Netgear Centria Wndr4700 Wndr4720 Media Storage Router User Manual

							Advanced Settings111
 CENTRIA WNDR4700/WNDR4720
Add a Custom Service
To define a service, game, or application that does not appear in the Service Name list, first 
determine which port number or range of num
bers the application uses. Usually, you can 
determine this information by co ntacting the publisher of the application or the relevant user 
groups or news groups. 
To add a custom service:
1.  Select  Adv
 anced > Advanced Setup > Port Forwarding/Port Triggering .
2.  Select  P
 ort Forwarding  as the service type.
3.  Click the Ad
 d Custom Service  button to display the following screen:
4. In the Service Name field, enter a descriptive name. 
5.  In the Protocol list, select the protocol. If
  you are unsure, select TCP/UDP.
6.  S
pecify the port settings: 
•      External S
 tarting Port and External Ending Port . These are the starting number 
and ending number for the public ports at the Internet interface. For single port 
forwarding, number in the External Starting  Port and External Ending Port fields can 
be the same. The range is from 1 to 65534.
•      Use the
  same port range for Internal port . This check box is selected by default. If 
you want to use different ports, clear this  check box and specify the internal ports.
•      Interna
l Starting Port  and Internal Ending Port . These are the starting number and 
ending number for the ports of a computer on the router’s local area network (LAN). 
These are private ports. The router calculates the internal ending port.
7.  In the Internal IP Address 
 field, enter the IP address of your  local computer that will provide 
this service.
8.  Click  App
 ly. The service appears in the list in the Port Forwarding/Port Triggering screen.
Edit or Delete a Port Forwarding Entry
To edit or delete a port forwarding entry:
1.  I
n the table, select the radio button next to the service name. 
						

							Advanced Settings
11 2 CENTRIA WNDR4700/WNDR4720 
2. Click Edit Service or Delete Service.
Application Example: Making a Local Web Server Public
If you host a web server on your local network, you can use port forwarding to allow web 
requests from anyone on the Internet to reach your web server. 
To make a local web server public:
1. Assign your web server either a fixed IP address or a dynamic IP address using DHCP 
address reservation. In this example, your router always gives your web server an IP 
address of 192.168.1.33. 
2. In the Port Forwarding/Port Triggering screen, configure the router to forward the HTTP 
service to the local address of your web server at 192.168.1.33. HTTP (port 80) is the 
standard protocol for web servers.
3. (Optional) Register a host name with a Dynamic DNS service, and configure your router to 
use the name as described in 
Dynamic DNS on page 11 4. To access your web server from 
the Internet, a remote user has to know the IP address that your ISP assigned. However, if 
you use a Dynamic DNS service, the remote user can reach your server by a user-friendly 
Internet name, such as mynetgear.dyndns.org.
Set Up Port Triggering
Port triggering is a dynamic extension of port forwarding that is useful in these cases:
•     More than one local computer needs port forwarding for the same application (but not 
simultaneously).
•     An application needs to open incoming ports that are different from the outgoing port.
When port triggering is enabled, the router monitors outbound traffic looking for a specified 
outbound “trigger” port. When the router detects outbound traffic on that port, it remembers 
the IP address of the local computer that sent the data. The router then temporarily opens the 
specified incoming port or ports, and forwards incoming traffic on the triggered ports to the 
triggering computer. 
Port forwarding creates a static mapping of a port number or range to a single local computer. 
Port triggering can dynamically open ports to any computer that needs them and can close 
the ports when they are no longer needed.
Note:  If you use applications such as multiplayer gaming, peer-to-peer 
connections, real-time communications such as instant messaging, 
or remote assistance (a feature in Windows XP), you should also 
enable Universal Plug and Play (UPnP) according to the instructions 
in Universal Plug and Play on page 11 8. 
						

							Advanced Settings11 3
 CENTRIA WNDR4700/WNDR4720
To configure port triggering, you need to know which inbound ports the application needs, 
and the number of the outbound port that will trigger the opening of the inbound ports. 
Usually, you can determine this information by
 contacting the publisher of the application or 
the relevant user groups or news groups.
To set up port triggering: 
1.  Select  Adv
 anced > Advanced Setup > Port Forwarding/Port Triggering .
2.  Select th
 e Port Triggering radio button to display the port triggering information.
3.  Clear the  Disable Port Triggering  check box if it is selected.
Note:  If the Disable Port Triggering check bo x is selecte
 d after you configure 
port triggering, port triggering is disabled. However, any port triggering 
configuration information you added to the router is retained even though it is 
not used.
4.  In the Port T
 riggering Timeout field, enter a value up to 9999 minutes. 
This value controls the inactivity timer for th
 e designated inbound ports. The inbound 
ports close when the inactivity time expires. This is required because the router cannot be 
sure when the application has terminated.
5.  Click  Add
  Service to display the following screen: 
6. In the Service Name field, type a descriptive service name.  
						

							Advanced Settings11 4
CENTRIA WNDR4700/WNDR4720 
7. 
In the Service User list, select  Any (the default) to allow this service to be used by any 
computer on the Internet. Otherwise, select  Single address, and enter the IP address of 
one computer to restrict the service to a particular computer. 
8.  Select the service type,
  either TCP or UDP or both ( TCP/UDP). If you are not sure, select 
TCP/UDP.
9.  In
 the Triggering Port field, enter the number of the outbound traffic port that you want to 
cause the inbound ports to open. 
10.  Enter th
 e inbound connection port information in the Connection Type, Starting Port, and 
Ending Port fields.
11 .   Click  Apply . The service appe
 ars in the Port Triggering Portmap table. 
Dynamic DNS
If your Internet service provider (ISP) gave  you a permanently assigned IP address, you can 
register a domain name and have that name link ed with your IP address by public Domain 
Name Servers (DNS). However, if your Inte rnet account uses a dynamically assigned IP 
address, you do not know in advance what your IP address will be, and the address can 
change frequently. In this case, you can use  a commercial Dynamic DNS service. This type 
of service lets you register your domain to their IP address and forwards traffic directed at 
your domain to your frequently changing IP address.
If your ISP assigns a private WAN IP address  (su
 ch as 192.168.x.x or 10.x.x.x), the Dynamic 
DNS service does not work because private addresses are not routed on the Internet.
Your router contains a client that can c onnect to th
 e Dynamic DNS service provided by 
DynDNS.org. First visit their website at  http://www.dyndns.org and obtain an account and 
host name that you configure in the router. Then, whenever your ISP-assigned IP address 
changes, your router contacts the Dynamic DNS  service provider, logs in to your account, 
and registers your new IP address. If your host name is hostname, for example, you can 
reach your router at  http://hostname.dyndns.org .
On the Advanced tab, select  Advanc
 ed Setup > Dynamic DNS to display the following 
screen:
To set up Dynamic DNS:
1.  Register for an
  account with one of the Dynamic DNS service providers whose names 
appear in the Service Provider list. 
2.  Select the  Use a
  Dynamic DNS Service  check box. 
3.  Select the web 
 address of your Dynamic DNS service provider.  
						

							Advanced Settings
11 5  CENTRIA WNDR4700/WNDR4720
For example, for DynDNS.org, select www.dyndns.org.
4. Type the host name (or domain name) that your Dynamic DNS service provider gave you.
5. Type the user name for your Dynamic DNS account. This is the name that you use to log in 
to your account, not your host name.
6. Type the password (or key) for your Dynamic DNS account. 
7. If your Dynamic DNS provider allows the use of wildcards in resolving your URL, you can 
select the Use Wildcards check box to activate this feature. 
For example, the wildcard feature causes *.yourhost.dyndns.org to be aliased to the 
same IP address as yourhost.dyndns.org.
8. Click Apply to save your configuration.
Static Routes
Static routes provide additional routing information to your router. Typically, you do not need 
to add static routes. You have to configure static routes only for unusual cases such as 
multiple routers or multiple IP subnets on your network.
As an example of when a static route is needed, consider the following case:
•     Your primary Internet access is through a cable modem to an ISP.
•     You have an ISDN router on your home network for connecting to the company where 
you are employed. This router’s address on your LAN is 192.168.1.100.
•     Your company’s network address is 134.177.0.0.
When you first configured your router, two implicit static routes were created. A default route 
was created with your ISP as the gateway, and a second static route was created to your 
local network for all 192.168.1.x addresses. With this configuration, if you attempt to access a 
device on the 134.177.0.0 network, your router forwards your request to the ISP. The ISP 
forwards your request to the company where you are employed, and the request is likely to 
be denied by the company’s firewall.
In this case you have to define a static route, telling your router that 134.177.0.0 should be 
accessed through the ISDN router at 192.168.1.100. In this example:
•     The Destination IP Address and IP Subnet Mask fields specify that this static route 
applies to all 134.177.x.x addresses. 
•     The Gateway IP Address field specifies that all traffic for these addresses should be 
forwarded to the ISDN router at 192.168.1.100. 
•     A metric value of 1 works since the ISDN router is on the LAN. 
•     Private is selected only as a precautionary security measure in case RIP is activated. 
						

							Advanced Settings11 6
CENTRIA WNDR4700/WNDR4720 
To set up a static route:
1. 
Select  Advanced > Advanced Setup > Static Routes , and click Add to display the 
following screen:
2.  In the Route Name field, type a name for this static route (for identification purposes only.) 
3.  Select the  Priva
 te check box if you want to limit access to the LAN only. If Private is 
selected, the static route is not reported in RIP. 
4.  Select the  Active check box to make this 
 route effective. 
5.  T
ype the IP address of the final destination. 
6. T
ype the IP subnet mask for this destination. If the destination is a single host, type 
255.255.255.255 . 
7.  T
ype the gateway IP address, which has to be a router on the same LAN segment as the 
router. 
8.  T
ype a number from 1 through 15 as the metric value. 
This value represents the number of routers between your network and the destination. 
Usually
 , a setting of 2 or 3 works, but if th is is a direct connection, set it to 1. 
9.  Click  Apply  to
  add the static route.  
						

							Advanced Settings11 7
 CENTRIA WNDR4700/WNDR4720
Remote Management
The remote management feature lets you upgrade or check the status of your CENTRIA over 
the Internet.
To set up remote management:
1. 
Select  Adv
 anced > Advanced Setup > Remote Management . 
Note: Be sure to change the router’s default login password to a secure 
p
assword. The ideal password contains no dictionary words from any language 
and contains uppercase and lowercase letters, numbers, and symbols. It can 
be up to 30 characters.
2.  Select th
 e Turn Remote Management On  check box.
3.  Unde
r Allow Remote Access By, specify the exte rnal IP addresses to be allowed to access 
the router’s remote management.
For enhanced security, restrict access to  as few external IP addre
 sses as practical.
•      T
o allow access from a single IP address on the Internet, select  Only This Computer. 
Enter the IP address that will be allowed access. 
•      T
o allow access from a range of IP addresses on the Internet, select  IP Address 
Range . Enter a beginning and ending IP address to define the allowed range. 
•      T
o allow access from any IP address on the Internet, select  Everyone. 
4.  S
pecify the port number for accessing the management interface.
Normal web browser access uses the standard HTTP service port 80. For greater 
security
 , enter a custom port number for the remote web management interface. Choose 
a number from 1024 to 65535, but do not use the number of any common service port. 
The default is 8080, which is a common alternate for HTTP.
5.  Click  App
 ly to have your changes take effect.
6.  When accessing your rout
 er from the Internet, type your router’s WAN IP address into your 
browser’s address or location field followed by a colon (:) and the custom port number. For 
example, if your external address is 134.17 7.0.123 and you use port number 8080, enter 
http://134.177.0.123:8080  in your browser. 
						

							Advanced Settings11 8
CENTRIA WNDR4700/WNDR4720 
USB Settings
For added security, the router can be set up to share only approved USB devices. See 
Specify Approved USB Devices 
o
 n page 60  for the procedure.
Universal Plug and Play
Universal Plug and Play (UPnP) helps devices,  such as Internet appliances and computers, 
access the network and connect to other devices as needed. UPnP devices can 
automatically discover the se rvices from other registered UPnP devices on the network.
If you use applications such as multiplayer  ga
 ming, peer-to-peer connections, or real-time 
communications such as instant messaging or  remote assistance (a feature in Windows XP), 
you should enable UPnP.
To turn on Universal Plug and Play:
1.  Select  Advance
 d > Advanced Setup >  UPnP . The UPnP screen displays. 
2. The available settings and information in this screen are:
Tu r n  U P n P  O n . UPnP ca
 n be enabled or disabled for automatic device configuration. 
The default setting for UPnP is disabled. If this  check box is not selected, the router does 
not allow any device to automatically control the resources, such as port forwarding 
(mapping) of the router. 
Advertisement Period . Th
 e advertisement period is how often the router broadcasts its 
UPnP information. This value can range from 1 to 1440 minutes. The default period is 30 
minutes. Shorter durations ensure that control points have current device status at the 
expense of additional network traffic. Longer  durations can compromise the freshness of 
the device status, but can signi ficantly reduce network traffic.
Advertisement Time to Live.  The time to live for the
  advertisement is measured in hops 
(steps) for each UPnP packet sent. The time to live hop count is the number of steps a 
broadcast packet is allowed to propagate for each UPnP advertisement before it 
disappears. The number of hops can range from 1 to 255. The default value for the 
advertisement time to live is 4 hops, which is fine for most home networks. If you notice 
that some devices are not being updated or reached correctly, then it might be necessary 
to increase this value. 
						

							Advanced Settings11 9
 CENTRIA WNDR4700/WNDR4720
UPnP Portmap Table.
 The UPnP Portmap Table displays  the IP address of each UPnP 
device that is currently accessing the router  and which ports (internal and external) that 
device has opened. The UPnP Portmap Table also displays what type of port is open and 
whether that port is still active for each IP address. 
3.  Click  App
 ly to save your settings.
IPv6
You can use this feature to set up an IPv6 Internet connection type if genie does not detect it 
automatically.
To set up an IPv6 Internet connection type:
1.  Select  Adv
 anced > Advanced Setup > IPv6  to display the following screen:
2. Select the IPv6 connection type from the list. Your Internet service provider (ISP) can 
provide this information.
•      If your ISP did not p
 rovide details, you can select  IPv6 Tunnel. 
•      If you a
re not sure, select  Auto Detect so that the router detects the IPv6 type that is 
in use.
•      If your Internet connection  does not use PPPoE, DHCP
 , or fixed, but is IPv6, select 
Auto Config .
•      For more de
 tailed information about Inte rnet connection types, see the following 
sections.
3.  Click  App
 ly so that your changes take effect. 
						

							Advanced Settings120
CENTRIA WNDR4700/WNDR4720 
Auto Detect Fields
In the IPv6 screen, when you select 
Auto Detect from the drop-down list, the following 
screen displays.
The Connection Type field indicates the connecti on type detected. The following fields are 
also included in this screen:
IPv6 LAN Setup
Routers IPv6 Address on WAN . The IPv6 address acquired for the routers WAN (or 
Internet) interface. The number after the slash (/ ) is the length of the prefix, which is also 
roughly indicated by the underline (_) under the IPv6 address.
Routers IPv6 Address on LAN .
  The IPv6 address acquired for the routers LAN interface. 
The number after the slash (/) is the length of the prefix, which is also roughly indicated by 
the underline (_) under the IPv6 address.
IP Address Assignment . 
 You can select how you want to assign IPv6 address to the 
devices on your home network (the LAN). You can select either  DHCP Server or Auto 
Config to assign an IPv6 address. Using DHCP Server might pass more information to LAN 
devices, but some IPv6 systems might not support  the DHCv6 client function. Auto Config is 
selected by default.
Use This Interface ID . Y
 ou can enable this option and specif y the interface ID that you want 
for the IPv6 address for the routers LAN interface. If you do not specify an ID here, the router 
generates one automatically from its MAC address.
IPv6 Filtering
When the connection type is not IPv6 Pass Thr ough or Disabled, the router starts the SPI 
firewall function on the WAN interface. The router creates connection records and checks 
every inbound IPv6 packet. If the inbound packet is not destined to the router itself and the 
router does expect to receive such a packet, or the packet is not in the connection record, the