has provided you with this login information in a letter or some other way. If you cannot find this login information, contact your service provider.

NETGEAR genie Setup

NETGEAR genie runs on any device with a web browser. It is the easiest way to set up the modem router because it automates many of the steps and verifies that those steps have been used completely completed. It takes about 15

To use NETGEAR genie to set up your modem router:

1. Turn the modem router on by pressing the On/Off button, if not done yet.
2. Make sure that your device is connected with an Ethernet cable to your modem router.
3. Launch your Internet browser.
4. If this is the first time you are setting up the Internet connection for your modem router, the browser automatically goes to http://www.routerlogin.net, and the NETGEAR genie screen displays.

5. If you already used the NETGEAR genie, type http://www.routerlogin.net in the address field for your browser to display the NETGEAR genie screen. See Use NETGEAR genie after Installation on page 24.

6. Follow the onscreen instructions to complete NETGEAR genie setup. NETGEAR genie guides you through connecting the modem router to the Internet.

If the browser cannot display the web page:

• Make sure that the computer is connected to one of the four Gigabit Ethernet LAN ports, or wirelessly to the modem router.
• Make sure that the modem router is ready. Its Wireless LEDs should light.
• Close and reopen the browser to make sure the browser does not cache the previous page.
• Browse to http://routerlogin.net.
• If your computer is set to a static or fixed IP address (this is uncommon), change the setting to obtain an IP address automatically from the modem router.

If the modem router does not connect to the Internet:

1. Review your settings to be sure that you have selected the correct options and typed everything correctly.
2. Contact your ISP to verify that you have the correct configuration information.
3. Read Chapter 10, Troubleshooting. If problems persist, register your NETGEAR product and contact NETGEAR technical support.

Use NETGEAR genie after Installation

When you first set up your modem router, NETGEAR genie automatically starts when you launch an Internet browser on a computer that is connected to the modem router. You can use NETGEAR genie again if you want to view or change settings for the modem router.

1. Launch your browser from a computer or WiFi device that is connected to the modem router.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.

The login window displays:

User name: admin Password: ******** Remember my password OK Cancel

1. Enter admin for the modem router user name and password for the modem router password, both in lowercase letters.

Note: The modem router user name and password are different from the user name and password for logging in to your Internet connection. See Types of Logins and Access on page 22 for more information.

Upgrade WiFi DSL Modem Router Firmware

When you set up your modem router and are connected to the Internet, the modem router automatically checks for you to see if newer firmware is available. If it is, a message is displayed on the top of the screen. See Upgrade the WiFi DSL Modem Router Firmware on page 87 for more information about upgrading firmware.

Click the message when it shows up, and click Yes to upgrade the modem router with the latest firmware. After the upgrade, the modem router restarts.

CAUTION:

Do not try to go online, turn off the modem router, shut down the computer, or do anything else to the modem router until the modem router finishes restarting and the Power LED has stopped blinking for several seconds.

WiFi DSL Modem Router Dashboard (BASIC Home Screen)

The modem router BASIC Home screen has a dashboard that lets you see the status of your Internet connection and network at a glance. You can click any of the six sections of the dashboard to view more detailed information. The left column has the menus, and at the top there is an ADVANCED tab that is used to access additional menus and screens.

• Home. This dashboard screen displays when you log in to the modem router.
- Internet. Set, update, and check the ISP settings of your modem router.
- Wireless. View or change the wireless settings for your modem router.
- Attached Devices. View the devices connected to your network.

- Parental Controls. Download and set up Parental Controls to prevent objectionable content from reaching your computers.

- ReadySHARE. If you connected a USB storage device to the modem router, then it is displayed here.

- Guest Network. Set up a guest network to allow visitors to use your modem router's Internet connection.

- Advanced tab. Set the modem router up for unique situations such as when remote access by IP or by domain name from the Internet is needed. See Chapter 9, Advanced Settings. Using this tab requires a solid understanding of networking concepts.

- Help & Support. Go to the NETGEAR support site to get information, help, and product documentation. These links work once you have an Internet connection.

Add WiFi devices or Computers to Your Network

Choose either the manual or the WPS method to add WiFi devices and other equipment to your wireless network. See Guest Networks on page 35 for instructions for how to set up a guest network.

Manual Method

To connect manually:

1. Open the software that manages your wireless connections on the WiFi device (laptop computer, gaming device, iPhone) that you want to connect to your modem router. This software scans for all wireless networks in your area.
2. Look for your network and select it. If you did not change the name of your network during the setup process, look for the default WiFi network name (SSID) and select it. The default SSID is located on the product label on the bottom of the modem router.
3. Enter the modem router password and click Connect. The default modem router passphrase is located on the product label on the bottom of the modem router.
4. Repeat steps 1–3 to add other WiFi devices.

Wi-Fi Protected Setup (WPS) Method

Wi-Fi Protected Setup (WPS) is a standard for easily adding computers and other devices to a home network while maintaining security. To use WPS, make sure that all WiFi devices to be connected to the network are Wi-Fi certified and support WPS. During the connection process, the client gets the security settings from the modem router so that every device in the network has the same security settings.

If your WiFi device supports WPS (Push 'N' Connect), use the following procedure.

To use WPS to join the wireless network:

1. Press the WPS button on the modem router top panel.
2. Within 2 minutes, press the WPS button on your WiFi device, or follow the WPS instructions that came with the device. The device is now connected to your modem router.
3. Repeat steps 1–2 to add other WPS WiFi devices.

NETGEAR genie BASIC Settings

3

Your Internet connection and network

This chapter explains the features available from the NETGEAR genie BASIC Home screen, shown in the following figure:

This chapter contains the following sections:

• Internet Basic Settings
• Attached Devices
• Parental Controls
  • ReadySHARE USB Storage and Printer
• Basic Wireless Settings
• Guest Networks
• Access the Router With NETGEAR genie Apps

Internet Basic Settings

The Internet Basic Settings screen is where you view or change ISP information.

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Internet.

The Internet Setup page displays.

The fields that display in the Internet Basic Settings screen depend on whether your Internet connection requires a login.

• Yes. Select the encapsulation method and enter the login name. If you want to change the login time-out, enter a new value in minutes.

• No. Enter the account and domain names, only if needed.

• Enter the settings for the IP address and DNS server. The default settings usually work fine. If you have problems with your connection, check the ISP settings.

• Click Apply to save your settings.

• Click Test to test your Internet connection. If the NETGEAR website does not display within 1 minute, see Chapter 10, Troubleshooting.

Internet Basic Settings Screen Fields

The following descriptions explain all of the possible fields in the Internet Basic Settings screen. Which fields display in this screen depends on whether an ISP login is required.

Does Your ISP Require a Login? Answer either yes or no.

These fields display when no login is required:

• Account Name (If required). Enter the account name provided by your ISP. This name might also be called the host name.
• Domain Name (If required). Enter the domain name provided by your ISP.

These fields display when your ISP requires a login:

• Internet Service Provider Encapsulation. ISP types. The choices are PPPoE or PPPoA.
• Login. The login name provided by your ISP. This name is often an email address.
• Password. The password that you use to log in to your ISP.

- Idle Timeout (In minutes). If you want to change the login time-out, enter a new value in minutes. This setting determines how long the modem router keeps the Internet connection active after there is no Internet activity from the LAN. Entering a value of 0 (zero) means never log out.

Internet IP Address.

• Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address. Your ISP automatically assigns these addresses.
• Use Static IP Address. Enter the IP address, IP subnet mask, and the gateway IP address that your ISP assigned. The gateway is the ISP's modem router to which your modem router connects.

Domain Name Server (DNS) Address. The DNS server is used to look up site addresses based on their names.

• Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP automatically assigns this address.
• Use These DNS Servers. If you know that your ISP does not automatically transmit DNS addresses to the modem router during login, select this option, and enter the IP address of your ISP's primary DNS server. If a secondary DNS server address is available, enter it also.

WiFi DSL Modem Router MAC Address. The Ethernet MAC address used by the modem router on the Internet port. Some ISPs register the MAC address of the network interface card in your computer when your account is first opened. They then accept traffic only from the MAC address of that computer. This feature allows your modem router to use your computer's MAC address (this procedure is also called cloning).

• Use Default Address. Use the default MAC address.
• Use Computer MAC Address. The modem router captures and use the MAC address of the computer that you are now using. You have to use the one computer that is allowed by the ISP.
  • Use This MAC Address. Enter the MAC address that you want to use.

Attached Devices

You can view all computers or devices that are currently connected to your network here. From the BASIC Home screen, select Attached Devices.

Wired devices are connected to the modem router with Ethernet cables. WiFi devices have joined the wireless network.

• (number). The order in which the device joined the network.

• IP Address. The IP address that the modem router assigned to this device when it joined the network. This number can change when a device is disconnected and rejoins the network.
• Device Name. If the device name is known, it is shown here.

- MAC Address. The unique MAC address for each device does not change. The MAC address is typically shown on the product label.

You can click Refresh to update this screen.

Parental Controls

The first time you select Parental Controls from the BASIC Home screen, you are automatically directed to the Internet, where you can learn more about Live Parental Controls or download the application.

ReadySHARE USB Storage and Printer

You can view information about a USB storage device that is connected to the modem router's USB port here.

USB Storage (Basic Settings)

From the BASIC Home screen, select ReadySHARE to display the USB Storage (Basic Settings) page.

This page displays the following when Basic is selected:

• Network/Device Name. The default is \readyshare. This is the name used to access the USB device connected to the modem router.
  • Available Network Folders. The folders on the USB device.

Share Name. If only one device is connected, the default share name is USB_Storage. You can click the name shown, or you can type it in the address field of your web browser. If Not Shared is shown, the default share has been deleted and no other share for the root folder exists. Click the link to change this setting.

Read Access and Write Access. Show the permissions and access controls on the network folder: All – no password (the default) allows all users to access the network folder. The user name (account name) for All – no password is guest. The password for admin is the same one that you use to log in to the modem router. By default, it is password.

Folder Name. Full path used by the network folder.

Volume Name. Volume name from the storage device (either USB drive or HDD).

Total Space and Free Space. Show the current utilization of the storage device.

• Edit. Click the Edit button to edit the Available Network Folders settings.
• Safely Remove a USB Device. Click to safely remove the USB device attached to your modem router.

You can click Refresh to update this screen.

For more information about USB storage, see Chapter 5, USB Storage.

Basic Wireless Settings

The Wireless Settings screen lets you view or configure the wireless network setup.

The WiFi DSL Modem Router comes with preset security. This means that the WiFi network name (SSID), network key (password), and security option (encryption protocol) are preset in the factory. You can find the preset SSID and password on the bottom of the unit.

Note: The preset SSID and password are uniquely generated for every device to protect and maximize your wireless security.

NETGEAR recommends that you do not change your preset security settings. If you do decide to change your preset security settings, make a note of the new settings and store it in a safe place where you can easily find it.

If you use a wireless computer to change the wireless network name (SSID) or other wireless security settings, you are disconnected when you click Apply. To avoid this problem, use a computer with a wired connection to access the modem router.

To view or change basic wireless settings:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Wireless.

The Wireless Setup page displays.

The page sections, settings, and procedures are explained in the following sections.

1. Make any necessary changes, and click Apply to save your settings.
2. Set up and test your WiFi devices and computers to make sure that they can connect wirelessly. If they do not, check the following:

- Is your WiFi device or computer connected to your network or another wireless network in your area? Some WiFi devices automatically connect to the first open network (without wireless security) that they discover.

- Does your WiFi device or computer show up on the Attached Devices screen? If it does, then it is connected to the network.

- If you are not sure what the network name (SSID) or password is, look on the label on the bottom of your modem router.

Wireless Settings Screen Fields

Region. The location where the modem router is used. Select from the countries in the list. In the United States, the region is fixed to United States and is not changeable.

Wireless Network

Note: These settings apply separately to the 2.4-GHz b/g/n and 5-GHz ac/a/n bands.

Enable Wireless Isolation. If this check box is selected, then wireless clients (computers or WiFi devices) that join the network can use the Internet, but cannot access each other or access Ethernet devices on the network.

Enable SSID Broadcast. This setting allows the modem router to broadcast its SSID so wireless stations can see this wireless name (SSID) in their scanned network lists. This check box is selected by default. To turn off the SSID broadcast, clear the Enable SSID Broadcast check box, and click Apply.

Name (SSID). The SSID is also known as the wireless network name. Enter a 32-character (maximum) name in this field. This field is case-sensitive. The default SSID is randomly generated, and NETGEAR strongly recommends that you do not change this.

Channel. This setting is the wireless channel used by the gateway. Enter a value from 1 through 13. (For products in the North America market, only Channels 1 through 11 can be operated.) Do not change the channel unless you experience interference (when indicated by lost connections or slow data transfers). If this interference happens, experiment with different channels to see which is the best.

Mode. Up to 1300 Mbps is the default setting for the 5G band while connected with 3x3 802.11ac devices. This setting allows 802.11ac/a/n WiFi devices to join the network. Up to 300 Mbps is the default setting for the 2.4G band while connected with 2x2/3x3 802.11n devices. This setting allows 802.11b/g/n devices to join the network. 802.11g & b supports up to 54 Mbps.

Security Options Settings

Note: These settings apply separately to the 2.4-GHz b/g/n and 5-GHz a/n bands.

The Security Options section of the Wireless Setup screen lets you change the security option and passphrase. NETGEAR recommends that you do not change the security option or passphrase, but if you want to change these settings, this section explains how. Do not disable security.

Change WPA Security Option and Passphrase

Note: These settings apply separately to the 2.4-GHz b/g/n and 5-GHz a/n bands.

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Wireless.

The wireless Setup page displays.

1. Under Security Options, select the WPA option you want.
2. In the Passphrase field that displays when you select a WPA security option, enter the network key (passphrase) that you want to use. It is a text string from 8 to 63 characters.

Guest Networks

Adding a guest network allows visitors at your home to use the Internet without using your wireless security key. You can add a guest network to each wireless network: 2.4 GHz b/g/n and 5.0 GHz a/n.

To set up a guest network:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Guest Network.

The Guest Network Settings page displays.

1. Select any of the following wireless settings:

Note: These settings apply separately to the 2.4-GHz b/g/n and 5-GHz a/n bands.

Enable Guest Network. When this check box is selected, the guest network is enabled, and guests can connect to your network using the SSID of this profile.

Enable Wireless Isolation. If this check box is selected, then wireless clients (computers or WiFi devices) that join the network can use the Internet, but cannot access each other or access Ethernet devices on the network.

Enable SSID Broadcast. If this check box is selected, the wireless access point broadcasts its name (SSID) to all wireless stations. Stations with no SSID can adopt the correct SSID for connections to this access point.

Allow guest to access My Local Network. If this check box is selected, any user who connects to this SSID has access to your local network, not just Internet access.

1. Give the guest network a name.
   The guest network name is case-sensitive and can be up to 32 characters. You then manually configure the WiFi devices in your network to use the guest network name in addition to the main nonguest SSID.
2. Select a security option from the list. The security options are described in Guest Network Wireless Security Options on page 36.
3. Click the Apply button.

Your settings are saved.

Guest Network Wireless Security Options

A security option is the type of security protocol applied to your wireless network. The security protocol in force encrypts data transmissions and ensures that only trusted devices receive authorization to connect to your network.

This section presents an overview of the security options and provides guidance on when to use which option. It is also possible to set up a guest network without wireless security. NETGEAR does not recommend using no security on a wireless network.

Wi-Fi Protected Access (WPA) encryption is built into all hardware that has the Wi-Fi-certified seal. This seal means that the product is authorized by the Wi-Fi Alliance (http://www.wi-fi.org/) because it complies with the worldwide single standard for high-speed wireless local area networking.

WPA-PSK uses a passphrase to authenticate and generate the initial data encryption keys. Then it dynamically varies the encryption key. WPA-PSK uses Temporal Key Integrity Protocol (TKIP) data encryption, implements most of the IEEE 802.11i standard, and is designed to work with all wireless network interface cards, but not all wireless access points. It is superseded by WPA2-PSK.

WPA2-PSK is stronger than WPA. It is advertised to be indecipherable due to the greater degree of randomness in encryption keys that it generates. WPA2-PSK gets higher speed because it is implemented through hardware, while WPA-PSK is implemented through software. WPA2-PSK uses a passphrase to authenticate and generate the initial data encryption keys. Then it dynamically varies the encryption key.

WPS-PSK + WPA2-PSK Mixed Mode can provide broader support for all wireless clients. WPA2-PSK clients get higher speed and security, and WPA-PSK clients get decent speed and security. The product documentation for your wireless adapter and WPA client software should have instructions about configuring their WPA settings.

Access the Router With NETGEAR genie Apps

The genie app is the easy dashboard for managing, monitoring, and repairing your home network. The genie app can help you with the following:

• Automatically repair common WiFi network problems.
• Easily manage router features like Live Parental Controls, guest access, Internet traffic meter, speed test, and more.

To use the genie app to access the router:

1. Visit the NETGEAR genie web page at www.NETGEAR.com/genie.
2. Follow the onscreen instructions to install the app on your smartphone, tablet, or computer.
3. Launch the genie app.

The genie app dashboard page displays.

NETGEAR genie ADVANCED Home

4

Specify custom settings

The ADVANCED screens are for advanced users who want to specify custom settings.

This chapter explains the features available from the NETGEAR genie ADVANCED Home page.

This chapter contains the following sections:

• Setup Wizard
• WPS Wizard
• VPN Wizard
• VPN Policies
• VPN Status
• Setup Menu
• ADSL Setup
• WAN Setup
  • LAN Setup
  • Quality of Service Setup

Some selections on the ADVANCED Home screen are described in separate chapters:

• USB Storage. See Chapter 5, USB Storage.
• Security. See Chapter 7, Security.
• Administration. See Chapter 8, Administration.
• Advanced Setup. See Chapter 9, Advanced Settings.

Setup Wizard

The NETGEAR genie installation process is launched the first time you set up the modem router. After setting up the modem router the first time, if you want to perform this task again, you can run Setup Wizard from the Advanced tab of the genie.

To use the Setup Wizard:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Setup Wizard.
   The Setup Wizard page displays.
2. Select either Yes or No, I want to configure the router myself. If you select No, you are taken to the Internet Basic Settings screen (see Internet Basic Settings on page 28).
3. If you selected Yes, click Next. A series of screens are displayed as the router discovers and processes your Internet connection. Click Next when prompted to advance to the next screen.

The Setup Wizard searches your Internet connection for servers and protocols to determine your ISP configuration.

WPS Wizard

The WPS Wizard helps you add a WPS-capable client device (a WiFi device or computer) to your network. On the client device, you have to either press its WPS button or locate its WPS PIN.

To use the WPS Wizard:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > WPS Wizard.

A note explaining WPS displays.

1. Click the Next button.

The WPS page displays.

1. Select either Push Button or PIN Number.

2. T o use the push button method, either click the WPS button on this screen, or press the WPS button on the top of the modem router. Within 2 minutes, go to the wireless client and press its WPS button to join the network without entering a password.

3. T o use the PIN method, select the PIN Number radio button, enter the client security PIN, and click Next.

Add WPS Client Next > Select a setup method: ○ Push Button (recommended) ● PIN Number This is the security PIN of the WPS client. While connecting, WPS-enabled adapters provide a randomly-generated security PIN. Enter Client's PIN.

Within 2 minutes, go to the client device and use its WPS software to join the network without entering a password.

The modem router attempts to add the WPS-capable device. The WPS LED on the top of the modem router blinks green. When the modem router establishes a WPS connection, the LED is solid green, and the modem router WPS screen displays a confirmation message.

1. Repeat Step 2 and Step 3 to add another WPS client to your network.

VPN Wizard

The Wizard asks you series of questions that determine the IPSec keys and VPN policies it sets up. The VPN Wizard sets the parameters for the network connection, security association, traffic selectors, authentication algorithm, and encryption. These parameters are based on the VPNC recommendations. More information about the VPNC recommendations is presented in the VPN Wizard summary page.

To use the VPN Wizard:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced - VPN > VPN Wizard.

The VPN Wizard page displays.

5. Click the Next button.

Step 1 of 3: Connection Name and Remote IP Type What is the new Connection Name? What is the pre-shared key? This VPN tunnel will connect to: A remote VFN Gateway A remote VPN client (single PC) Back Next Cancel

Enter the requested information:

• Connection name. Enter an appropriate name for the connection. This name is not supplied to the remote VPN endpoint. Rather, it is used to help you manage the VPN settings.
• Pre-shared key. The key has to be entered both here and on the remote VPN gateway or the remote VPN client. This method does not require using a CA (certificate authority).
• VPN tunnel connection. The wizard has to know if you are planning to connect to a remote gateway or setting up the connection for a remote client or computer to establish a secure connection to this device.

6. Click the Next button.

The page that displays depends on which VPN tunnel you selected from the previous page:

- If you selected the A remote VPN Gateway radio button from the previous page, the following page displays:

Step 2 of 3: Remote IP address or the Internet name What is the remote WAN's IP address or Internet name? Back Next Cancel

a. Enter the remote IP address of the gateway you want to connect to, or provide the Internet name of the gateway.

The Internet name is the fully qualified domain name, as set up in a Dynamic DNS service.

b. Click the Next button.

Step 3 of 3: Secure Connection Remote Accessibility What is the remote LAN IP address and Subnet Mask? IP Address: _________. Subnet Mask: _________. Back Next Cancel

c. Enter the remote LAN IP address and subnet mask of the remote gateway.

• If this information does not match the LAN IP address and subnet mask in the remote gateway, the secure tunnel fails to connect.
• The IP address range used on the remote LAN has to be different from the IP address range used on the local LAN.

d. Click the Next button.

The page displays a summary of the Wizard configuration with a link to view the VPNC recommended parameters (click the here link to view the VPNC-recommended parameters).

- If you selected the A remote VPN client (single PC) radio button from the previous page, the page displays a summary of the Wizard configuration with a link to view the VPNC recommended parameters (click the here link to view the VPNC-recommended parameters).

7. Click the Done button.

Your settings are saved.

VPN Policies

Manage your VPN policies from the VPN Policies screen.

• Traffic covered by a policy is automatically sent through a VPN tunnel.
• Where traffic is covered by two or more policies, the first matching policy is used. In this situation, the order of the policies is important. However, if you only have one policy for each remote VPN endpoint, the policy order is not important.
• The VPN tunnel is created according to the parameters in the SA (security association).
• The remote VPN endpoint must have a matching SA, or else it refuses the connection.

Two types of VPN policies are possible:

• Manual. All settings (including the keys) for the VPN tunnel are input manually at each end (both VPN endpoints). No third-party server or organization is involved.
• Auto. Some parameters for the VPN tunnel are generated automatically. This process requires using the IKE (Internet Key Exchange) protocol to perform negotiations between the two VPN endpoints.

To manage the VPN policies:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced - VPN > VPN Policies.

The VPN Policies page displays.

The Policy Table contains the following data:

• Enable. Use this check box to enable or disable a policy as required. Click Apply when you are finished.
• Name. Each policy has a unique name to identify it.
• Type. The type is Auto or Manual.
• Local. IP address or address range on your local LAN. Traffic must be from (or to) the addresses covered by this policy.
• Remote. IP address or address range of the remote network. Traffic must be to (or from) the addresses covered by this policy.

• ESP. Encapsulating Security Payload. This setting specifies the encryption protocol used for the VPN data.

• Click the appropriate button to manage a VPN policy:

- Edit. Edit (modify) the selected policy. (Select a policy by selecting the radio button.)

- Delete. Delete the selected policy.

- Apply. Save any changes to the Enable setting for each policy.

- Cancel. Discard any unsaved changes to the Enable setting for each policy.

- Add Auto Policy. Display the VPN - Auto Policy screen. When the new policy is saved, it appears in the bottom row of the Policy Table. See Add or Edit an Auto VPN Policy on page 43.

- Add Manual Policy. Display the VPN - Manual Policy screen. When the new policy is saved, it appears in the bottom row of the Policy Table. See Add or Edit a Manual VPN Policy on page 46.

Add or Edit an Auto VPN Policy

An Auto VPN policy uses the IKE (Internet Key Protocol) to exchange and negotiate parameters for the IPSec SA (security association). Because of this negotiation, not all of the settings on this VPN gateway have to match the settings on the remote VPN endpoint. Where settings have match, this requirement is indicated.

To add or edit an Auto VPN Policy:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced - VPN > VPN Policies.

The VPN Policies page displays.

1. Click the Add Auto Policy button.

The VPN - Auto Policy page displays.

1. Enter or select the following settings:

- General. These settings identify this policy and determine its major characteristics.

- Policy Name. Enter a unique name to identify this policy.

This name is not supplied to the remote VPN endpoint. It is used only to help you manage the policies.

- Remote VPN Endpoint. If the remote endpoint has a dynamic IP address, select Dynamic IP Address.

No address data input is required.

Otherwise, select the desired option (IP address or domain name) and enter the address of the remote VPN endpoint you wish to connect to.

The remote VPN endpoint must have this VPN gateway's address entered as its remote VPN endpoint.

- IKE Keep Alive. Check this check box if you wish to ensure that a connection is kept open, or, if that is not possible, it is quickly reestablished when disconnected.

The ping IP address has to be associated with the remote endpoint. Either the WAN or a LAN address can be used; a LAN address is preferable. This IP address is pinged to generate some traffic for the VPN tunnel.

- Local LAN. These settings identify which computers on your LAN are covered by this policy. For each selection, data must be provided as follows:

- Single address. Enter an IP address in the Single/Start IP address field.

Typically, this setting is used when you wish to make a single server on your LAN available to remote users.

- Range address. Enter the starting IP address in the Single/Start IP address field, and the finish IP address in the Finish IP address field.

A range must be an address range used on your LAN.

- Subnet address. Enter an IP address in the Single/Start IP address field, and the desired network mask in the Subnet Mask field.

The remote VPN endpoint must have these IP addresses entered as its remote addresses.

- Remote LAN. These settings identify which computers on the remote LAN are covered by this policy. For each selection, data must be provided as follows:

- Single PC - no Subnet. Select this option if there is no LAN (only a single computer) at the remote endpoint.

If this option is selected, no additional data is required.

- Single address. Enter an IP address in the Single/Start IP address field.

This value must be an address on the remote LAN. Typically, this setting is used when you wish to access a server on the remote LAN.

- Range address. Enter the starting IP address in the Single/Start IP address field, and the finish IP address in the Finish IP address field.

This range must be an address range used on the remote LAN.

- Subnet address. Enter an IP address in the Single/Start IP address field, and the desired network mask in the Subnet Mask field.

The remote VPN endpoint must have these IP addresses entered as its local addresses.

• IKE.

- Direction/Type. This setting is used to determine if the IKE policy matches the current traffic. Select the desired option.

- Responder only. Incoming connections are allowed, but outgoing connections are blocked.

- Initiator and Responder. Both incoming and outgoing connections are allowed.

- Exchange Mode. Currently, only Main Mode is supported. Ensure that the remote VPN endpoint is set to use Main Mode.

- Diffie-Hellman (DH) Group. When the VPN connection keys are exchanged, the Diffie-Hellman algorithm is used. The DH Group setting determines the bit size used in the exchange. This value must match the value used on the remote VPN gateway.

- Local Identity Type. Select the desired option to match the Remote Identity Type setting on the remote VPN endpoint.

- WAN IP Address. Your Internet IP address.

- Fully Qualified Domain Name. Your domain name.

- Fully Qualified User Name. Your name, email address, or other ID.

- Local Identity Data. Enter the data for the selection. When WAN IP Address is selected, no input is required.

- Remote Identity Type. Select the desired option to match the Local Identity Type setting on the remote VPN endpoint.

- IP Address. The Internet IP address of the remote VPN endpoint.

- Fully Qualified Domain Name. The domain name of the remote VPN endpoint.

- Fully Qualified User Name. The name, email address, or other ID of the remote VPN endpoint.

- Remote Identity Data. Enter the data for the selection. When IP Address is selected, no input is required.

- Parameters.

- Encryption Algorithm. The encryption algorithm used for both IKE and IPSec. This setting must match the setting used on the remote VPN gateway.

- Authentication Algorithm. The authentication algorithm used for both IKE and IPSec. This setting must match the setting used on the remote VPN gateway.

- Pre-shared Key. The key has to be entered both here and on the remote VPN gateway.

- SA Life Time. This setting determines the time interval before the SA (security association) expires. (It is automatically reestablished as required.) While using a short time period (or data amount) increases security, it also degrades performance. It is common to use periods over an hour (3600 seconds) for the SA lifetime. This setting applies to both IKE and IPSec SAs.

- Enable PFS (Perfect Forward Secrecy). If enabled, security is enhanced by ensuring that the key is changed at regular intervals. Also, even if one key is broken, subsequent keys are no easier to break. (Each key has no relationship to the previous key.)

This setting applies to both IKE and IPSec SAs. When configuring the remote endpoint to match this setting, you might need to specify the key group used. For this device, the key group is the same as the DH Group setting in the IKE section.

7. Click the Apply button.

Your settings are saved.

Add or Edit a Manual VPN Policy

A Manual VPN policy requires all settings (including the keys) for the VPN tunnel to be manually input at each end (both VPN endpoints). No third-party server or organization is involved.

To add or edit a Manual VPN policy:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced - VPN > VPN Policies.

The VPN Policies page displays.

5. Click the Add Manual Policy button.

The VPN - Manual Policy page displays.

6. Enter or select the following parameters:

- General. These settings identify this policy and determine its major characteristics.

• Policy Name. Enter a unique name to identify this policy. This name is not supplied to the remote VPN endpoint. It is used only to help you manage the policies.
• Remote VPN Endpoint. Select the desired option (IP address or domain name) and enter the address or domain name of the remote VPN endpoint you wish to connect to.

The remote VPN endpoint must have this VPN gateway's address entered as its remote VPN endpoint.

- Local LAN. These settings identify which computers on your LAN are covered by this policy. For each selection, data must be provided as follows:

• Single address. Enter an IP address in the Single/Start IP address field.
  Typically, this setting is used when you wish to make a single server on your LAN available to remote users.
• Range address. Enter the starting IP address in the Single/Start IP address field, and the finish IP address in the Finish IP address field. This setting must be an address range used on your LAN.
• Subnet address. Enter an IP address in the Single/Start IP address field, and the desired network mask in the Subnet Mask field.

The remote VPN endpoint must have these IP addresses entered as its remote addresses.

- Remote LAN. These identify which computers on the remote LAN are covered by this policy. For each selection, data must be provided as follows:

• Single PC - dynamic IP. Select this option if there is no LAN (only a single computer) at the remote endpoint. If this option is selected, no additional data is required.
• Single address. Enter an IP address in the Single/Start IP address field. This setting must be an address on the remote LAN. Typically, this setting is used when you wish to access a server on the remote LAN.
• Range address. Enter the starting IP address in the Single/Start IP address field, and the finish IP address in the Finish IP address field. This range must be an address range used on the remote LAN.
• Subnet address. Enter an IP address in the Single/Start IP address field, and the desired network mask in the Subnet Mask field.

The remote VPN endpoint must have these IP addresses entered as its local addresses.

- ESP Configuration. ESP (encapsulating security payload) provides security for the payload (data) sent through the VPN tunnel.

• SPI. Enter the required SPIs. Each policy must have unique SPIs. These settings must match those for the remote VPN endpoint. The Incoming setting here must match the Outgoing setting on the remote VPN endpoint, and the Outgoing setting here must match the Incoming setting on the remote VPN endpoint.
• Encryption. Select the desired encryption algorithm, and enter the key in the field provided. For 3DES, the keys should be 24 ASCII characters (48 hex characters).

• Authentication. Select the desired authentication algorithm, and enter the key in the field provided. For MD5, the keys should be 16 ASCII characters (32 hex characters). For SHA-1, the keys should be 20 ASCII (40 hex characters).

• Click the Apply button.

• Your settings are saved.

VPN Status

The log on the VPN Status page displays details of recent VPN activity.

To view the VPN status:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced - VPN > VPN Status.

The VPN Status page displays the details of recent VPN activity.

1. To refresh the log screen, click Refresh.

2. To clear the log entries, click Clear Log.

Setup Menu

The following selections are available in the Setup menu:

• Internet Setup. This selection is a shortcut to the same Internet Basic Settings screen that you can access from the dashboard on the BASIC Home screen. See Internet Basic Settings on page 28.
  • ADSL Setup. Internet (ADSL) setup. See ADSL Setup on page 49.
• Wireless Setup. This selection is a shortcut to the same Wireless Settings screen that you can access from the dashboard on the BASIC Home screen. See Basic Wireless Settings on page 31.

• WAN Setup. Internet (WAN) setup. See WAN Setup on page 49.
• LAN Setup. Local area network (LAN) setup. See LAN Setup on page 53.
• QoS Setup. Quality of Service (QoS) setup. See Quality of Service Setup on page 56.
- Guest Network. This selection is a shortcut to the same Wireless Settings (for guest networks) screen that you can access from the dashboard on the BASIC Home screen. See Guest Networks on page 35.

ADSL Setup

The ADSL Settings page lets you configure the multiplexing method and virtual circuit of your ADSL connection. The default parameters should be correct to match the system used by your ISP. You can view or change the following on the ADSL Settings page:

• Multiplexing Method. Your ISP indicates whether your multiplexing method is VC-BASED or LLC-BASED.
  • VPI, VCI. Your ISP indicates which VPI and VCI combination is used for your service.
  • DSL Mode. Your ISP indicates the best setting is used for your DSL connection.

To view or change the settings on the ADSL Settings page:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > ADSL Settings.

The ADSL Settings page displays.

WAN Setup

The WAN Setup page lets you configure a DMZ (demilitarized zone) server, change the maximum transmit unit (MTU) size, and enable the modem router to respond to a ping on the WAN (Internet) port. You can view or change the following on the WAN Setup page:

• WAN Preference. Select your WAN preference: Auto-Detect, Must use DSL WAN, or Must use Ethernet WAN.

• Disable Port Scan and DoS Protection. DoS protection protects your LAN against denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. This feature should be disabled only in special circumstances.

• Default DMZ Server. This feature is sometimes helpful when you are playing online games or videoconferencing. Be careful when using this feature because it makes the firewall security less effective. See the following section, Default DMZ Server, for more details.

• Respond to Ping on Internet Port. If you want the modem router to respond to a ping from the Internet, select this check box. Use this only as a diagnostic tool because it allows your modem router to be discovered. Do not select this check box unless you have a specific reason.
• MTU Size (in bytes). The normal MTU (maximum transmit unit) value for most Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some ISPs, you might need to reduce the MTU. This change is rarely required, and should not be done unless you are sure that it is necessary for your ISP connection. See Change the MTU Size on page 51.
• Disable IGMP Proxying. The IGMP Proxying function lets a LAN computer receive the multicast traffic it is interested in from the Internet. Click this check box to disable the function if you do not need it.
• NAT Filtering. Network Address Translation (NAT) determines how the modem router processes inbound traffic. Secured NAT provides a secured firewall to protect the computers on the LAN from attacks from the Internet, but might prevent some Internet games, point-to-point applications, or multimedia applications from functioning. Open NAT provides a much less secured firewall, but allows almost all Internet applications to function.
• Disable SIP ALG. Some VoIP applications do not work well with the SIP ALG. Enabling this option to turn off the SIP ALG might help your VoIP devices to create or accept a call through the router.

Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation (NAT). The modem router is programmed to recognize some of these applications and to work correctly with them, but there are other applications that might not function well. In some cases, one local computer can run the application correctly if that computer's IP address is entered as the default DMZ server.

WARNING:

DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the firewall and is exposed to exploits from the Internet. If compromised, the DMZ server computer can be used to attack other computers on your network.

Incoming traffic from the Internet is discarded by the modem router unless the traffic is a response to one of your local computers or a service that you have configured in the Port

Forwarding/Port Triggering screen. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the default DMZ server.

To set up a default DMZ server:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > WAN Setup.

The WAN Setup page displays.

1. Select the Default DMZ Server check box.
2. Type the IP address.
3. Click Apply.

Change the MTU Size

The maximum transmission unit (MTU) is the largest data packet a network device transmits. When one network device communicates across the Internet with another, the data packets travel through many devices along the way. If any device in the data path has a lower MTU setting than the other devices, the data packets have to be split or “fragmented” to accommodate the device with the smallest MTU.

The best MTU setting for NETGEAR equipment is often just the default value, and changing the value might fix one problem but cause another. Leave MTU unchanged unless one of these situations occurs:

- You have problems connecting to your ISP or other Internet service, and the technical support of either the ISP or NETGEAR recommends changing the MTU setting. These web-based applications might require an MTU change:

• A secure website that does not open, or displays only part of a web page
• Yahoo email
• MSN portal

• America Online's DSL service

• You use VPN and have severe performance problems.

• You used a program to optimize MTU for performance reasons, and now you have connectivity or performance problems.

Note: An incorrect MTU setting can cause Internet communication problems such as the inability to access certain websites, frames within websites, secure login pages, or FTP or POP servers.

If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are willing to experiment, you can gradually reduce the MTU from the maximum value of 1500 until the problem goes away. The following table describes common MTU sizes and applications.

Table 9. Common MTU sizes

MTU Application
1500 The largest	Ethernet packet size and the default value. This is the typical setting for non-PPPoE, non-VPN connections, and is the default value for NETGEAR modem routers, adapters, and switches.
1492 Used in PPPoE environments.
1472 Maximum size to use for pinging. (Larger packets are fragmented.)
1468 Used in some DHCP environments.
1460 Usable by AOL if you do not have large email attachments, for example.
1436 Used in PPTP environments or with VPN.
1400 Maximum size for AOL DSL.
576 Typical value to connect to dial-up ISPs.

To change the MTU size:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADV ANCED > Setup > WAN Setup.

The WAN Setup page displays.

1. In the MTU Size field, enter a new size from 64 through 1500.

2. Click the Apply button.

3. Your settings are saved.

LAN Setup

The LAN Setup screen allows configuration of LAN IP services such as Dynamic Host Configuration Protocol (DHCP) and Routing Information Protocol (RIP).

The modem router is shipped preconfigured to use private IP addresses on the LAN side and to act as a DHCP server. The modem router's default LAN IP configuration is:

• LAN IP address. 192.168.0.1
- Subnet mask. 255.255.255.0

These addresses are part of the designated private address range for use in private networks and should be suitable for most applications. If your network requires a different IP addressing scheme, make those changes in the LAN Setup screen.

To change the LAN settings:

Note: If you change the LAN IP address of the modem router while connected through the browser, you are disconnected. You have to open a new connection to the new IP address and log in again.

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
   A login window opens.
3. Enter the modem router user name and password.
   The user name is admin. The default password is password. The user name and password are case-sensitive.
   The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
   The LAN Setup page displays.
5. Enter the settings that you want to customize. These settings are described in the following section, LAN Setup Screen Settings.
6. Click the Apply button.
   Your settings are saved.

LAN Setup Screen Settings

LAN TCP/IP Setup

- IP Address. The LAN IP address of the modem router.

• IP Subnet Mask. The LAN subnet mask of the modem router. Combined with the IP address, the IP subnet mask allows a device to know which other addresses are local to it, and which have to be reached through a gateway or modem router.
• RIP Direction. Router Information Protocol (RIP) allows a router to exchange routing information with other routers. This setting controls how the router sends and receives RIP packets. Both is the default setting. With the Both or Out Only setting, the router broadcasts its routing table periodically. With the Both or In Only setting, the router incorporates the RIP information that it receives.
• RIP Version. This setting controls the format and the broadcasting method of the RIP packets that the modem router sends. It recognizes both formats when receiving. By default, the RIP function is disabled.
• RIP-1 is universally supported. It is adequate for most networks, unless you have an unusual network setup.
• RIP-2 carries more information. Both RIP-2B and RIP-2M send the routing data in RIP-2 format. RIP-2B uses subnet broadcasting. RIP-2M uses multicasting.

Use Router as a DHCP Server

This check box is selected so that the modem router functions as a Dynamic Host Configuration Protocol (DHCP) server.

• Starting IP Address. Specify the start of the range for the pool of IP addresses in the same subnet as the modem router.
• Ending IP Address. Specify the end of the range for the pool of IP addresses in the same subnet as the modem router.

Address Reservation

When you specify a reserved IP address for a computer on the LAN, that computer receives the same IP address each time it accesses the modem router's DHCP server. Assign reserved IP addresses to servers that require permanent IP settings.

Use the WiFi DSL Modem Router as a DHCP Server

By default, the modem router functions as a DHCP server, allowing it to assign IP, DNS server, and default gateway addresses to all computers connected to the modem router's LAN. The assigned default gateway address is the LAN address of the modem router. The modem router assigns IP addresses to the attached computers from a pool of addresses specified in this screen. Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN. For most applications, the default DHCP and TCP/IP settings of the modem router are satisfactory.

You can specify the pool of IP addresses to be assigned by setting the starting IP address and ending IP address. These addresses should be part of the same IP address subnet as the modem router's LAN IP address. Using the default addressing scheme, you should define a range between 192.168.0.2 and 192.168.0.254, although you might want to save part of the range for devices with fixed addresses.

The modem router delivers the following parameters to any LAN device that requests DHCP:

• An IP address from the range that you have defined
• Subnet mask
• Gateway IP address (the modem router's LAN IP address)
• DNS server IP address (the modem router's LAN IP address)

To use another device on your network as the DHCP server, or to manually configure the network settings of all of your computers, clear the Use Router as DHCP Server check box and click Apply. Otherwise, leave this check box selected. If this service is not enabled and no other DHCP server is available on your network, you need to set your computers' IP addresses manually or they are not able to access the modem router.

Address Reservation

When you specify a reserved IP address for a computer on the LAN, that computer always receives the same IP address each time it accesses the modem router's DHCP server. Reserved IP addresses should be assigned to computers or servers that require permanent IP settings.

To reserve an IP address:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
   A login window opens.

3. Enter the modem router user name and password.
   The user name is admin. The default password is password. The user name and password are case-sensitive.
   The BASIC Home page displays.

4. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. In the Address Reservation section of the page, click the Add button.

The Address Reservation page displays.

1. In the IP Address field, type the IP address to assign to the computer or server. (Choose an IP address from the modem router's LAN subnet, such as 192.168.0.x.)

2. Type the MAC address of the computer or server.

Tip: If the computer is already on your network, you can copy its MAC address from the Attached Devices screen and paste it here.

1. Click Apply to enter the reserved address into the table.

The reserved address is not assigned until the next time the computer contacts the modem router's DHCP server. Reboot the computer or access its IP configuration and force a DHCP release and renew.

To edit or delete a reserved address entry, select the radio button next to the reserved address you want to edit or delete. Then click Edit or Delete.

Quality of Service Setup

Quality of Service (QoS) is an advanced feature that can be used to prioritize some types of traffic ahead of others. The WiFi DSL Modem Router can provide QoS prioritization over the wireless link and on the Internet connection.

Enable WMM QoS for Wireless Multimedia Applications

The WiFi DSL Modem Router supports Wi-Fi Multimedia Quality of Service (WMM QoS) to prioritize wireless voice and video traffic over the wireless link. WMM QoS provides prioritization of wireless data packets from different applications based on four access categories: voice, video, best effort, and background. For an application to receive the benefits of WMM QoS, both it and the client running that application have to have WMM enabled. Legacy applications that do not support WMM and applications that do not require QoS are assigned to the best effort category, which receives a lower priority than voice and video.

WMM QoS is enabled by default. You can disable it in the QoS Setup screen by clearing the Enable WMM check box and clicking Apply.

Set Up QoS for Internet Access

You can give prioritized Internet access to the following types of traffic:

• Specific applications
• Specific online games
• Individual Ethernet LAN ports of the modem router
  • A specific device by MAC address

To specify prioritization of traffic, you have to create a policy for the type of traffic and add the policy to the QoS Policy table in the QoS Setup screen. For convenience, the QoS Policy table lists many common applications and online games that can benefit from QoS handling.

QoS for Applications and Online Gaming

To create a QoS policy for applications and online games:

1. Launch a web browser from a computer or WiFi device that is connected to the network.

2. Enter http://www.routerlogin.net.
   A login window opens.

3. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > QoS Setup.

The QoS Setup page displays.

1. Select the Turn Internet Access QoS On check box.

2. Click the Setup QoS rule button to see the existing priority rules.

3. The QoS Priority Rule list page displays.

4. To edit or delete a priority rule, select a radio button next to a priority rule and click the Edit or Delete button.

You can also delete all of the rules by simply clicking the Delete All button.

1. To add a priority rule, scroll down to the bottom of the page and click the Add Priority Rule button.

The QoS - Priority Rules page displays.

1. In the QoS Policy for field, type the name of the application or game.

2. In the Priority Category list, select either Applications or Online Gaming.

A list of applications or games displays in the Applications list depending and which category you select.

1. In the Applications list, you can select an existing item, or you can scroll and select Add a New Application or Add a New Game, as applicable.

When you add a new entry, the QoS - Priority Rules page expands.

a. In the QoS Policy for field, enter a descriptive name for the new application or game. b. In the Connection Type list, select either TCP, UDP, or both (TCP/UDP), and specify the port number or range of port numbers used by the application or game.

1. From the Priority list, select the priority that this traffic should receive relative to other applications and traffic when accessing the Internet. The options are Low, Normal, High, and Highest.

2. Click the Apply button to save this rule to the QoS Policy list and return to the QoS Setup page.

QoS for a WiFi DSL Modem Router LAN Port

To create a QoS policy for a device connected to one of the modem router's LAN ports:

1. Launch a web browser from a computer or WiFi device that is connected to the network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > QoS Setup.

The QoS Setup page displays.

1. Select the Turn Internet Access QoS On check box.

2. Click the Setup QoS Rule button.

The QoS Priority Rule list page displays.

1. Click the Add Priority Rule button.

2. From the Priority Category menu, select Ethernet LAN Port.

3. From the LAN port list, select the LAN port that has a QoS policy.

4. From the Priority list, select the priority that this port's traffic should receive relative to other applications and traffic when accessing the Internet. The options are Low, Normal, High, and Highest.

5. Click the Apply button to save this rule to the QoS Policy list and return to the QoS Setup screen.

6. In the QoS Setup page, click the Apply button.

Your settings are saved.

QoS for a MAC Address

To create a QoS policy for traffic from a specific MAC address:

1. Launch a web browser from a computer or WiFi device that is connected to the network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > QoS Setup.

The QoS Setup page displays.

1. Click the Setup QoS Rule button.

The QoS Priority Rule list page displays.

1. Click the Add Priority Rule button.

2. From the Priority Category list, select MAC Address.

3. From the Priority list, select the priority that this device's traffic should receive relative to other applications and traffic when accessing the Internet. The options are Low, Normal, High, and Highest. Click Add to add this rule to MAC Device List.

4. Click the Apply button to save this rule to the QoS Policy list and return to the QoS Setup screen.
5. In the QoS Setup page, select the Turn Internet Access QoS On check box.
6. Click the Apply button.

Your settings are saved.

Edit or Delete an Existing QoS Policy

To edit or delete a QoS policy:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > QoS Setup.

The QoS Setup page displays.

1. Select the radio button next to the QoS policy to be edited or deleted, and do one of the following:

2. Click Delete to remove the QoS policy.

3. Click Edit to edit the QoS policy. Follow the instructions in the preceding sections to change the policy settings.

4. Click the Apply button in the QoS Setup screen to save your changes.

Your settings are saved.

Access and configure a USB storage drive

This chapter describes how to access and configure a USB storage drive attached to your modem router. The USB port on the modem router can connect only to USB storage devices like flash drives or hard drives. Do not connect computers, USB modems, CD drives, or DVD drives to the modem router USB port.

Illustration of a server rack connected to a network device via cable, with an inset showing hand holding a USB port (no text or symbols present)

Illustration showing a hand inserting a component into a device with two laptops emitting wireless signals (no text or symbols present)

This chapter contains the following sections:

• USB Drive Requirements
- ReadySHARE Access
- File-Sharing Scenarios
• USB Storage Basic Settings
• USB Storage Advanced Settings
- Safely Remove a USB Storage Device
• Media Server Settings
- Specify Approved USB Devices
- Connect to the USB Drive from a Remote Computer

USB Drive Requirements

The modem router works with 1.0 and 1.1 (USB Full Speed) and 2.0 (USB High Speed) standards. The approximate USB bus speeds are shown in the following table. Actual bus speeds can vary, depending on the CPU speed, memory, speed of the network, and other variables.

Table 10. USB drive speeds

Bus Speed/Sec
USB 1.1 12 Mbits
USB 2.0 480 Mbits

The modem router should work with most USB-compliant external flash and hard drives. For the most up-to-date list of USB drives supported by the modem router, visit:

http://kbserver.netgear.com/readyshare

The modem router supports both read and write access for FAT16, FAT32, NTFS, and Linux file systems (EXT2 and EXT3).

Note: Some USB external hard drives and flash drives require drivers to be loaded into the computer before the computer can access the USB device. Such USB devices do not work with the modem router.

ReadySHARE Access

Once you have set up your modem router, you can connect any USB storage device and share the contents with other users on your network.

You can access your USB device in any of the following ways:

• On Windows 7, Windows XP , Windows Vista, and Windows 2000 systems, select Start > Run, and enter \readyshare in the dialog box. Click OK.
• On Windows 7, Windows XP , Windows Vista, and Windows 2000 systems, open Internet Explorer or Safari, and enter \readyshare in the address bar.
• On Mac OS X (version 10.2 or later), enter smb://readyshare in the address bar.
• In My Network Places, enter \readyshare in the address bar .

File-Sharing Scenarios

You can share files on the USB drive for a wide variety of business and recreational purposes. The files can be any Windows, Mac, or Linux file type including text, Word, PowerPoint, Excel, and MP3 files, pictures, and multimedia. USB drive applications include:

• Sharing multimedia such as MP3 files, pictures, and other multimedia with local and remote users.
• Sharing resources on your network. You might want to store files in a central location so that you do not have to power up a computer to perform local sharing. In addition, you can share files between Macintosh, Linux, and Windows computers by using the USB drive as a go-between across the systems.
• Sharing files such as Word documents, PowerPoint presentations, and text files with remote users.

A few common uses are described in the following sections.

Share Photos

You can create your own central storage location for photos and multimedia. This eliminates the need to log in to (and pay for) an external photo-sharing site.

To share files with your friends and family:

1. Insert your USB drive into the USB port on the modem router either directly or with a USB cable.
   Computers on your local area network (LAN) can automatically access this USB drive using a web browser or Microsoft Networking.

2. If you want to specify read-only access or to allow access from the Internet, see USB Storage Advanced Settings on page 64.

Store Files in a Central Location for Printing

This scenario is for a family that has one high-quality color printer directly attached to a computer, but not shared on the local area network (LAN). This family does not have a print server.

• One family member has photos on a Macintosh computer that she wants to print.
- The photo-capable color printer is directly attached to a computer, but not shared on the network.
- The Mac and PC are not visible to each other on the network.

To print photos from a Mac on the printer attached to a PC:

1. On the Mac, access the USB drive by typing \readyshare in the address field of a web browser. Then copy the photos to the USB drive.
2. On the PC, use a web browser or Microsoft Networking to copy the files from the USB drive to the PC. Then print the files.

Share Large Files over the Internet

Sending files that are larger than 5 MB can pose a problem for many email systems. The modem router allows you to share large files such as PowerPoint presentations or .zip files over the Internet. FTP can be used to easily download shared files from the modem router.

Sharing files with a remote colleague involves the following considerations:

• There are two user accounts: admin and guest. The password for admin is the same one that you use to access the modem router. By default, it is password. The guest user account has no password.
• On the FTP site, the person receiving the files should use the guest user account and enter any password (FTP requires that you type something in the password field).
• Be sure to select the FTP (via Internet) check box in the USB Storage (Advanced Settings) screen. This option supports both downloading and uploading of files.

Note: You can enable the HTTP (via Internet) option on the USB Storage (Advanced Settings) screen to share large files. This option supports downloading files only.

USB Storage Basic Settings

You can view or edit basic settings for the USB storage device attached to your modem router.

By default, the USB storage device is available to all computers on your local area network (LAN).

To access your USB device:

1. Click the network device name or the share name in your computer's network folders list.
2. For SMB://readyshare, click Connect.

Note: If you logged in to the modem router before you connected your USB device, you might not see your USB device in the modem router screens until you log out and then log back in again.

Add or Edit a Network Folder

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ReadySHARE Cloud.

The USB Storage (Basic Settings) page displays.

1. Click the Edit button.

The USB Storage (Advanced Settings) page displays.

1. Specify the changes that you want to make:

• To add a folder, click Create Network Folder.
- To edit a folder, select its radio button, and then click Edit.

1. You can use this screen to select a folder, to change the share name, or to change the read access or write access from All - no password to admin.

The user name (account name) for All - no password is guest. The password for admin is the same one that is used to log in to the modem router. By default, it is password.

1. Click the Apply button.

Your settings are saved.

USB Storage Advanced Settings

You can set up the device name, workgroups, and network folders for your USB device on the USN Storage (Advanced Settings) page.

You can view of change the following:

• Network Device Name. The default is readyshare. This name is used to access the USB device connected to the modem router.
- Workgroup. If you are using a Windows workgroup rather than a domain, the workgroup name is displayed here. The name works only in an operating system that supports NetBIOS, such as Microsoft Windows.
- Access Method. The access methods are described here.

• Network Connection. Enabled by default, this connection allows all users on the LAN to have access to the USB drive.
• HTTP. Enabled by default. You can type http://readyshare.routerlogin.net/shares to access the USB drive.
• HTTP (via internet). Disabled by default. If you enable this setting, remote users can type http:///shares (for example, http://1.1.10.102/shares) or a URL domain name to access the USB drive over the Internet. This setting supports file uploading only.
• FTP. Disabled by default.
• FTP (via internet). Disabled by default. If you enable this setting, remote users can access the USB drive through FTP over the Internet. This setting supports both downloading and uploading of files.

Available Network Folders

You might need to scroll down to view this section of the screen.

• Share Name. If only one device is connected, the default share name is USB_Storage. You can click the name shown, or you can type it in the address field of your web browser. If Not Shared is shown, the default share has been deleted, and no other share for the root folder exists. Click the link to change this setting.
• Read Access and Write Access. Show the permissions and access controls on the network folder: All - no password (the default) allows all users to access the network folder. The password for admin is the same one that you use to log in to the modem router.
• Folder Name. Full path used by the network folder.
  • Volume Name. Volume name from the storage device (either USB drive or HDD).
  • Total Space and Free Space. Show the current utilization of the storage device.

Safely Remove a USB Storage Device

To safely remove a USB storage device so that no users can access it:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
   A login window opens.

3. Enter the modem router user name and password.
   The user name is admin. The default password is password. The user name and password are case-sensitive.
   The BASIC Home page displays.

4. Select ReadySHARE Cloud.

The USB Storage (Basic Settings) page displays.

1. Click the Safely Remove USB Device button.

This takes the drive offline.

1. Physically disconnect the USB device.

Media Server Settings

By default, the modem router is set up to act as a Ready DLNA Media server, which lets you view movies and photos on DLNA/UPnP AV-compliant media players, such as Xbox360, PlayStation, and NETGEAR's Digital Entertainer Live.

By default the Enable Media Server check box and the Automatic (when new files are added) radio button are selected. When these options are selected, the modem router scans for media files whenever new files are added to the ReadySHARE USB hard drive.

Specify Approved USB Devices

For more security, you can set up the modem router to share approved USB devices only. You can access this feature from the Advanced Setup menu on the Advanced tab.

To set up approved USB devices:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > USB Settings.

The USB Settings page displays.

1. Click the Approved Devices button.

The USB Drive Approved Devices page displays:

This page displays the approved USB devices and the available USB devices. You can remove or add approved USB devices.

1. To add an approved USB device, select it from the Available USB Devices list, and then click Add.
2. Select the Allow only approved devices check box.
3. Click the Apply button so that your change takes effect.

If you want to work with another USB device, you have to click the Safely Remove USB Device button for the currently connected USB device. Then connect the other USB device, and repeat this process.

Connect to the USB Drive from a Remote Computer

To connect to the USB drive from remote computers with a web browser, you have to use the modem router's Internet port IP address. If you are using Dynamic DNS, you can type the DNS name, rather than the IP address. You can view the modem router's Internet IP address from the dashboard on the BASIC Home screen or the ADVANCED Home screen.

Access the WiFi DSL Modem Router's USB Drive Remotely Using FTP

To connect to the modem router's USB drive using a web browser:

1. Connect to the modem router by typing ftp:// and the Internet port IP address in the address field of Internet Explorer or Netscape Navigator, for example:

ftp://10.1.65.4

If you are using Dynamic DNS, you can type the DNS name, rather than the IP address.

1. Type the account name and password for the account that has access rights to the USB drive. The user name (account name) for All - no password is guest.

2. The directories of the USB drive that your account has access to are displayed, for example, share/partition1/directory1. You can now read and copy files from the USB directory.

The ReadySHARE Printer utility lets you share a USB printer that is connected to the USB port on your modem router. You can share this USB printer among the Windows and Mac computers on your network.

For more information about the features available in the NETGEAR USB Control Center, see the ReadySHARE Printer User Manual, which is available http://downloadcenter.netgear.com.

This chapter contains the following sections:

• Install the Printer Driver and Cable the Printer
- Download the ReadySHARE Printer Utility
• Install the ReadySHARE Printer Utility
• Print Using the NETGEAR USB Control Center
• View or Change the Status of a Printer
- Use the Scan Feature of a Multifunction USB Printer
- Change NETGEAR USB Control Center Settings

Install the Printer Driver and Cable the Printer

Some USB printer manufacturers (for example, HP and Lexmark printers) request that you do not connect the USB cable until the installation software prompts you to do so.

To install the driver and cable the printer:

1. On each computer on your network that shares the USB printer, install the driver software for the USB printer.
   If you do not have the printer driver, contact the printer manufacturer.
2. Use a USB printer cable to connect the USB printer to the modem router USB port.

USB port USB ADSL 4 3 2 1 Internet Reset Power DC Ethernet On Off

Download the ReadySHARE Printer Utility

The utility works on Windows and Mac computers.

To download the utility:

1. Visit www.netgear.com/readyshare.
2. Click the PRINT - Learn how you can print wirelessly from many devices link.

3. Click one of the following links to download the ReadySHARE Printer utility setup file:

4. Download PC installer and get started. Download the utility for Windows computers.

5. Download Mac installer and get started. Download the utility for MAC computers.

6. Download the genie App and get started. Download the genie app to set up AirPrint with your iOS device.

7. Follow the onscreen instructions to install the ReadySHARE Printer utility.

Install the ReadySHARE Printer Utility

You must install the ReadySHARE Printer utility on each computer that will share the printer. After you install it, the utility displays as NETGEAR USB Control Center on your computer.

To install the utility:

1. If necessary, unzip the ReadySHARE Printer utility setup file.
2. Double-click the ReadySHARE Printer utility setup file that you downloaded.

NETGEAR USB Control Center - InstallShield Wizard Welcome to the InstallShield Wizard for NETGEAR USB Control Center The InstallShield(R) Wizard will install NETGEAR USB Control Center on your computer. To continue, click Next. WARNING: This program is protected by copyright law and international treaties. < Back Next > Cancel

1. Follow the wizard instructions to install NETGEAR USB Control Center.

After the InstallShield Wizard completes the installation, the NETGEAR USB Control Center prompts you to select a language:

NetGear USB Control Center NETGEAR USB Control Center English OK

1. Select a language from the menu and click the OK button.

NETGEAR USB Control Center System Tools About R7000 Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Series Available MASS STORAGE Connected Connect Disconnect Network Scanner

The USB printer connected to the router displays in the NETGEAR USB Control Center window.

Note: Some firewall software, such as Comodo or Norton, blocks NETGEAR USB Control Center from accessing the USB printer. If you do not see the USB printer displayed in the utility, you can disable the firewall temporarily to allow the utility to work.

Print Using the NETGEAR USB Control Center

For each computer, after you click the Connect and Disconnect buttons once, the utility automatically manages the printing queue and handling. By default, the utility starts automatically whenever you log on to Windows and runs in the background.

To print a document using the NETGEAR USB Control Center:

1. Click the NETGEAR USB Control Center icon

NETGEAR USB Control Center System Tools About R7000 Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Series Available MASS STORAGE Connected Connect Disconnect Network Scanner

2. Select a printer and click the Connect button.

The printer status changes to Manually connected by Mycomputer. Now only the computer you are using can use this printer.

3. Use the print feature in your application to print your document.

The NETGEAR USB Control Center automatically connects your computer to the USB printer and prints the document. If another computer is already connected to the printer, your print job goes into a queue to wait to be printed.

4. If your document does not print, use the NETGEAR USB Control Center to check the printer status.

5. To release the printer so that all computers on the network can use it, click the Disconnect button.

The status changes to Available. Now any computers on the network can use the printer.

6. To exit the utility, select System > Exit.

View or Change the Status of a Printer

To view or change the status:

1. Click the NETGEAR USB Control Center icon

NETGEAR USB Control Center System Tools About R7000 Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Series Available NASS STORAGE Connected Connect Disconnect Network Scanner

The Status column shows the status for each device:

• A vailable. No print jobs are in progress. You can use the USB printer from any computer in the network.
- Connected. Your computer is connected to the printer and will be released when your print job is done.
• Manually Connected by. Only the connected computer can use the printer.
- W aiting to Connect. Your computer is not connected to the shared printer yet.

2. To print from your computer when the printer status shows Manually connected by another computer, do the following:

a. Click the Connect button on your computer.

On the other user's computer, a message displays that another user wants to connect to the printer.

Please reply to the request ! !!! Remote User request to connect device !!! Remote User: TVs-MacBook-Air (192.168.1.3) Server: R7000 Device: Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Seri Note: Click "Accept" will disconnect the device right now. Accept Reject

b. On the other user's computer, click the Accept button.

The printer is released from the connection and the printer status on your computer changes to Available.

1. To print from your computer when the status shows Waiting to Connect, do the following:

a. Click the Connect button.

The printer status changes to Manually connected by Mycomputer. Now only your computer can use the printer.

b. To allow the printer to be shared, click the Disconnect button.

The printer is released from the connection and the status changes to Available.

Use the Scan Feature of a Multifunction USB Printer

If your USB printer supports scanning, you can also use the USB printer for scanning.

To use the scan feature of a multifunction USB printer:

1. Click the NETGEAR USB Control Center icon

NETGEAR USB Control Center System Tools About R7000 Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Series Available MASS STORAGE Connected Connect Disconnect Network Scanner

1. Make sure that the printer status shows as Available.
2. C lick the Network Scanner button.
3. If a Select a Device window displays, select the scanner and click the OK button.

The scanner widow displays so that you can use the USB printer for scanning.

Change NETGEAR USB Control Center Settings

You can stop the NETGEAR USB Control Center from starting automatically when you log in to Windows. You can also change the language and specify the time-out to release the printer connection.

Turn Off Automatic Startup for NETGEAR USB Control Center

You can stop the NETGEAR USB Control Center from starting automatically when you log in to Windows.

To turn off automatic NETGEAR USB Control Center startup:

1. Click the NETGEAR USB Control Center icon

NETGEAR USB Control Center System Tools About R7000 Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Series Available NASS STORAGE Connected Connect Disconnect Network Scanner

2. Select Tools > Configuration.

The Control Center - Configuration window displays.

3. Clear the Automatically execute when logging on Windows check box.

4. Click the OK button.

Your settings are saved.

Change the Language in NETGEAR USB Control Center

To change the language:

1. Click the NETGEAR USB Control Center icon

NETGEAR USB Control Center System Tools About R7000 Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Series Available MASS STORAGE Connected Connect Disconnect Network Scanner

1. Select Tools > Configuration.

The Control Center - Configuration window displays.

1. In the Language menu, select a language.
2. Click the OK button.

The next time NETGEAR USB Control Center starts, the language changes.

Specify the Time-Out for NETGEAR USB Control Center

Specify the time-out to release the printer connection.

To specify the time-out:

1. Click the NETGEAR USB Control Center icon

NETGEAR USB Control Center System Tools About R7000 Printer - Samsung Electronics Co., Ltd. - Samsung ML-1710 Series Available NASS STORAGE Connected Connect Disconnect Network Scanner

2. Select Tools > Configuration.

The Control Center - Configuration window displays.

3. In the T imeout field, type the number of minutes.

The time-out is the number of minutes that a computer holds its connection to the printer when the connection isn't being used.

4. Click the OK button.

Your settings are saved.

Keep unwanted content out of your network

This chapter explains how to use the basic firewall features of the modem router to prevent objectionable content from reaching the computers and other devices connected to your network.

This chapter includes the following sections:

• Keyword Blocking of HTTP Traffic
• Firewall Rules
• Add Custom Services to Allow or Block
• Schedule for Firewall Rules
  • Security Event Email Notifications
• Allow or Block Access to Your Network

Keyword Blocking of HTTP Traffic

Use keyword blocking to prevent certain types of HTTP traffic from accessing your network. The blocking can be always or according to a schedule.

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Block Sites.

The Block Sites page displays.

1. Select one of the keyword blocking options:

• Per Schedule. Turn on keyword blocking according to the Schedule screen settings.
• Always. Turn on keyword blocking all the time, independent of the Schedule screen.

1. In the keyword field, enter a keyword or domain, click Add Keyword, and click Apply.

The keyword list supports up to 32 entries. Here are some sample entries:

• Specify XXX to block http://www.badstuff.com/xxx.html.
• Specify .com if you want to allow only sites with domain suffixes such as .edu or .gov.
• Enter a period (.) to block all Internet browsing access.

To delete a keyword or domain:

1. Select the keyword you want to delete from the list.
2. Click Delete Keyword, and then Apply to save your changes.

To specify a trusted computer:

You can exempt one trusted computer from blocking and logging. The computer you exempt has to have a fixed IP address.

1. In the Trusted IP Address field, enter the IP address.
2. Click Apply to save your changes.

Firewall Rules

Services are functions performed by server computers at the request of client computers. For example, web servers serve web pages, time servers serve time and date information, and game hosts serve data about other players' moves. When a computer on the Internet sends

a request for service to a server computer, the requested service is identified by a service or port number. This number appears as the destination port number in the transmitted IP packets. For example, a packet that is sent with the destination port number 80 is an HTTP (web server) request.

The service numbers for many common protocols are defined by the Internet Engineering Task Force (IETF at http://www.ietf.org/) and published in RFC1700, “Assigned Numbers.” Service numbers for other applications are typically chosen from the range 1024–65535 by the authors of the application. Although the modem router already holds a list of many service port numbers, you are not limited to these choices. You can often determine port number information by contacting the publisher of the application, by asking user groups or newsgroups, or by searching.

The Firewall Rules screen lets you block or allow specific Internet traffic services by computers on your network. This process is called service blocking or port filtering.

Note: This feature is for advanced administrators only. Incorrect configuration can cause serious problems.

To create firewall rules:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Firewall Rules.

The Firewall Rules page displays.

The Firewall Rules page lists all firewall rules that have been changed from their default settings. The default rules allow all outgoing traffic and block all incoming traffic.

• To change the firewall rules for outbound traffic, you need to edit them from the Outbound Services screen as described in Step 5.
• To change the firewall rules for inbound traffic, you need to edit them from the Port Forwarding/Port Triggering screen as described in Port Forwarding and Triggering on page 100.

The Outbound Services and Inbound Services page list the available services you can allow or block. You can also define your own custom services to allow or block with the Add Service screen as described in Add Custom Services to Allow or Block on page 82. Once you add your own custom services, they are available on the Outbound Services and Inbound Services screens.

You can also specify whether these services are always allowed or blocked, or allowed or blocked per schedule as described in Schedule for Firewall Rules on page 83.

1. To allow or block an outbound service, click the Add button.

The Outbound Firewall Rule page displays.

Use the Outbound Services screen to define a new outbound firewall rule, or edit an existing rule. The outbound firewall rules are used to block or allow access by computers on your network to services or applications on the Internet.

a. Service. Select the service or application to be covered by this rule. If the service or application you want does not appear in the list, you have to define it as described in Add Custom Services to Allow or Block on page 82.

b. Action. Select the action you want for traffic covered by this rule:

• BLOCK always. Always block the traffic covered by this rule.
• BLOCK by schedule, otherwise Allow. Allow the traffic covered by this rule, unless it is blocked according to the schedule specified on the Schedule screen in Schedule for Firewall Rules on page 83.
• ALLOW always. Always allow the traffic covered by this rule (this selection is the default setting).
• ALLOW by schedule, otherwise Block. Block the traffic covered by this rule, unless it is blocked according to the schedule specified on the Schedule screen in Schedule for Firewall Rules on page 83.

ALLOW rules are useful only when the traffic is already covered by a BLOCK rule. You would use these rules when you want to allow a subset of traffic that is currently blocked by another rule.

c. LAN Users. These settings determine which computers on your network are affected by this rule, based on their source (LAN) IP address. Select the option you want:

• Any. All local IP addresses are covered by this choice.
• Address range. You have to fill in the Start and End fields when this option is selected.
• Single address. Enter the required address in the Start field.

d. WAN Servers. These settings determine which Internet locations are covered by the rule, based on their destination (WAN) IP address. Select the option you want:

• Any. All Internet IP addresses are covered by this choice.
• Address range. You have to fill in the Start and End fields when this option is selected.
• Single address. Enter the required address in the Start field.

e. Log. This setting determines whether traffic covered by this rule is logged. Select the action you want:

- Always. This choice always logs traffic that is covered by this rule, whether it matches or not. (This feature is useful when you are debugging your rules.)

- Never. This choice never logs traffic covered by this rule, whether it matches or not.

f. Click Apply to have your changes take effect, or click Cancel to return to the previous screen.

1. Inbound Services. To allow or block an inbound service, click here to set up inbound firewall rules for gaming or other applications. You are redirected to the Port Forwarding/Port Triggering screen as described in Port Forwarding and Triggering on page 100.

2. Click the Apply button to enable your Firewall Rules selections.

Add Custom Services to Allow or Block

You can define your own incoming and outgoing custom services to allow or block. Once you add your own custom services, they are available on the Outbound Services screen (as described in Firewall Rules on page 79) and the Inbound Services screen (as described in Port Forwarding and Triggering on page 100).

To add a custom service:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Firewall Rules.

The Firewall Rules page displays.

1. Click the Add Custom Service button.

The Add Services page displays.

The Add Service displays allows you to specify or edit your own custom service definition. You can then use the custom service when creating firewall rules.

1. To add a service for blocking, first determine which port number or range of numbers is used by the application.
2. In the Name field, enter a suitable name for this service.
3. In the Type list, select the correct type for this service (if in doubt, select TCP/UDP):

• TCP
• UDP
- TCP/UDP

1. Enter the starting and ending port numbers. If the application uses a single port number, enter that number in both fields.
2. Click the Apply button to save your information and return to the previous screen.

Schedule for Firewall Rules

You can specify the days and time that you want to block Internet access.

To specify the firewall rule schedule:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
   A login window opens.

3. Enter the modem router user name and password.
   The user name is admin. The default password is password. The user name and password are case-sensitive.
   The BASIC Home page displays.

4. Select ADVANCED > Security > Schedule.

The Schedule page displays.

1. Set up the schedule for blocking keywords and services.

2. Days to Block. Select days on which you want to apply blocking by selecting the appropriate check boxes, or select Every Day to select the check boxes for all days.

3. Time of Day to Block. Select a start and end time in 24-hour format, or select All Day for 24-hour blocking.

4. Select your time zone from the list. If you use daylight saving time, select the Automatically adjust for daylight savings time check box.

5. Click the Apply button.

Your settings are saved.

Security Event Email Notifications

To receive logs and alerts by email, provide your email information in the E-mail screen and specify which alerts you want to receive and how often.

To set up email notifications:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
   A login window opens.
3. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > E-mail.

The E-mail page displays.

1. To receive email logs and alerts from the modem router, select the Turn E-mail Notification On check box.
2. In the Your Outgoing Mail Server field, enter the name of your ISP's outgoing (SMTP) mail server (such as mail.mylSP.com). You might be able to find this information in the configuration screen of your email program. If you leave this field blank, log and alert messages are not sent by email.
3. In the Send to This Email Address field, enter the email address to which logs and alerts are sent. This email address is also used for the From address. If you leave this field blank, log and alert messages are not sent by email.
4. If your outgoing email server requires authentication, select the My Mail Server requires authentication check box. Fill in the User Name and Password fields for the outgoing email server.
5. You can have email alerts sent immediately when someone attempts to visit a blocked site, and you can specify that logs are sent automatically.

If you select the Weekly, Daily, or Hourly option and the log fills up before the specified period, the log is automatically emailed to the specified email address. After the log is sent, the log is cleared from the modem router's memory. If the modem router cannot email the log file, the log buffer might fill up. In this case, the modem router overwrites the log and discards its contents.

1. Click the Apply button.

Your settings are saved.

Allow or Block Access to Your Network

You can use access control to block access to your network.

To set up access control:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window displays.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Access Control.

The Access Control page displays.

1. Select the Turn on Access Control check box.

You must select this check box before you can specify an access rule and use the Allow and Block buttons. When this check box is cleared, all devices are allowed to connect, even if the device is in the blocked list.

1. Select an access rule:

2. Allow all new devices to connect. With this setting, if you buy a new device, it can access your network. You don't need to enter its MAC address in this page. NETGEAR recommends that you leave this radio button selected.

3. Block all new devices from connecting. With this setting, if you buy a new device, before it can access your network, you must enter its MAC address for an Ethernet connection and its MAC address for a WiFi connection in the allowed list.

The access rule does not affect previously blocked or allowed devices. It applies only to devices joining your network in the future after you apply these settings.

1. To allow the computer or device you're currently using to continue to access the network, select the check box next to your computer or device, and click the Allow button.
2. To view a list allowed or blocked devices that are not connected, click the following menus:

• View list of allowed devices not currently connected to the network
• View list of blocked devices not currently connected to the network

The list displays.

1. Click the Apply button.

Your settings are saved.

Manage your network

This chapter describes the settings for administering and maintaining your modem router and home network. See also Remote Management on page 111 for information about upgrading or checking the status of your modem router over the Internet, and Traffic Meter on page 114 for information about monitoring the volume of Internet traffic passing through your modem router's Internet port.

This chapter includes the following sections:

• Upgrade the WiFi DSL Modem Router Firmware
  • View WiFi DSL Modem Router Status
  • View Logs of Web Access or Attempted Web Access
• Manage the Configuration File
• Set Password
• Diagnostics

Upgrade the WiFi DSL Modem Router Firmware

The modem router firmware (routing software) is stored in flash memory. You can update the firmware from the Administration menu on the Advanced tab. You might see a message at the top of the genie screens when new firmware is available for your product.

You can use the Check button on the Firmware Upgrade screen to check and update to the latest firmware for your product when new firmware is available.

To check for new firmware and update your modem router:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Router Update.
   The Router Update page displays.
2. Click the Check button.
   The modem router finds new firmware information when any is available.
3. Click Yes to update and locate the firmware you downloaded (the file ends in .img).

WARNING:

When uploading firmware to the modem router, do not interrupt the web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, it could corrupt the firmware.

When the upload is complete, your modem router restarts. The upgrade process typically takes about one minute. Read the new firmware release notes to determine whether you need to reconfigure the modem router after upgrading.

View WiFi DSL Modem Router Status

The ADAVANCED paged displays the modem router status and usage information,

Router Information

Hardware Version. The modem router model.

Firmware Version. The version of the modem router firmware. It changes if you upgrade the modem router firmware.

GUI Language Version. The localized language of the user interface.

LAN Port.

• MAC Address. The Media Access Control address. This address is the unique physical address being used by the Ethernet (LAN) port of the modem router.
- IP Address. The IP address being used by the Ethernet (LAN) port of the modem router. The default is 192.168.1.1.
- DHCP Server. Identifies whether the modem router's built-in DHCP server is active for the LAN-attached devices.

Internet Port

MAC Address. The Media Access Control address. This address is the unique physical address being used by the Internet (WAN) port of the modem router.

IP Address. The IP address being used by the Internet (WAN) port of the modem router. If no address is shown or the address is 0.0.0, the modem router cannot connect to the Internet.

Active Connection. This shows if the modem router is using a fixed IP address on the WAN. If the value is DHCP Client, the modem router obtains an IP address dynamically from the ISP.

IP Subnet Mask. The IP subnet mask being used by the Internet (WAN) port of the modem router.

Domain Name Server. The Domain Name Server addresses being used by the modem router. A Domain Name Server translates human-language URLs such as www.netgear.com into IP addresses.

Show Statistics Button

On the Router Status screen, in the Internet Port pane, click the Show Statistics button to display the following screen:

Show Statistics System Up Time 01:32:46 Port Status ExPits RxPits Collisions Tx B/s Rx B/s Up Time WAN 1000M/Full 303 10740 0 4 393 01:32.04 LAN1 Link Down 20780 30152 0 4033 389 - LAN2 Link Down LAN3 Link Down LAN4 Link Down 2.4G WLAN big/n 145M 25359 15250 0 3502 328 01:32.45 5G WLAN air/sc 1300M 0 0 0 0 0 01:32.47 ADSL Link Dowastream Upstream Connection Speed Line Attenuation Norse Margin Poll Interval: 5 (99CS) Set Interval Stop

Figure 9. System up time and poll interval statistics

System Up Time. The time elapsed since the modem router was last restarted.

Port. The statistics for the WAN (Internet) and LAN (Ethernet) ports. For each port, the screen displays:

• Status. The link status of the port.
- TxPkts. The number of packets transmitted on this port since reset or manual clear.
- RxPkts. The number of packets received on this port since reset or manual clear.
• Collisions. The number of collisions on this port since reset or manual clear.
- Tx B/s. The current transmission (outbound) bandwidth used on the WAN and LAN ports.
- Rx B/s. The current reception (inbound) bandwidth used on the WAN and LAN ports.
- Up T ime. The time elapsed since this port acquired the link.
- Poll Interval. The interval at which the statistics are updated in this screen.

To change the polling frequency, enter a time in seconds in the Poll Interval field, and click Set Interval.

To stop the polling entirely, click Stop.

Connection Status Button

On the Router Status screen in the Internet Port pane, click the Connection Status button to view connection status information.

Connection Status IP Address 192.168.0.10 Subset Mask 255.255.255.0 Default Gateway 192.168.0.1 DHCP Server 192.168.0.1 DNS Server 192.168.0.1 Lease Obtained 1 days,0 Hours,0 minutes Lease Expires 0 days,22 Hours,27 minutes

Figure 10. View connection status information

The Release button returns the status of all items to 0. The Renew button refreshes the items. The Close Window button closes the Connection Status screen.

IP Address. The IP address that is assigned to the modem router.

Subnet Mask. The subnet mask that is assigned to the modem router.

Default Gateway. The IP address for the default gateway that the modem router communicates with.

DHCP Server. The IP address for the Dynamic Host Configuration Protocol server that provides the TCP/IP configuration for all the computers that are connected to the modem router.

DNS Server. The IP address of the Domain Name Service server that provides translation of network names to IP addresses.

Lease Obtained. The date and time when the lease was obtained.

Lease Expires. The date and time that the lease expires.

Wireless Settings (2.4 GHz and 5 GHz)

The following settings are displayed:

Name (SSID). The wireless network name (SSID) used by the modem router. The default names for the 5 GHz ends in -5G to distinguish it from the 2.4-GHz network.

Region. The geographic region where the modem router is being used. It might be illegal to use the wireless features of the modem router in some parts of the world.

Channel. Identifies the operating channel of the wireless port being used. The default channel is Auto. When Auto is selected, the modem router finds the best operating channel available. If you notice interference from nearby devices, you can select a different channel. Channels 1, 6, and 11 do not interfere with each other.

Mode. Indicates the wireless communication mode: Up to 54 Mbps, Up to 130 Mbps (default), and Up to 300 Mbps.

Wireless AP. Indicates whether the radio feature of the modem router is enabled. If this feature is not enabled, the Wireless LED on the front panel is off.

Broadcast Name. Indicates whether the modem router is broadcasting its SSID.

Wireless Isolation. Indicates whether wireless connections to the modem router are prevented.

Wi-Fi Protected Setup. Indicates whether Wi-Fi Protected Setup is configured for this network.

Guest Network (2.4 GHz and 5 GHz)

Name (SSID). The 11N wireless network name (SSID) used by the modem router. The default names are NETGEAR-Guest and NETGEAR-5G-Guest.

Wireless AP. Indicates whether the radio feature of the modem router is enabled. If this feature is not enabled, the Wireless LEDs on the front panel are off.

Broadcast Name. Indicates whether the modem router is broadcasting its SSID.

Wireless Isolation. Indicates whether wireless connections to the modem router are prevented.

Allow guest to access My Local Network. Indicates whether any user who connects to this SSID can access local networks associated with the modem router.

View Logs of Web Access or Attempted Web Access

The log is a detailed record of the websites you have accessed or attempted to access. Up to 256tries are stored in the log. Log entries appear only when keyword blocking is enabled and no log entries are made for the trusted user.

The Logs screen shows the following information:

• Date and time. The date and time the log entry was recorded.
  • Source IP. The IP address of the initiating device for this log entry.
• Target address. The name or IP address of the website or news group visited or to which access was attempted.
  • Action. Whether the access was blocked or allowed.

To view and manage logs:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Logs.

The Logs page displays.

1. To refresh the log screen, click the Refresh button.
2. To clear the log entries, click the Clear Log button.
3. To email the log immediately, click the Send Log button.

Manage the Configuration File

The configuration settings of the WiFi DSL Modem Router are stored within the modem router in a configuration file. You can back up (save) this file to your computer, restore it, or reset it to the factory default settings.

Back Up Settings

To back up the modem router's configuration settings:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Backup Settings.

The Backup Settings page displays.

1. Click the Back Up button to save a copy of the current settings.
2. Choose a location to store the .cfg file that is on a computer on your network.

Restore Configuration Settings

To restore configuration settings that you backed up:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Backup Settings.

The Backup Settings page displays.

1. Click the Browse button to find the .cfg file.
2. When you have located the .cfg file, click the Restore button to upload the file to the modem router.

Upon completion, the modem router reboots.

WARNING:

Do not interrupt the reboot process.

Erase

Under some circumstances (for example, if you move the modem router to a different network or if you have forgotten the password), you might want to erase the configuration and restore the factory default settings.

Either you can use the Restore Factory Settings button on the back of the modem router (see Factory Settings on page 128), or you can click the Erase button in this screen.

Erase sets the user name to admin, the password to password, and the LAN IP address to 192.168.1.1, and enables the modem router's DHCP.

Set Password

This feature allows you to change the default password that is used to log in to the modem router with the user name admin.

This procedure is not the same as changing the password for wireless access. The label on the bottom of your modem router shows your unique wireless network name (SSID) and password for wireless access (see Label on page 12).

To set the password for the user name admin:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Set Password.

The Set Password page displays.

1. Type the old password, and type the new password twice in the fields on this screen.
2. If you want to be able to recover the password, select the Enable Password Recovery check box.
3. Click the Apply button.

Your settings are saved.

Password Recovery

NETGEAR recommends that you enable password recovery if you change the password for the router's user name of admin. Then you have an easy way to recover the password if it is forgotten. This recovery process is supported in Internet Explorer, Firefox, and Chrome browsers, but not in the Safari browser.

To set up password recovery:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Set Password.

The Set Password page displays.

1. Select the Enable Password Recovery check box.
2. Select two security questions, and provide answers to them.
3. Click the Apply button.

Your settings are saved.

When you use your browser to access the router, the login window displays. If password recovery is enabled, when you click Cancel, the password recovery process starts. You can then enter the saved answers to the security questions to recover the password.

Diagnostics

You can perform various diagnostics. For normal operation, these tests are not required.

To perform diagnostic tests:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Administration > Diagnostics.

The Diagnostics page displays.

5. Perform the following diagnostics as needed:

• Ping an IP address or Host Name. Use this test to send a ping packet request to the specified IP address or host name. This test is often used to test a connection. If the request times out (in other words, no reply is received), this result usually means that the destination is unreachable. Note, however, that some network devices can be configured not to respond to a ping.
• Perform a DNS Lookup. A DNS (Domain Name Server) converts the Internet name (for example, www.netgear.com) to an IP address. If you need the IP address of a web, FTP, mail, or other server on the Internet, do a DNS lookup to find the IP address.
• Display the Routing Table. This operation displays the internal routing table.
• Reboot the Router. Click this button to perform a remote restart of the router. Use this operation if the router seems to have become unstable or is not operating normally.

Note: Rebooting breaks any existing connections either to the router (such as this one) or through the router (for example, LAN users accessing the Internet). However, connections to the Internet are automatically reestablished when possible.

Advanced Settings

Fine-tuning your network

This chapter describes the advanced features of your modem router. The information is for users with a solid understanding of networking concepts who want to set the modem router up for unique situations such as when remote access from the Internet by IP or domain name is needed.

This chapter includes the following sections:

• Enable WiFi Radio
• Set Up a WiFi Schedule
• Specify WPS Settings
• Use the Modem Router as a Wireless Access Point
  • Port Forwarding and Triggering
• Set Up Port Forwarding to Local Servers
• Set Up Port Triggering
• Dynamic DNS
• Static Routes
• Remote Management
  • Universal Plug and Play
  • IPv6
• Traffic Meter

Enable WiFi Radio

You can completely turn off the wireless portion of the modem router by clearing this check box. Select this check box again to enable the wireless portion of the modem router. When the wireless radio is disabled, other members of your household can use the modem router by connecting their computers to the modem router with an Ethernet cable.

Note: The Fragmentation Length, CTS/RTS Threshold, and Preamble Mode options are reserved for wireless testing and advanced configuration only. Do not change these settings.

To enable the modem router's WiFi radio:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Wireless Settings page displays.

1. To enable the WiFi radio, select the Enable Wireless Router Radio check box.
2. Click the Apply button.

Your settings are saved.

Set Up a WiFi Schedule

You can turn off the WiFi signal from your modem router at times when you do not need a WiFi connection. For example, you might turn it off for the weekend if you leave town.

To set the WiFi schedule:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Wireless Settings page displays.

1. Click the Add a new period button.

The Turn off wireless signal by schedule page displays.

1. Use the menus, radio buttons, and check boxes to set up a period during which you want to turn off the WiFi signal.

2. Click the Apply button.

The Wireless Settings page displays.

1. Select the Turn off wireless signal by schedule check box to activate the schedule.

2. Click the Apply button.

Your settings are saved.

Specify WPS Settings

Wi-Fi Protected Setup (WPS) lets you join the WiFi network without typing the WiFi password.

To specify WPS Settings:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window displays.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Router's PIN field displays the PIN that you use on a registrar (for example, from the Network Explorer on a Vista Windows computer) to configure the modem router's wireless settings through WPS.

1. (Optional) Select or clear the Disable Router's PIN check box.

The PIN function might temporarily be disabled when the modem router detects suspicious attempts to break into the modem router's wireless settings by using the modem router's PIN through WPS. You can manually enable the PIN function by clearing the Disable Router's PIN check box.

1. (Optional) Select or clear the Keep Existing Wireless Settings check box.

By default, the Keep Existing Wireless Settings check box is selected. NETGEAR recommends that you leave this check box selected.

If you clear this check box, the next time a new wireless client uses WPS to connect to the modem router, the modem router wireless settings change to an automatically generated random SSID and security key.

1. Click the Apply button.

Your changes are saved.

Use the Modem Router as a Wireless Access Point

You can set up the modem router to run as an access point (AP) on the same local network as another router or gateway.

To set up the router as an AP after you set up your Internet:

1. Use an Ethernet cable to connect the Internet port of this modem router to a LAN port on your existing router or gateway.

Cable this port to a LAN port on another router USB ADSL 4 3 2 1 Internet Reset Power DC Ethernet On Off

1. Launch a web browser from a computer or WiFi device that is connected to the network.

2. Enter http://www.routerlogin.net.

A login window displays.

1. Enter the WiFi DSL Modem Router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADV ANCED > Advanced Setup > Wireless Settings.

The Wireless Settings page displays.

1. Select the use other operation mode radio button.

2. Select the Enable AP Mode radio button.

3. Select the radio button for the IP address setting that you want to use:

4. Get dynamically from existing router. The other router on the network assigns an IP address to this router while this router is in AP mode.

5. Enable fixed IP settings on this device (not recommended). Use this setting if you want to manually assign a specific IP address to this router while it is in AP mode. Using this option effectively requires advanced network experience.

Note: To avoid interference with other routers or gateways in your network, NETGEAR recommends that you use different wireless settings on each router. You can also turn off the wireless radio on the other router or gateway and use the D6300 only for wireless client access.

1. Click the Apply button.

The IP address of the router changes, and you are disconnected.

1. To reconnect, close and restart your browser and enter http://wwwrouterlogin.net.

Port Forwarding and Triggering

By default, the modem router blocks inbound traffic from the Internet to your computers except replies to your outbound traffic. You might need to create exceptions to this rule for these purposes:

• To allow remote computers on the Internet to access a server on your local network.
• To allow certain applications and games to work correctly when their replies are not recognized by your modem router.

Your modem router provides two features for creating these exceptions: port forwarding and port triggering. The next sections provide background information to help you understand how port forwarding and port triggering work, and the differences between the two.

Remote Computer Access Basics

When a computer on your network needs to access a computer on the Internet, your computer sends your modem router a message containing the source and destination address and process information. Before forwarding your message to the remote computer, your modem router has to modify the source information and create and track the communication session so that replies can be routed back to your computer.

Here is an example of normal outbound traffic and the resulting inbound responses:

1. You open a browser, and your operating system assigns port number 5678 to this browser session.
2. You type http://www.example.com into the URL field, and your computer creates a web page request message with the following address and port information. The request message is sent to your modem router.

Source address. Your computer's IP address.

Source port number. 5678, which is the browser session.

Destination address. The IP address of www.example.com, which your computer finds by asking a DNS server.

Destination port number. 80, which is the standard port number for a web server process.

1. Your modem router creates an entry in its internal session table describing this communication session between your computer and the web server at www.example.com. Before sending the web page request message to www.example.com, your modem router stores the original information and then modifies the source information in the request message, performing Network Address Translation (NAT):

2. The source address is replaced with your modem router's public IP address. This requirement is necessary because your computer uses a private IP address that is not globally unique and cannot be used on the Internet.

3. The source port number is changed to a number chosen by the modem router, such as 33333. This requirement is necessary because two computers could independently be using the same session number.

Your modem router then sends this request message through the Internet to the web server at www.example.com.

1. The web server at www.example.com composes a return message with the requested web page data. The return message contains the following address and port information. The web server then sends this reply message to your modem router.

Source address. The IP address of www.example.com.

Source port number. 80, which is the standard port number for a web server process.

Destination address. The public IP address of your modem router.

Destination port number. 33333.

1. Upon receiving the incoming message, your modem router checks its session table to determine whether there is an active session for port number 33333. Finding an active session, the modem router then modifies the message to restore the original address information replaced by NAT. Your modem router sends this reply message to your computer, which displays the web page from www.example.com. The message now contains the following address and port information.

Source address. The IP address of www.example.com.

Source port number. 80, which is the standard port number for a web server process.

Destination address. Your computer's IP address.

Destination port number. 5678, which is the browser session that made the initial request.

1. When you finish your browser session, your modem router eventually detects a period of inactivity in the communications. Your modem router then removes the session information from its session table, and incoming traffic is no longer accepted on port number 33333.

Port Triggering to Open Incoming Ports

In the preceding example, requests are sent to a remote computer by your modem router from a particular service port number, and replies from the remote computer to your modem router are directed to that port number. If the remote server sends a reply to a different port number, your modem router does not recognize it and discards it. However, some application servers (such as FTP and IRC servers) send replies to multiple port numbers. Using the port triggering function of your modem router, you can tell the modem router to open additional incoming ports when a particular outgoing port originates a session.

An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at destination port 6667. The IRC server not only responds to your originating source port, but also sends an “identify” message to your computer on port 113. Using port triggering, you can tell the modem router, “When you initiate a session with destination port 6667, you have to also allow incoming traffic on port 113 to reach the originating computer.” Using steps similar to the preceding example, the following sequence shows the effects of the port triggering rule you have defined:

1. You open an IRC client program to start a chat session on your computer.
2. Your IRC client composes a request message to an IRC server using a destination port number of 6667, the standard port number for an IRC server process. Your computer then sends this request message to your modem router.
3. Your modem router creates an entry in its internal session table describing this communication session between your computer and the IRC server. Your modem router stores the original information, performs Network Address Translation (NAT) on the source address and port, and sends this request message through the Internet to the IRC server.
4. Noting your port triggering rule and having observed the destination port number of 6667, your modem router creates an additional session entry to send any incoming port 113 traffic to your computer.
5. The IRC server sends a return message to your modem router using the NAT-assigned source port (as in the previous example, say port 33333) as the destination port. The IRC server also sends an identify message to your modem router with destination port 113.
6. Upon receiving the incoming message to destination port 33333, your modem router checks its session table to determine whether there is an active session for port number 33333. Finding an active session, the modem router restores the original address information replaced by NAT and sends this reply message to your computer.
7. Upon receiving the incoming message to destination port 113, your modem router checks its session table and learns that there is an active session for port 113 associated with your computer. The modem router replaces the message's destination IP address with your computer's IP address and forwards the message to your computer.
8. When you finish your chat session, your modem router eventually senses a period of inactivity in the communications. The modem router then removes the session information from its session table, and incoming traffic is no longer accepted on port numbers 33333 or 113.

To configure port triggering, you need to know which inbound ports the application needs. Also, you need to know the number of the outbound port that triggers the opening of the

inbound ports. You can usually determine this information by contacting the publisher of the application or user groups or newsgroups.

Note: Only one computer at a time can use the triggered application.

Port Forwarding to Permit External Host Communications

In both of the preceding examples, your computer initiates an application session with a server computer on the Internet. However, you might need to allow a client computer on the Internet to initiate a connection to a server computer on your network. Normally, your modem router ignores any inbound traffic that is not a response to your own outbound traffic. You can configure exceptions to this default rule by using the port forwarding feature.

A typical application of port forwarding can be shown by reversing the client-server relationship from the previous web server example. In this case, a remote computer's browser needs to access a web server running on a computer in your local network. Using port forwarding, you can tell the modem router, "When you receive incoming traffic on port 80 (the standard port number for a web server process), forward it to the local computer at 192.168.1.123." The following sequence shows the effects of the port forwarding rule you have defined:

1. The user of a remote computer opens a browser and requests a web page from www.example.com, which resolves to the public IP address of your modem router. The remote computer composes a web page request message with the following destination information:

Destination address. The IP address of www.example.com, which is the address of your modem router.

Destination port number. 80, which is the standard port number for a web server process.

The remote computer then sends this request message through the Internet to your modem router.

1. Your modem router receives the request message and looks in its rules table for any rules covering the disposition of incoming port 80 traffic. Your port forwarding rule specifies that incoming port 80 traffic should be forwarded to local IP address 192.168.1.123. Therefore, your modem router modifies the destination information in the request message:

The destination address is replaced with 192.168.1.123.

Your modem router then sends this request message to your local network.

1. Your web server at 192.168.1.123 receives the request and composes a return message with the requested web page data. Your web server then sends this reply message to your modem router.

2. Your modem router performs Network Address Translation (NAT) on the source IP address, and sends this request message through the Internet to the remote computer, which displays the web page from www.example.com.

To configure port forwarding, you need to know which inbound ports the application needs. Usually you can determine this information by contacting the publisher of the application or the relevant user groups and newsgroups.

How Port Forwarding Differs from Port Triggering

The following points summarize the differences between port forwarding and port triggering:

• Port triggering can be used by any computer on your network, although only one computer can use it at a time.
• Port forwarding is configured for a single computer on your network.
• Port triggering requires that you know the computer's IP address in advance. The IP address is captured automatically.
• Port forwarding requires that you specify the computer's IP address during configuration, and the IP address can never change.
• Port triggering requires specific outbound traffic to open the inbound ports, and the triggered ports are closed after a period of no activity.
• Port forwarding is always active and does not need to be triggered.

Set Up Port Forwarding to Local Servers

Using the port forwarding feature, you can allow certain types of incoming traffic to reach servers on your local network. For example, you might want to make a local web server, FTP server, or game server visible and available to the Internet.

Use the Port Forwarding/Port Triggering screen to configure the modem router to forward specific incoming protocols to computers on your local network. In addition to servers for specific applications, you can also specify a default DMZ server to which all other incoming protocols are forwarded.

Before starting, you need to determine which type of service, application, or game you want to provide, and the local IP address of the computer that provides the service. The server computer has to always have the same IP address.

To set up port forwarding:

Tip: To ensure that your server computer always has the same IP address, use the reserved IP address feature of your WiFi DSL Modem Router.

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
   A login window opens.
3. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

Port Forwarding is selected as the service type.

1. Click the Add button.

The Port Forwarding Service/Inbound Firewall Rule page displays.

1. From the Service list, select the service or game that you host on your network. If the service does not appear in the list, see Add a Custom Service on page 105.

2. From the Action list, select the action that you want.

3. In the Send to LAN Server field, enter the last digit of the IP address of your local computer that provides this service.

4. Click the Apply button.

The service appears in the list in the screen.

Add a Custom Service

To define a service, game, or application that does not appear in the Service Name list, you have to first determine which port number or range of numbers is used by the application. You can usually determine this information by contacting the publisher of the application or user groups or newsgroups.

To add a custom service:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. Select the Port Forwarding radio button.
2. Click the Add Custom Service button.

The Add Services page displays.

1. In the Name field, enter a descriptive name.

2. In the Type list, select the protocol. If you are unsure, select TCP/UDP.

3. In the Start Port field, enter the beginning port number.

- If the application uses a single port, enter the same port number in the End Port field.

- If the application uses a range of ports, enter the ending port number of the range in the End Port field.

1. Click the Apply button.

The service appears in the list in the Port Forwarding/Port Triggering screen.

Edit or Delete a Port Forwarding Entry

To edit or delete a port forwarding entry:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. In the table, select the radio button next to the service name.
2. To edit a port forwarding entry, click the Edit button.
3. To delete a port forwarding entry, click the Delete button.

Application Example: Making a Local Web Server Public

If you host a web server on your local network, you can use port forwarding to allow web requests from anyone on the Internet to reach your web server.

To make a local web server public:

1. Assign your web server either a fixed IP address or a dynamic IP address using DHCP address reservation. In this example, your modem router always gives your web server an IP address of 192.168.1.33.
2. In the Port Forwarding/Port Triggering screen, configure the modem router to forward the HTTP service to the local address of your web server at 192.168.1.33. HTTP (port 80) is the standard protocol for web servers.
3. (Optional) Register a host name with a Dynamic DNS service, and configure your modem router to use the name as described in Dynamic DNS on page 108. To access your web server from the Internet, a remote user has to know the IP address that has been assigned

by your ISP. However, if you use a Dynamic DNS service, the remote user can reach your server by a user-friendly Internet name, such as mynetgear.dyndns.org.

Set Up Port Triggering

Port triggering is a dynamic extension of port forwarding that is useful in these cases:

• More than one local computer needs port forwarding for the same application (but not simultaneously).
• An application needs to open incoming ports that are different from the outgoing port.

When port triggering is enabled, the modem router monitors outbound traffic looking for a specified outbound “trigger” port. When the modem router detects outbound traffic on that port, it remembers the IP address of the local computer that sent the data. The modem router then temporarily opens the specified incoming port or ports, and forwards incoming traffic on the triggered ports to the triggering computer.

While port forwarding creates a static mapping of a port number or range to a single local computer, port triggering can dynamically open ports to any computer that needs them and can close the ports when they are no longer needed.

Note: If you use applications such as multiplayer gaming, peer-to-peer connections, real-time communications such as instant messaging, or remote assistance (a feature in Windows XP), you should also enable Universal Plug and Play (UPnP) according to the instructions in Universal Plug and Play on page 112.

To set up port triggering, you need to know which inbound ports the application needs. Also, you need to know the number of the outbound port that triggers the opening of the inbound ports. You can usually determine this information by contacting the publisher of the application or user groups or newsgroups.

To set up port triggering:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
   A login window opens.

3. Enter the modem router user name and password.
   The user name is admin. The default password is password. The user name and password are case-sensitive.
   The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. Select the Port Triggering radio button.

The page adjusts.

1. Clear the Disable Port Triggering check box if it is selected.

Note: If the Disable Port Triggering check box is selected after you configure port triggering, port triggering is disabled. However, any port triggering configuration information you added to the modem router is retained even though it is not used.

1. In the Port Triggering Timeout field, enter a value up to 9999 minutes.

This value controls the inactivity timer for the designated inbound ports. The inbound ports close when the inactivity time expires. This closure is required because the modem router cannot be sure when the application has terminated.

1. Click the Add Service button.

The Port Triggering -Services page displays.

1. In the Service Name field, type a descriptive service name.

2. In the Service User list, select Any (the default) to allow this service to be used by any computer on the Internet. Otherwise, select Single address, and enter the IP address of one computer to restrict the service to a particular computer.

3. Select the service type, either TCP or UDP or both (TCP/UDP). If you are not sure, select TCP/UDP.

4. In the Triggering Port field, enter the number of the outbound traffic port that causes the inbound ports to be opened.

5. Enter the inbound connection port information in the Service Type, Starting Port, and Ending Port fields.

6. Click the Apply button.

The service appears in the Port Triggering Portmap table.

Dynamic DNS

If your Internet service provider (ISP) gave you a permanently assigned IP address, you can register a domain name and have that name linked with your IP address by public Domain Name Servers (DNS). However, if your Internet account uses a dynamically assigned IP address, you do not know in advance what your IP address is, and the address can change frequently. In this case, you can use a commercial Dynamic DNS service. This type of service lets you register your domain to their IP address and forwards traffic directed at your domain to your frequently changing IP address.

If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), the Dynamic DNS service does not works because private addresses are not routed on the Internet.

Your modem router contains a client that can connect to the Dynamic DNS service provided by DynDNS.org. First visit their website at http://www.dyndns.org and obtain an account and

host name that you configure in the modem router. Then, whenever your ISP-assigned IP address changes, your modem router automatically contacts the Dynamic DNS service provider, logs in to your account, and registers your new IP address. If your host name is hostname, for example, you can reach your modem router at http://hostname.dyndns.org.

To set up Dynamic DNS:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Dynamic DNS.

The Dynamic DNS page displays.

1. Register for an account with one of the Dynamic DNS service providers whose addresses appear in the Service Provider list.
2. Select the Use a Dynamic DNS Service check box.
3. Select the address of your Dynamic DNS service provider. For example, for DynDNS.org, select www.dyndns.org.
4. Type the host name (or domain name) that your Dynamic DNS service provider gave you.
5. Type the user name for your Dynamic DNS account. This is the name that you use to log in to your account, not your host name.
6. Type the password (or key) for your Dynamic DNS account.
7. Click Apply to save your configuration.

Static Routes

Static routes provide additional routing information to your modem router. Under usual circumstances, the modem router has adequate routing information after it has been configured for Internet access, and you do not need to configure additional static routes. You have to configure static routes only for unusual cases such as multiple modem routers or multiple IP subnets on your network.

As an example of when a static route is needed, consider the following case:

• Your primary Internet access is through a cable modem to an ISP.
• You have an ISDN modem router on your home network for connecting to the company where you are employed. This modem router's address on your LAN is 192.168.1.100.
• Your company's network address is 134.177.0.0.

When you first configured your modem router, two implicit static routes were created. A default route was created with your ISP as the gateway, and a second static route was created to your local network for all 192.168.1.x addresses. With this configuration, if you attempt to access a device on the 134.177.0.0 network, your modem router forwards your request to the ISP. The ISP forwards your request to the company where you are employed, and the request is likely to be denied by the company's firewall.

In this case you have to define a static route, telling your modem router that 134.177.0.0 should be accessed through the ISDN modem router at 192.168.1.100. In this example:

• The Destination IP Address and IP Subnet Mask fields specify that this static route applies to all 134.177.x.x addresses.
• The Gateway IP Address field specifies that all traffic for these addresses should be forwarded to the ISDN modem router at 192.168.1.100.
• A metric value of 1 works since the ISDN modem router is on the LAN.
• Private is selected only as a precautionary security measure in case RIP is activated.

To set up a static route:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Static Routes.

The Static Routers page displays.

1. Click the Add button.

The page adjusts.

1. In the Route Name field, type a name for this static route (for identification purposes only).
2. Select the Private check box if you want to limit access to the LAN only. If Private is selected, the static route is not reported in RIP.
3. Select the Active check box to make this route effective.
4. Type the IP address of the final destination.
5. Type the IP subnet mask for this destination. If the destination is a single host, type 255.255.255.255.
6. Type the gateway IP address, which has to be a modem router on the same LAN segment as the WiFi DSL Modem Router.
7. Type a number from 1 through 15 as the metric value.

This value represents the number of modem routers between your network and the destination. Usually, a setting of 2 or 3 works, but if this link is a direct connection, set it to 1.

1. Click the Apply button.

Your settings are saved.

Remote Management

The remote management feature lets you upgrade or check the status of your WiFi DSL Modem Router over the Internet.

To set up remote management:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Remote Management.

The Remote Management page displays.

Note: Be sure to change the modem router's default login password to a very secure password. The ideal password should contain no dictionary words from any language and contain uppercase and lowercase letters, numbers, and symbols. It can be up to 30 characters.

1. Select the Turn Remote Management On check box.
2. Under Allow Remote Access By, specify the external IP addresses to be allowed to access the modem router's remote web management interface.

Note: For enhanced security, restrict access to as few external IP addresses as practical.

• To allow access from a single IP address on the Internet, select Only This Computer. Enter the IP address that is allowed access.

• To allow access from a range of IP addresses on the Internet, select IP Address Range. Enter a beginning and ending IP address to define the allowed range.
  • To allow access from any IP address on the Internet, select Everyone.

• Specify the port number for accessing the web management interface.

Normal web browser access uses the standard HTTP service port 80. For greater security, enter a custom port number for the remote web management interface. Choose a number from 1024 through 65535, but do not use the number of any common service port. The default is 8080, which is a common alternate for HTTP.

1. Click the Apply button.

Your settings are saved.

1. When accessing your modem router from the Internet, type your modem router's WAN IP address into your browser's address or location field followed by a colon (:) and the custom port number. For example, if your external address is 134.177.0.123 and you use port number 8080, enter http://134.177.0.123:8080 in your browser.

Universal Plug and Play

Universal Plug and Play (UPnP) helps devices, such as Internet appliances and computers, to access the network and connect to other devices as needed. UPnP devices can automatically discover the services from other registered UPnP devices on the network.

Note: If you use applications such as multiplayer gaming, peer-to-peer connections, or real-time communications such as instant messaging or remote assistance (a feature in Windows XP), you should enable UPnP.

To turn on Universal Plug and Play:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > UPnP.

The UPnP page displays.

The available settings and information in this page are as follows:

Turn UPnP On. UPnP can be enabled or disabled for automatic device configuration. The default setting for UPnP is disabled. If this check box is not selected, the modem router does not allow any device to automatically control the resources, such as port forwarding (mapping) of the modem router.

Advertisement Period. The advertisement period is how often the modem router broadcasts its UPnP information. This value can range from 1 to 1440 minutes. The default period is 30 minutes. Shorter durations ensure that control points have current device status at the expense of additional network traffic. Longer durations can compromise the freshness of the device status, but can significantly reduce network traffic.

Advertisement Time to Live. The time to live for the advertisement is measured in hops (steps) for each UPnP packet sent. The time to live hop count is the number of steps a broadcast packet is allowed to propagate for each UPnP advertisement before it disappears. The number of hops can range from 1 to 255. The default value for the advertisement time to live is 4 hops, which should be fine for most home networks. If you notice that some devices are not being updated or reached correctly, then it might be necessary to increase this value.

UPnP Portmap Table. The UPnP Portmap Table displays the IP address of each UPnP device that is currently accessing the modem router and which ports (internal and external) that device has opened. The UPnP Portmap Table also displays what type of port is open and whether that port is still active for each IP address.

1. Click the Apply button.

Your settings are saved.

IPv6

You can use this feature to set up an IPv6 Internet connection type if NETGEAR genie does not detect it automatically.

To set up an IPv6 Internet connection type:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The Basic Settings page displays.

1. Select the IPv6 connection type from the list. Your Internet service provider (ISP) can provide this information.

• If your ISP did not provide details, you can select IPv6 Tunnel.
- If you are not sure, select Auto Detect so that the modem router detects the IPv6 type that is in use.

- If your Internet connection does not use PPPoE, DHCP, or fixed, but is IPv6, then select IPv6 auto config.

1. Click the Apply button.

Your settings are saved.

Traffic Meter

Traffic metering allows you to monitor the volume of Internet traffic passing through your modem router's Internet port. With the traffic meter utility, you can set limits for traffic volume, set a monthly limit, and get a live update of traffic usage.

To monitor Internet traffic:

1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the modem router user name and password.

The user name is admin. The default password is password. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Click ADVANCED > Advanced Setup > Traffic Meter.

The Traffic Meter page displays.

1. To enable the traffic meter, select the Enable Traffic Meter check box.

2. If you would like to record and restrict the volume of Internet traffic, select the Traffic volume control by radio button. You can select one of the following options for controlling the traffic volume:

3. No Limit. No restriction is applied when the traffic limit is reached.

4. Download only. The restriction is applied to incoming traffic only.

5. Both Directions. The restriction is applied to both incoming and outgoing traffic.

6. You can limit the amount of data traffic allowed per month by specifying how many Mbytes per month are allowed or by specifying how many hours of traffic are allowed.

7. Set the traffic counter to begin at a specific time and date.
8. Set up traffic control to issue a warning message before the monthly limit of Mbytes or hours is reached. You can select one of the following to occur when the limit is attained:

• The Internet LED blinks green or red.
- The Internet connection is disconnected and disabled.

1. Set up Internet traffic statistics to monitor the data traffic.

2. Click the Traffic Status button to get a current update of Internet traffic status on your modem router.

3. Click the Apply button.

Your settings are saved.

Troubleshooting

10

Diagnose and solve problems

This chapter provides information to help you diagnose and solve problems you might have with your modem router. If you do not find the solution here, check the NETGEAR support site at http://support.netgear.com/general/contact/default.aspx for product and contact information.

This chapter contains the following sections:

• Quick Tips
• Troubleshoot with the LEDs
• Cannot Log In to the Router
• Cannot Access the Internet
• Changes Not Saved
• Incorrect Date or Time
• Wireless Connectivity
• Restore the Factory Settings and Password
• Troubleshoot Your Network Using the Ping Utility

Quick Tips

This section describes tips for troubleshooting some common problems.

Sequence to Restart Your Network

Be sure to restart your network in this sequence:

1. Turn off and unplug the modem.
2. Turn off the modem router and computers.
3. Plug in the modem and turn it on. Wait 2 minutes.
4. Turn on the modem router and wait 2 minutes.
5. Turn on the computers.

Check Ethernet Cable Connections

Make sure that the Ethernet cables are securely plugged in.

• The Internet status LED on the modem router is lit if the Ethernet cable connecting the modem router and the modem is plugged in securely and the modem and modem router are turned on.
• For each powered-on computer connected to the modem router by an Ethernet cable, the corresponding numbered router LAN port LED is lit.

Wireless Settings

Make sure that the wireless settings in the computer and modem router match exactly.

• For a wirelessly connected computer, the wireless network name (SSID) and wireless security settings of the modem router and wireless computer need to match exactly.
• If you set up an access list in the Advanced Wireless Settings screen, you have to add each wireless computer's MAC address to the modem router's access list.

Network Settings

Make sure that the network settings of the computer are correct.

• Wired and wirelessly connected computers need to have network (IP) addresses on the same network as the modem router. The simplest way to achieve this address commonality is to configure each computer to obtain an IP address automatically using DHCP.
• Some cable modem service providers require you to use the MAC address of the computer initially registered on the account. You can view the MAC address in the Attached Devices screen.

Troubleshoot with the LEDs

After you turn on power to the modem router, the following sequence of events should occur:

1. When power is first applied, verify that the Power LED is lit.
2. Verify that the Power LED turns red within a few seconds, indicating that the self-test is running.
3. After approximately 30 seconds, verify that:
   • The Power LED is solid green.
   • The Internet LED is lit.
4. The Ethernet LED is lit for any local port that is connected to a computer. This LED indicates that a link has been established to the connected device.

The LEDs on the front panel of the modem router can be used for troubleshooting.

Power LED Is Off or Blinking

• Make sure that the power cord is securely connected to your modem router and that the power adapter is securely connected to a functioning power outlet.
• Check that you are using the 12V DC, 5A power adapter that NETGEAR supplied for this product.
• If the Power LED blinks slowly and continuously, the modem router firmware is corrupted. This situation can happen if a firmware upgrade is interrupted, or if the modem router detects a problem with the firmware. If the error persists, you have a hardware problem. For recovery instructions, or help with a hardware problem, contact technical support at www.netgear.com/support.

Power LED Stays Red

When the modem router is turned on, the Power LED turns red for about 20 seconds and then turns green. If the LED does not turn green, the modem router has a problem.

If the Power LED is still red one minute after you turn on power to the modem router:

1. Turn the power off and back on to see if the modem router recovers.
2. Press and hold the Restore Factory Settings button to return the modem router to its factory settings. See Factory Settings on page 128.

If the error persists, you might have a hardware problem and should contact technical support at www.netgear.com/support.

LEDs Never Turn Off

When the modem router is turned on, the LEDs turn on for about 10 seconds and then turn off. If all the LEDs stay lit, there is a fault within the modem router.

If all LEDs are still lit 1 minute after power-up:

• Cycle the power to see if the modem router recovers.
• Press and hold the Restore Factory Settings button to return the modem router to its factory settings. See Factory Settings on page 128.

If the error persists, you might have a hardware problem and should contact technical support at www.netgear.com/support.

Internet or Ethernet Port LEDs Are Off

If either the Ethernet port LEDs or the Internet LED does not light when the Ethernet connection is made, check the following:

• Make sure that the Ethernet cable connections are secure at the modem router and at the modem or computer.
- Make sure that power is turned on to the connected modem or computer.
- Be sure that you are using the correct cable:

When connecting the modem router's Internet port to a cable or DSL modem, use the cable that was supplied with the cable or DSL modem. This cable could be a standard straight-through Ethernet cable or an Ethernet crossover cable.

Wireless LEDs Are Off

If the Wireless LEDs stay off, check to see if the Wireless On/Off button on the modem router has been pressed. This button turns the wireless radios in the modem router on and off. The Wireless LEDs are lit when the wireless radio is turned on.

The Push 'N' Connect (WPS) Button Blinks Green

If after you press the WPS button and the button blinks green, check the following:

• Make sure that you are using the button and not the modem router's built-in registrar
• Check that PIN verification has succeeded for the WiFi device you are adding to the wireless network.
• Make sure that you have not pressed the WPS button on the top of the modem router after disabling the WPS feature (you logged in to the modem router and disabled this feature previously).
• Check that the modem router is not in the temporary AP setup locked state (if you are using the wireless repeater function).

Cannot Log In to the Router

If you are unable to log in to the modem router from a computer on your local network, check the following:

- If you are using an Ethernet-connected computer, check the Ethernet connection between the computer and the modem router as described in the previous section.

- Make sure that your computer's IP address is on the same subnet as the modem router. If you are using the recommended addressing scheme, your computer's address should be in the range of 192.168.0.2 to 192.168.0.254.

- If your computer's IP address is shown as 169.254.x.x, recent versions of Windows and Mac OS generate and assign an IP address if the computer cannot reach a DHCP server. These autogenerated addresses are in the range of 169.254.x.x. If your IP address is in this range, check the connection from the computer to the modem router, and reboot your computer.

- If your modem router's IP address was changed and you do not know the current IP address, clear the modem router's configuration to factory defaults. This procedure sets the modem router's IP address to 192.168.0.1. This procedure is explained in Factory Settings on page 128.

- Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using Internet Explorer, click Refresh to be sure that the Java applet is loaded.

- Try quitting the browser and launching it again.

- Make sure that you are using the correct login information. The factory default login name is admin, and the password is password. Make sure that Caps Lock is off when you enter this information.

- If you are attempting to set up your NETGEAR modem router as an additional router behind an existing router in your network, consider replacing the existing router instead. NETGEAR does not support such a configuration.

- If you are attempting to set up your NETGEAR modem router as a replacement for an ADSL gateway in your network, the modem router cannot perform many gateway services, for example, converting ADSL or cable data into Ethernet networking information. NETGEAR does not support such a configuration.

Cannot Access the Internet

If you can access your router but you are unable to access the Internet, first determine whether the modem router can obtain an IP address from your Internet service provider (ISP). Unless your ISP provides a fixed IP address, your modem router requests an IP address from the ISP. You can determine whether the request was successful using the Router Status screen.

To check the WAN IP address:

1. Start your browser, and select an external site such as http://www.netgear.com.

2. Access the modem router interface at http://www.routerlogin.net.

3. Select Administration > Router Status.

4. Check that an IP address is shown for the Internet port. If 0.0.0.0 is shown, your modem router has not obtained an IP address from your ISP.

If your modem router cannot obtain an IP address from the ISP, you might need to force your cable or DSL modem to recognize your new modem router by restarting your network, as described in Sequence to Restart Your Network on page 117.

If your modem router is still unable to obtain an IP address from the ISP, the problem might be one of the following:

• Your Internet service provider (ISP) might require a login program.
  Ask your ISP whether they require PPP over Ethernet (PPPoE) or some other type of login.
• If your ISP requires a login, the login name and password might be set incorrectly.
• Your ISP might check for your computer's host name.
  Assign the computer host name of your ISP account as the account name in the Internet Basic Settings screen.
• Your ISP allows only one Ethernet MAC address to connect to the Internet and might check for your computer's MAC address. In this case, do one of the following:
• Inform your ISP that you have bought a new network device, and ask them to use the modem router's MAC address.
• Configure your modem router to clone your computer's MAC address.

If your modem router can obtain an IP address, but your computer is unable to load any web pages from the Internet:

- Your computer might not recognize any DNS server addresses.

A DNS server is a host on the Internet that translates Internet names (such as www addresses) to numeric IP addresses. Typically, your ISP provides the addresses of one or two DNS servers for your use. If you entered a DNS address during the modem router's configuration, reboot your computer, and verify the DNS address. You can configure your computer manually with DNS addresses, as explained in your operating system documentation.

- Your computer might not have the modem router configured as its TCP/IP gateway.

If your computer obtains its information from the modem router by DHCP, reboot the computer, and verify the gateway address.

- You might be running login software that is no longer needed.

If your ISP provided a program to log you in to the Internet (such as WinPoET), you no longer need to run that software after installing your modem router. You might need to go to Internet Explorer and select Tools > Internet Options, click the Connections tab, and select Never dial a connection.

Troubleshoot PPPoE

If you are using PPPoE, try troubleshooting your Internet connection.

To troubleshoot a PPPoE connection:

1. Log in to the modem router.

2. Select Administration > Router Status.

3. Click Connection Status. If all of the steps indicate OK, then your PPPoE connection is up and working.

If any of the steps indicate Failed, you can attempt to reconnect by clicking Connect. The modem router continues to attempt to connect indefinitely.

If you cannot connect after several minutes, you might be using an incorrect service name, user name, or password. There might also be a provisioning problem with your ISP.

Note: Unless you connect manually, the modem router does not authenticate using PPPoE until data is transmitted to the network.

Troubleshoot Internet Browsing

If your modem router can obtain an IP address but your computer is unable to load any web pages from the Internet, check the following:

- Your computer might not recognize any DNS server addresses. A DNS server is a host on the Internet that translates Internet names (such as www addresses) to numeric IP addresses.

Typically, your ISP provides the addresses of one or two DNS servers for your use. If you entered a DNS address during the modem router's configuration, restart your computer.

Alternatively, you can configure your computer manually with a DNS address, as explained in the documentation for your computer.

- Your computer might not have the modem router configured as its default gateway.

Reboot the computer, and verify that the modem router address (www.routerlogin.net) is listed by your computer as the default gateway address.

- You might be running login software that is no longer needed. If your ISP provided a program to log you in to the Internet (such as WinPoET), you no longer need to run that software after installing your modem router. You might need to go to Internet Explorer and select Tools > Internet Options, click the Connections tab, and select Never dial a connection.

If the modem router does not save changes you have made in the browser interface, check the following:

• When entering configuration settings, be sure to click Apply before moving to another screen or tab, or your changes could be lost.
• Click Refresh or Reload in the web browser. The changes might have occurred, but the web browser might be caching the old configuration.

Changes Not Saved

If the modem router does not save the changes you make in the modem router interface, check the following:

- When entering configuration settings, always click the Apply button before moving to another screen or tab, or your changes are lost.

- Click the Refresh or Reload button in the web browser. The changes might have occurred, but the old settings might be in the web browser's cache.

Incorrect Date or Time

Select ADVANCED > Security > Schedule to display the current date and time. The modem router uses the Network Time Protocol (NTP) to obtain the current time from one of several network time servers on the Internet. Each entry in the log is stamped with the date and time of day. Problems with the date and time function can include the following:

- Date shown is January 1, 2000. This value means the modem router has not yet successfully reached a network time server. Check that your Internet access is configured correctly. If you have finished setting up the modem router, wait at least 5 minutes, and check the date and time again.

- Time is off by one hour. The modem router does not automatically sense daylight saving time. In the Schedule screen, select the Automatically adjust for daylight savings time check box.

Wireless Connectivity

If you are having trouble connecting wirelessly to the modem router, try to isolate the problem.

- Does the WiFi device or computer that you are using find your wireless network?

If not, check the Wireless LEDs on the front of the modem router. They should be lit. If they are not, you can press the WiFi On/Off button on the back of the modem router to turn the modem router's wireless radio back on.

If you disabled the modem router's SSID broadcast, then your wireless network is hidden and does not show up in your wireless client's scanning list. (By default, SSID broadcast is enabled.)

- Does your WiFi device support the security that you are using for your wireless network (WPA or WPA2)?

- If you want to view the wireless settings for the modem router, use an Ethernet cable to connect a computer to a LAN port on the modem router. Then log in to the modem router and select Setup > Wireless Settings see (Basic Wireless Settings on page 31).

Note: Be sure to click Apply if you made changes.

Wireless Signal Strength

If your WiFi device finds your network, but the signal strength is weak, check these conditions:

• Is your modem router too far from your computer, or too close? Place your computer near the modem router, but at least 6 feet away, and see whether the signal strength improves.
• Is your wireless signal blocked by objects between the modem router and your computer?

Restore the Factory Settings and Password

This section explains how to restore the factory settings, changing the modem router's administration password back to password. You can erase the current configuration and restore factory defaults in two ways:

• Use the Erase function of the modem router (see Erase on page 93).
- Use the Restore Factory Settings button on the back of the modem router. See Factory Settings on page 128. If you restore the factory settings and the modem router fails to restart, or the green Power LED continues to blink, the unit might be defective. If the error persists, you might have a hardware problem and should contact technical support at http://www.netgear.com/support.

Troubleshoot Your Network Using the Ping Utility

Most network devices and routers contain a ping utility that sends an echo request packet to the designated device. The device then responds with an echo reply. You can easily troubleshoot a network by using the ping utility in your computer or workstation.

Test the LAN Path to Your Router

You can ping the modem router from your computer to verify that the LAN path to your modem router is set up correctly.

To ping the modem router from a computer running Windows:

1. From the Windows toolbar, click Start, and then select Run.
2. In the field provided, type ping followed by the IP address of the modem router, as in this example:

ping www.routerlogin.net

3. Click OK.

You should see a message like this one:

Pinging with 32 bytes of data

If the path is working, you see this message:

Reply from < IP address>: bytes=32 time=NN ms TTL=xxx

If the path is not working, you see this message:

Request timed out

If the path is not functioning correctly, you could have one of the following problems:

- Wrong physical connections

For a wired connection, make sure that the numbered LAN port LED is lit for the port to which you are connected.

Check that the appropriate LEDs are lit for your network devices. If your modem router and computer are connected to a separate Ethernet switch, make sure that the Ethernet LEDs are lit for the switch ports that are connected to your computer and modem router.

- Wrong network configuration

Verify that the Ethernet card driver software and TCP/IP software are both installed and configured on your computer.

Verify that the IP address for your modem router and your computer are correct and that the addresses are on the same subnet.

Test the Path from Your Computer to a Remote Device

After verifying that the LAN path works correctly, test the path from your computer to a remote device.

1. From the Windows toolbar, click the Start button, and then select Run.

2. In the Windows Run window, type:

ping -n 10

where is the IP address of a remote device such as your ISP's DNS server.

If the path is functioning correctly, replies like the examples shown in the previous section are displayed.

If you do not receive replies:

- Check that your computer has the IP address of your modem router listed as the default gateway. If the IP configuration of your computer is assigned by DHCP, this information is not visible in your computer's Network Control Panel. Verify that the IP address of the modem router is listed as the default gateway.

- Check to see that the network address of your computer (the portion of the IP address specified by the subnet mask) is different from the network address of the remote device.

• Check that your cable or DSL modem is connected and functioning.
• If your ISP assigned a host name to your computer, enter that host name as the account name in the Internet Basic Settings screen.
• Your ISP could be rejecting the Ethernet MAC addresses of all but one of your computers.

Many broadband ISPs restrict access by allowing traffic only from the MAC address of your broadband modem, but some ISPs additionally restrict access to the MAC address of a single computer connected to that modem. If this is the case, then configure your modem router to “clone” or “spoof” the MAC address from the authorized computer.

Supplemental Information

Factory settings and technical specifications

This appendix provides factory default settings and technical specifications for the D6300 WiFi DSL Modem Router.

• Factory Settings
  • Technical Specifications

Factory Settings

You can return the modem router to its factory settings. Use the end of a paper clip or some other similar object to press and hold the Restore Factory Settings button on the back of the router for at least 5 seconds. The modem router resets and returns to the factory settings. Your device returns to the factory configuration settings shown in the following table.

Table 11. Factory default settings

Feature Default Behavior
Router login User	login URL www.routerlogin.com or	www.routerlogin.net
	User name (case-sensitive) admin
	Login password (case-sensitive) password
Internet connection	WAN MAC address Use default hardware address
	WAN MTU size 1500
	Port speed Autosensing
Local network (LAN)	LAN IP 192.168.0.1
	Subnet mask 255.255.255.0
	DHCP server Enabled
	DHCP range 192.168.0.2 to 192.168.0.254
	Allow a registrar to configure this router	Enabled
	DHCP starting IP address	192.168.0.2
	DHCP ending IP address	192.168.0.254
Local network (LAN) continued	DMZ	Disabled
	Time zone	GMT for WW except NA and GR, GMT+1 for GR, GMT-8 for NA
	Time zone adjusted for daylight savings time	Disabled
Firewall	Inbound (communications coming in from the Internet)	Disabled (except traffic on port 80, the HTTP port)
	Outbound (communications going out to the Internet)	Enabled (all)
	Source MAC filtering	Disabled
Feature		Default Behavior
Wireless Wireless	communication Enabled
	SSID name See router label
	Security Enabled
	Broadcast SSID Enabled
	Transmission speed Auto	1
	Country/region United States in the	US; otherwise varies by region
	RF channel 6 until region selected
	Operating mode Up to 145 Mbps
	Data rate Best
	Output power Full
Firewall Inbound	(communications coming in from the Internet)	Disabled (bars all unsolicited requests)
	Outbound (communications going out to the Internet)	Enabled (all)

1. Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput varies. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.

Technical Specifications

Table 12. D6300 Router specifications

Feature Description
Data and routing protocols	TCP/IP, RIP-1, RIP-2, DHCP, PPPoE, Dynamic DNS, UPnP, and SMB
Power adapter	North America: 120V, 60 Hz, inputUK, Australia: 240V, 50 Hz, inputEurope: 230V, 50 Hz, inputAll regions (output): 12V DC @ 5A, output
Dimensions	205 mm x 255 mm x 77 mm (8.07 in. x 10.04 in. x 3.03 in.)
Weight 654g (1.44 lbs)
Operating temperature	0°(82°40'004°F)
Operating humidity	90% maximum relative humidity, noncondensing
Electromagnetic emissions	FCC Part 15 Class BEN 55 022 (CISPR 22), Class B C-Tick N10947
LAN	10BASE-T or 100BASE-Tx, RJ-45
WAN 10BASE-T or 100BASE-Tx, RJ-45
Wireless Maximum wireless signal rate complies with the IEEE 802.11 standard. See the footnote for the previous table.
Radio data rates Auto Rate Sensing
Data encoding standards IEEE	802.11n version 2.0IEEE 802.11n, IEEE 802.11g, IEEE 802.11b 2.4 GHzIEEE 802.11n, IEEE 802.11a 5.0 GHz
Maximum computers per wireless network	Limited by the amount of wireless network traffic generated by each node (typically 50–70 nodes).
Operating frequency range 2.4	GHz2.412–2.462 GHz (US)2.412–2.472 GHz (Japan)2.412–2.472 GHz (Europe ETSI)5 GHz5.18–5.24 + 5.745–5.825 GHz (US)5.18–5.24 GHz (Europe ETSI)
802.11 security WPA-PSK, WPA	A2-PSK, and WPA/WPA2 Enterprise.

Index

A

AC power adapter input 13

access

remote 111

viewing logs 91

accessing remote computer 100

adding

custom services 105

guest network 35

priority rules 57

wireless devices 26

address reservation 55

ADSL microfilters 18

ADSL port 13

ADSL setup 49

advertisement period 113

alerts, emailing 83

applications, QoS for online gaming 56

approved USB devices 66

attached devices 29

authentication, required by mail server 84

automatic firmware checking 87

automatic Internet connection 39

B

back panel 13

backing up configuration 92

blocking

inbound traffic 100

keywords and sites 79

services 80

box contents 11

C

cables, checking 117

changes not saved, router 123

configuration file 92

connecting wirelessly 17

country setting 39

crossover cable 119

CTS/RTS Threshold 97

custom service (port forwarding) 105

D

dashboard 25

data packets, fragmented 51

date and time 123

daylight savings time 123

default DMZ server 50

default factory settings 12, 93, 128

default gateway 90

denial of service (DoS) protection 78

devices, attached 29

DHCP server 54, 90

DHCP setting 88

DMZ server 50, 51

DNS addresses

primary 29

troubleshooting 121

DNS servers 101

Domain Name Server (DNS) addresses 29, 88

DSL port LED 15

Dynamic DNS 108

E

electromagnetic emissions 129

email notices 83

erasing configuration 93

Ethernet cables, checking 117

Ethernet LED, troubleshooting 118, 119

F

factory default settings

list of 128

resetting 12

restoring 93

file sharing 61

firewall settings 78

firmware version 88

firmware, upgrading 24, 87

fragmentation length 97

fragmented data packets 51

front panel 14, 16

G

games, online, QoS for 56

gateway IP address 29

genie, NETGEAR

advanced settings 38

basic settings 27

setup, initial 23

using, after installation 24

guest networks 35, 90

H

host name 28

host, trusted 79

|

inbound traffic, allowing or blocking 100

Internet connection

IPv6 113

setting up 28

troubleshooting 120

Internet port 39, 88

Internet port LEDs 15, 118

Internet Relay Chat (IRC) 102

Internet service provider (ISP)

account information 22

DSL synchronization 15

Internet Basic Settings screen fields 28

Internet services, blocking access 80

interval, poll 89

IP addresses

current 88

DHCP 22

dynamic 108

reserved 55

IP subnet mask 88

IPv6 Internet connection 113

K

keywords 79

L

LAN port

QoS for 57

settings 88

LAN ports 13

LAN setup 53

language setting 39

large files, sharing 62

lease, DHCP 90

LEDs 14, 16

troubleshooting 118

verifying cabling 20

Live Parental Controls 30

local servers, port forwarding to 104

logging in 22, 24

logs

emailing 83

viewing 91

M

MAC addresses

current 88

QoS for 58

mail server, outgoing 84

maintenance settings 86

managing router remotely 111

media server, setting router as 66

menus, described 25

metric value 110

microfilters 18

mixed mode security options 36

MTU size 51

multicasting 54

N

NAT (Network Address Translation) 50, 101

NETGEAR genie

advanced settings 38

basic settings, initial 27

setup, initial 23

using, after installation 24

Network Time Protocol (NTP) 123

networks

correct settings, checking 117

guest 35, 90

restarting 117

O

On/Off button 13

On/Off LED 15

one-line ADSL microfilter 18

outgoing mail server 84

P

packets, fragmented 51

Parental Controls 30

passphrases, changing 34

passwords

recovering 94

restoring 124

photos, sharing 62

poll interval 89

port filtering 80

port forwarding 100, 103, 104

port numbers 80

port status 89

port triggering 100, 102, 104, 107

ports, back panel 13

positioning the router 17

power adapter, AC 13

Power LED, troubleshooting 118

PPPoE (PPP over Ethernet) 121

Preamble mode 97

preset security

about 31

passphrase 34

primary DNS addresses 29

printing files and photos 62

prioritizing traffic 56

Push 'N' Connect 26

Q

QoS (Quality of Service) 56

R

range of wireless connections 17

ReadySHARE access 61, 63

recovering admin password 94

releasing connection status 90

remote management 111

renewing connection status 90

reserved IP adresses 55

restarting network 117

restoring

default factory settings 124

router interface, described 25

router status, viewing 87

S

scheduling keyword and service blocking 83

secondary DNS 29

security 31, 78

security options 36

security PIN 40

sending logs by email 83

services, blocking 80

Setup Wizard 39

sharing files 61

sites, blocking 79

SMTP server 84

specifications, technical 127

splitters 18

SSID, described 33

static routes 109

status, router, viewing 87

subnet mask 88

system up time 89

T

technical specifications 127

Temporal Key Integrity Protocol (TKIP) 36

time of day 123

time to live, advertisement 113

time-out, port triggering 108

traffic metering 114

troubleshooting 116

date or time incorrect 123

log in access 119

router changes not saved 123

trusted host 79

two-line ADSL microfilter 19

U

Universal Plug and Play (UPnP) 112

up time, system 89

upgrading firmware 24, 87

USB

advanced configuration 64

basic storage settings 63

drive requirements 61

file sharing 61

ReadySHARE access 61, 63

remote computer connection 67

specifying approved devices 66

USB devices, approved 66

USB port 17

USB port LED 16

user-defined services 82

W

WAN IP address, troubleshooting 120

WAN setup 49

Wi-Fi Protected Setup (WPS)

keep existing settings 99

wireless channel 33

wireless connections, troubleshooting 123

wireless connectivity 17

wireless devices, adding to the network 25

Wireless LEDs

front panel 15, 17

troubleshooting 119, 120

wireless network name (SSID), broadcasting 33

wireless network settings 33

wireless security options 36

wireless settings 31, 91

checking for correct 117

SSID broadcast 33

WMM (Wi-Fi Multimedia) 56

WPA encryption 36

WPA2 encryption 36

WPA2-PSK encryption 36

WPA-PSK encryption 36

WPA-PSK/WPA2-PSK mixed mode 36

WPS (WiFi Protected Setup) 26, 40

WPS button 26

WPS LED 17

WPS-PSK encryption 36

WPS-PSK+ WPA2-PSK encryption 36

wrong date or time 123