Nighthawk MK93S - Wi-Fi NETGEAR - Free user manual and instructions

Product Type	Mesh WiFi System (Router + Satellite)
Model	Nighthawk MK93S (3-Pack)
Wi-Fi Standard	IEEE 802.11ax (Wi-Fi 6)
Frequency Bands	Tri-Band (2.4 GHz, 5 GHz, 5 GHz)
Max Speed	Up to 6 Gbps (600 + 1200 + 4800 Mbps)
Number of Ethernet Ports (Router)	1 WAN + 4 LAN (Gigabit)
Number of Ethernet Ports (Satellite)	2 LAN (Gigabit)
USB Ports	1 USB 3.0 (Router)
Dimensions (Router)	7.2 x 4.5 x 2.0 in (18.3 x 11.4 x 5.1 cm)
Dimensions (Satellite)	7.2 x 4.5 x 2.0 in (18.3 x 11.4 x 5.1 cm)
Weight (Router)	1.2 lbs (0.54 kg)
Weight (Satellite)	1.1 lbs (0.50 kg)
Power Supply	12V DC, 2.5A Adapter
Key Functions	Mesh WiFi, Seamless Roaming, MU-MIMO, OFDMA, Beamforming, WPA3 Security
Maintenance	Clean with dry cloth; keep firmware updated via Nighthawk app
Safety	Operate in well-ventilated area; avoid liquid exposure
Spare Parts & Repairability	Contact Netgear support for replacement adapters; limited user serviceable parts
General Information	Supports up to 6000 sq ft coverage; compatible with all internet service providers

Frequently Asked Questions - Nighthawk MK93S NETGEAR

How do I set up the Nighthawk MK93S mesh system?

Download the Nighthawk app on your smartphone, create an account, and follow the on-screen instructions to add the router and satellites.

Can I use the MK93S with my existing router?

Yes, you can use the MK93S as a mesh system by connecting the main router to your modem and placing satellites around your home. Alternatively, it can replace your existing router entirely.

What is the coverage area of the MK93S?

The three-pack covers up to 6,000 square feet with strong WiFi signal throughout.

Does the MK93S support WiFi 6?

Yes, it supports WiFi 6 (802.11ax) for faster speeds, lower latency, and improved capacity compared to WiFi 5.

How do I update the firmware on my MK93S?

Open the Nighthawk app or log into the web interface. Go to Settings > Firmware Update and check for updates. Install when available.

Can I add more satellites later?

Yes, you can purchase additional Nighthawk satellites (e.g., MK series) and add them via the app to extend coverage.

What security features does the MK93S have?

It supports WPA3 encryption, guest network, VPN passthrough, and includes NETGEAR Armor for advanced cybersecurity (subscription may be required).

How do I reset my MK93S to factory defaults?

Locate the Reset button on the router or satellite. Use a paperclip to press and hold for 7-10 seconds until the LED flashes amber. The device will reboot.

Does the MK93S have Ethernet ports?

Yes, the main router has 1 WAN and 4 LAN Gigabit ports. Each satellite has 2 LAN Gigabit ports for wired connections.

Can I use a wired backhaul with the MK93S?

Yes, you can connect a satellite to the router via Ethernet for a wired backhaul, which provides the best performance. The system automatically detects and uses it.

USER MANUAL Nighthawk MK93S NETGEAR

350 E. Plumeria DriveSeptember 20:

San Jose, CA 95134, USA202-12635

Support and Community

Visit netgear.com/support to get your questions answered and access the latest downloads.

You can also check out our NETGEAR Community for helpful advice at community.netgear.com.

Regulatory and Legal

(If this product is sold in Canada, you can access this document in Canadian https://www.netgear.com/support/download/.)

For regulatory compliance information including the EU Declaration of Conformity, https://www.netgear.com/about/regulatory/.

See the regulatory compliance document before connecting the power supply.

For NETGEAR's Privacy Policy, visit https://www.netgear.com/about/privacy-policy.

By using this device, you are agreeing to NETGEAR's Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.

Do not use this device outdoors.

Applicable to 6 GHz devices only: Only use the device indoors. The operation devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while ying above 10,000. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control communications with unmanned aircraft systems.

Trademarks

Trademarks© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes on

Contents

Chapter 1 Overview

What is WiFi 6E?......9

Router hardware and LED overview....9

Router hardware features....9

Router LED behavior....10

Satellite hardware and LED overview....11

Satellite hardware features....11

Satellite LED behavior....12

Router and satellite labels....12

Connect your router....13

Place your satellite....14

Sync your satellite with your router....14

Chapter 2 Connect to the Network and Access the Router

Connect to the network....17

Connect to the network using a wired connection....17

Find and connect to the WiFi network....17

WiFi connection using WPS....17

Types of logins....18

Use a web browser to access the router....18

Automatic Internet Setup....18

Log in to the router....20

Install and manage your mesh system with the Nighthawk app...21

Change the language....21

Chapter 3 Specify Your Internet Settings

Use the Internet Setup Wizard....24

Manually set up the Internet connection....24

Specify an Internet connection without a login......25

Specify an Internet connection that uses a login......26

Specify IPv6 Internet connections....28

Requirements for entering IPv6 addresses....29

Use auto detect for an IPv6 Internet connection....29

Set up an IPv6 6to4 tunnel Internet connection....30

Set up an IPv6 pass-through Internet connection....32

Set up an IPv6 xed Internet connection....32

Nighthawk Tri-band Mesh WiFi 6E

Set up an IPv6 DHCP Internet connection....34

Set up an IPv6 PPPoE Internet connection....35

Use auto cong for an IPv6 Internet connection....37

Set up an IPv6 6rd Internet connection....39

Manage the MTU size....41

MTU concepts....41

Change the MTU size....42

Chapter 4 Control Access to the Internet

Activate and manage NETGEAR Armor using the Nighthawk

app....44

Network access control list....44

Enable the network access control list, set the access rule, and

allow or block connected devices....45

Manage allowed devices currently not on the network......47

Manage blocked devices currently not on the network......49

Use keywords to block Internet sites....51

Block services from the Internet....52

Delete keywords from the blocked list....53

Prevent blocking on a trusted computer....54

Schedule when to block Internet sites and services....55

Set up security event email notifications....55

Chapter 5 Optimize Performance

Use Dynamic QoS to optimize Internet trafc management......59

Enable Dynamic QoS....59

Enable or disable the automatic QoS database update......60

Manually update the dynamic QoS database....61

Improve network connections with Universal Plug and Play......61

Chapter 6 Manage WiFi Settings

Change the WiFi password or the WiFi security....65

Add a WiFi network....66

Set up a guest WiFi network....68

Use the WPS wizard for WiFi connections....70

Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio.71

Hide your mesh network's SSID....72

Generate a new backhaul password....72

Enable or disable implicit beamforming....73

Enable or disable AX WiFi....74

Change the region of operation....75

Change the CTS/RTS threshold or preamble mode for a radio....76

Chapter 7 Manage Network Settings

View or change the WAN settings....79

Set up a default DMZ server....80

Change the router's device name....81

Change the LAN IP address settings....82

Specify the IP addresses that the router assigns....83

Disable the DHCP server feature in the router....85

Manage reserved LAN IP addresses....85

Reserve an IP address....86

Edit a reserved IP address....87

Delete a reserved IP address entry....87

Set the time zone manually....88

Change the NTP server....88

Set up the router as a WiFi access point....89

Set up a bridge for a port group or VLAN tag group....90

Set up a bridge for a port group....91

Set up a bridge for a VLAN tag group....92

Set up an IPTV port....93

Manage custom static routes....94

Set up a static route....95

Edit a static route....96

Delete a static route....97

Manage Ethernet port aggregation to a LAN device....97

Set up LAN port aggregation to a LAN device....98

View or change the router LAN port aggregation mode......99

Chapter 8 Manage your Router and Satellite

Update the router and satellite rmware....102

Check for new rmware and update the router and satellite.102

Manually update the rmware....103

Manually update satellite rmware....103

Manually update router rmware....104

Manage the rmware update settings....105

Change the admin password....106

Enable admin password reset....107

Reset the admin password....108

Always use HTTPS to access the router.....109

View information about the router, the Internet port, and WiFi settings....110

Display the statistics of the Internet port....111

Check the Internet connection status....112

View and manage logs of router activity....113

View devices currently on the mesh network....114

Nighthawk Tri-band Mesh WiFi 6E

View the satellite status in the satellite web interface....115

Monitor Internet trafc....116

Set up and manage Dynamic DNS....118

Set up a new Dynamic DNS account....118

Use a DNS account that you already created....119

Change the Dynamic DNS settings....120

Manage the router conguration le....120

Back up the settings....121

Erase the settings on the router....121

Return the router or satellite to its factory default settings......123

Use the Reset button....123

Erase the settings on the router....124

Connect to your router with Anywhere Access....124

Chapter 9 Use OpenVPN to Access Your Network

About VPN connections....127

Enable OpenVPN service in the router.....128

Install OpenVPN software on a VPN client....129

Install OpenVPN software on a Windows-based computer....130

Install OpenVPN software on a Mac computer....131

Install OpenVPN software on an iOS device....132

Install OpenVPN software on an Android device....133

LAN IP addressing in VPN networks....134

Use VPN to access your Internet service at home....135

Allow VPN client Internet access in the router......135

Block VPN client Internet access in the router......136

Chapter 10 Manage Port Forwarding and Port Triggering

Manage port forwarding to a local server....139

Set up port forwarding to a local server....139

Add a custom port forwarding service....140

Change a port forwarding service....141

Delete a port forwarding entry....142

Application example: Make a local web server public......142

How the router implements the port forwarding rule......143

Port triggering....144

Add a port triggering service....144

Enable port triggering....145

Application example: Port triggering for Internet Relay Chat.146

Chapter 11 Troubleshooting

Quick tips....149

Sequence to restart your network....149

Nighthawk Tri-band Mesh WiFi 6E

WiFi settings....149

Network settings....149

The router and satellite do not sync....149

Cannot log in to the router....150

Cannot access the Internet....150

Troubleshoot Internet browsing....152

Troubleshoot PPPoE....152

Troubleshoot WiFi connectivity....153

Troubleshoot your network using the ping utility....154

Test the LAN path from a Windows-based computer to your router....154

Test the path from a Windows-based computer to a remote device....155

Chapter 12 Supplemental Information

Factory settings....158

Factory settings for router model MR90....158

Factory settings for satellite model MS90....159

Technical specifications....161

Technical specifications for router model MR90....161

Technical specifications for satellite model MS90....162

1

Overview

The Tri-band Mesh WiFi 6E Router (model MR90) connects to your modem or The Tri-band Mesh WiFi 6E Satellite (model MS90) connects to the Tri-band Me 6E Router (model MR90) and extends the WiFi signal throughout your home.

This manual describes how to manage your Tri-band Mesh WiFi 6E router and from your router web interface.

NOTE: You can manage your satellite from the router web interface.

This chapter contains the following sections:

• What is WiFi 6E?
- Router hardware and LED overview
• Satellite hardware and LED overview
- Router and satellite labels
- Connect your router
- Place your satellite
- Sync your satellite with your router

For more information about the topics covered in this manual, visit the support at https://www.netgear.com/support/.

NOTE: This manual refers to the Tri-band Mesh WiFi 6E Router (model MF as the router, and Tri-band Mesh WiFi 6E Satellite (model MS90) as the satellite.

What is WiFi 6E?

WiFi 6E builds on the existing WiFi 6 (802.11ax) standard. WiFi 6E offers all a cutting-edge features of WiFi 6 and allows access to a new 6 GHz wireless base combination of WiFi 6 technology and access to a brand new, empty WiFi band to WiFi 6E devices makes WiFi 6E one of the most important developments in technology.

• More high-bandwidth channels: WiFi 6E expands on the spectrum and band improvements of WiFi 6 with the addition of a 6 GHz band. This wireless much wider than the 2.4 GHz and 5 GHz bands and can support up to f 80 MHz channels or seven 160 MHz channels. This means more capacity for high-bandwidth activities like 4k and 8k gaming, virtual reality applications, and video conferencing.
• Less interference and network congestion: The 6 GHz wireless band is new certified and is exclusive to devices that support WiFi 6E. This means that on the WiFi network does not need to slow down to accommodate legacy device Fewer devices, more spectrum, and more bandwidth means less interference a network congestion. WiFi 6E devices can support the most bandwidth-heavy, low-latency applications without competing for bandwidth.
• Improved security: Wi-Fi Protected Access (WPA) 3 is mandatory for all Wi-Fi Certified devices operating in 6 GHz. WPA3 is the latest Wi-Fi Alliance securit certification. WPA3 provides the latest in security and authentication protocols. A a result, 6 GHz WiFi trafc is more secure than ever and 6 GHz networks difficult to hack.

To make use of the 6 GHz band, the router and its WiFi clients must suppo

NOTE: The router can let devices that support WiFi 6E connect to its 6 radio. Devices that do not support WiFi 6E cannot connect to the 6 GHz but can connect to the 2.4 GHz radio or 5 GHz radio.

Router hardware and LED overview

The following sections are an overview of the router hardware features and LED

Router hardware features

The following gure shows the router hardware features.

Figure 1. Router front and back views

1. Router LED
2. Sync button
3. Reset button
4. Ethernet ports
5. Internet port
6. Power connector

Router LED behavior

The following table describes the LED behavior for the LED that is on the fro router.

Table 1. Router LED behavior

	DescriptionLED color
Blinking white	The router LED blinks white for one of the following reasons:You connected the power adapter to the router. Now the router is booting and attempting to sync with the satellite.You pressed the Sync button and the router is attempting to sync with the satellitYou pressed the Reset button and the router is resetting to its factory default sett
Solid blue	The router nished booting, is connected to the Internet, and is working normally. The LED stays lit solid blue when the satellite is working normally.
	The router is unable to connect to the Internet.Solid amber
	The router's rmware is corrupted.Blinking amber

Satellite hardware and LED overview

The following sections are an overview of the satellite hardware features and LE behavior.

Satellite hardware features

The following gures shows the satellite hardware features.

Figure 2. Satellite front and back views

1. Satellite LED
2. Sync button
3. Reset button
4. Ethernet ports
5. Power connector

Satellite LED behavior

The following table describes the LED behavior for the LED that is on the fro satellite.

Table 2. Satellite LED behavior

	DescriptionLED color
Blinking white	The satellite LED blinks white for one of the following reasons:You connected the power adapter to the satellite. Now the satellite is booting and attempting to sync with the router.You pressed the Sync button and the satellite is attempting to sync with the routeYou pressed the Reset button and the satellite is resetting to its factory default set
Solid blue	The satellite nished booting, is synced with the router, and is working normally. The stays lit solid blue when the satellite is working normally.
Solid amber	The satellite failed to sync with the router. Move your satellite closer to the router ( closer to your other satellite if you have more than one satellite).
	The satellite's rmware is corrupted.Blinking red

Router and satellite labels

The router label shows the login information, the router WiFi network name and password, the router's MAC address, and the router's serial number. The followir an example of what the router label might look like:

Figure 3. Router label

The satellite label also displays the WiFi network name and password, the satellite MAC address, and the satellite's serial number. The following is an example of satellite label might look like:

Figure 4. Satellite label

Connect your router

Power on your router and connect it to a modem.

Two wireless devices connected by cables, one with a switch and two with power plugs (no text or symbols visible)

Figure 5. Connect your router

To connect your router:

1. Unplug your modem's power, leaving the modem connected to the wall jack your Internet service.

If your modem uses a battery backup, remove the battery.

1. Plug in and turn on your modem.

If your modem uses a battery backup, put the battery back in.

1. Connect your modem to the Internet port of your router with the Ethernet came with your router.

2. Connect the power adapter to your router and plug the power adapter into

3. If the Router LED does not light, make sure that the power adapter is pro connected to your router and power outlet.

Place your satellite

Your satellite must be within range of your router's WiFi signal in order for it your router. Use your satellite's LED to help you determine where to place you

Figure 6. Place your satellite

If you own more than one satellite, your satellites can sync with each other or router. Place your satellites so that they are within range of each other or the However, at least one satellite must be within range of your router.

Sync your satellite with your router

The satellite that comes with your router is preset to automatically nd and sync router's WiFi signal.

To sync your satellite:

1. Place your satellite.

For more information, see Place your satellite on page 14.

1. Connect the satellite to a power source.

The satellite LED blinks white. The satellite automatically finds the router's WiFi and attempts to sync to the router.

The satellite LED then lights one of the following colors:

- Blue. The router and satellite successfully synced, and the connection between the router and satellite is good.

- Amber. The router and satellite failed to sync. Move the satellite closer to router and try again.

1. If the satellite LED is amber, do the following:

a. Unplug your satellite, move the satellite closer to the router, and plug it

b. Press the Sync button on the back of the router.

c. Within two minutes, press the Sync button on the back of the satellite.

The satellite attempts to sync to the router. The satellite LED lights blue as described in Step 2 of this procedure.

1. If you own more than one satellite, repeat these steps to sync your other

2

Connect to the Network and Acc the Router

You can connect to the router's WiFi networks or use a wired Ethernet connection chapter explains the ways you can connect and how to access the router and

The chapter contains the following sections:

• Connect to the network
• Types of logins
• Use a web browser to access the router
  • Install and manage your mesh system with the Nighthawk app
• Change the language

Connect to the network

You can connect to the router's network through a wired or WiFi connection. I up your computer to use a static IP address, change the settings so that it is Host Conguration Protocol (DHCP).

Connect to the network using a wired connection

You can connect your computer to the router using an Ethernet cable and join router's local area network (LAN).

To connect your computer to the router with an Ethernet cable:

1. Make sure that the router is receiving power (its Router LED is lit).

2. Connect an Ethernet cable to an Ethernet port on your computer.

3. Connect the other end of the Ethernet cable to the Ethernet port on the r

Your computer connects to the local area network (LAN).

Find and connect to the WiFi network

To nd and select the WiFi network:

1. Make sure that the router is receiving power (its Router LED is lit).

2. On your computer or WiFi device, nd and select the WiFi network.

The WiFi network name is on the router label.

1. Join the WiFi network and enter the WiFi password.

The password is on the router label.

Your device connects to the WiFi network.

WiFi connection using WPS

You can connect your WPS-enabled device to the router's WiFi network with Wi Protected Setup (WPS) or you can nd and select the WiFi network.

To use WPS to connect to the WiFi network:

1. Make sure that the router is receiving power (its Router LED is lit).

2. Check the WPS instructions for your WPS-enabled device.

3. Press the Sync button on the router.

4. Within two minutes, on your WPS-enabled device, press its WPS button or for its instructions for WPS connections.

Your WPS-enabled device connects to the WiFi network.

Types of logins

Separate types of logins serve different purposes. It is important that you under the differences so that you know which login to use when.

Several types of logins are associated with the router:

• ISP login. The login that your Internet service provider (ISP) gave you logs your Internet service. Your ISP gave you this login information in a letter or other way. If you cannot nd this login information, contact your ISP.
• WiFi network key, WiFi passphrase, or WiFi password. Your router is presented a unique WiFi network name (SSID) and password for WiFi access. This information is on the router label.
• NETGEAR account login. The free NETGEAR account that you need to register router and manage your subscriptions. If you do not own a NETGEAR account can create one.
• Router login. The router login password that you need to log in to the rd the admin user name when you use a web browser to access the router.

Use a web browser to access the route

When you connect to the network (either with WiFi or with an Ethernet cable), use a web browser to access the router to view or change its settings. When the router, the software automatically checks to see if your router can connect Internet service.

Automatic Internet Setup

You can set up your router automatically, or you can use a web browser to router and set up your router manually. Before you start the setup process, ge

information and make sure that the computers and devices in the network are the settings described here.

When your Internet service starts, your Internet service provider (ISP) typically give all the information needed to connect to the Internet. For DSL service, you might the following information to set up your router:

• The ISP congruration information for your DSL account
- ISP login name and password

- Fixed or static IP address setting (special deployment by ISP; this setting is

If you cannot locate this information, ask your ISP to provide it. When your In connection is working, you no longer need to launch the ISP login program or computer to access the Internet. When you start an Internet application, your ro automatically logs you in.

The NETGEAR installation assistant runs on any device with a web browser. Instead and basic setup takes about 15 minutes to complete.

To automatically set up your router:

1. Make sure that the router is powered on.

2. Make sure that your computer or mobile device is connected to the router Ethernet cable (wired) or over WiFi with the preset security settings listed on label.

NOTE: If you want to change the router's WiFi settings, use a wired connection to avoid being disconnected when the new WiFi settings take effect.

1. Launch a web browser.

The page that displays depends on whether you accessed the router before:

- The rst time you set up the Internet connection for your router, the brow to http://www.routerlogin.net and the Conguring the Internet Connection page displays.

- If you already set up the Internet connection, enter http://www.routerlogin.in the address eld for your browser to start the installation process.

1. Follow the onscreen instructions.

The router connects to the Internet.

1. If the browser does not display the NETGEAR installation assistant, do the fo

2. Make sure that the computer is connected to an Ethernet port on the rc satellite or to the mesh WiFi network.
   • Make sure that the router is receiving power and that its Router LED is

3. Close and reopen the browser or clear the browser cache.
4. Browse to http://www.routerlogin.net.

5. If the computer is set to a static or xed IP address (this setting is unchanged it to obtain an IP address automatically from the router.

6. If the router does not connect to the Internet, do the following:

a. Review your settings. Make sure that you selected the correct options and everything correctly.
b. Contact your ISP to verify that you are using the correct configuration info
c. Read Troubleshooting on page 148.

If problems persist, register your NETGEAR product and contact NETGEAR Technical Support.

Log in to the router

When you rst connect to your router and launch a web browser, the browser automatically displays the router web interface. If you want to view or change for the router later, you can use a browser to log in to the router web inte

To log in to the router:

1. Launch a web browser from a computer or mobile device that is connected router network.

2. Enter http://www.routerlogin.net.

NOTE: You can also enter http://www.routerlogin.com or http://192.168.1.1. The procedures in this manual use http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

Install and manage your mesh system w the Nighthawk app

With the Nighthawk app, you can easily install and manage your mesh system. automatically syncs any satellites that are nearby, updates you mesh system to t rmware, allows you to personalize your WiFi network, and even helps register y mesh system with NETGEAR.

The Nighthawk app is available for iOS and Android mobile devices.

NOTE: If you own any satellites, make sure they are powered on before installing your mesh system with the Nighthawk app.

To install your mesh system using the Nighthawk app:

1. To download the app, visit Nighthawk-app.com.

2. On your mobile device, tap Settings > Wi-Fi and nd and connect to your WiFi network.

Your router's WiFi network name (SSID) and network key (WiFi password) are router label.

If the label includes a QR code, you can scan the QR code to join the i network.

1. Launch the Nighthawk app on your mobile device.

2. Follow the prompts on the app to install your mesh system and connect to Internet.

Change the language

By default, the language that displays when you log in to the router web inte to Auto.

To change the language:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

Nighthawk Tri-band Mesh WiFi 6E

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. In the upper right corner, select a language from the menu.

2. When prompted, click the OK button to conrm this change.

The page refreshes with the language that you selected.

3

Specify Your Internet Settings

Usually, the quickest way to set up the router to use your Internet connection your router to detect the Internet connection automatically when you rst access router web interface. You can also customize and manually specify your Internet

This chapter contains the following sections:

• Use the Internet Setup Wizard
• Manually set up the Internet connection
- Specify IPv6 Internet connections
- Manage the MTU size

Use the Internet Setup Wizard

You can use the Setup Wizard to detect your Internet settings and automatically your router. The Setup Wizard is not the same as the pages that display the you connect to your router to set it up.

To use the Setup Wizard:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup Wizard.

The Setup Wizard page displays.

1. Select the Yes radio button.

If you select the No radio button, you are taken to the Internet Setup pag Manually set up the Internet connection on page 24).

1. Click the Next button.

The Setup Wizard searches your Internet connection for servers and protocols determine your Internet conguration.

Manually set up the Internet connection

You can view or change the router's Internet connection settings.

Specify an Internet connection without a login

To specify the Internet connection settings:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Internet.

The Internet Setup page displays.

1. In the WAN Preference section, select one of the following options:

2. Internet Port (2.5 Gbps). Select this option if you connected a modem t Internet port on your router.

3. WAN aggregation (2.5 Gbps + 1 Gbps). Select this option if you use E port aggregation and connected a modem to the Internet port and Ethernet 1 on your router.

4. In the Does your Internet connection require a login? section, leave the No button selected.

5. If your Internet connection requires an account name or host name, click the button in the Account Name section and enter the account name.
6. If your Internet connection requires a domain name, type it in the Domain Required) eld.

For the other sections on this page, the default settings usually work, but y change them.

1. Select an Internet IP Address radio button:

2. Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address ISP automatically assigns these addresses.

3. Use Static IP Address. Enter the IP address, IP subnet mask, and the ga address that your ISP assigned. The gateway is the ISP router to which you connects.

4. Select a Domain Name Server (DNS) Address radio button:

5. Get Automatically from ISP. Your ISP uses DHCP to assign your DNS se Your ISP automatically assigns this address.

6. Use These DNS Servers. If you know that your ISP requires specific server this option. Enter the IP address of your ISP's primary DNS server. If a s DNS server address is available, enter it also.

7. Select a Router MAC Address radio button:

8. Use Default Address. Use the default MAC address.

9. Use Computer MAC Address. The router captures and uses the MAC adc of the computer that you are now using. You must use the one compute ISP allows.

10. Use This MAC Address. Enter the MAC address that you want to use.

11. Click the Apply button.

Your settings are saved.

1. Click the Test button to test your Internet connection.

If the NETGEAR website does not display within one minute, see Troubleshoot on page 148.

Specify an Internet connection that uses a login

To view or change the basic Internet setup:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Internet.

The Internet Setup page displays.

1. In the WAN Preference section, select one of the following options:

2. Internet Port (2.5 Gbps). Select this option if you connected a modem t Internet port on your router.

3. WAN aggregation (2.5 Gbps + 1 Gbps). Select this option if you use E port aggregation and connected a modem to the Internet port and Ethernet 1 on your router.

4. In the Does your Internet connection require a login? section, select the Yes button.

5. From the Internet Service Provider menu, select the encapsulation method: PPPoE, L2TP, or PPTP.
6. In the Login eld, enter the login name that your ISP gave you.

This login name is often an email address.

1. In the Password eld, type the password that you use to log in to your lr service.
2. If your ISP requires a service name, type it in the Service Name (if Requi
3. From the Connection Mode menu, select Always On, Dial on Demand, or Manually Connect.
4. To change the number of minutes until the Internet login times out, in the Timeout (In minutes) eld, type the number of minutes.

This is how long the router keeps the Internet connection active when no c network is using the Internet connection. A value of 0 (zero) means never lo

1. Select an Internet IP Address radio button:

2. Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address ISP automatically assigns these addresses.

3. Use Static IP Address. Enter the IP address, IP subnet mask, and the ga address that your ISP assigned. The gateway is the ISP router to which you connects.

4. Select a Domain Name Server (DNS) Address radio button:

5. Get Automatically from ISP. Your ISP uses DHCP to assign your DNS se Your ISP automatically assigns this address.

6. Use These DNS Servers. If you know that your ISP requires specific server this option. Enter the IP address of your ISP's primary DNS server. If a s DNS server address is available, enter it also.

7. Select a Router MAC Address radio button:

8. Use Default Address. Use the default MAC address.

9. Use Computer MAC Address. The router captures and uses the MAC add of the computer that you are now using. You must use the one compute ISP allows.

10. Use This MAC Address. Enter the MAC address that you want to use.

11. Click the Apply button.

Your settings are saved.

1. Click the Test button to test your Internet connection.

If the NETGEAR website does not display within one minute, see Troubleshoot on page 148.

Specify IPv6 Internet connections

You can set up an IPv6 Internet connection if the router does not detect it a

To set up an IPv6 Internet connection:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select the IPv6 connection type:

2. If you are not sure, select Auto Detect so that the router detects the ll that is in use.

3. If your Internet connection does not use PPPoe or DHCP, or is not xed, IPv6, select Auto Cong.

Your Internet service provider (ISP) can provide this information.

1. Click the Apply button.

Your settings are saved.

Requirements for entering IPv6 addresses

IPv6 addresses are denoted by eight groups of hexadecimal quartets that are set by colons. You can reduce any four-digit group of zeros within an IPv6 address single zero or omit it. The following errors invalidate an IPv6 address:

• More than eight groups of hexadecimal quartets
- More than four hexadecimal characters in a quartet
• More than two colons in a row

Use auto detect for an IPv6 Internet connection

To set up an IPv6 Internet connection through autodetection:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select Auto Detect.

The page adjusts.

The router automatically detects the information in the following elds:

• Connection Type. This eld indicates the connection type that is detected.
• Router's IPv6 Address on WAN. This field shows the IPv6 address that is for the router's WAN (or Internet) interface. The number after the slash (/) length of the prex, which is also indicated by the underline (_) under the address. If no address is acquired, the eld displays Not Available.

• Router's IPv6 Address on LAN. This field shows the IPv6 address that is for the router's LAN interface. The number after the slash (/) is the length prex, which is also indicated by the underline (_) under the IPv6 address. address is acquired, the eld displays Not Available.

• Select an IP Address Assignment radio button:

• Use DHCP Server. This method passes more information to LAN devices by some IPv6 systems might not support the DHCv6 client function.
  • Auto Cong. This is the default setting.

This setting species how the router assigns IPv6 addresses to the devices on home network (the LAN).

1. (Optional) Select the Use This Interface ID check box and specify the interface to be used for the IPv6 address of the router's LAN interface.

If you do not specify an ID here, the router generates one automatically from address.

1. Click the Apply button.

Your settings are saved.

Set up an IPv6 6to4 tunnel Internet connection

The remote relay router is the router to which your router creates a 6to4 tune sure that the IPv4 Internet connection is working before you apply the 6to4 tune settings for the IPv6 connection.

To set up an IPv6 Internet connection by using a 6to4 tunnel:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select 6to4 Tunnel.

The page adjusts.

The router automatically detects the information in the Router's IPv6 Address LAN eld. This eld shows the IPv6 address that is acquired for the router's interface. The number after the slash (/) is the length of the prex, which is indicated by the underline (_) under the IPv6 address. If no address is acquired displays Not Available.

1. Select a Remote 6to4 Relay Router radio button:

2. Auto. Your router uses any remote relay router that is available on the I This is the default setting.

3. Static IP Address. Enter the static IPv4 address of the remote relay route IPv6 ISP usually provides this address.

4. Select an IPv6 Domain Name Server (DNS) Address radio button:

5. Get Automatically from ISP. Your ISP uses DHCP to assign your DNS se Your ISP automatically assigns this address.

6. Use These DNS Servers. If you know that your ISP requires specific server this option. Enter the IP address of your ISP's primary DNS server. If a s DNS server address is available, enter it also.

7. Select an IP Address Assignment radio button:

8. Use DHCP Server. This method passes more information to LAN devices by some IPv6 systems might not support the DHCPv6 client function.
   • Auto Cong. This is the default setting.

This setting species how the router assigns IPv6 addresses to the devices on home network (the LAN).

1. (Optional) Select the Use This Interface ID check box and specify the interface to be used for the IPv6 address of the router's LAN interface.

If you do not specify an ID here, the router generates one automatically from address.

1. Click the Apply button.

Your settings are saved.

Set up an IPv6 pass-through Internet connection

To set up a pass-through IPv6 Internet connection:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select Pass Through.

The page adjusts, but no additional elds display.

1. Click the Apply button.

Your settings are saved.

Set up an IPv6 xed Internet connection

To set up a xed IPv6 Internet connection:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select Fixed.

The page adjusts.

1. Congure the xed IPv6 addresses for the WAN connection:

2. IPv6 Address/Prex Length. The IPv6 address and prex length of the route WAN interface.

3. Default IPv6 Gateway. The IPv6 address of the default IPv6 gateway for router's WAN interface.
4. Primary DNS Server. The primary DNS server that resolves IPv6 domain records for the router.
5. Secondary DNS Server. The secondary DNS server that resolves IPv6 domain name records for the router.

NOTE: If you do not specify the DNS servers, the router uses the DNS servers that are congured for the IPv4 Internet connection on the Internet Setup page. (See Manually set up the Internet connection on page 24.)

1. Select an IP Address Assignment radio button:

2. Use DHCP Server. This method passes more information to LAN devices by some IPv6 systems might not support the DHCPv6 client function.
   • Auto Cong. This is the default setting.

This setting species how the router assigns IPv6 addresses to the devices on home network (the LAN).

1. In the IPv6 Address/Prex Length elds, specify the static IPv6 address and p length of the router's LAN interface.

If you do not specify an ID here, the router generates one automatically from address.

1. Click the Apply button.

Your settings are saved.

Set up an IPv6 DHCP Internet connection

To set up an IPv6 Internet connection with a DHCP server:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select DHCP.

The page adjusts.

The router automatically detects the information in the following elds:

• Router's IPv6 Address on WAN. This field shows the IPv6 address that is for the router's WAN (or Internet) interface. The number after the slash (/) length of the prex, which is also indicated by the underline (_) under the address. If no address is acquired, the eld displays Not Available.

• Router's IPv6 Address on LAN. This field shows the IPv6 address that is for the router's LAN interface. The number after the slash (/) is the length prex, which is also indicated by the underline (_) under the IPv6 address. address is acquired, the eld displays Not Available.

• (Optional) In the User Class (If Required) eld, enter a host name.

Most people can leave this eld blank, but if your ISP gave you a specific I enter it here.

1. (Optional) In the Domain Name (If Required) eld, enter a domain name.

You can type the domain name of your IPv6 ISP. Do not enter the domain the IPv4 ISP here. For example, if your ISP's mail server is mail.xxx.yyy.zzz, t xxx.yyy.zzz as the domain name. If your ISP provided a domain name, type

Nighthawk Tri-band Mesh WiFi 6E

field. For example, Earthlink Cable might require a host name of home, and sometimes supplies a domain name.

1. Select an IPv6 Domain Name Server (DNS) Address radio button:

2. Get Automatically from ISP. Your ISP uses DHCP to assign your DNS se Your ISP automatically assigns this address.

3. Use These DNS Servers. If you know that your ISP requires specific server this option. Enter the IP address of your ISP's primary DNS server. If a s DNS server address is available, enter it also.

4. Select an IP Address Assignment radio button:

5. Use DHCP Server. This method passes more information to LAN devices based on some IPv6 systems might not support the DHCv6 client function.
   • Auto Cong. This is the default setting.

This setting species how the router assigns IPv6 addresses to the devices on home network (the LAN).

1. (Optional) Select the Use This Interface ID check box and specify the interface to be used for the IPv6 address of the router's LAN interface.

If you do not specify an ID here, the router generates one automatically from address.

1. Click the Apply button.

Your settings are saved.

Set up an IPv6 PPPoE Internet connection

To set up a PPPoE IPv6 Internet connection:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.
   A login window opens.
3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select PPPoE.

The page adjusts.

The router automatically detects the information in the following elds:

- Router's IPv6 Address on WAN. This field shows the IPv6 address that is for the router's WAN (or Internet) interface. The number after the slash (/) length of the prex, which is also indicated by the underline (_) under the address. If no address is acquired, the eld displays Not Available.

- Router's IPv6 Address on LAN. This field shows the IPv6 address that is for the router's LAN interface. The number after the slash (/) is the length prex, which is also indicated by the underline (_) under the IPv6 address. address is acquired, the eld displays Not Available.

1. In the Login eld, enter the login information for the ISP connection.

This is usually the name that you use in your email address. For example, mail account is [e-mail], you would type JerAB in this eld. Some ISPs Mindspring, Earthlink, and T-DSL) require that you use your full email address you log in. If your ISP requires your full email address, type it in this eld.

1. In the Password eld, enter the password for the ISP connection.

2. In the Service Name eld, enter a service name.

If your ISP did not provide a service name, leave this eld blank.

NOTE: The default setting of the Connection Mode menu is Always On to provide a steady IPv6 connection. The router never terminates the connection. If the connection is terminated, for example, when the mode is turned off, the router attempts to reestablish the connection immediate after the PPPoE connection becomes available again.

1. Select an IPv6 Domain Name Server (DNS) Address radio button:

- Get Automatically from ISP. Your ISP uses DHCP to assign your DNS se Your ISP automatically assigns this address.

- Use These DNS Servers. If you know that your ISP requires specific server this option. Enter the IP address of your ISP's primary DNS server. If a s DNS server address is available, enter it also.

1. Select an IP Address Assignment radio button:

2. Use DHCP Server. This method passes more information to LAN devices by some IPv6 systems might not support the DHCPv6 client function.
   • Auto Cong. This is the default setting.

This setting species how the router assigns IPv6 addresses to the devices on home network (the LAN).

1. (Optional) Select the Enable RIPng check box.

This enables RIP Next Generation on IPv6 PPoE Internet connections. RIPng is extension of RIP that supports IPv6.

1. (Optional) Select the Use This Interface ID check box and specify the interface to be used for the IPv6 address of the router's LAN interface.

If you do not specify an ID here, the router generates one automatically from address.

1. Click the Apply button.

Your settings are saved.

Use auto cong for an IPv6 Internet connection

To set up an IPv6 Internet connection through auto conguration:

1. Launch a web browser from a computer or mobile device that is connected network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select Auto Cong.

The page adjusts.

The automatically detects the information in the following elds:

• Router's IPv6 Address on WAN. This field shows the IPv6 address that is for the 's WAN (or Internet) interface. The number after the slash (/) is of the prex, which is also indicated by the underline (_) under the IPv6 If no address is acquired, the eld displays Not Available.

• Router's IPv6 Address on LAN. This field shows the IPv6 address that is for the 's LAN interface. The number after the slash (/) is the length of which is also indicated by the underline (_) under the IPv6 address. If no is acquired, the eld displays Not Available.

• (Optional) In the DHCP User Class (If Required) eld, enter a host name.

Most people can leave this eld blank, but if your ISP gave you a speci h enter it here.

1. (Optional) In the DHCP Domain Name (If Required) eld, enter a domain na

You can type the domain name of your IPv6 ISP. Do not enter the domain the IPv4 ISP here. For example, if your ISP's mail server is mail.xxx.yyy.zzz, t xxx.yyy.zzz as the domain name. If your ISP provided a domain name, type field. For example, Earthlink Cable might require a host name of home, and sometimes supplies a domain name.

1. Select an IPv6 Domain Name Server (DNS) Address radio button:

- Get Automatically from ISP. Your ISP uses DHCP to assign your DNS se Your ISP automatically assigns this address.

- Use These DNS Servers. If you know that your ISP requires specific server this option. Enter the IP address of your ISP's primary DNS server. If a s DNS server address is available, enter it also.

1. Select an IP Address Assignment radio button:

2. Use DHCP Server. This method passes more information to LAN devices based on some IPv6 systems might not support the DHCv6 client function.
   • Auto Cong. This is the default setting.

This setting species how the assigns IPv6 addresses to the devices on your network (the LAN).

1. (Optional) Select the Use This Interface ID check box and specify the interface to be used for the IPv6 address of the 's LAN interface.

If you do not specify an ID here, the generates one automatically from its address.

1. Click the Apply button.

Your settings are saved.

Set up an IPv6 6rd Internet connection

The 6rd protocol makes it possible to deploy IPv6 to sites using a service proIPv4 network. 6rd uses the service provider's own IPv6 address prex. This limits operational domain of 6rd to the service provider's network and is under direct of the service provider. The IPv6 service provided is equivalent to native IPv6. mechanism relies on an algorithmic mapping between the IPv6 and IPv4 address are assigned for use within the service provider's network. This mapping allows automatic determination of IPv4 tunnel endpoints from IPv6 prexes, allowing statel operation of 6rd.

With a 6rd tunnel conguration, the router follows the RFC5969 standard, support two ways to establish a 6rd tunnel IPv6 WAN connection:

• Auto Detect mode. In IPv6 Auto Detect mode, when the router receives opt from the DHCPv4 option, autodetect selects the IPv6 as 6rd tunnel setting. The uses the 6rd option information to establish the 6rd connection.
• Manual mode. Select 6rd Tunnel. If the router receives option 212, the elds are automatically completed. Otherwise, you must enter the 6rd settings.

To set up an IPv6 6rd Internet connection:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

1. From the Internet Connection Type menu, select 6rd.

The page adjusts.

The router automatically detects the information in the following sections:

• 6rd (IPv6 Rapid Development) Conguration. The router detects the service provider's IPv4 network and attempts to establish an IPv6 6rd tunnel connel If the IPv4 network returns 6rd parameters to the router, the page adjusts the correct settings in this section.

• Router's IPv6 Address on LAN. This eld shows the IPv6 address that is for the router's LAN interface. The number after the slash (/) is the length prex, which is also indicated by the underline (_) under the IPv6 address. address is acquired, the eld displays Not Available.

• Select an IPv6 Domain Name Server (DNS) Address radio button:

• Get Automatically from ISP. Your ISP uses DHCP to assign your DNS se Your ISP automatically assigns this address.

• Use These DNS Servers. If you know that your ISP requires specific server this option. Enter the IP address of your ISP's primary DNS server. If a s DNS server address is available, enter it also.

• Select an IP Address Assignment radio button:

• Use DHCP Server. This method passes more information to LAN devices based on some IPv6 systems might not support the DHCPv6 client function.
  • Auto Cong. This is the default setting.

This setting species how the router assigns IPv6 addresses to the devices on home network (the LAN).

1. (Optional) Select the Use This Interface ID check box and specify the interface that you want to be used for the IPv6 address of the router's LAN interface
   If you do not specify an ID here, the router generates one automatically from address.

2. (Optional) In the MTU Size (in bytes) eld, set an MTU size that is specific 6rd Internet connection.

The default size is 1480 bytes.

1. Click the Apply button.

Your settings are saved.

Manage the MTU size

The maximum transmission unit (MTU) is the largest data packet a network devi transmits.

MTU concepts

When one network device communicates across the Internet with another, the data packets travel through many devices along the way. If a device in the data packet lower maximum transmission unit (MTU) setting than the other devices, the data must be split or "fragmented" to accommodate the device with the smallest MT

The best MTU setting for NETGEAR equipment is often the default value. In sc situations, changing the value xes one problem but causes another. Leave the M unchanged unless one of these situations occurs:

• You experience problems connecting to your Internet service, and the technical support of either the Internet service provider (ISP) or NETGEAR recommends changing the MTU setting.
  For example, if a secure website does not open, or displays only part of a you might need to change the MTU.
• You use VPN and experience severe performance problems.
• You used a program to optimize MTU for performance reasons and now you experiencing connectivity or performance problems.

If you suspect an MTU problem, a common solution is to change the MTU to you are willing to experiment, you can gradually reduce the MTU from the ma value of 1500 until the problem goes away. The following table describes comm sizes and applications.

Table 3. Common MTU sizes

	ApplicationMTU
1500	The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE or VPN and is the default value for NETGEAR routers, adapters, and switches.
	Used in PPPoE environments.1492
	Maximum size to use for pinging. (Larger packets are fragmented.)1472
	Used in some DHCP environments.1468

Table 3. Common MTU sizes (Continued)

ApplicationMTU

Used in PPPoA environments.1458

Used in PPTP environments or with VPN.1436

Change the MTU size

CAUTION: An incorrect MTU setting can cause Internet communication problems. For example, you might not be able to access certain websites, frames within websites, secure login pages, or FTP or POP servers.

To change the MTU size:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > WAN Setup.

The WAN Setup page displays.

1. In the MTU Size eld, enter a value from 616 to 1500.
2. Click the Apply button.

Your settings are saved.

4

Control Access to the Internet

The router comes with a built-in rewall that helps protect your home network if unwanted intrusions from the Internet.

This chapter contains the following sections:

• Activate and manage NETGEAR Armor using the Nighthawk app
  • Network access control list
  • Use keywords to block Internet sites
  • Block services from the Internet
• Delete keywords from the blocked list
• Prevent blocking on a trusted computer
• Schedule when to block Internet sites and services
• Set up security event email notifications

Activate and manage NETGEAR Armor using the Nighthawk app

NETGEAR Armor ^™ is an advanced multi-layer cyber security solution that protects no only your network but individual devices as well. NETGEAR Armor protects your from viruses, spyware, hackers, spam, and phishing.

For more information about NETGEAR Armor, visit netgear.com/landings/armor/default.aspx.

Use the NETGEAR Nighthawk app to activate and manage NETGEAR Armor. The Nighthawk app is available on the Google Play™ store and the Apple App Store

To activate Armor using the Nighthawk app:

1. Launch the Nighthawk app.

The dashboard displays.

1. Tap Security.

The Armor page displays.

1. Follow the onscreen instructions to set up Armor.

Network access control list

You can use the network access control list (ACL) on the router to block or to your network and the Internet. The ACL identities a WiFi or wired device by address. The router detects the MAC addresses of the devices on the network allows or denies access.

The router detects and stores the MAC addresses of devices that connect to this so it lists the MAC addresses both of devices that are currently connected and were previously connected.

If you set up a network ACL that allows all new devices to connect, the follow

• You can either select or manually enter devices that you want to block from connecting to the network.
• All other devices are allowed access to the network.

If you set up a network ACL that blocks all new devices from connecting, the applies:

• You can either select or manually enter devices that you want to allow access network.
  • Devices that are currently connected to the network or that were allowed to in the past are automatically placed on the network ACL as allowed devices.
• All other devices are denied access to the network.

NOTE: Each network device has a MAC address that serves as a unique identifier. The MAC address is a 12-character physical address, containing the hexadecimal characters 0-9, a-f, or A-F (uppercase or lowercase) only, and separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC address is on the label of a device. If you cannot see the label, you can the MAC address using the network congruration utilities on your computer or mobile device.

Enable the network access control list, set the access and allow or block connected devices

When you enable network access control, you must select whether new devices automatically allowed to access the network or are blocked from accessing the R By default, devices that are already connected to the network are added to the allowed, but you can choose to block one or more of these devices from acc network.

To enable and manage the network access control list for the entire network allow or block connected devices:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Access Control.

The Access Control page displays.

1. Select the Turn on Access Control check box.

You must select this check box before you can select an access rule and allow and Block buttons. When the Turn on Access Control check box is cl devices are allowed to connect, even if a device is on the list of blocked

1. Click the Apply button.

Your settings are saved. Network access control is enabled.

1. Select an access rule to apply to new devices:

2. Allow all new devices to connect: With this setting, if you connect a n to the network, it can access the network. You do not need to enter its address on this page. This option works for most home networks. You can block one or more devices from accessing the network. For more informat see the following step.

3. Block all new devices from connecting: With this setting, if you want to a new device to connect, you must enter its MAC address on this page. situation, a new device is a device that was not previously connected to network.) For more information about allowing one or more devices, see tl following step.

If you block all new devices from connecting, the device that you are cur using to connect to the router web interface, any other devices that are connected to the network, and all devices that were allowed to connect the network in the past are still allowed access. That means that these devices automatically added to the network ACL as allowed devices. If you want it any of these devices, see the following step.

NOTE: Selecting an access rule does not affect previously blocked or allowed devices. It applies only to new devices trying to access the network after you apply this setting.

1. To change access for devices that are connected or were connected to the do the following:

• Currently connected devices:

In the table that contains the ACL, the Status column shows either Allowe Blocked for a device. To change the status, select the check box for the and click either the Allow button or the Block button.

NOTE: If you blocked all new devices from connecting, make sure that the computer or mobile device that you are currently using to access the router web interface shows as Allowed in the Status column.

• Devices that were connected in the past:

- To manage allowed devices that are currently not connected to the network see Manage allowed devices currently not on the network on page 47.

- To manage blocked devices that are currently not connected to the net see Manage blocked devices currently not on the network on page 49.

1. Click the Apply button.

Your settings are saved.

Manage allowed devices currently not on the network

If you set up an access control list (ACL) that blocks all new devices from a network, you can add new devices that must be allowed access to the network old devices, or change whether devices that were allowed must now be blocked they try to connect to the network.

For example, you could add a second computer or mobile device for access to router web management interface in case the device that you are currently using to be removed from the network for repairs.

To manage allowed devices currently not on the network:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Access Control.

The Access Control page displays.

1. Click the View list of allowed devices not currently connected to the net link.

A table displays the detected device name, MAC address, and connection type the devices that are not connected but allowed to access the network.

In the following steps, we refer to the list of allowed devices not currently to the network as the list of allowed devices.

1. To add a device to the list of allowed devices, do the following:

a. Click the Add button.

The Add Allowed Device page displays.

b. Enter the MAC address and device name for the device that you want to

c. On the Add Allowed Device page, click the Apply button.

The device is added to the list of allowed devices.

1. To remove a device from the list of allowed devices, do the following:

a. Select the check box for the device.

b. Click the Remove from the list button.

The device is removed from the list of allowed devices.

1. To change the device status by blocking access for a device on the list of devices, do the following:

a. Select the check box for the device.

b. Click the Edit button.

The Edit Device Name page displays.

c. From the Access Control menu, selected Block.

d. On the Edit Device Name page, click the Apply button.

The device is moved to the list of blocked devices not currently connected network.

1. To change the device name for a device on the list of allowed devices, do following:

a. Select the check box for the device.

b. Click the Edit button.

Nighthawk Tri-band Mesh WiFi 6E

The Edit Device Name page displays.

c. In the Device Name eld, enter a name.
d. On the Edit Device Name page, click the Apply button.

The device name is changed on the list of allowed devices.

1. Click the Apply button.

Your settings are saved.

Manage blocked devices currently not on the network

If you set up an access control list (ACL) that allows all new devices to access you can add new devices that must be blocked from accessing the network, re old devices, or change whether devices that were blocked must now be allowed they try to connect to the network.

To manage blocked devices currently not on the network:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Access Control.

The Access Control page displays.

1. Click the View list of blocked devices not currently connected to the net link.

The Access Control page displays.

A table displays the detected device name, MAC address, and connection type, the devices that are not connected and are blocked from accessing the network

Nighthawk Tri-band Mesh WiFi 6E

In the following steps, we refer to the list of blocked devices not currently to the network as the list of blocked devices.

1. To add a device to the list of blocked devices, do the following:

a. Click the Add button.

The Add Blocked Device page displays.

b. Enter the MAC address and device name for the device that you want to

c. On the Add Blocked Device page, click the Apply button.

The device is added to the list of blocked devices.

1. To remove a device from the list of blocked devices, do the following:

a. Select the check box for the device.

b. Click the Remove from the list button.

The device is removed from the list of blocked devices.

1. To change the device status by allowing access for a device on the list of devices, do the following:

a. Select the check box for the device.

b. Click the Edit button.

The Edit Device Name page displays.

c. From the Access Control menu, selected Allow.

d. On the Edit Device Name page, click the Apply button.

The device is moved to the list of allowed devices not currently connecte network.

1. To change the device name for a device on the list of blocked devices, do following:

a. Select the check box for the device.

b. Click the Edit button.

The Edit Device Name page displays.

c. In the Device Name eld, enter a name.

d. On the Edit Device Name page, click the Apply button.

The device name is changed on the list of blocked devices.

1. Click the Apply button.

Your settings are saved.

Use keywords to block Internet sites

You can use keywords to block certain Internet sites from your network. You c blocking all the time or based on a schedule.

To block Internet sites:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Block Sites.

The Block Sites page displays.

1. Select a keyword blocking option:

2. Per Schedule. Turn on keyword blocking according to a schedule that you. For more information, see Schedule when to block Internet sites and service page 55.

3. Always. Turn on keyword blocking all the time, independent of the Sched page.

4. In the Type keyword or domain name here eld, enter a keyword or domain you want to block.

For example:

• Specify XXX to block http://www.badstuff.com/xxx.html.
• Specify .com if you want to allow only sites with domain sufxes such as .gov.

• Enter a period (.) to block all Internet browsing access.

• Click the Add Keyword button.

The keyword is added to the keyword list. The keyword list supports up to

1. Click the Apply button.

Keyword blocking takes effect.

Block services from the Internet

You can block Internet services on your network based on the type of service. block the services all the time or based on a schedule.

To block services:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Block Services.

The Block Services page displays.

1. Specify when to block the services:

2. To block the services all the time, select the Always radio button.

3. To block the services based on a schedule, select the Per Schedule radio button.

For information about how to specify the schedule, see Schedule when to bl Internet sites and services on page 55.

1. Click the Add button.

The Block Services Setup page displays.

1. To add a service that is in the Service Type menu, select the application

The settings for this service automatically display in the elds.

1. To add a service or application that is not in the menu, select User Dene the following:

a. If you know that the application uses either TCP or UDP, select the appr protocol. Otherwise, select TCP/UDP (both).

b. Enter the starting port and ending port numbers.

If the service uses a single port number, enter that number in both elds out which port numbers the service or application uses, you can contact the publisher of the application, ask user groups or newsgroups, or search on Internet.

1. Select a Itering option:

- Only This IP Address. Block services for a single computer.

- IP Address Range. Block services for a range of computers with consecuti addresses on your network.

- All IP Addresses. Block services for all computers on your network.

1. Click the Add button.

Your settings are saved.

Delete keywords from the blocked list

To delete keywords from the list:

1. Launch a web browser from a computer or mobile device that is connected router network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Block Sites.

The Block Sites page displays.

1. Do one of the following:

2. To delete a single word, select it and click the Delete Keyword button. The keyword is removed from the list.

3. To delete all keywords on the list, click the Clear List button. All keywords are removed from the list.

4. Click the Apply button.

Your settings are saved.

Prevent blocking on a trusted computer

You can exempt one trusted computer from blocking. The computer that you exist must be assigned a xed IP address. You can use the reserved IP address feature specify the IP address. See Manage reserved LAN IP addresses on page 85.

To specify a trusted computer:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Block Sites.

The Block Sites page displays.

1. Scroll down and select the Allow trusted IP address to visit blocked sites box.
2. In the Trusted IP Address eld, enter the IP address of the trusted compute
3. Click the Apply button.

Your settings are saved.

Schedule when to block Internet sites an services

When you schedule blocking, the same schedule is used to block sites and to services.

To schedule blocking:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > Schedule.

The Schedule page displays.

1. Specify when to block keywords and services:

2. Days to Block. Select the check box for each day that you want to block keywords, or select the Every Day check box, which automatically selects the check boxes for all days.

3. Time of Day to Block. Select a start and end time in 24-hour format, the All Day check box for 24-hour blocking.

4. Click the Apply button.

Your settings are saved.

Set up security event email notifications

The router can email you its logs of router activity. The log records router access security events such as attempts to access blocked sites or services.

To set up email notifications:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Security > E-mail.

The E-mail page displays.

1. Select the Turn E-mail Notification On check box.

2. In the Send to This E-mail Address eld, type the email address to which alerts are to be sent.

This email address is also used for the From address. If this eld is blank, alert messages are not sent.

1. In the Sender eld, enter the email sender's name.

2. In the Your Outgoing Mail Server eld, enter the name of your ISP outgoir mail server (such as mail.myISP.com).

You might be able to nd this information in the conguration window of you program. If you leave this eld blank, log and alert messages are not sent.

1. In the Outgoing Mail Server Port Number eld, enter a port number in the If you do not know the port number, leave the default port number.

2. If your outgoing email server requires authentication, select the My Mail Serv requires authentication check box, and do the following:

a. In the User Name eld, type the user name for the outgoing email serve b. In the Password eld, type the password for the outgoing email server.

1. To send alerts when someone attempts to visit a blocked site, select the Se Immediately check box.

Nighthawk Tri-band Mesh WiFi 6E

Email alerts are sent immediately when someone attempts to visit a blocked

1. To send logs based on a schedule, specify these settings:

a. From Send logs according to this schedule menu, select the schedule ty
b. From the Day menu, select the day.
c. From the Time menu, select the time, and select the am or pm radio button.

1. Click the Apply button.

Your settings are saved.

Logs are sent automatically according to the schedule that you set. If the log before the specied time, it is sent. After the log is sent, it is cleared from memory. If the router cannot email the log and the log buffer lls, the rout overwrites the log.

5

Optimize Performance

You can set up the router to optimize performance for applications such as Int gaming, high-definition video streaming, and VoIP communication. By default, the ro uses Wi-Fi Multimedia Quality of Service (WMM QoS).

This chapter contains the following sections:

• Use Dynamic QoS to optimize Internet trafc management
- Improve network connections with Universal Plug and Play

Use Dynamic QoS to optimize Internet management

Dynamic Quality of Service (QoS) helps improve your router's Internet traffic management capabilities through better application and device identification, bandwidth allocation, and traffic prioritization techniques. Dynamic QoS resolves traffic congestion when the Internet bandwidth is limited and different demands compete for bandwidth.

Enable Dynamic QoS

Because not everyone uses Dynamic QoS, it is disabled by default.

To enable Dynamic QoS:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select QoS.

The QoS page displays.

1. Select the Enable QoS check box.
2. Specify your Internet bandwidth:

- Let Speedtest detect my Internet bandwidth. We recommend that you use Speedtest to detect your Internet bandwidth.

To use Speedtest, do the following:

a. For more accurate Speedtest results, make sure that no other devices are accessing the Internet.
b. Select the Let Speedtest detect my Internet bandwidth radio button.
c. Click the Take a Speedtest button. Speedtest determines your Internet bandwidth.

- I want to denote my Internet Bandwidth. If you know what your download upload speed are, select this radio button and enter your download and up speeds in the elds.

1. Click the Apply button.

Your settings are saved.

Enable or disable the automatic QoS database update

The router uses a QoS database of the most popular applications and services implement Dynamic QoS. By default, the router automatically updates this databas You can turn off this feature and manually update the database.

To enable or disable the automatic Dynamic QoS database update:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select QoS.

The QoS page displays. If you already enabled Dynamic QoS, the Enable QoS box is selected.

1. Select or clear the Automatically update performance optimization database check box.
2. Click the Apply button.

Your settings are saved.

Manually update the dynamic QoS database

The router uses a QoS database of the most popular applications and services implement Dynamic QoS. By default, the router automatically updates this database when you enable Dynamic QoS, but if you turned off the automatic update fea can manually update the database.

To manually update the Dynamic QoS database:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select QoS.

The QoS page displays. If you already enabled Dynamic QoS, the Enable QoS box is selected.

1. Click the Update Now button.

The router checks for the newest version of the database and downloads it.

1. Click the Apply button.

Your settings are saved.

Improve network connections with Universa Plug and Play

Universal Plug and Play (UPnP) helps devices such as Internet appliances and co access the network and connect to other devices as needed. UPnP devices can automatically discover the services from other registered UPnP devices on the ne

If you use applications such as multiplayer gaming, peer-to-peer connections, or real communications such as instant messaging or remote assistance (a feature in Wire XP), enable UPnP.

To enable Universal Plug and Play:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > UPnP.

The UPnP page displays.

1. Select the Turn UPnP On check box.

By default, this check box is selected. UPnP for automatic device conguration be enabled or disabled. If the Turn UPnP On check box is cleared, the rc not allow any device to automatically control router resources, such as port forwarding.

1. Type the advertisement period in minutes.

The advertisement period species how often the router broadcasts its UPnP information. This value can range from 1 to 1440 minutes. The default period minutes. Shorter durations ensure that control points receive current device status at the expense of more network traffic. Longer durations can compromise the freshness of the device status but can significantly reduce network traffic.

1. Type the advertisement time to live in hops.

The time to live for the advertisement is measured in hops (steps) for each packet sent. Hops are the steps a packet takes between routers. The numbe can range from 1 to 255. The default value for the advertisement time to hops, which should be ne for most home networks. If you notice that some are not being updated or reached correctly, it might be necessary to increase value.

Nighthawk Tri-band Mesh WiFi 6E

1. Click the Apply button.

The UPnP Portmap Table displays the IP address of each UPnP device that is the router and which ports (internal and external) that device opened. The U Portmap Table also displays what type of port is open and whether that pc active for each IP address.

1. To refresh the information in the UPnP Portmap Table, click the Refresh but

6

Manage WiFi Settings

You can customize the mesh network WiFi settings.

This chapter contains the following sections:

• Change the WiFi password or the WiFi security
• Add a WiFi network
• Set up a guest WiFi network
  • Use the WPS wizard for WiFi connections
• Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio
• Hide your mesh network's SSID
• Generate a new backhaul password
• Enable or disable implicit beamforming
• Enable or disable AX WiFi
• Change the region of operation
• Change the CTS/RTS threshold or preamble mode for a radio

Change the WiFi password or the WiFi security

The router and satellite come preset with the same WiFi network name (SSID) same WiFi security. You can nd the SSID and password on the router label a satellite label.

If you log in to the router and change the WiFi settings, the router automatic the new settings to the satellite. We recommend that you do not disable secure

To change the WiFi password or the WiFi security:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Wireless.

The Wireless Settings page displays.

1. To change the WiFi password, enter a new password in the Password (Netv Key) eld.

You must enter a phrase of 8 to 63 characters. The Password (Network K) displays if the WPA2-Personal, WPA2-Personal + WPA3-Personal, or WPA3-Personal security radio button is selected.

1. To change the WiFi security, select a Security Options radio button.

- None. An open WiFi network that does not provide any security. Any WiFi can join the WiFi network. We recommend that you do not use an oper network.

• WPA2-Personal. This type of security is Wi-Fi Protected Access (WPA) version with a pre-shared key. It uses WPA2-Personal standard encryption with the encryption type.
• WPA2-Personal + WPA-3 Personal. This type of security allows clients to either WPA2-Personal or WPA3-Personal.

• WPA3-Personal. This type of security enables WiFi devices that support WP to join the router's WiFi network. WPA3 is the latest security standard and secure than WPA2. 6 GHz devices must use WPA3 security.

• Click the Apply button.

Your settings are saved.

Add a WiFi network

The router and satellite have one default WiFi network, for which the WiFi network (SSID) and network key (password) are on the router label and on the satellite addition, the router can support three additional and separate WiFi networks: Or 2.4 GHz WiFi network, one 5 GHz WiFi network, and one 6 GHz WiFi network

If you add a WiFi network, the router automatically sends the new settings to so that both the router and satellite broadcast the new WiFi network.

To add a WiFi network:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Customize WiFi Network.

The Customize WiFi Network page displays.

1. Select the Customize 2.4 GHz WiFi Network, Customize 5 GHz WiFi Network, or Customize 6 GHz WiFi Network check box.

You can add a WiFi network in the 2.4 GHz band, the 5 GHz band, and band.

1. To control the SSID broadcast, select or clear the Enable SSID Broadcast ch box.

When this check box is selected, the router broadcasts the SSID so that it when you scan for local WiFi networks on your computer or mobile device.

1. To add an SSID, type a name in the Customized 2.4 GHz WiFi Network (SSID), Customized 5 GHz WiFi Network Name (SSID), or Customized 6 GHz WiFi Network Name (SSID) eld.

The name can be up to 32 characters long and it is case-sensitive. The de are NETGEAR_2G, NETGEAR_5G, and NETGEAR_6G.

1. Set the WiFi security by selecting one of the following Security Options radio

2. None. An open WiFi network that does not provide any security. Any WiFi can join the WiFi network. We recommend that you do not use an oper network.

3. WPA2-Personal. This type of security is Wi-Fi Protected Access (WPA) version with a pre-shared key. It uses WPA2-Personal standard encryption with the encryption type.
4. WPA2-Personal + WPA-3 Personal. This type of security allows clients to either WPA2-Personal or WPA3-Personal.

5. WPA3-Personal. This type of security enables WiFi devices that support WP to join the router's WiFi network. WPA3 is the latest security standard and secure than WPA2. 6 GHz devices must use WPA3 security.

6. Set a WiFi password in the Password (Network Key) eld.

You must enter a phrase of 8 to 63 characters or 64 hexadecimal digits. Th (Network Key) eld displays if you select the WPA2-Personal, WPA2-Personal + WPA-3 Personal, or WPA3-Personal security radio button.

1. Click the Apply button.

Your settings are saved.

1. Make sure that you can connect wirelessly to the network with its new settin

If you cannot connect wirelessly, check the following:

- Is your computer or mobile device connected to another WiFi network in area? Some WiFi devices automatically connect to the rst open network with WiFi security that they discover.

- Is your computer or mobile device trying to connect to your network with settings (before you changed the settings)? If so, update the WiFi network s in your computer or mobile device to match the current settings for your

Set up a guest WiFi network

A guest network allows visitors to use the Internet without using your WiFi sec password or with a different WiFi password. The guest WiFi network can broaden simultaneously in both the 2.4 GHz, 5 GHz, and 6 GHz bands. Although the gu is disabled by default, it is congured as an open network without security.

If you enable the guest WiFi network, the router automatically sends the new s to the satellite so that both the router and satellite broadcast the guest WiFi

To enable and set up a guest network:

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Guest Network.

The Guest Network Settings page displays.

1. Select the Enable Guest Network check box.

By default, the quest WiFi network is disabled.

1. To control the SSID broadcast, select or clear the Enable SSID Broadcast ch box.

When this check box is selected, the router broadcasts the SSID so that it when you scan for local WiFi networks on your computer or mobile device.

1. Either use the default WiFi network name (SSID) or type a name in the Guest Network Name (SSID) eld.

The default SSID is NETGEAR_GUEST. If you type another name, it can be in characters long and it is case-sensitive.

1. Set the WiFi security by selecting one of the following Security Options radio

2. None. An open WiFi network that does not provide any security. Any WiFi can join the WiFi network. We recommend that you do not use an oper network.

3. WPA2-Personal. This type of security is Wi-Fi Protected Access (WPA) version with a pre-shared key. It uses WPA2-Personal standard encryption with the encryption type.
4. WPA2-Personal + WPA-3 Personal. This type of security allows clients to either WPA2-Personal or WPA3-Personal.

5. WPA3-Personal. This type of security enables WiFi devices that support WP to join the router's WiFi network. WPA3 is the latest security standard and secure than WPA2. 6 GHz devices must use WPA3 security.

6. Unless you select None in the previous step, set a WiFi password in the Password (Network Key) eld.

You must enter a phrase of 8 to 63 characters or 64 hexadecimal digits. Th (Network Key) eld displays if you select the WPA2-Personal, WPA2-Personal + WPA3-Personal, or WPA3-Personal security radio button.

1. Click the Apply button.

Your settings are saved.

1. Make sure that you can reconnect over WiFi to the guest network.

If you cannot connect over WiFi, check the following:

• If your computer or mobile device is already connected to another WiFi in your area, disconnect it from that WiFi network and connect it to the network that the router provides.
  Some WiFi devices automatically connect to the rst open network without security that they discover.
• Does your computer or mobile device display as an attached device?

If it does, it is connected to the guest network.

- Are you using the correct network name (SSID) and password?

Use the WPS wizard for WiFi connection

The WPS Wizard helps you add a WPS-enabled device to your WiFi network with typing the WiFi password.

To use the WPS Wizard:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > WPS Wizard.

A note explaining WPS displays.

1. Click the Next button.

The WPS page displays.

1. Select a setup method:

2. Push button. Click the WPS button on this page.

3. PIN Number. The page adjusts. Enter the client security PIN and click the button.

4. Within two minutes, go to the WPS-enabled device and use its WPS software connect to the WiFi network.

The WPS process automatically sets up yourr WPS-enabled device with the new password when it connects. The router WPS page displays a conrmation mess

Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio

20/40 coexistence allows a 20 MHz and 40 MHz channel width to be supported simultaneously. By default, 20/40 MHz coexistence is enabled on the 2.4 GHz range prevent interference between WiFi networks in your environment at the expense of WiFi speed. If no other WiFi networks are present in your environment, you can 20/40 MHz coexistence to increase the WiFi speed on the 2.4 GHz radio to the supported speed for the WiFi mode.

20/40 MHz coexistence applies to the 2.4 GHz radio.

To enable or disable 20/40 MHz coexistence for the 2.4 GHz radio:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Wireless Setup page displays.

1. In the Wireless Network (2.4Ghz b/g/n/ax section, select or clear the Enable MHz Coexistence check box.

Selecting this check box enables 20/40 MHz coexistence and clearing this check box disables 20/40 MHz coexistence.

By default, 20/40 MHz coexistence is enabled and the check box is selected.

1. Click the Apply button.

Your settings are saved. The 2.4 GHz radio restarts and WiFi clients might reconnect.

Hide your mesh network's SSID

By default, your mesh network's WiFi network name (SSID) is broadcasted and \ to other WiFi devices. If you disable SSID broadcasting on your mesh network, is no longer visible. However, other devices can still connect to the mesh netw manually if the SSID, security type, and WiFi password is known.

To hide your mesh network's SSID:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Wireless Setup page displays.

1. Clear the Enable SSID Broadcast check box.

Clearing this check box hides the SSID.

1. Click the Apply button.

Your settings are saved.

Generate a new backhaul password

The backhaul password is a security key that is used in WiFi communication by the router and the satellite. You can generate a new backhaul password. After generate a new backhaul password, you must use the Sync button to build a backhaul connection so that the router and satellite can communicate with each using WiFi.

To generate a new backhaul password:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Advanced Wireless Settings page displays.

1. In the Backhaul Password section, click the Generate button.

The router generates a new backhaul password.

Generating a new password might cause the satellite to lose connection from router. To reconnect, use the Sync button.

Enable or disable implicit beamforming

Beamforming shapes a directional WiFi signal aimed at a WiFi client based on the location, as opposed to radiating the signal out in all directions. This feature in WiFi range and performance. Clients do not need to support beamforming to be from implicit beamforming.

To enable or disable implicit beamforming:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Wireless Settings page displays.

1. Scroll down below the WPS Settings section and select or clear the Enable BEAMFORMING check box.

Selecting this check box enables implicit beamforming. Clearing this check box disables implicit beamforming.

1. Click the Apply button.

Your settings are saved.

If you connected over WiFi to the network, you are disconnected from the and must reconnect.

Enable or disable AX WiFi

AX WiFi improves your network's capacity, Internet upload and download speeds, WiFi range by allowing WiFi trafc from different devices to be concurrently man To do this, AX WiFi uses Orthogonal Frequency-Division Multiple-Access (OFDMA), 2x2 multi-user MIMO, and intelligent scheduling.

AX WiFi is enabled by default.

To enable or disable AX WiFi:

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Wireless Setup page displays.

1. Select or clear the Enable AX check box.

Selecting this check box turns on AX WiFi and clearing this check box turns WiFi.

1. Click the Apply button.

Your settings are saved.

Change the region of operation

You can change the region of operation, which is region in which you operate. For some countries or regions, such as North America, you cannot change the because it is preset.

NOTE: Make sure the country is set to the location where the device is operating. You are responsible for complying within the local, regional, and national regulations set for channels, power levels, and frequency ranges.

WARNING: It might not be legal to operate the router in a region other the regions listed in the menu. If your country or region is not listed, ch your local government agency.

To change the region of operation:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Advanced Wireless Settings page displays.

1. From the Region menu, select the region in which the router must operate.

2. Click the Apply button.

Your settings are saved. The router restarts with the settings for the new re

Change the CTS/RTS threshold or preamble mode for a radio

For most WiFi networks, the clear to send/request to send (CTS/RTS) threshold preamble mode work ne and we recommend that you do not change the sett general, these settings are intended for WiFi testing.)

CAUTION: Do not change these settings unless directed by NETGEAR support or unless you are sure what the consequences are. Incorrect settings might disable the WiFi function of a radio unexpectedly.

To change the CTS/RTS threshold or preamble mode for a radio:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Advanced Wireless Settings page displays.

1. For the 2.4 GHz radio, 5 GHz radio, or 6 GHz radio, in the CTS/RTS Thrd (1-2347) eld, enter a value from 1 to 2347.

The default value is 2347.

CAUTION: Incorrect settings might disable the WiFi function for the selected radio unexpectedly.

1. From the Preamble Mode menu for the 2.4 GHz radio (the setting does not to the 5 GHz or 6 GHz radios), select Long Preamble, or Short Preamble.

2. Long Preamble: A long transmit preamble might provide a more reliable connection or a slightly longer range. This is the default setting.

3. Short Preamble: A short transmit preamble might give better performance.

CAUTION: Incorrect settings might disable the WiFi function for the selected radio unexpectedly.

1. Click the Apply button.

Your settings are saved.

7

Manage Network Settings

You can customize the router's network settings. We recommend that you install router and connect it to the Internet before you change its network settings.

This chapter contains the following sections:

• View or change the WAN settings
- Set up a default DMZ server
- Change the router's device name
- Change the LAN IP address settings
- Specify the IP addresses that the router assigns
- Disable the DHCP server feature in the router
- Manage reserved LAN IP addresses
- Set the time zone manually
- Change the NTP server
- Set up the router as a WiFi access point
- Set up a bridge for a port group or VLAN tag group
- Manage custom static routes
- Manage Ethernet port aggregation to a LAN device

View or change the WAN settings

You can view or conjure wide area network (WAN) settings for the Internet port can set up a DMZ (demilitarized zone) server, change the maximum transmit unsize, and enable the router to respond to a ping to its WAN (Internet) port.

To view or change the WAN settings:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > WAN Setup.

The WAN Setup page displays.

View or change the following settings:

• Disable Port Scan and DoS Protection. DoS protection protects your LAN a denial of service attacks such as Syn ood, Smurf Attack, Ping of Death, a others. Select this check box only in special circumstances.
• Respond to Ping on Internet Port. This feature allows your router to be discovered. Use this feature only as a diagnostic tool or for a specific rea
• Default DMZ Server. This feature is sometimes helpful when you are playi online games or videoconferencing, but it makes the firewall security less eff
• Disable IGMP Proxying. IGMP proxying allows a computer on the local ar network (LAN) to receive the multicast trafc it is interested in from the Ir If you do not need this feature, you can select this check box to disabl
• MTU Size (in bytes). The normal MTU (maximum transmit unit) value for Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. Check the MTU only if you are sure that it is necessary for your ISP connection
• NAT Filtering. Network Address Translation (NAT) determines how the router processes inbound traffic. Secured NAT protects computers on the LAN from

attacks from the Internet but might prevent some Internet games, point-to-p applications, or multimedia applications from working. Open NAT provides a much less secured rewall but allows almost all Internet applications to work

- Disable SIP ALG. Some voice and video communication applications do not work well with the SIP ALG. Disabling the SIP ALG might help your voice video applications to create and accept a call through the router.

1. Click the Apply button.

Your settings are saved.

Set up a default DMZ server

The default DMZ server feature is helpful when you are using some online game videoconferencing applications that are incompatible with Network Address Translation (NAT). The router is programmed to recognize some of these applications and it correctly with them, but other applications might not function well. In some case local computer can run the application correctly if the IP address for that component entered as the default DMZ server.

WARNING: DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the rewall and is expected to exploit from the Internet. If compromised, the DMZ server computer can be used to attack other computers on your network.

The router usually detects and discards incoming trafc from the Internet that is response to one of your local computers or a service that you congured on t Forwarding/Port Triggering page. Instead of discarding this trafc, you can specify the router forwards the trafc to one computer on your network. This computer the default DMZ server.

To set up a default DMZ server:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > WAN Setup.

The WAN Setup page displays.

1. Select the Default DMZ Server check box.
2. Type the IP address.
3. Click the Apply button.

Your settings are saved.

Change the router's device name

The router's default device name is based on its model number. This device n displays in the le manager when you browse your network.

To change the router's device name:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. In the Device Name eld, type a new name.
2. Click the Apply button.

Your settings are saved.

Change the LAN IP address settings

The router is precongured to use private IP addresses on the LAN side and t a DHCP server. The router's default LAN IP conguration is as follows:

• LAN IP address. 192.168.1.1
- Subnet mask. 255.255.255.0

These addresses are part of the designated private address range for use in p networks and are suitable for most applications. If your network requires a diffe addressing scheme, you can change these settings.

You might want to change these settings if you need a specific IP subnet that more devices on the network use, or if you use competing subnets with the scheme.

Router Information Protocol (RIP) allows a router to exchange routing information other routers. You change the direction and the protocol version.

To change the LAN IP address or RIP settings:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. In the IP Address eld, type the IP address.
2. In the IP Subnet Mask eld, type the subnet mask of the router.

The IP address and subnet mask identify which addresses are local to a sp device and which must be reached through a gateway or router.

1. Change the RIP settings.

a. Select the RIP direction:

• Both. The router broadcasts its routing table periodically and incorporates information that it receives.
• Out Only. The router broadcasts its routing table periodically.
• In Only. The router incorporates the RIP information that it receives.

b. Select the RIP version:

• Disabled. This is the default setting.
• RIP-1. This format is universally supported. It is adequate for most network unless you are using an unusual network setup.

• RIP-2. This format carries more information. Both RIP-2B and RIP-2M send routing data in RIP-2 format. RIP-2B uses subnet broadcasting. RIP-2M uses multicasting.

• Click the Apply button.

Your settings are saved.

If you changed the LAN IP address of the router, you are disconnected when change takes effect.

1. To reconnect, close your browser, relaunch it, and log in to the router.

Specify the IP addresses that the router assigns

By default, the router acts as a Dynamic Host Conguration Protocol (DHCP) serv router assigns IP, DNS server, and default gateway addresses to all computers co to the LAN. The assigned default gateway address is the LAN address of the

These addresses must be part of the same IP address subnet as the router's address. Using the default addressing scheme, dene a range between 192.168.1.2 and 192.168.1.254, although you can save part of the range for devices with x addresses.

To specify the pool of IP addresses that the router assigns:

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. Make sure that the Use Router as DHCP Server check box is selected.

2. Specify the range of IP addresses that the router assigns:

a. In the Starting IP Address eld, type the lowest number in the range.

This IP address must be in the same subnet as the router.

b. In the Ending IP Address eld, type the number at the end of the range addresses.

This IP address must be in the same subnet as the router.

1. Click the Apply button.

Your settings are saved.

The router delivers the following address information to any LAN device that re a DHCP address:

- An IP address from the range that you dene

- Subnet mask

- Gateway IP address (the router's LAN IP address)

- DNS server IP address (the router's LAN IP address)

Disable the DHCP server feature in the router

By default, the router acts as a DHCP server. The router assigns IP, DNS service default gateway addresses to all computers connected to the LAN. The assigned gateway address is the LAN address of the router.

You can use another device on your network as the DHCP server or specify t settings of all your computers.

To disable the DHCP server feature in the router:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. Clear the Use Router as DHCP Server check box.
2. Click the Apply button.

Your settings are saved.

1. (Optional) If this service is disabled and no other DHCP server is on your set your computer IP addresses manually so that the computers can access th

Manage reserved LAN IP addresses

When you specify a reserved IP address for a computer on the LAN, that cor always receives the same IP address each time it accesses the router's DHCP s Assign reserved IP addresses to computers or servers that require permanent IP

Reserve an IP address

To reserve an IP address:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. In the Address Reservation section, click the Add button.
2. In the IP Address eld, type the IP address to assign to the computer or

Choose an IP address from the router's LAN subnet, such as 192.168.1.x.

1. Type the MAC address of the computer or server.

Tip: If the computer is already on your network, you can copy its MA address from the Attached Devices page and paste it here.

1. Click the Apply button.

The reserved address is entered into the table.

The reserved address is not assigned until the next time the computer contacts router's DHCP server. Reboot the computer, or access its IP congruration and for DHCP release and renew.

Edit a reserved IP address

To edit a reserved address entry:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. Select the radio button next to the reserved address that you want to edit.
2. Click the Edit button.

The Address Reservation page displays.

1. Change the settings.
2. Click the Apply button.

Your settings are saved.

Delete a reserved IP address entry

To delete a reserved address entry:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

1. Select the radio button next to the reserved address that you want to delete

2. Click the Delete button.

The address is removed.

Set the time zone manually

To set your time zone manually:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > NTP Settings.

The NTP Settings page displays.

1. Select your time zone from the menu.
2. If you live in a region that observes daylight saving time, select the Automat adjust for daylight savings time check box.
3. Click the Apply button.

Your settings are saved.

Change the NTP server

By default, the router uses the NETGEAR Network Time Protocol (NTP) server to the network time. You can change the NTP server to your preferred NTP serve

To change the NTP server to your preferred NTP server:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > NTP Settings.

The NTP Settings page displays.

1. Select the Set your preferred NTP server radio button.
2. Enter the NTP server domain name or IP address in the Primary NTP serve
3. Click the Apply button.

Your settings are saved.

Set up the router as a WiFi access pc

You can set up the router to run as an access point (AP) on the same loca another router.

To set up the router as an AP:

1. Use an Ethernet cable to connect the Internet port of this router to an Eth on the other router.
2. Launch a web browser from a computer or mobile device that is connected mesh network.
3. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Wireless AP.

The Wireless AP page displays.

1. Select the Enable AP Mode check box.

The page adjusts.

1. Select an IP address setting:

- Get dynamically from existing router. The other router on the network a an IP address to this router while it is in AP mode.

- Use xed IP settings on this device (not recommended). Use this setting want to manually assign a specific IP address to this router while it is in Using this option effectively requires advanced network experience.

NOTE: To avoid interference with other routers or gateways in your network we recommend that you use different WiFi settings on each router. You can also turn off the WiFi radio on the other router or gateway and router only for WiFi client access.

1. Click the Apply button.

The IP address of the router changes, and you are disconnected.

1. To reconnect, close and restart your browser and type http://www.routerlogin.n

Set up a bridge for a port group or tag group

Some devices, such as an IPTV, cannot function behind the router's network ad translation (NAT) service or rewall. Based on what your Internet service provider requires, for the device to connect to the ISP's network directly, you can enable bridge between the device and the router's Internet port or add new VLAN tag to the bridge.

NOTE: If your ISP provides instructions for how to set up a bridge for II Internet service, follow those instruction.

Set up a bridge for a port group

If the device that is connected to the router's Ethernet LAN port includes an your ISP might require you to set up a bridge for a port group for the rou interface.

A bridge with a port group prevents packets that are sent between the IPTV the router's Internet port from being processed through the router's network adc translation (NAT) service.

To congregate a port group and enable the bridge:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VLAN/Bridge Settings.

The VLAN/Bridge Settings page displays.

1. Select the Enable VLAN/Bridge Setup check box.

The page expands.

1. Select the By bridge group radio button.

The page expands.

1. Select the Port1 check box.

2. Click the Apply button.

Your settings are saved.

Set up a bridge for a VLAN tag group

If the device that is connected to the router's Ethernet LAN port includes an your ISP might require you to set up a bridge for a VLAN tag group for the Internet interface.

If you are subscribed to IPTV service, the router might require VLAN tags to be between the Internet traffic and the IPTV traffic. A bridge with a VLAN tag group packets that are sent between the IPTV device and the router's Internet port from processed through the router's network address translation (NAT) service.

You can add VLAN tag groups to a bridge and assign VLAN IDs and priority each VLAN tag group.

To add a VLAN tag group and enable the bridge:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VLAN/Bridge Settings.

The VLAN/Bridge Settings page displays.

1. Select the Enable VLAN/Bridge Setup check box.

The page expands.

1. Select the Enable VLAN Tag radio button.

The page expands.

1. Click the Add button.

The Add VLAN Rule page displays.

1. Specify the following settings for the VLAN tag group:

2. Name. Enter a name for the VLAN tag group. The name can be up to 10 characters.
   • VLAN ID. Enter a value from 1 to 4094.

3. Priority. Enter a value from 0 to 7.

4. Select the Port1 check box.

5. Click the Add button.

The VLAN tag group is added.

1. Click the Apply button.

Your settings are saved.

Set up an IPTV port

You can set up the router to create an Internet Protocol television (IPTV) port lease an IP address from your IPTV service provider. Use this feature only if you to an IPTV service and your IPTV service requires an intranet address.

Some IPTV ports cannot work behind NAT because the IPTV port requires an I within the Internet service provider's network (intranet address). You can set up a connection from the WAN port to the LAN port. The LAN port becomes an II with direct access to the WAN without going through NAT.

To congregate an IPTV port:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VLAN/Bridge Settings.

The VLAN/Bridge Settings page displays.

1. Select the Enable VLAN/Bridge Setup check box.

The page expands.

1. Select the By bridge group radio button.

The page expands.

1. Select the Port1 check box:

2. Click the Apply button.

Your settings are saved.

Manage custom static routes

For almost all Internet traffic, routes are automatically and dynamically selected. You can also set up a xed, static route. Typically, you only need to add static route you have more than one router or multiple IP subnets on your network.

As an example of when a static route is needed, consider the following case:

• Your main Internet access is through a cable modem to your ISP. The cable is connected to your router.
• Your network also includes an ADSL router that you use to access a remote site. This ADSL router is connected to a DSL modem, which is used on-den
• Your LAN subnet is 192.168.1.0, and the ADSL router's address on your LAN 192.168.1.100.
• The public IP address range at the remote ofce site is 134.177.0.0.

When you set up your router, two implicit static routes were created:

1. A default route was created between your router and the cable modem that to your ISP.

2. A second static route was created between your router and your LAN for a 192.168.1.0 addresses.

With this conguration, if you try to access a device on the 134.177.0.0 network remote office site, your router forwards your request to your ISP. In turn, the I your request to the remote ofce site, where the rewall will deny the request.

In this situation, you must dene a static route, telling your router to access 13 addresses through your ADSL router at its LAN address of 192.168.1.100.

Here is an example static route setting for this conguration:

• Destination IP address and subnet mask settings: The route applies to all ac at the remote site, so set the destination IP address to 134.177.0.0 and the mask to 255.255.255.0.
• Gateway IP address: Trafc for addresses in the 134.177.0.0 network must be forwarded to the ADSL router, so set the gateway IP address to 192.168.1.1(ADSL router's address on your LAN).
• Private route: Make the static route private as a security precaution in case Information Protocol (RIP) is activated. A private route is not reported in RIP

Set up a static route

To set up a static route:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.
   A login window opens.
3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Static Routes.

The Static Routes page displays.

1. Click the Add button.

The page adjusts.

1. In the Route Name eld, type a name for this static route (for identification only).

2. To limit access to the LAN only, select the Private check box.

If the Private check box is selected, the static route is not reported in RIP

1. To prevent the route from becoming active, clear the Active check box.

In some situations, you might want to set up a static route but keep it did a later time. By default, the Active check box is selected and a route be called after you click the Apply button.

1. Enter the following settings:

2. Destination IP Address. Enter the IP address for the final destination of th

3. IP Subnet Mask. Enter the IP subnet mask for the nal destination of the If the destination is a single host, enter 255.255.255.255.
4. Gateway IP Address. Enter the IP address of the gateway.

The IP address of the gateway must be on the same LAN segment as

• Metric. Enter a number from 2 through 15.

This value represents the number of routers between your network and the destination. Usually, a setting of 2 or 3 works, but if this is a direct co set it to 2.

1. Click the Apply button.

Your settings are saved. The static route is added to the table on the Stat page.

Edit a static route

To edit a static route:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Static Routes.

The Static Routes page displays.

1. In the table, select the radio button for the route.

2. Click the Edit button.

The Static Routes page adjusts.

1. Edit the route information.

2. Click the Apply button.

Your settings are saved.

Delete a static route

To delete a static route:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Static Routes.

The Static Routes page displays.

1. In the table, select the radio button for the route.
2. Click the Delete button.

The route is removed from the table.

Manage Ethernet port aggregation to a device

Ethernet aggregation lets you aggregate two Ethernet ports on your router to in the aggregated le transfer speed. Ethernet port aggregation is also referred to aggregation, teaming port, and port trunking.

To set up Ethernet port aggregation to a LAN device that is congured for 80 Aggregation Control Protocol (LACP), rst congure Ethernet port aggregation for the LAN Aggregation ports marked on your router, and then connect these port to aggregated ports on the LAN device. If you do not congure port aggregation order, a network loop occurs, and your network might be shut down.

We refer to Ethernet port aggregation for LAN devices as LAN port aggregation

WARNING: Do not connect an unmanaged switch to the LAN Aggregation ports on your router if these ports are aggregated. Otherwise, a network I occurs, and your network might be shut down.

Set up LAN port aggregation to a LAN device

If you are connecting a LAN device such as a switch or NAS, make sure that device supports either 802.3ad LACP or static LAGs.

To set up LAN port aggregation to a LAN device:

1. Set up LAN port aggregation on your LAN device before connecting it to yo

NOTE: If your LAN device supports a static link aggregation group (LAG)

only, you must enable static mode on your router before you connect your device to the LAN Aggregation ports on the router. See the following services for more information about how to enable static mode on your router.

For information about how to set up LAN port aggregation on your router computer, see the documentation that came with your router or computer.

1. Log in to your router and enable LAN port aggregation:

a. Launch a web browser from a computer or mobile device that is connect the router network.

b. Enter http://www.routerlogin.net.

A login window opens.

c. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

d. Select ADVANCED > Advanced Setup > Ethernet Settings.

The Ethernet Port Advanced Settings page displays.

e. In the LAN Port Aggregation section, select an LAN port aggregation mod default, LAN port aggregation is disabled):

- Enable (LACP-IEEE 802.3ad). After you connect the Ethernet cables (see following step), the router communicates with the LAN device that is connected to the LAN Aggregation ports on your router, and checks to see if LAN aggregation is supported on the LAN device. If LAN port aggregation is supported, the router automatically trunks the LAN Aggregation ports. If not, the LAN Aggregation ports work as independent LAN ports. We recommend that you select this mode unless your LAN device can support static LAG only.

- Enable static LAG. If your device supports a static LAG only, select the Otherwise, we recommend that you to select the Enable (LACP-IEEE 802. radio button instead.

f. Click the Apply button.

Your settings are saved.

1. Connect your LAN device to the LAN Aggregation ports on the router.

View or change the router LAN port aggregation mode

To view or change your router's LAN port aggregation mode:

1. Launch a web browser from a computer or mobile device that is connected router network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Ethernet Settings

The Ethernet Port Advanced Settings page displays.

In the LAN Port Aggregation section, the LAN Port Aggregation Status eld sl whether port aggregation is active:

- Inactive. No link aggregation LAN device is connected to the LAN Aggreg ports on your router.

• Active. A link aggregation LAN device is connected to the LAN Aggregati ports on your router.

1. To change the LAN port aggregation mode, select one of the following radio

- Disable. This mode is selected by default. This mode disables LAN port aggregation on your router. The LAN Aggregation ports can be used as independent Ethernet ports.

- Enable (LACP-IEEE 803.3ad). After you connect the Ethernet cables, the router communicates with the LAN device that is connected to the LAN Aggregati ports on your router, and checks to see if LAN port aggregation is support the LAN device. If LAN port aggregation is supported, the router automatic trunks the LAN Aggregation ports. If not, the LAN Aggregation ports work independent Ethernet ports. We recommend that you select this mode unless your LAN device can support a static link aggregation group (LAG) only.

- Enable static LAG. If your device supports a static LAG only, select this Otherwise, we recommend that you select the Enable (LACP-IEEE 802.3ad) button instead.

NOTE: If your LAN device supports a static LAG only, you must enable static mode on your router before you connect your device to the LA Aggregation ports on the router.

1. If you made changes, click the Apply button.

Your settings are saved.

8

Manage your Router and Satellite

This chapter describes the settings for administering and maintaining your router, satellite, and mesh network.

The chapter contains the following sections:

• Update the router and satellite rmware
• Change the admin password
• Enable admin password reset
• Reset the admin password
  • Always use HTTPS to access the router
  • View information about the router, the Internet port, and WiFi settings
  • Display the statistics of the Internet port
• Check the Internet connection status
  • View and manage logs of router activity
  • View devices currently on the mesh network
  • View the satellite status in the satellite web interface
  • Monitor Internet trafc
• Set up and manage Dynamic DNS
• Manage the router conguration le
• Return the router or satellite to its factory default settings
• Connect to your router with Anywhere Access

Update the router and satellite rmware

You can use the router web interface to check if new rmware is available and your router and satellite, or you can manually update the rmware for your rout satellite.

Check for new firmware and update the router and s

The rmware (routing software) is stored in ash memory. You might see a mess the top of the pages when new rmware is available. You can respond to that to update the rmware or you can check to see if new rmware is available at your router and satellite.

NOTE: We recommend that you connect a computer to the router using a Ethernet connection to update the rmware.

To check for new rmware and update your router and satellite:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.com.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Router Update > Online Update.

The Router Update page displays.

1. Click the Check button.

The router nds new rmware information if any is available and displays a m asking if you want to download and install it.

1. If new rmware is available, click the Yes button.

The router locates and downloads the rmware and begins the update.

WARNING: To avoid the risk of corrupting the rmware, do not interrupt the update. For example, do not close the browser, click a link, or loa new page. Do not turn off the router or satellite.

When the download is complete, your router and satellite restart. The update typically takes about one minute. Read the new rmware release notes to nd you must reconfigure the router after updating.

Manually update the rmware

If a satellite is connected to your router, you can log in to the router to make the rmware on your satellite.

WARNING: We recommend that you always update the rmware on your satellite rst, and then update your router. Also, do not update the rmware on your router and satellite at the same time, and do not update more one mesh device (router or satellite) at a time. If you need to update more one mesh device, wait for the rst mesh device to nish updating before updating your next mesh device.

To manually update the rmware on your router and satellite, follow these h level steps:

1. Visit_netgear.com/support and download the rmware for both your router and satellite.
2. Update the rmware on your satellite.

For more information, see Manually update satellite rmware on page 103.

1. Update the rmware on your router.

For more information, see Manually update router rmware on page 104.

Manually update satellite rmware

We recommend that you update your satellite's firmware before you update the rmware.

To manually update your satellite's rmware:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.com.

Nighthawk Tri-band Mesh WiFi 6E

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Router Update > Manual Update.

The Router Update page displays.

1. In the satellite section, and select your satellite.

The satellite's Router Update page opens.

NOTE: If you have more than one satellite, only update one satellite at time. You must wait for the rst satellite to nish updating before updatir the next satellite.

1. Click the Browse button.

2. Locate and select the satellite rmware le that you downloaded.

The rmware le name ends in .img or .chk.

1. Click the Upload button.

The rmware on your satellite is updated.

It takes a few minutes to complete the process.

1. After satellite nishes updating, on the satellite web interface, select Status and double-check the rmware version on the Status page.

Manually update router rmware

We recommend that you update your satellite's firmware before you update the rmware.

WARNING: Make sure that your satellite is ready updating its rmware before updating your router's rmware.

To manually update your router's rmware:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.com.

A login window opens.

1. Enter the admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Router Update > Manual Update.

The Router Update page displays.

1. Click the Browse button.
2. Locate and select the router rmware le you downloaded.

The rmware le name ends in .img.

1. Click the Upload button.

The rmware is updated.

Manage the rmware update settings

You can set the router to automatically update to future firmware versions as the available.

To manage automatic updates for future rmware versions:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Router Update > Manual Update.

The Router Update page displays.

1. In the Router Auto Firmware Update section, select one of the following radio

2. Enable. The router automatically updates to future rmware versions as they become available. This is the default setting. We recommend that you kee setting.

3. Disable. The router does not automatically update to future rmware version. You must manually update to future rmware versions.

4. Click the Apply button.

Your settings are saved.

Change the admin password

The admin password is the one you specied the rst time you logged in. You change this password.

NOTE: The ideal password contains no dictionary words from any language and contains uppercase and lowercase letters, numbers, and symbols. It can be up to 30 characters.

To change the password for the admin user name:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Set Password.

The Set Password page displays.

1. Type the old password in the Old Password eld.
2. Type the new password in the Set Password and Repeat New Password elds.
3. Click the Apply button.

Your settings are saved.

Enable admin password reset

The router admin password is used to log in to your router web interface. We that you enable password reset so that you can reset the password if it is for reset process is supported in Internet Explorer, Firefox, and Chrome browsers but in the Safari browser.

To enable password reset:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Set Password.

The Set Password page displays.

1. Select the Enable Password Reset check box.
2. Select two security questions and provide answers to them.
3. Click the Apply button.

Your settings are saved.

Reset the admin password

If you set up the password reset feature, you can reset your router admin packet you forgot it.

To reset your admin password:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Click the Cancel button.

If password reset is enabled, you are prompted to enter the serial number router.

The serial number is on the router label.

1. Enter the serial number of the router.

2. Click the Continue button.

The Router Password Reset page displays.

1. Enter your router's serial number in the eld.

Your router's serial number can be found on the router label.

1. Click the Continue button.

You are requested to enter a new admin password and to set new security

1. Enter your new admin password, set new security questions, and click the N button.

Your settings are saved.

1. Click the Login button.

A login window opens.

1. With your new admin password, log in to the router.

Always use HTTPS to access the router

You can congregate the router to require HTTPS connections between your web b and the router web interface, for example, "https://www.routerlogin.net". When you enable the HTTPS requirement, connection requests to the router web interface t specify HTTP are automatically converted to HTTPS.

NOTE: After you enable the HTTPS requirement, when you enter http://www.routerlogin.net, your browser might display a security warning because of the self-signed certificate on the router. This is expected behavior. You can proceed, or add an exception for the security warning. For more information, visit https://kb.netgear.com/000062980/what-to-do-incase-of-security-message.

To require HTTPS connections:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Web Services Management.

The Web Services Management page displays.

1. Select the Always Use HTTPS to Access Router check box.
2. Click the Apply button.

Your settings are saved.

View information about the router, the Internet port, and WiFi settings

You can view router information, the Internet port status, WiFi settings, and info about specific WiFi networks.

To view information about the router, Internet port, WiFi settings, and WiFi networks:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Click the ADVANCED tab.

The ADVANCED Home page displays.

The information on this page uses the following color coding:

• A green icon indicates that the Internet connection is ne and no problem. For a WiFi network, the network is enabled and secured.
• A red icon indicates that conguration problems exist for the Internet connection or the connection is down. For a WiFi network, the network is disabled
• An amber icon indicates that the Internet port is congured but cannot go Internet connection (for example, because the cable is disconnected), that a network is enabled but unprotected, or that another situation that requires attention occurred.

Display the statistics of the Internet port

To display the statistics of the Internet port:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Click the ADVANCED tab.

The ADVANCED Home page displays.

1. In the Internet Port pane, click the Show Statistics button.

The Show Statistics window opens and displays following information:

• System Up Time. The time elapsed since the router was last restarted.

• Port. The statistics for the WAN (Internet) port, LAN (Ethernet) port, and 1 displays. For each port, the following information displays:

• Status. The link status of the port.

• TxPkts. The number of packets transmitted on this port since the router last started.
• RxPkts. The number of packets received on this port since the router started.
• Collisions. The number of collisions on this port since the router was I started.
• Tx B/s. The current transmission (outbound) bandwidth used on the WAN port and LAN port.
• Rx B/s. The current reception (inbound) bandwidth used on the WAN p and LAN port.
• Up Time. The time elapsed since this port acquired the link.

- Poll Interval. The interval at which the statistics are updated on this page

1. To change the polling frequency, enter a time in seconds in the Poll Interval and click the Set Interval button.

To stop the polling entirely, click the Stop button.

Check the Internet connection status

To check the Internet connection status:

1. Launch a web browser from a computer or mobile device that is connected router network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Click the ADVANCED tab.

The ADVANCED Home page displays.

1. In the Internet Port pane, click the Connection Status button.

The Connection Status window opens. The information that displays depends on the type of Internet connection.

For example, if your Internet connection does not require a login and the r receives an IP address automatically, the window displays the following informa

• IP Address. The IP address that is assigned to the .
• Subnet Mask. The subnet mask that is assigned to the .
• Default Gateway. The IP address for the default gateway that the commun with.

• DHCP Server. The IP address for the Dynamic Host Configuration Protocol that provides the TCP/IP conguration for all the computers that are connected to the .

• DNS Server. The IP address of the Domain Name Service server that pro translation of network names to IP addresses.

• Lease Obtained. The date and time when the lease was obtained.

• Lease Expires. The date and time that the lease expires.

• To release (stop) the Internet connection, click the Release button.

• To renew (restart) the Internet connection, click the Renew button.
• To exit the screen, click the Close Window button.

View and manage logs of router activity

The logs are a detailed record of the websites you accessed or attempted to and many other router actions. Up to 256 entries are stored in the log.

To view and manage logs:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Logs.

The Logs page displays and shows information such as the following:

• Action. The action that occurred, such as whether Internet access was blocked or allowed.
• Source IP. The IP address of the initiating device for the log entry.
• Target address. The MAC or IP address of the device visited or to which was attempted.
• Date and time. The date and time the log entry was recorded.

Other information might be displayed.

1. To customize the logs, scroll down and clear or select the check boxes in in Log section.
2. To refresh the log screen, click the Refresh button.
3. To clear the log entries, click the Clear Log button.
4. To email the log immediately, click the Send Log button.

You must set up email notifications in order to receive the logs. The router the logs to the address that you specied when you set up email notifications more information, see Set up security event email notifications on page 55.

1. Click the Apply button.

Your settings are saved.

View devices currently on the mesh netw

You can view all satellites and devices that are currently connected to your mesl

To view devices on the mesh network:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Attached Devices.

The Attached Devices page displays.

The Connected Satellite table displays the following information:

• Device Name: The satellite model, device name, and IP address.
- IP Address: The satellite IP address. This IP address can change because router assigns an IP address to each satellite when it joins the network.
- Connection Type: The satellite is connected to the mesh network through or wired Ethernet connection.

• Connected Mesh Device: The router or (other) satellite that the satellite is connected to. The Orbi router's or satellite's MAC address also displays.
• Backhaul Status: The quality of the backhaul status between the satellite at the router or (other) satellite.

The Connected Devices table displays the following information:

• Status: Displays only if network access control (see Network access control on page 44) is enabled. The eld displays if a device is allowed or bloc
• Connection Type: The device is connected to the mesh network through a or wired Ethernet connection.
  • Device Name: The device model, device name, and IP address.
• IP Address: The device IP address. This IP address can change because router assigns an IP address to each device when it joins the network.
• MAC Address: The device MAC address. The unique MAC address for each device does not change.

View the satellite status in the satellite interface

The satellite web interface lets you view satellite status information that you can from the router web interface. You can nd the IP address of the satellite in web interface. You can then launch a new web browser window, enter the satellite address, and access the satellite web interface.

To view your satellite's status, it must be connected to your mesh network.

To view your satellite's status:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select Attached Devices.

The Attached Devices page displays.

1. In the Connected Satellite table, nd your satellite's IP address.

2. Launch a new web browser window and enter your satellite's IP address in browser's address bar.

A login window opens.

1. Enter the same admin user name and password that you entered for the rc

The satellite status displays. The page displays information about the satellite connections, hardware and rmware versions, and the WiFi networks in the 2.4 and 5 GHz bands.

1. To view detailed information about devices that are connected to the satellite networks, select Attached Devices.

The Attached Devices page displays. For each device, the page displays the connection type, IP address, device name, and MAC address.

Monitor Internet trafc

Trafc metering allows you to monitor the volume of Internet trafc that passes the router Internet port. You can set limits for trafc volume.

To monitor Internet trafc:

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Trafc Meter.

The Trafc Meter page displays.

1. Select the Enable Trafc Meter check box.

2. To control the volume of Internet traffic, use either the traffic volume control or the connection time control feature:

- Select the Trafc volume control by radio button and then select one of the following options:

- No Limit. No restriction is applied when the trafc limit is reached.

- Download only. The restriction is applied to incoming trafc only.

- Both Directions. The restriction is applied to both incoming and outgoing trafc.

- Select the Connection time control radio button and enter the allowed hours in the Monthly limit eld.

1. If your ISP charges for extra data volume when you make a new connection the extra data volume in MB in the Round up data volume for each con eld.

2. In the Trafc Counter section, set the trafc counter to begin at a specific time date.

To start the trafc counter immediately, click the Restart Counter Now button.

1. In the Trafc Control section, specify whether the router should issue a warning message before the monthly limit of Mbytes or hours is reached.

By default, the value is 0 and no warning message is issued. You can select the following to occur when the limit is attained:

• The Internet LED blinks white or amber.

• The Internet connection is disconnected and disabled.

1. Click the Apply button.

The Internet Trafc Statistics section helps you to monitor the data trafc.

1. To update the Trafc Statistics section, click the Refresh button.

2. To display more information about the data trafc on your router and to cha poll interval, click the Trafc Status button.

Set up and manage Dynamic DNS

Internet service providers (ISPs) assign numbers called IP addresses to identify each Internet account. Most ISPs use dynamically assigned IP addresses. This means the IP address can change at any time. You can use the IP address to access your remotely, but most people don't know what their IP addresses are or when this changes.

To make it easier to connect, you can get a free account with a Dynamic DI that lets you use a domain name to access your home network. To use this must set up the router to use Dynamic DNS. Then the router notices the Dyna service provider whenever its IP address changes. When you access your Dynami account, the service finds the current IP address of your home network and aut connects you.

If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), t DNS service does not work because private addresses are not routed on the I

Set up a new Dynamic DNS account

To set up Dynamic DNS and register for a free NETGEAR account:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Dynamic DNS.

The Dynamic DNS page displays.

1. Select the Use a Dynamic DNS Service check box.

2. From the Service Provider menu, select NETGEAR.

You can select another service provider.

1. Select the No radio button.

2. In the Host Name eld, type the name that you want to use for your URL
   The host name is sometimes called the domain name. Your free URL include host name that you specify and ends with mynetgear.com. For example, speci MyName.mynetgear.com.

3. In the Email eld, type the email address for your account.
4. In the Password (6-32 characters) eld, type the password for your account.
5. Click the Register button.
6. Follow the onscreen instructions to register for your NETGEAR Dynamic DNS s

Use a DNS account that you already created

If you already created a Dynamic DNS account with NETGEAR or No-IP, you can the router to use your account.

To set up Dynamic DNS if you already created an account:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Dynamic DNS.

The Dynamic DNS page displays.

1. Select the Use a Dynamic DNS Service check box.
2. From the Service Provider menu, select your provider.
3. Select the Yes radio button.

The page adjusts and displays the Show Status, Cancel, and Apply buttons.

1. In the Host Name eld, type the host name (sometimes called the domain r for your DDNS account.

2. In the Email eld, type the email address for your DDNS account.

3. In the Password (6-32 characters) eld, type the password for your DDNS ac

4. Click the Apply button.

Your settings are saved.

1. To verify that your Dynamic DNS service is enabled in the router, click the Status button.

A message displays the Dynamic DNS status.

Change the Dynamic DNS settings

You can change the settings for your Dynamic DNS account.

To change your settings:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Dynamic DNS.

The Dynamic DNS page displays.

1. Change your DDNS account settings as necessary.
2. Click the Apply button.

Your settings are saved.

Manage the router congruration le

The congruration settings of the router are stored within the router in a congrur le. You can back up (save) this le to your computer, restore it, or reset it to default settings.

Back up the settings

To back up the 's conguration settings:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Backup Settings.
   The Backup Settings page displays.
2. Click the Back Up button.
3. Follow the direction of your browser to save the le.

A copy of the current settings is saved in the location that you specied.

Erase the settings on the router

CAUTION: This process erases all settings that you congured in the router.

To erase the settings on the router

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Backup Settings.

The Backup Settings page displays.

1. Click the Erase button.

The conguration is reset to factory default settings. When the reset is complete the router restarts. This process takes about two minutes.

WARNING: To avoid the risk of corrupting the rmware, do not interrupt the reset. For example, do not close the browser, click a link, or load page. Do not turn off the router. Wait until the router nishes restarting.

To restore conguration settings that you backed up:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Backup Settings.

The Backup Settings page displays.

1. Click the Browse button to nd and select the .cfg le.
2. Click the Restore button.

The le is uploaded to the router and the router restarts.

WARNING: Do not interrupt the restoration process.

Return the router or satellite to its fact default settings

Under some circumstances (for example, if you lost track of the changes that y to the router or satellite settings or you move the router to a different network might want to erase the configuration and reset the router or satellite to its face settings.

To reset the router or satellite to its factory default settings, you can use either button on the back of the router or satellite or the Erase function.

After you reset the router to factory default settings, the user name is admin, password is password, the LAN IP address is 192.168.1.1 (which is the same as www.routerlogin.net), and the DHCP server is enabled.

NOTE: If the router is in access point mode or bridge mode and you d know the IP address that is assigned to it, rst try to use an IP scanner application to detect the IP address. (IP scanner applications are available online free of charge.) If you can detect the IP address, you don't need the router to factory default settings.

Use the Reset button

CAUTION: If you use the Reset button on the router, the process erases all settings that you congured on the router

To reset the router or satellite to factory default settings:

1. On the back of the router or satellite, locate the Reset button.
2. Using a straightened paper clip, press and hold the Reset button for at least seconds.
3. Release the Reset button.

When the reset is complete, the router or satellite restarts. This process takes two minutes.

WARNING: To avoid the risk of corrupting the rmware, do not interrupt the reset. Do not turn off the router or satellite. Wait until the router satellite nishes restarting.

Erase the settings on the router

CAUTION: This process erases all settings that you congured in the router.

To erase the settings on the router

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Administration > Backup Settings.

The Backup Settings page displays.

1. Click the Erase button.

The conguration is reset to factory default settings. When the reset is complete, the router restarts. This process takes about two minutes.

WARNING: To avoid the risk of corrupting the rmware, do not interrupt the reset. For example, do not close the browser, click a link, or load page. Do not turn off the router. Wait until the router nishes restarting.

Connect to your router with Anywhere Access

The Anywhere Access feature on the Nighthawk app allows you to connect to router when you're away from home and change its settings. Before you can use Anywhere Access feature on the Nighthawk app, you must update your router's first download and download the latest Nighthawk app for your mobile device.

Nighthawk Tri-band Mesh WiFi 6E

For more information about how to update your router's firmware, see Update th and satellite rmware on page 102.

To download the latest Nighthawk app for your mobile device, visit https://www.netgear.com/home/apps-services/nighthawk-app/.

9

Use OpenVPN to Access Your Network

You can use OpenVPN software to remotely access your router with virtual private networking (VPN). This chapter explains how to install and use OpenVPN software set up a VPN tunnel.

The chapter contains the following sections:

• About VPN connections
• Enable OpenVPN service in the router
  • Install OpenVPN software on a VPN client
  • LAN IP addressing in VPN networks
  • Use VPN to access your Internet service at home

About VPN connections

A virtual private network (VPN) lets you use the Internet to securely access you when you aren't home.

This type of VPN access is called a client-to-gateway tunnel. The computer is t and the router is the gateway. To use the VPN feature, you must do the foll

• Log in to the router to enable and configure OpenVPN (see Enable OpenVPN in the router on page 128).
• Install OpenVPN client software and conguration les on your device from which you want to use VPN (see Install OpenVPN software on a VPN client on pa
• Run the OpenVPN client software on your device when you want to use a connection.

Enabling OpenVPN on your router allows VPN connections between the router and client, for example your laptop when you are away from home. The router provides VPN service and the laptop is the VPN client. Traffic between the router and this is encrypted.

NOTE: The router itself does not function as a VPN client to an external service provider, so it does not encrypt traffic passing between your home network and the Internet.

VPN can use either Dynamic DNS (DDNS) or a static IP address to connect w router:

• To use a DDNS service, register for a DDNS account with a host name. You host name to access your network. The router supports these DDNS accounts NETGEAR, No-IP, and Dyn. For more information, see Set up and manage D DNS on page 118.
• If your Internet service provider (ISP) assigned a static WAN IP address that changes, the VPN can use that IP address to connect to your home network

Enable OpenVPN service in the router

You must enable the OpenVPN service settings in the router before you can use connection.

To enable OpenVPN service:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VPN Service.

The VPN Service page displays.

NOTE: The OpenVPN congruration software packages that you can download on the page are for the VPN client devices (see Install Open software on a VPN client on page 129).

1. Select the Enable VPN Service check box.

We recommend that you use the default TUN mode and TAP mode settings settings determine how VPN information is transferred.) If you know that you other settings, you can change the TUN mode and TAP mode settings, but do so before you download and install the OpenVPN configuration software pac on client devices (see Install OpenVPN software on a VPN client on page 1

1. To change the TUN mode settings, do the following:

2. To change the TUN mode service type, select the UDP or TCP radio button. The default protocol for TUN mode is UDP.

3. To change the TUN mode service port, type the port number that you use in the eld.

The default port number for TUN mode is 12973. The TUN port number in the .ovpn le of the OpenVPN congruration software package for Mac a non-Windows clients.

1. To change the TAP mode settings, do the following:

• To change the TAP mode service type, select the UDP or TCP radio button.

The default protocol for TAP mode is UDP.

- To change the TAP mode service port, type the port number that you use in the eld.

The default port number for TAP mode is 12974. The TAP port number in the .ovpn le of the OpenVPN congruration software package for Window clients.

1. Click the Apply button.

Your changes are saved. VPN is enabled in the router, but you must install up OpenVPN software on your device before you can use a VPN connection

Install OpenVPN software on a VPN client

You must install OpenVPN software on each Windows-based computer, Mac comp iOS device, and Android device that you plan to use for VPN connections to Each computer or device is called a VPN client.

The software consists of the application software and the conguration les:

- Download and install the application software from the link that is provided client-specific section.

- Download and install the conguration les from the router as described in each client-specific section. The configuration files provide the correct router configurati information for the client utility. You must download the conguration les after enable and congure OpenVPN service in the router (see Enable OpenVPN server in the router on page 128).

NOTE: If you later change the OpenVPN congruration in the router (for example, you change the TUN or TAP port number), you must download and install the .ovpn congruration le again on each client, depending on its operating system. If you change the TUN port number in the router, .ovpn congruration le for Mac and non-Windows clients changes. If you change the TAP port number in the router, the .ovpn congruration le for Windows clients changes.

Install OpenVPN software on a Windows-based compute

You must install both the OpenVPN client utility and OpenVPN congruration les each Windows-based computer where you want to use a VPN connection to you.

To download and install the OpenVPN client utility and OpenVPN conguration les on a Windows-based computer:

1. To download the OpenVPN client utility on your Windows-based computer, visi openvpn.net/community-downloads/.
2. Select the Windows package with the installer les.
   In most situations, you can download the Windows 32-bit or Windows 64-bit les, depending on your Windows operating system.
3. Download and install the OpenVPN client utility on your computer.
   You need to have administrative privileges.
4. Launch a web browser from a Windows-based computer that is connected to mesh network.
5. Enter http://www.routerlogin.net.
   A login window opens.
6. Enter the router user name and password.
   The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.
   The BASIC Home page displays.
7. Select ADVANCED > Advanced Setup > VPN Service.
   The VPN Service page displays.
8. Make sure that the Enable VPN Service check box is selected.
   For more information about the VPN congruration for the router, see Enable OpenVPN service in the router on page 128.
9. Click the For Windows button to download the router's OpenVPN conguration les to your Windows-based computer.

10. Unzip the OpenVPN congruration les and copy them to the folder in which installed the OpenVPN client utility.

11. Modify the VPN interface name to NETGEAR-VPN:

a. If your computer is running Windows 10, select Control Panel > Network Sharing Center > Change adapter settings.

If your computer is running another Windows version, nd the page that le change the adapter settings.

b. In the local area connection list, nd the local area connection with the d name TAP-Windows Adapter.

c. Select the local area connection and change its name (not its device name NETGEAR-VPN.

If you do not change the VPN interface name, the VPN tunnel connection

You can now open a VPN tunnel to the router.

For more information about installing and using OpenVPN on your Windows-based computer, visit https://openvpn.net/community-resources/how-to/#quick.

Install OpenVPN software on a Mac computer

You must install both the Tunnelblick OpenVPN client utility and OpenVPN config les on each Mac computer where you want to use a VPN connection to your

To download and install the Tunnelblick OpenVPN client utility and OpenVPN conguration les on a Mac computer:

1. To download the Tunnelblick OpenVPN client utility on your Mac computer, v https://tunnelblick.net/downloads.html.

2. Download and install the Tunnelblick OpenVPN client utility on your Mac com You need to have administrative privileges.

3. Launch a web browser from the Mac computer, which must be connected to mesh network.

4. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

Nighthawk Tri-band Mesh WiFi 6E

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VPN Service.

The VPN Service page displays.

1. Make sure that the Enable VPN Service check box is selected.

For more information about the VPN congruration for the router, see Enable OpenVPN service in the router on page 128.

1. Click the For non-Windows button to download the router's OpenVPN configur les to your Mac computer.
2. Unzip the OpenVPN congruration les and copy them to the folder in which installed the Tunnelblick OpenVPN client utility.

You can now open a VPN tunnel to the router.

For more information about installing and using OpenVPN on your Mac compute https://openvpn.net/vpn-server-resources/installation-guide-for-openvpn-connect-client-on-macos/.

Install OpenVPN software on an iOS device

You must install both the OpenVPN Connect app and OpenVPN congruration les each iOS device where you want to use a VPN connection to your router.

To download and install the OpenVPN Connect app and OpenVPN congruration les on an iOS device:

1. On your iOS device, download and install the OpenVPN Connect app from the app store.
2. Launch a web browser from a computer or your iOS device that is connect mesh network.
3. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VPN Service.

The VPN Service page displays.

1. Make sure that the Enable VPN Service check box is selected.

For more information about the VPN congruration for the router, see Enable OpenVPN service in the router on page 128.

1. Click the For Smart Phone button to download the router's OpenVPN conjugates to your computer or iOS device.

If you download the conguration les to your computer, unzip the les, and s them your iOS device.

1. On your iOS device, do the following:

a. Open the .ovpn le.

b. If the OpenVPN Connect app does not start automatically, a list of apps display: Select the OpenVPN Connect app.

c. Install the .ovpn le.

You can now open a VPN tunnel to the router.

For more information about installing and using OpenVPN on your iOS device, https://www.vpngate.net/en/howto_openvpn.aspx#ios.

Install OpenVPN software on an Android device

You must install both the OpenVPN Connect app and OpenVPN congruration les each Android device where you want to use a VPN connection to your router.

To download and install the OpenVPN Connect app and OpenVPN congruration les on an Android device:

1. On your Android device, download and install the OpenVPN Connect app fro Google Play Store.

2. Launch a web browser from a computer or your Android device that is con to your mesh network.

3. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VPN Service.

The VPN Service page displays.

1. Make sure that the Enable VPN Service check box is selected.

For more information about the VPN congruration for the router, see Enable OpenVPN service in the router on page 128.

1. Click the For Smart Phone button to download the router's OpenVPN conjug les to your computer or Android device.

If you download the conguration les to your computer, unzip the les, and s them your Android device.

1. On your Android device, open the .ovpn file and import it into the OpenVPI app.

You can now open a VPN tunnel to the router.

For more information about using OpenVPN on your Android device, visit https://www.vpngate.net/en/howto_openvpn.aspx#android.

LAN IP addressing in VPN networks

For the VPN connection to work, your computer or device (the VPN client) must be connected to a network that uses a different LAN IP address scheme than you

The default LAN IP address scheme for the router is 192.168.1.x. (The most cc schemes are 192.168.x.x, 172.x.x.x, and 10.x.x.x.) If you experience a conict, chan the IP scheme either for your home network or for the network where your V device is connected.

If both networks use the same LAN IP scheme, when the VPN tunnel is estab cannot access your home router or your home network with the OpenVPN softv

For information about changing the LAN settings on the router, see Change the IP address settings on page 82.

Use VPN to access your Internet service home

When you're away from home and you access the Internet, you usually use a long service provider. For example, at a coffee shop you might be given a code that use the coffee shop's Internet service account to surf the web.

Your router lets you use a VPN connection to access your own Internet service you're away from home. You might want to do this if you travel to a geogra that doesn't support all the Internet services that you use at home. For example, Netix account might work at home but not in a different country.

Allow VPN client Internet access in the router

By default, the router is set up to allow VPN connections only to your home but you can change the settings to allow Internet access. Accessing the Internet through a VPN might be slower than accessing the Internet directly.

To allow VPN clients to use your home Internet service:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VPN Service.

The VPN Service page displays.

1. Make sure that the Enable VPN Service check box is selected.

For more information about the VPN congruration for the router, see Enable OpenVPN service in the router on page 128.

1. Scroll down to the Clients will use this VPN connection to access section, a the All sites on the Internet & Home Network radio button.

When you access the Internet with the VPN connection, instead of using a Internet service, you use the Internet service from your home network.

1. Click the Apply button.

Your settings are saved.

Block VPN client Internet access in the router

By default, the router is set up to allow VPN connections only to your home not to the Internet service for your home network. If you changed this setting Internet access, you can change it back.

To allow VPN clients to access only your home network and block them from the Internet service for your home network:

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > VPN Service.

The VPN Service page displays.

1. Make sure that the Enable VPN Service check box is selected.

For more information about the VPN congruration for the router, see Enable OpenVPN service in the router on page 128.

1. Scroll down to the Clients will use this VPN connection to access section, a the Home Network only radio button.

This is the default setting. The VPN connection is only to your home netwo the Internet service for your home network.

1. Click the Apply button.

Nighthawk Tri-band Mesh WiFi 6E

Your settings are saved.

10

Manage Port Forwarding and Port Triggering

You can use port forwarding and port triggering to set up rules for Internet t need networking knowledge to set up these features.

This chapter contains the following sections:

• Manage port forwarding to a local server
• Port triggering

Manage port forwarding to a local serve

If your home network includes a server, you can allow certain types of incoming to reach the server. For example, you might want to make a local web server or game server visible and available to the Internet.

The router can forward incoming traffic with specific protocols to computers on your local network. You can specify the servers for applications and you can also specify default DMZ server to which the router forwards all other incoming protocols.

Set up port forwarding to a local server

To forward specific incoming protocols:

1. Decide which type of service, application, or game you want to provide.
2. Find the local IP address of the computer on your network that will provide service.

The server computer must always use the same IP address.

1. Assign the server computer a reserved IP address.

See Manage reserved LAN IP addresses on page 85.

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

7. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. Leave the Port Forwarding radio button selected as the service type.

2. From the Service Name menu, select the service name.

If the service that you want to add is not in the menu, create a custom Add a custom port forwarding service on page 140.

1. In the Server IP Address eld, enter the IP address of the computer that v the service.

2. Click the Add button.

The service displays in the menu.

Add a custom port forwarding service

The router lists default services and applications that you can use in port forward rules. If the service or application is not predened, you can add a port forward with a custom service or application.

To add a custom service:

1. Find out which port number or range of numbers the application uses.

You can usually nd this information by contacting the publisher of the applic or user groups or news groups.

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. Leave the Port Forwarding radio button selected as the service type.

2. Click the Add Custom Service button.

The Ports - Custom Service page displays.

1. In the Service Name eld, enter a descriptive name.

2. From the Protocol menu, select the protocol.

If you are unsure, select TCP/UDP.

1. In the External port range eld enter the port range.

2. Specify the internal ports by one of these methods:

3. Leave the Use the same port range for Internal port check box selected.

4. Type the port numbers in the Internal Starting Port field and the Internal Ending Port field.

You can enter a port range and xed ports in one rule, for example, exterr 78, 100-102), internal (40-60, 99, 200-202). With this rule, external ports 30-51 forwarded to internal ports 40-60.

1. In the Internal IP address eld, type the IP address or select the radio but attached device listed in the table.
2. Click the Apply button.

The service is now in the list on the Port Forwarding/Port Triggering page.

Change a port forwarding service

To edit a port forwarding entry:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router user name and password.

The user name is admin. The password is the one that you specified the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. Leave the Port Forwarding radio button selected as the service type.

2. In the table, select the radio button next to the service name.

3. Click the Edit Service button.

The Ports - Custom Services page displays.

1. Change the settings as needed.

2. Click the Apply button.

Your settings are saved.

Delete a port forwarding entry

To delete a port forwarding entry:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. Leave the Port Forwarding radio button selected.
2. In the table, select the radio button next to the service name.
3. Click the Delete Service button.

The service is deleted.

Application example: Make a local web server public

If you host a web server on your local network, you can use port forwarding web requests from anyone on the Internet to reach your web server.

To make a local web server public:

1. Assign your web server either a xed IP address or a dynamic IP address u address reservation.

In this example, your router always gives your web server an IP address of 192.168.1.33.

1. On the Port Forwarding/Port Triggering page, congure the router to forward HTTP service to the local address of your web server at 192.168.1.33.

HTTP (port 80) is the standard protocol for web servers.

1. (Optional) Register a host name with a Dynamic DNS service and specify that on the Dynamic DNS page of the router.

Dynamic DNS makes it much easier to access a server from the Internet be can type the name in the Internet browser. Otherwise, you must know the I that the ISP assigned, which typically changes.

How the router implements the port forwarding rule

The following sequence shows the effects of a port forwarding rule:

1. When you type the URL www.example.com in your browser, the browser send web page request message with the following destination information:

2. Destination address. The IP address of www.example.com, which is the ad of your router.

3. Destination port number. 80, which is the standard port number for a we process.

4. Your router receives the message and nds your port forwarding rule for incc port 80 trafc.

5. The router changes the destination in the message to IP address 192.168.1.33 sends the message to that computer.

6. Your web server at IP address 192.168.1.33 receives the request and sends a message to your router.

7. Your router performs Network Address Translation (NAT) on the source IP add and sends the reply through the Internet to the computer or WiFi device that the web page request.

Port triggering

Port triggering is a dynamic extension of port forwarding that is useful in these

• An application must use port forwarding to more than one local computer (k simultaneously).
  • An application must open incoming ports that are different from the outgoing

With port triggering, the router monitors traffic to the Internet from an outbound port that you specify. For outbound traffic from that port, the router saves the of the computer that sent the traffic. The router temporarily opens the incoming or ports that you specify in your rule and forwards that incoming traffic to that

Port forwarding creates a static mapping of a port number or range of ports local computer. Port triggering can dynamically open ports to any computer when needed and close the ports when they are no longer needed.

NOTE: If you use applications such as multiplayer gaming, peer-to-peer connections, real-time communications such as instant messaging, or remote assistance (a feature in Windows XP), enable Universal Plug and Play (UPnP)

Add a port triggering service

To add a port triggering service:

1. Launch a web browser from a computer or mobile device that is connected mesh network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding / Port Triggering page displays.

1. Select the Port Triggering radio button.

The page adjusts.

1. Click the Add Service button.

The Port Triggering - Services page displays.

1. In the Service Name eld, type a descriptive service name.

2. From the Service User menu, select a user option:

- Any: This is the default setting and allows any computer on the Internet this service.

- Single address: Restricts the service to a particular computer. Enter the IP address in the elds, which become available with this selection from the menu.

1. From the Service Type menu, select the protocol (TCP or UDP) that is associated with the service or application.

2. In the Triggering Port eld, enter the number of the outbound trafc port th open the inbound ports.

3. From the Connection Type menu, select the protocol (TCP or UDP) that is associated with the inbound connection.

If you are unsure, select TCP/UDP.

1. In the Starting Port and Ending Port elds, enter the enter the numbers of the inbound trafc ports.

2. Click the Apply button.

The service is now in the Portmap Table. You must enable port triggering by the router uses port triggering. See Enable port triggering on page 145.

Enable port triggering

To enable port triggering:

1. Launch a web browser from a computer or mobile device that is connected mesh network.

2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.

The Port Forwarding/Port Triggering page displays.

1. Select the Port Triggering radio button.

2. Clear the Disable Port Triggering check box.

If this check box is selected, the router does not use port triggering even specied port triggering settings.

1. In the Port Triggering Timeout eld, enter a value up to 9999 minutes.

This value controls how long the inbound ports stay open when the router no activity. This value is required because the router cannot detect when the application terminates.

1. Click the Apply button.

Your settings are saved.

Application example: Port triggering for Internet Relay Chat

Some application servers, such as FTP and IRC servers, send replies to multiple numbers. Using port triggering, you can tell the router to open more incoming when a particular outgoing port starts a session.

An example is Internet Relay Chat (IRC). Your computer connects to an IRC seed destination port 6667. The IRC server not only responds to your originating source but also sends an "identify" message to your computer on port 113. Using port you can tell the router, "When you initiate a session with destination port 6667 also allow incoming traffic on port 113 to reach the originating computer." The sequence shows the effects of this port triggering rule:

1. You open an IRC client program to start a chat session on your computer.
2. Your IRC client composes a request message to an IRC server using a dest port number of 6667, the standard port number for an IRC server process. computer then sends this request message to your router.
3. Your router creates an entry in its internal session table describing this community session between your computer and the IRC server. Your router stores the o

information, performs Network Address Translation (NAT) on the source address and port, and sends this request message through the Internet to the IRC s

1. Noting your port triggering rule and observing the destination port number of your router creates another session entry to send any incoming port 113 traffic your computer.
2. The IRC server sends a return message to your router using the NAT-assigned port (for example, port 33333) as the destination port and sends an "identify" to your router with destination port 113.
3. When your router receives the incoming message to destination port 33333, it its session table to see if a session is active for port number 33333. Findir session, the router restores the original address information replaced by NAT sends this reply message to your computer.
4. When your router receives the incoming message to destination port 113, it its session table and nds an active session for port 113 associated with you computer. The router replaces the message's destination IP address with your computer's IP address and forwards the message to your computer.
5. When you finish your chat session, your router eventually senses a period of in the communications. The router then removes the session information from session table and incoming traffic is no longer accepted on port numbers 33:113.

11

Troubleshooting

This chapter provides information to help you diagnose and solve problems you experience with your router or satellite. If you do not nd the solution here, ch NETGEAR support site at netgear.com/support for product and contact information.

This chapter includes the following sections:

• Quick tips
  • The router and satellite do not sync
• Cannot log in to the router
• Cannot access the Internet
• Troubleshoot Internet browsing
• Troubleshoot PPPoE
• Troubleshoot WiFi connectivity
• Troubleshoot your network using the ping utility

Quick tips

This section describes tips for troubleshooting some common problems.

Sequence to restart your network

When you restart your network, follow this sequence:

1. Turn off and unplug the modem.
2. Turn off the router.
3. Plug in the modem and turn it on. Wait two minutes.
4. Turn on the router and wait two minutes.

WiFi settings

Make sure that the WiFi settings in the WiFi-enabled computer or mobile device the router match.

The WiFi network name (SSID) and WiFi security settings must match exactly.

If you set up an access list, you must add each WiFi-enabled computer or mol MAC address to the router's access list.

Network settings

Make sure that the network settings of the computer are correct. Wired and w connected computers must use network (IP) addresses on the same network as router. The simplest way to do this is to configure each computer to obtain a automatically using DHCP.

Some cable modem service providers require you to use the MAC address of computer initially registered on the account. You can view the MAC address on Attached Devices page.

The router and satellite do not sync

If you are experiencing difficulty syncing the router and the satellite, we recommend that you move the satellite into the same room as the router during the sync. The satellite to a different location.

To sync the router and the satellite:

1. Place the satellite in the same room as the router.

Use this satellite location only during the sync process.

1. Connect the satellite to a power source.

2. Press the Sync button on the router and then within two minutes, press the Sync button on the satellite.

3. Wait for the satellite LED to light.

The satellite LED blinks white while it attempts to sync with the router. After blinks white, it lights one of the following colors:

- Blue. The router and satellite successfully synced, and the connection between the router and satellite is good.

- Amber. The router and satellite failed to sync. Try repeating Step 3 again sync keeps failing, try moving the satellite to a different location that's clc the router.

1. Move the satellite to a new location and connect the satellite to a power

2. At the new location, check the satellite LED and make sure it lights blue.

If the satellite LED lights blue, the satellite synced successfully. If the satellite lights amber, move the satellite closer to the router and try again. The sate be within range of the router's WiFi cover area for a good connection to

Cannot log in to the router

Make sure that your computer or mobile device is connected to your mesh WiFi. If you do not want to use a WiFi connection, you can connect your computer router with an Ethernet cable.

If you changed the admin password and you forgot what it is, see Reset the password on page 108.

Cannot access the Internet

Check your network and Internet connections:

1. Make sure that your WiFi-enabled computer or mobile device is connected to mesh network.

2. If you are connected to your mesh network but you cannot access the Internet to see if your Internet connection is working.

3. Launch a web browser from a computer or WiFi device that is connected to a network.

4. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Click the ADVANCED tab.

The ADVANCED Home page displays.

1. Check that an IP address is shown for the Internet port.

If 0.0.0.0 is shown, your router did not obtain an IP address from your Internet provider (ISP).

If your router cannot obtain an IP address from the ISP, you can force your modem to recognize your new router by restarting your network. For more info see Sequence to restart your network on page 149.

If your router is still unable to obtain an IP address from the ISP, the problem one of the following:

- Your Internet service provider (ISP) might require a login program. Ask your whether they require PPP over Ethernet (PPPoE) or some other type of login

- If your ISP requires a login, the login name and password might be set in

- Your ISP might check for your computer's host name. Assign the computer h name of your ISP account as the account name on the Internet Setup page

- If your ISP allows only one Ethernet MAC address to connect to Internet and for your computer's MAC address, do one of the following:

- Inform your ISP that you bought a new network device and ask them to router's MAC address.

- Congure your router to clone your computer's MAC address.

Troubleshoot Internet browsing

If your router can obtain an IP address but your computer is unable to load pages from the Internet, it might be for one of the following reasons:

• The trafc meter is enabled, and the limit was reached.
  By conguring the trafc meter not to block Internet access when the trafc line reached, you can resume Internet access. If your ISP sets a usage limit, they charge you for the overage.
• Your computer might not recognize any DNS server addresses. A DNS server host on the Internet that translates Internet names (such as www addresses) to IP addresses.
  Typically, your ISP provides the addresses of one or two DNS servers for you. If you entered a DNS address during the router's configuration, restart your cc Alternatively, you can congregate your computer manually with a DNS address, a explained in the documentation for your computer.
• The router might not be congured as the default gateway on your computer Reboot the computer and verify that the router address (www.routerlogin.net) is listed by your computer as the default gateway address.
• You might be running login software that is no longer needed. If your ISP a program to log you in to the Internet, you no longer need to run that installing your router.

Troubleshoot PPPoE

If you are using PPPoE, try troubleshooting your Internet connection.

To troubleshoot a PPPoE connection:

1. Launch a web browser from a computer or WiFi device that is connected to network.
2. Enter http://www.routerlogin.net.

A login window opens.

1. Enter the router admin user name and password.

The user name is admin. The password is the one that you specied the rs that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

1. Click the ADVANCED tab.

The ADVANCED Home page displays.

1. In the Internet Port pane, click the Connection Status button.

The Connection Status window opens.

1. Check the Connection Status window to see if your PPPoE connection is active working.

If the router is not connected, click the Connect button.

The router continues to attempt to connect indenitely.

1. If you cannot connect after several minutes, the router might be set up with incorrect service name, user name, or password, or your ISP might be exper a provisioning problem.

Unless you connect manually, the router does not authenticate using PPPoE u data is transmitted to the network.

Troubleshoot WiFi connectivity

If you are experiencing trouble connecting to your mesh WiFi network, try to i problem:

- Does the WiFi-enabled computer or mobile device that you are using nd your network?

If you disabled the router's SSID broadcast, then your WiFi network is hidden does not display in the list of networks that your computer or WiFi device default, SSID broadcast is enabled.)

- Does your WiFi-capable device support the security that you are using for your network (WPA2 or WPA3)?

- To view the WiFi settings for the router, use an Ethernet cable to connect to the Ethernet port on the router. Then log in to the router, and select Wireless.

NOTE: Be sure to click the Apply button if you change settings.

• If you are trying to connect to the 5 GHz WiFi band, does your WiFi-enable or mobile device support this standard?
• Did your computer or WiFi device automatically connect to a different WiFi in your area, such as a WiFi hotspot?

Troubleshoot your network using the ping utility

Most network devices and routers contain a ping utility that sends an echo rec packet to the designated device. The device then responds with an echo reply. easily troubleshoot a network using the ping utility in your computer or worksta

Test the LAN path from a Windows-based computer your router

You can ping the router from your Windows-based computer to verify that the to your router is set up correctly.

To ping the router from your Windows-based computer:

1. From the Windows toolbar, click the Start button and select Run.
2. In the eld provided, type ping followed by the IP address of the router, a example:

ping www.routerlogin.net

1. Click the OK button.

You should see a message like this one:

Pinging with 32 bytes of data

If the path is working, you see this message:

Reply from < IP address>: bytes=32 time=NN ms TTL=xxx

If the path is not working, you see this message:

Request timed out

If the path is not functioning correctly, you might be experiencing one of the problems:

- Wrong physical connections

Check that the appropriate LEDs are on for your network devices. If your ro computer are connected to a separate Ethernet switch, make sure that the li on the switch are lit for the switch ports that your computer and router are to.

- Wrong network conguration

Verify that the IP address for your router and your computer are correct an the addresses are on the same subnet.

Test the path from a Windows-based computer to a device

After verifying that the LAN path works correctly, test the path from your Windc computer to a remote device.

To test the path from your Windows-based computer to a remote device:

1. From the Windows toolbar, click the Start button and select Run.

2. In the Windows Run window, type:

ping -n 10

where is the IP address of a remote device such as your ISP

If the path is functioning correctly, messages display that are similar to those s. Test the LAN path from a Windows-based computer to your router on page 1.

If you do not receive replies, check the following:

- Check to see that the IP address of your router is listed as the default gate your computer. If DHCP assigns the IP congruration of your computers, this information is not visible in your computer Network Control Panel. Verify that address of the router is listed as the default gateway.

- Check to see that the network address of your computer (the portion of the specified by the subnet mask) is different from the network address of the re device.

- Check to see that your cable or DSL modem is connected and functioning.

Nighthawk Tri-band Mesh WiFi 6E

• If your ISP assigned a host name to your computer, enter that host name account name on the Internet Setup page.
• Your ISP might be rejecting the Ethernet MAC addresses of all but one of computers.

Many broadband ISPs restrict access by allowing traffic only from the MAC ac of your broadband modem. Some ISPs additionally restrict access to the MAC of a single computer connected to that modem. If your ISP does this, cong router to "clone" or "spoof" the MAC address from the authorized computer.

12

Supplemental Information

This appendix covers the following topics:

• Factory settings
  • Technical specifications

Factory settings

You can return your router or satellite to its factory settings. Use the end of or a similar object to press and hold the Reset button on the back of the satellite for at least seven seconds until the router or satellite LED blinks. The satellite resets, and returns to the factory settings.

Factory settings for router model MR90

The following table shows the factory default settings for the router.

Table 4. Factory default settings for the router

	Default SettingFeature
	http://www.routerlogin.netUser login URLRouter login
	adminUser name (case-sensitive)
	Use default hardware addressWAN MAC addressInternet cc
	1500WAN MTU size
	AutoSensingPort speed
	192.168.1.1LAN IPLocal network (LAN)
	255.255.255.0Subnet mask
DHCP server	Enabled
DHCP range	192.168.1.2 to 192.168.1.254
	192.168.1.2DHCP starting IP address
	192.168.1.254DHCP ending IP address
DMZ	Disabled
Time zone	GMT for WWGMT -8 for NA and CNGMT +10 for AUGMT +9 for KOGMT +8 for PRGMT +5:30 for IN
Time zone adjusted for daylight
saving time

Table 4. Factory default settings for the router (Continued)

		Default SettingFeature
Firewall	Inbound (communications coming in from the Internet)	Disabled (except traffic on port 80, the HTTP port)
	out to the Internet)	Enabled (all)Outbound (communications going
		DisabledSource MAC Itering
		EnabledWiFi communicationWiFi
		See router labelSSID name
		WPA2-Personal + WPA3-PersonalSecurity
		EnabledBroadcast SSID
	Transmission speed	Auto^1
	Country/region	United States of America; otherwise, varies by region
		AutoRF channel 2.4 GHz
		Channel 44RF channel 5 GHz
		Channel 37 (PSC)RF channel 6 GHz

^1 Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput can vary. Network conditions and environmental factors, including volume of network trafc, building materials and construction, and network overhead, lower actual data throughput rate.

Factory settings for satellite model MS90

The following table shows the factory default settings for the satellite.

Table 5. Factory default settings for the satellite

Feature		Default Setting
Router login	User login URL	http://www.routerlogin.net
	User name (case-sensitive)	admin
	Login password (case-sensitive)	password

Table 5. Factory default settings for the satellite (Continued)

	Default SettingFeature
	Use default hardware addressWAN MAC addressInternet cc
	1500WAN MTU size
	AutoSensingPort speed
	192.168.1.250LAN IPLocal network (LAN)
	255.255.255.0Subnet mask
	DisabledDHCP server
	DisabledDMZ
Time zone	GMT for WWGMT -8 for NA and CNGMT +10 for AUGMT +9 for KOGMT +8 for PRGMT +5:30 for IN
saving time	DisabledTime zone adjusted for daylight
	DisabledSNMP
	EnabledWiFi communicationWiFi
	See satellite labelSSID name
	WPA2-Personal + WPA3-PersonalSecurity
	EnabledBroadcast SSID
Transmission speed	Auto^2
Country/region	United States of America; otherwise, varies by region
	AutoRF channel 2.4 GHz
	Channel 44RF channel 5 GHz
	Channel 37 (PSC)RF channel 6 GHz

^2 Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput can vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.

Technical specifications

The following are the technical specifications for your router and satellite

Technical specifications for router model MR90

The following table shows the technical specifications for the router.

Table 6. Technical specifications for the router

	DescriptionFeature
Data and routing protocols	TCP/IP, RIP-1, RIP-2, DHCP, PPPoE, PPTP, Bigpond, Dynamic DNS, UPnP, and SMB
Power adapter	North America: 120V, 60 Hz, inputUK, Australia: 240V, 50 Hz, inputEurope: 230V, 50 Hz, inputAll regions (output): 12V, 2.5A DC output
	5.51 x 5.51 x 3.62 in (140 x 140 x 92 mm)Dimensions
	1.4 lb (639 g)Weight
	0° to 35°C (32° to 95°F)Operating temperature
	90% maximum relative humidity, noncondensingOperating humidity
Electromagnetic emissions	FCC Part 15, Subpart B, Class BIECS-003, Class BEN 55032, EN 55035, Class BAS/NZS CISPR 32, Class B
	RJ-45 port supporting 10BASE-T, 100BASE-TX, and 1000BASE-TLAN
Internet (WAN)	RJ-45 port supporting 10BASE-T, 100BASE-TX, 1000BASE-T, and 2500BASE-T
WiFi	Maximum wireless signal rate complies with the IEEE 802.11 standard. ^3
Radio data rates	2.4 GHz: Max 900 Mbps5 GHz: Max 2400 Mbps6 GHz: Max 2400 Mbps
Data encoding standards	IEEE 802.11b/g/n/ax 2.4 GHz-1024 QAM supportIEEE 802.11a/n/ac/ax 5 GHz-1024 QAM supportIEEE 802.11a/n/ac/ax 6 GHz-1024 QAM support
Maximum number of computers per wireless network	Limited by the amount of WiFi network traffic generated by each node (typically 50-70 nodes)2.4 GHz: 1285 GHz: 1286 GHz: 128
Operating frequency range	2.4 GHz:• 2.412-2.473 GHz (US)5 GHz:• 5.15 GHz-5.25 GHz, 5.25 GHz-5.35 GHz, 5.47 GHz-5.73 GHz, and 5.735 GHz-5.835 GHz (US)6 GHz:• 5.945 GHz-6.425 GHz, 6.425 GHz-6.525 GHz, 6.525 GHz-6.865 GHz, and 6.865 GHz-7.065 GHz (US)
	WPA2-Personal, WPA3-Personal802.11 security

^3 Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput can vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.

Technical specifications for satellite model MS90

The following table shows the technical specifications for the satellite.

Table 7. Technical specifications for the satellite

	DescriptionFeature
	TCP/IPData and routing protocols
Power adapter	North America: 120V, 60 Hz, inputUK, Australia: 240V, 50 Hz, inputEurope: 230V, 50 Hz, inputAll regions (output): 12V, 1A DC output
	5.51 x 5.51 x 3.62 in (140 x 140 x 92 mm)Dimensions
	1.38 lb (630 g)Weight
	0° to 35°C (32° to 95°F)Operating temperature
	90% maximum relative humidity, noncondensingOperating humidity
Electromagnetic emissions	FCC Part 15, Subpart B, Class BIECS-003, Class BEN 55032, EN 55035, Class BAS/NZS CISPR 32, Class B
	RJ-45 port supporting 10BASE-T, 100BASE-TX, and 1000BASE-TLAN
WiFi	Maximum wireless signal rate complies with the IEEE standard.4802.11
Radio data rates	2.4 GHz: Max 900 Mbps5 GHz: Max 2400 Mbps6 GHz: Max 2400 Mbps
Data encoding standards	IEEE 802.11b/g/n/ax 2.4 GHz-1024 QAM supportIEEE 802.11a/n/ac/ax 5 GHz-1024 QAM supportIEEE 802.11a/n/ac/ax 6 GHz-1024 QAM support
Maximum number of computer per wireless network	limited by the amount of WiFi network trafc generated by each node (typically 50-70 nodes)2.4 GHz: 1285 GHz: 1286 GHz: 128
Operating frequency range	2.4 GHz:• 2.412-2.473 GHz (US)5 GHz:• 5.15 GHz-5.25 GHz, 5.25 GHz-5.35 GHz, 5.47 GHz-5.73 GHz,and 5.735 GHz-5.835 GHz (US)6 GHz:• 5.945 GHz-6.425 GHz, 6.425 GHz-6.525 GHz, 6.525 GHz-6.865 GHz, and 6.865 GHz-7.065 GHz (US)
	WPA2-Personal, WPA3-Personal802.11 security

^4 Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput can vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.