Netgear D6400 Ac1600 Wifi Vdsl Adsl Modem Router 802 11ac Dual Band Gigabit User Manual

							Table 3.  Common MTU sizes 
MTUApplication
1500 The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE 
or VPN and is the default value for NETGEAR modem routers, adapters, and\
 switches.
1492 Used in PPPoE environments.
1472 Maximum size to use for pinging. (Larger packets are fragmented.)
1468 Used in some DHCP environments.
1460 Usable by AOL if you do not send or receive large email attachments, for example.
1436 Used in PPTP environments or with VPN.
1400 Maximum size for AOL DSL.
Manage the Internet Settings Manually 
91
 AC1600 WiFi VDSL/ADSL Modem Router Model D6400
Change the MTU Size
WARNING:
An incorrect MTU setting can cause Internet communication problems. 
For example, you might not be able to access certain websites, frames 
within websites, secure login pages, or FTP or POP servers. Change the 
MTU only if you are sure that it is necessary for your ISP connection.
To change the MTU size:
1.  Launch a web browser from a computer or WiFi device that is connected to\
 the network.
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  Enter the modem router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
4.  Click the  OK button.
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Setup > WAN Setup . 
The WAN Setup page displays.
6.  In the MTU Size field, enter a value from 616 to 1500.
The normal MTU value for most Ethernet networks is 1500 bytes, 1492 byte\
s for PPPoE  connections, or 1436 for PPTP connections. 
7.  Click the  Apply button.
Your change is saved. 
						

							92
4
4.   Manage the WiFi Network Settings
This chapter describes how you can manage the WiFi network settings of the modem router.
The chapter includes the following sections:
•Manage the Basic WiFi Settings and WiFi Security of the Main Network
•Use WPS to Add a Device to the WiFi Network
•Manage the Basic WiFi Settings and WiFi Security of the Guest Network
•Control the WiFi Radios
•Set Up a WiFi Schedule
•Manage the WPS Settings
•Manage Advanced WiFi Features
•Use the Modem Router as a WiFi Access Point 
						

							Manage the WiFi Network Settings 
93  AC1600 WiFi VDSL/ADSL Modem Router Model D6400
Manage the Basic WiFi Settings and WiFi Security of the 
Main Network
The modem router comes with preset security. This means that the WiFi network name 
(SSID), network key (password), and security option (encryption protocol) are preset in the 
factory. The preset SSID and password are uniquely generated for every device to protect 
and maximize your WiFi security. You can find the preset SSID and password on the product 
label (see 
Bottom Panel Product Label on page 15).
IMPORTANT:
If you change your preset security settings, make a note of the new 
settings and store the note in a safe place where you can easily find 
it.
View or Change the Basic WiFi Settings
You can view or change the basic WiFi settings and WiFi security. The modem router 
simultaneously supports the 2.4 GHz band for 802.11b/g/n devices and the 5 GHz band for 
802.11a/n/ac devices.
Tip:If you decide to change the WiFi settings of the modem router’s main 
network, use a wired connection to avoid being disconnected when 
the new WiFi settings take effect.
To view or change the basic WiFi settings:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Enter the user name and password for the modem router.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
4. Click the OK button.
The BASIC Home page displays.
5. Select Wireless. 
						

							Manage the WiFi Network Settings 94
AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
6. 
View or change the basic WiFi settings and security settings.
The following table describes the fields on the Wireless Setup page.
FieldDescription
Region Selection
Region From the menu, select the region in which the modem router operates.
Note:It might not be legal to operate the modem router in a region other than\
 the regions 
listed in the menu. If your country or region is not listed, check with \
your local government 
agency.
Wireless Network (2.4GHz b/g/n) 
Enable SSID 
Broadcast  By default, the modem router broadcasts its SSID so that WiFi stations c\
an detect the 
WiFi name (SSID) in their scanned network lists. 

To turn off the SSID broadcast, clear the 
Enable SSID Broadcast check box. Turning off the SSID broadcast provides additional 
WiFi security, but users must know the SSID to be able to join the WiFi network of th\
e 
modem router. 
						

							Manage the WiFi Network Settings 
95  AC1600 WiFi VDSL/ADSL Modem Router Model D6400
Name (SSID) The SSID is the WiFi network name. If you did not change the SSID, the default SSID 
displays. The default SSID is also printed on the product label (see 
Bottom Panel Product 
Label on page 15).
Note:If you change the default SSID, enter a 32-character (maximum), case-sensitive 
name in this field.
ChannelFrom the Channel menu, select Auto for automatic channel selection or select an 
individual channel. The default selection is Auto.
Note:In some regions, not all channels are available. Do not change the channel unless 
you experience interference (shown by lost connections or slow data transfers). If this 
situation occurs, experiment with different channels to see which one is the best.
Note:If you use multiple WiFi access points (APs), reduce interference by selecting 
different channels for adjacent APs. NETGEAR recommends a channel spacing of four 
channels between adjacent APs (for example, use Channels 1 and 5, or 6 and 10).
ModeFrom the Mode menu, select one of the following modes:
• Up to 54 Mbps. Legacy mode. This mode allows 802.11n, 802.11g, and 802.11b 
devices to join the network but limits 802.11n devices to functioning at up to 54
 Mbps.
• Up to 145 Mbps. Neighbor-friendly mode for reduced interference with neighboring 
WiFi networks. This mode allows 802.11n, 802.11g, and 802.11b devices to join the 
network but limits 802.11n devices to functioning at up to 145
 Mbps. This mode is the 
default mode.
• Up to 300 Mbps. Performance mode. This mode allows 802.11n, 802.11g, and 
802.11b devices to join the network and allows 802.11n devices to function at up to 
300
 Mbps.
Note:WEP security supports speeds of up to 54 Mbps. Even if your devices are capable 
of a higher speed, WEP security limits their speed to 54 Mbps.
FieldDescription 
						

							Manage the WiFi Network Settings 
96 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
Security Options
This information applies to the 2.4 GHz WiFi network.
If you change the WiFi security, select one of the following WiFi security options for the modem router’s WiFi 
network:
• None. An open WiFi network that does not provide any security. Any WiFi device can join the network. 
NETGEAR recommends that you do not use an open WiFi network.
• WEP. Wired Equivalent Privacy (WEP) security is a legacy authentication and data encryption mode 
that is superseded by WPA-PSK and WPA2-PSK. The WEP option displays only if you select Up to 54 
Mbps from the Mode menu. For information about configuring WEP, see 
Configure WEP Legacy WiFi 
Security on page 100.
• WPA2-PSK [AES]. This type of security is the default setting and enables WiFi devices that support 
WPA2 to join the modem router’s 2.4 GHz WiFi network. If you did not change the passphrase, the 
default passphrase displays. The default passphrase is printed on the product label (see 
Bottom Panel 
Product Label on page 15). WPA2 provides a secure connection but some older WiFi devices do not 
detect WPA2 and support only WPA. If your network includes such older devices, select WPA-PSK 
[TKIP] + WPA2-PSK [AES] security.
If you change the passphrase, in the Passphrase field, enter a phrase of 8 to 63 characters. To join the 
modem router’s WiFi network, a user must enter this passphrase.
• WPA-PSK [TKIP] + WPA2-PSK [AES]. This type of security enables WiFi devices that support either 
WPA or WPA2 to join the modem router’s 2.4 GHz WiFi network. However, WPA-PSK [TKIP] is less 
secure than WPA2-PSK [AES] and limits the speed of WiFi devices to 54 Mbps.
To use this type of security, in the Passphrase field, enter a phrase of 8 to 63 characters. To join the 
modem router’s WiFi network, a user must enter this passphrase.
• WPA/WPA2 Enterprise. This type of security requires that your WiFi network can access a RADIUS 
server. For information about configuring WPA/WPA2 Enterprise, see 
Configure WPA/WPA2 Enterprise 
WiFi Security on page 98.
Wireless Network (5GHz 802.11a/n/ac)
Enable SSID 
Broadcast By default, the modem router broadcasts its SSID so that WiFi stations can detect the 
WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast, clear the 
Enable SSID Broadcast check box. Turning off the SSID broadcast provides additional 
WiFi security, but users must know the SSID to be able to join the WiFi network of the 
modem router.
Enable Video 
NetworkIf you want to stream high-definition video, select this check box. When this option is 
selected, the modem router uses video reliability algorithms to reduce jitter and packet 
loss during video presentations. If you do not stream videos, leave this check box cleared.
Name (SSID) The SSID is the WiFi network name. If you did not change the SSID, the default SSID 
displays. The default SSID is also printed on the product label (see 
Bottom Panel Product 
Label on page 15).
Note:If you change the SSID, enter a 32-character (maximum), case-sensitive name in 
this field.
FieldDescription 
						

							Manage the WiFi Network Settings 
97  AC1600 WiFi VDSL/ADSL Modem Router Model D6400
7. Click the Apply button.
Your settings are saved.
ChannelFrom the Channel menu, select Auto for automatic channel selection or select an 
individual channel. The default channel depends on your selection from the Region 
menu.
Note:In some regions, not all channels are available. Do not change the channel unless 
you experience interference (shown by lost connections or slow data transfers). If this 
situation occurs, experiment with different channels to see which one is the best.
Note:If you use multiple WiFi access points (APs), reduce interference by selecting 
different channels for adjacent APs. NETGEAR recommends a channel spacing of four 
channels between adjacent APs.
ModeFrom the Mode menu, select one of the following modes:
• Up to 289 Mbps. Legacy mode. This mode allows 802.11ac, 802.11na, and 802.11a 
devices to join the network but limits 802.11ac and 802.11na devices to functioning at 
up to 289
 Mbps.
• Up to 600 Mbps. Neighbor-friendly mode for reduced interference with neighboring 
WiFi networks. This mode allows 802.11ac, 802.11na, and 802.11a devices to join 
the network, allows 802.11na devices to function at up to 600
 Mbps, and limits 
802.11ac devices to functioning at up to 600
 Mbps.
• Up to 1300 Mbps. Performance mode. This mode allows 802.11ac, 802.11na, and 
802.11a devices to join the network and allows 802.11ac devices to function at up to 
1300
 Mbps. 
The default mode depends on your selection from the Region menu.
Security Options
This information applies to the 5 GHz WiFi network.
If you change the WiFi security, select one of the following WiFi security options for the modem router’s WiFi 
network:
• None. An open WiFi network that does not provide any security. Any WiFi device can join the network. 
NETGEAR recommends that you do not use an open WiFi network.
• WPA2-PSK [AES]. This type of security is the default setting and enables WiFi devices that support 
WPA2 to join the modem router’s 2.4 GHz WiFi network. If you did not change the passphrase, the 
default passphrase displays. The default passphrase is printed on the product label (see 
Bottom Panel 
Product Label on page 15). WPA2 provides a secure connection but some older WiFi devices do not 
detect WPA2 and support only WPA. If your network includes such older devices, select WPA-PSK 
[TKIP] + WPA2-PSK [AES] security.
If you change the passphrase, in the Passphrase field, enter a phrase of 8 to 63 characters. To join the 
modem router’s WiFi network, a user must enter this passphrase.
• WPA-PSK [TKIP] + WPA2-PSK [AES]. This type of security enables WiFi devices that support either 
WPA or WPA2 to join the modem router’s 2.4 GHz WiFi network. However, WPA-PSK [TKIP] is less 
secure than WPA2-PSK [AES] and limits the speed of WiFi devices to 54 Mbps.
To use this type of security, in the Passphrase field, enter a phrase of 8 to 63 characters. To join the 
modem router’s WiFi network, a user must enter this passphrase.
• WPA/WPA2 Enterprise. This type of security requires that your WiFi network can access a RADIUS 
server. For information about configuring WPA/WPA2 Enterprise, see 
Configure WPA/WPA2 Enterprise 
WiFi Security on page 98.
FieldDescription 
						

							Manage the WiFi Network Settings 
98 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
If you connected over WiFi to the network and you changed the SSID, you are 
disconnected from the network.
8. Make sure that you can reconnect over WiFi to the network with its new settings. 
If you cannot connect over WiFi, check the following:
•If your computer or WiFi device is already connected to another WiFi network in your 
area, disconnect it from that WiFi network and connect it to the WiFi network that the 
modem router provides. Some WiFi devices automatically connect to the first open 
network without WiFi security that they discover.
•If your computer or WiFi device is trying to connect to your network with its old 
settings (before you changed the settings), update the WiFi network selection in your 
computer or WiFi device to match the current settings for your network.
•Does your WiFi device display as an attached device? (See View Devices Currently 
on the Network on page 235.) If it does, it is connected to the network.
•Are you using the correct network name (SSID) and password?
Configure WPA/WPA2 Enterprise WiFi Security
Remote Authentication Dial In User Service (RADIUS) is an enterprise-level method for 
centralized Authentication, Authorization, and Accounting (AAA) management. To provide 
WPA/WPA2 enterprise WiFi security, the WiFi network that the modem router provides must 
be able to access a RADIUS server.
Note:WPS and WPA/WPA2 enterprise security cannot function together. 
When you enable WPA/WPA2 enterprise security, WPS is disabled.
Tip:If you want to change the WiFi settings of the modem router’s main 
network, use a wired connection to avoid being disconnected when 
the new WiFi settings take effect.
To configure WPA/WPA2 enterprise security:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Enter the user name and password for the modem router.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
4. Click the OK button.
The BASIC Home page displays.
5. Select Wireless. 
						

							Manage the WiFi Network Settings 99
 AC1600 WiFi VDSL/ADSL Modem Router Model D6400
The Wireless Setup page displays.
6.  In the Security Options section, select the  WP
 A/WPA2 Enterprise radio button.
7. In the Security Options (WPA/WPA2 Enterprise) section, enter the settings as described in 
the following table.
FieldDescription
WPA Mode From the WP
A Mode menu, select the enterprise mode:
•  WP
A2 [AES]. WPA2 provides a secure connection but some older 
WiFi devices do not detect WPA2 and support only WPA. If your 
network includes such older devices, select WPA [TKIP] + WPA2 [AES] 
security.
•  WP
A [TKIP] +WPA2 [AES] . This type of security enables WiFi devices 
that support either WPA or WPA2 to join the modem router’s WiFi 
network.
Group Key Update Interval Enter the interval in seconds after which the RADIUS group key is update\
d. 
The default interval is 3600 seconds.
RADIUS server IP Address Enter the IPv4 address of the RADIUS server to which the WiFi network 
can connect.
RADIUS server Port Enter the number of the port on the modem router that is used to access \
the RADIUS server for authentication. 

The default port number is 1812.
RADIUS server Shared 
Secret Enter the shared secret (RADIUS password) that is used between the 
modem router and the RADIUS server during authentication of a WiFi user

.
8. Click the  Apply button.
Your settings are saved.
9.  Make sure that you can reconnect over WiFi to the network with its new s\
ecurity settings. 
If you cannot connect over WiFi, check the following:
• If your computer or WiFi device is already connected to another WiFi net\
work in your 
area, disconnect it from that WiFi network and connect it to the WiFi ne\
twork that the 
modem router provides. Some WiFi devices automatically connect to the fi\
rst open 
network without WiFi security that they discover

.
• If your computer or WiFi device is trying to connect to your network wit\
h its old 
settings (before you changed the settings), update the WiFi network se\
lection in your 
computer or WiFi device to match the current settings for your network. 
						

							Manage the WiFi Network Settings 
100 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
•Does your WiFi device display as an attached device? (See View Devices Currently 
on the Network on page 235.) If it does, it is connected to the network.
•Are you using the correct network name (SSID) and password?
Configure WEP Legacy WiFi Security
Wired Equivalent Privacy (WEP) security is a legacy authentication and data encryption 
mode that is superseded by WPA-PSK and WPA2-PSK. WEP limits the WiFi transmission 
speed to 54 Mbps (the modem router is capable of speeds of up 300
 Mbps).
Note:WPS and WEP security cannot function together. When you enable 
WEP security, WPS is disabled.
Tip:If you want to change the WiFi settings of the modem router’s main 
network, use a wired connection to avoid being disconnected when 
the new WiFi settings take effect.
To configure WEP security:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Enter the user name and password for the modem router.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
4. Click the OK button.
The BASIC Home page displays.
5. Select Wireless.
The Wireless Setup page displays.
6. From the Mode menu, select Up to 54 Mbps.
The page adjusts to display the WEP radio button.
7. In the Security Options section, select the WEP radio button.