Netgear C6900 High Speed Cable Modem Router User Manual

							Control Access to the Internet 
31  Nighthawk AC1900 WiFi Cable Modem Router
After you log on or create your account, the filtering level page displays.
10. Select a radio button for a filtering level and click the Next button.
The Setup is complete page displays.
11. Click the Take me to the status page button.
The Status page displays. Parental Controls are now set up for the modem router.
12. To enable Parental Controls, click the Enable Live Parental Controls button.
Block Access to Your Network
You can use access control to block access to your network.
To set up access control:
1. Launch an Internet browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login window opens.
3. Enter the user name and password.
The user name is admin. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Access Control.
5. Select the Turn on Access Control check box.
You must select this check box before you can specify an access rule and use the Allow 
and Block buttons. When this check box is cleared, all devices are allowed to connect, 
even if the device is in the blocked list.
6. To specify the access rule, select one of the following radio buttons:
•Allow all new devices to connect. With this setting, if you buy a new device, it can 
access your network. You don’t need to enter its MAC address in this page. 
NETGEAR recommends that you leave this radio button selected.
•Block all new devices from connecting. With this setting, if you buy a new device, 
before it can access your network, you must enter its MAC address for an Ethernet 
connection and its MAC address for a WiFi connection in the allowed list.
The access rule does not affect previously blocked or allowed devices. It applies only to 
devices joining your network in the future after you apply these settings.
7. To allow the computer or device you’re currently using to continue to access the network, 
select the check box next to your computer or device, and click the Allow button.
8. Click the Apply button.
Your changes take effect. 
						

							Control Access to the Internet 32
Nighthawk AC1900
 WiFi Cable Modem  Router 
Use Keywords to Block Internet Sites
You can use keywords to block certain Internet sites from your network. You can use 
blocking all the time or based on a schedule.
To set block Internet sites:
1.  Launch an Internet browser from a computer or wireless device that is co\
nnected to the 
network.
2.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login window opens.
3.  Enter the user name and password.
The user name is  admin. 
 The user name and password are case-sensitive.
The BASIC Home page displays.
4.  Select  ADV
 ANCED > Security >  Block Sites.
5.  Select one of the keyword blocking options:
• Per Schedule. 
 Turn on keyword blocking according to the Schedule page settings. 
(See Schedule When to Block Internet Sites and Services on page  34.)
• Always. 
 Turn on keyword blocking all the time, independent of the Schedule page.
6.  In the Keyword field, enter a keyword or domain that you want to block.
For example:
• Specify XXX to block http://www
 .badstuff.com/xxx.html.
• Specify .com if you want to allow only sites with domain suf
 fixes such as .edu or .gov.
• Enter a period (. ) to block all Internet browsing access. 
						

							Control Access to the Internet 33
 Nighthawk AC1900
 WiFi Cable Modem  Router
7. Click the  Add Keyword button.
The keyword is added to the keyword list. The keyword list supports up to 32 entries.
8.  Click the  Apply button.
Keyword blocking takes effect.
To delete keywords from the list:
1.  Do one of the following:
• T
o delete a single word, select it and click the Delete Keyword button.
The keyword is removed from the list.
• T
o delete all keywords on the list, click the Clear List button.
All keywords are removed from the list.
2.  Click the  Apply button. 
Your changes are saved.
Block Services from the Internet
You can block Internet services on your network based on the type of serv\
ice. You can block  the services all the time or based on a schedule.
To block services:
1.  Launch an Internet browser from a computer or wireless device that is co\
nnected to the 
network.
2.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login window opens.
3.  Enter the user name and password.
The user name is  admin. 
 The user name and password are case-sensitive.
The BASIC Home page displays.
4.  Select 
ADVANCED > Security > Block Services .
5.  Specify when to block the services: 
						

							Control Access to the Internet 34
Nighthawk AC1900
 WiFi Cable Modem  Router 
•To block the services all the time, select the  Always radio button.
• T
o block the services based on a schedule, select the Per Schedule radio button.
To specify the schedule, see Schedule When to Block Internet Sites and Services on page
  34.
6.  Click the  Add button.
7.  T
o add a service that is in the  Service Type list, select the application or service. 
The settings for this service automatically display in the fields.
8.  T
o add a service or application that is not the list, select User Defined.
a.If you know that the application uses either 
 TCP or UDP, select the appropriate 
protocol; otherwise, select TCP/UDP (both).
b.  Enter the starting port and ending port numbers. 
• If the service uses a single port number
 , enter that number in both fields.
• T
o find out which port numbers the service or application uses, you can c\
ontact 
the publisher of the application, ask user groups or newsgroups, or sear\
ch on the 
Internet.
9.  T
o specify how to filter the services, select one of the following radio \
buttons:
•Only This IP 
 Address. Block services for a single computer.
• IP Address 
 Range. Block services for a range of computers with consecutive IP 
addresses on your network.
• All lP 
Addresses. Block services for all computers on your network.
10.  Click the  Add button.
Your changes are saved.
Schedule When to Block Internet Sites and Services
When you schedule blocking, the same schedule is used to block sites and\
 to block services. 
For information about how to specify what you want the modem router to b\
lock, see Use  
						

							Control Access to the Internet 
35  Nighthawk AC1900 WiFi Cable Modem Router
Keywords to Block Internet Sites on page 32 and Block Services from the Internet on 
page 33.
To schedule blocking:
1. Launch an Internet browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login window opens.
3. Enter the user name and password.
The user name is admin. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Schedule.
5. Specify when to block keywords and services:
•Days to Block. Select the check box for each day that you want to block the 
keywords or select the Every Day check box, which automatically selects the check 
boxes for all days. 
•Time of Day to Block. Select a start and end time in 24-hour format, or select All 
Day for 24-hour blocking. 
6. Select your time zone from the list. 
7. If you use daylight saving time, select the Automatically adjust for daylight savings time 
check box. 
8. Click the Apply button. 
Your settings are saved.
Avoid Blocking on a Trusted Computer
You can exempt one trusted computer from blocking. The computer you exempt must have a 
fixed IP address. You can use the reserved IP address feature to specify the IP address. See 
Reserve LAN IP Addresses on page 44
To specify a trusted computer:
1. Launch an Internet browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login window opens.
3. Enter the user name and password.
The user name is admin. The user name and password are case-sensitive.
The BASIC Home page displays. 
						

							Control Access to the Internet 36
Nighthawk AC1900
 WiFi Cable Modem  Router 
4. Select  ADVANCED > Security > Block Sites .
5.  Scroll down and select the  Allow trusted IP address to visit blocked sites  check box.
6.  In the T
rusted IP Address  field, enter the IP address of the trusted computer.
7.  Click the  Apply button.
Your changes are saved.
Set Up Security Event Email Notifications
The modem router can email you its logs of modem router activity. The log records activity  and security events such as attempts to access blocked sites or services\
. 
To set up email notifications:
1.  Launch an Internet browser from a computer or wireless device that is co\
nnected to the 
network.
2.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login window opens.
3.  Enter the user name and password.
The user name is  admin. 
 The user name and password are case-sensitive.
The BASIC Home page displays.
4.  Select  ADV
 ANCED > Security >  E-mail.
5.  Select the  T
 urn Email Notification On  check box.
6.  In the  Y
our Outgoing Mail Server  field, enter the name of your ISP outgoing (SMTP) mail 
server (such as mail.myISP.com). 
You might be able to find this information in the configuration page of y\
our email program.  If you leave this field blank, log and alert messages are not sent. 
						

							Control Access to the Internet 
37  Nighthawk AC1900 WiFi Cable Modem Router
7. Enter the email address to which logs and alerts are sent in the Send to This E-mail 
Address field. 
This email address is also used for the From address. If this field is blank, log and alert 
messages are not sent.
8. If your outgoing email server requires authentication, select the My Mail Server requires 
authentication check box.
a.In the User Name field, type the user name for the outgoing email server.
b. In the Password field, type the password for the outgoing email server.
9. (Optional) Select the Send Alerts Immediately check box.
Email alerts are sent immediately when someone attempts to visit a blocked site.
10. To send logs based on a schedule, specify these settings:
•From Send logs according to this schedule drop-down list, select the schedule 
type.
•From the Day drop-down list, select the day.
•From the Time drop-down list, select the time, and select the am or pm radio button.
11. Click the Apply button.
Your settings are saved.
Logs are sent automatically. If the log fills up before the specified time, it is sent. After the 
log is sent, it is cleared from the modem router memory. If the modem router cannot email 
the log and the log buffer fills up, the modem router overwrites the log. 
						

							38
5
5.   Specify Network Settings
This chapter includes the following sections:
•View WAN Settings 
•Set Up a Default DMZ Server 
•Change the Modem Router’s Device Name 
•Change the LAN TCP/IP Settings 
•Specify the IP Addresses that the Modem Router Assigns 
•Disable the DHCP Server Feature in the Modem Router 
•Reserve LAN IP Addresses 
•Use the WPS Wizard for WiFi Connections 
•Specify Basic WiFi Settings 
•Change the WiFi Security Option 
•Set Up a Guest Network 
•Control the Wireless Radios 
•Set Up a Wireless Schedule 
•Specify WPS Settings  
						

							Specify Network Settings 39
 Nighthawk AC1900
 WiFi Cable Modem  Router
View WAN Settings
You can view or configure wide area network (WAN) settings for the Internet port. You can 
set up a DMZ (demilitarized zone) server, change the maximum transmit unit (MTU) size, and 
enable the modem router to respond to a ping to its WAN (Internet) port. 
To view the WAN settings:
1.  Launch an Internet browser from a computer or wireless device that is co\
nnected to the 
network.
2.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login window opens.
3.  Enter the user name and password.
The user name is  admin. 
 The user name and password are case-sensitive.
The BASIC Home page displays.
4.  Select 
ADVANCED > Setup > WAN Setup .
The following settings display: • Disable IPv4 Firewall Protection. NETGEAR recommends that you leave this check 
box empty so that the firewall protects your modem router.
• Disable Port Scan and DoS Protection. DoS protection protects your LAN against 
denial of service attacks such as Syn flood, Smurf 

Attack, Ping of Death, and many 
others. Select this check box only in special circumstances. 
• Default DMZ Server . This 
 feature is disabled by default. It is sometimes helpful when 
you are playing online games or videoconferencing, but it makes the fire\
wall security 
less effective. See Set Up a Default DMZ Server on page  40.
• Respond to Ping on Internet Port. 
 This feature allows your modem router to be 
discovered. Use this feature only as a diagnostic tool or if you have a \
specific reason. 
• MTU Size (in bytes). 
 The normal MTU (maximum transmit unit) value for most 
Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. Ch\
ange the 
MTU only if you are sure that it is necessary for your ISP connection. S\
ee  Change the 
MTU Size on page  26. 
						

							Specify Network Settings 
40 Nighthawk AC1900 WiFi Cable Modem Router 
•Disable SIP ALG. Some VoIP applications do not work well with the SIP ALG. 
Selecting this check box to turn off the SIP ALG might help your VoIP devices to 
create or accept a call through the modem router.
5. Click the Apply button.
Your changes are saved.
Set Up a Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The modem router is programmed to recognize some of these applications and to 
work correctly with them, but other applications might not function well. In some cases, one 
local computer can run the application correctly if the IP address for that computer is entered 
as the default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the 
default DMZ server loses much of the protection of the firewall and 
is exposed to exploits from the Internet. If compromised, the DMZ 
server computer can be used to attack other computers on your 
network.
The modem router usually detects and discards incoming traffic from the Internet that is not a 
response to one of your local computers or a service that you have configured in the Port 
Forwarding/Port Triggering page. Instead of discarding this traffic, you can have the modem 
router forward the traffic to one computer on your network. This computer is called the default 
DMZ server.
To set up a default DMZ server: 
1. Launch an Internet browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login window opens.
3. Enter the user name and password.
The user name is admin. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > WAN Setup.
5. Select the Default DMZ Server check box.
6. Type the IP address.
7. Click the Apply button.