Netgear D7000 Nighthawk Ac1900 Wifi Vdsl Adsl Modem Router User Manual

							•
Are you using the correct network name (SSID) and password?
Configure WPA/WPA2 Enterprise WiFi Security
Remote Authentication Dial In User Service (RADIUS) is an enterprise-level method for centralized Authentication,
Authorization, and Accounting (AAA) management. To provide WPA/WPA2 enterprise WiFi security, the WiFi network
that the modem router provides must be able to access a RADIUS server. If y
ou want to change the WiFi settings of the modem router’s main network, use a wired connection
to avoid being disconnected when the new WiFi settings take effect.
Tip
To configure WPA/WPA2 enterprise security: 1.
Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter 
http://www.routerlogin.net.
A login window opens.
3. Enter the 
modem router user name and password.
The user name is 
admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless.
The 

Wireless Settings page displays. If you are configuring a guest network, select Guest Network
 instead. The Guest Network
Settings page displays.
Note Manage the WiFi Network Settings
101
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							5.
In the Security Options section below either the Wireless Network (2.4GHz b/g/n) section or the Wireless Network
(5GHz a/n/ac) section, select the WPA/WPA2 Enterprise radio button. 6.
In the Security Options (WPA/WPA2 Enterprise) section, enter the settings as described in the following table. Description
Field
From the WPA Mode menu, select the enterprise mode:
• WP

A [TKIP] +WPA2 [AES]. This type of security enables WiFi devices that
suppor

t either WPA or WPA2 to join the modem router’s WiFi network.
• WP

A2 [AES]. WPA2 provides a secure connection but some older WiFi devices
do not detect WPA2 and support only WPA. If your network includes such older
devices, select WPA [TKIP] + WPA2 [AES] security. If your network includes
older devices only, select WPA [TKIP] security.
• WPA [TKIP]. WPA provides a secure connection. If your network includes older
de

vices only, select this type of security.
WPA Mode
Enter the interval in seconds after which the RADIUS group key is updated. The
default interval is 3600 seconds.
Group Key Update Interval
Enter the IPv4 address of the RADIUS server to which the WiFi network can connect.
RADIUS server IP Address
Enter the number of the port on the modem router that is used to access the RADIUS
server for authentication. The default port number is 1812.
RADIUS server Port
Enter the shared secret (RADIUS password) that is used between the modem router
and the RADIUS server during authentication of a WiFi user.
RADIUS server Shared Secret
7. Click the Apply button.
Y

our settings are saved.
8. Make sure that you can reconnect over WiFi to the network with its new security settings.
If you cannot connect over WiFi, check the following: Manage the WiFi Network Settings
102
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							•
If your computer or WiFi device is already connected to another WiFi network in your area, disconnect it from
that WiFi network and connect it to the WiFi network that the modem router provides. Some WiFi devices
automatically connect to the first open netw
ork without WiFi security that they discover.
• If your computer or WiFi device is trying to connect to your network with its old settings (before you changed
the settings), update the WiFi network selection in your computer or WiFi device to match the current settings
for your network.
• Does your WiFi device display as an attached device? (See View Devices Currently on the Network on page
236
.) If it does, it is connected to the network.
• Are you using the correct network name (SSID) and password?
Configure WEP Legacy WiFi Security
Wired Equivalent Privacy (WEP) security is a legacy authentication and data encryption mode that is superseded
by WPA-PSK and WPA2-PSK. WEP limits the WiFi transmission speed to 54 Mbps (the modem router is capable
of speeds of up 600 Mbps).
If y

ou want to change the WiFi settings of the modem router’s main network, use a wired connection
to avoid being disconnected when the new WiFi settings take effect.
Tip
To configure WEP security: 1.
Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter 
http://www.routerlogin.net.
A login window opens.
3. Enter the 
modem router user name and password.
The user name is 
admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless.
The 

Wireless Settings page displays.
5. From the Mode menu, select Up to 54 Mbps.
The page adjusts to displa

y the 
WEP radio button. Manage the WiFi Network Settings
103
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							6.
In the Security Options section, select the WEP radio button. 7.
From the 
Authentication Type menu, select one of the following types:
• Automatic
. Clients can use either Open System or Shared Key authentication.
• Shared Key
. Clients can use only Shared Key authentication.
8. From the 
Encryption Strength menu, select the encryption key size:
• 64-bit
. Standard WEP encryption, using 40/64-bit encryption.
• 128-bit
. Standard WEP encryption, using 104/128-bit encryption. This selection provides higher encryption
security.
9. In the 
Passphrase field, enter a phrase.
The phrase must consist of alphanumeric characters.
10. Click the 
Generate button.
For each of the key fields, a value is generated and entered automatically.
11. Specify the active key by selecting the Key 1
, Key 2, Key 3, or Key 4 radio button.
Only one k
ey can be the active key. To join the modem router
’s WiFi network, a user must enter the key value
for the key that you specified as the active key.
12. To manually change the generated value for the key, do the following:
•For 64-bit WEP, enter 10 hexadecimal digits (any combination of 0–9, A–F). The key values are not
case-sensitive.
• For 128-bit WEP, enter 26 hexadecimal digits (any combination of 0–9, A–F). The key values are not
case-sensitive.
To join the 
modem router’s WiFi network, a user must enter the key value for the key that you specified as the
activ
e key.
13. Click the Apply button. Manage the WiFi Network Settings
104
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							Your settings are saved.
14. Make sure that you can reconnect over WiFi to the network with its new security settings.
If you cannot connect over WiFi, check the following:
•If your computer or WiFi device is already connected to another WiFi network in your area, disconnect it from
that WiFi network and connect it to the WiFi network that the modem router provides. Some WiFi devices
automatically connect to the first open netw
ork without WiFi security that they discover.
• If your computer or WiFi device is trying to connect to your network with its old settings (before you changed
the settings), update the WiFi network selection in your computer or WiFi device to match the current settings
for your network.
• Does your WiFi device display as an attached device? (See View Devices Currently on the Network on page
236
.) If it does, it is connected to the network.
• Are you using the correct WiFi network name (SSID) and password?
Use WPS to Add a Device to the WiFi Network WPS (Wi-Fi Protected Setup) lets you connect a computer or WiFi device to the modem router’s network without
enter

ing the WiFi network passphrase or key. Instead, you use a 
WPS button or enter a PIN to connect.
If you use the push button method, the WiFi device that you are trying to connect must provide either a physical
button or a software button. If you use the PIN method, you must know the PIN of the WiFi device that you are trying
to connect.
WPS supports WPA and WPA2 WiFi security. If your modem router network is open (no WiFi security is set, which
is not the def

ault setting for the 
modem router), connecting with WPS automatically sets WPA + WPA2 WiFi security
on the 
modem router network and generates a random passphrase. You can view this passphrase (see View or
Change the Basic WiFi Settings on page 
95).
Use WPS With the Push Button Method
For you to use the push button method to connect a WiFi device to the modem router’s WiFi network, the WiFi device
that y

ou are trying to connect must provide either a physical button or a software button. You can use the physical
button and software button to let a WiFi device join only the main WiFi network, not the guest WiFi network.
To let a WiFi device join the 
modem router’s main WiFi network using WPS with the push button
method: 1.
Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter 
http://www.routerlogin.net.
A login window opens.
3. Enter the 
modem router user name and password.
The user name is admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays. Manage the WiFi Network Settings
105
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							4.
Select ADVANCED > WPS Wizard.
The page displays a description of the WPS method.
5. Click the 
Next button. By default, the 
Push Button (recommended) radio button is selected.
6. Either clic
k the   button onscreen or press the WPS button on the right side panel of the modem router.
F

or two minutes, the modem router attempts to find the WiFi device (that is, the client) that you want to join the
modem 
router’s main WiFi network.
During this time, the WiFi LED on the top panel of the modem 
router blinks white.
7. Within two minutes, go to the WiFi device and press its WPS button to join the modem router’s main WiFi network
without entering a password.
After the modem router establishes a WPS connection, the WiFi LED lights solid white and the Add WPS Client
page displays a confirmation message.
8. To verify that the WiFi device is connected to the modem router’s main WiFi network, select BASIC > Attached
Device
.
The WiFi device displays onscreen.
Use WPS With the PIN Method
To use the PIN method to connect a WiFi device to the modem router’s WiFi network, you must know the PIN of
the 

WiFi device that you are trying to connect.
To let a WiFi device join the modem router’s WiFi network using WPS with the PIN method: 1.
Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter 
http://www.routerlogin.net.
A login window opens.
3. Enter the 
modem router user name and password. Manage the WiFi Network Settings
106
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							The user name is admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > WPS Wizard.
The page displays a description of the WPS method.
5. Click the 
Next button.
The Add WPS Client page adjusts.
The 
Push Button (recommended) radio button is selected by default.
6. Select the 
PIN Number radio button. 7.
In the 
Enter Clients’ PIN field, enter the PIN number of the WiFi device.
8. Click the 
Next button.
For four minutes, the modem router attempts to find the WiFi device (that is, the client) that you want to join the
modem 
router’s main WiFi network.
During this time, the WiFi LED on the top panel of the modem 
router blinks white.
9. Within four minutes, go to the WiFi device and use its WPS software to join the network without entering a
password.
When the modem router establishes a WPS connection, the WiFi LED lights solid white and the Add WPS Client
page displays a confirmation message.
10. To verify that the WiFi device is connected to the modem router’s main WiFi network, select BASIC > Attached
Device.
The 

WiFi device displays onscreen.
Manage the Basic WiFi Settings and WiFi Security of the Guest
Network A guest network allows visitors to use the Internet without using your WiFi security key. By default, the guest WiFi
network is disabled. You can enable and configure the guest WiFi network for each WiFi band. The modem router Manage the WiFi Network Settings
107
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							simultaneously supports the 2.4 GHz band for 802.11n, 802.11g, and 802.11b devices and the 5 GHz band for
802.11ac, 802.11n, and 802.11a devices.
The WiFi mode of the guest WiFi network depends on the WiFi mode of the main WiFi network. For example, if you
configure the WiFi mode for the main WiFi network as Up to 54 Mbps in the 2.4 GHz band, the guest WiFi network
also functions in the Up to 54 Mbps mode in the 2.4 GHz band. For information about configuring the WiFi mode,
see View or Change the Basic WiFi Settings on page 95.
The 
modem router provides two default guest networks with the following names (SSIDs):
• 2.4 GHz band. NETGEAR_Guest1
• 5 GHz band. NETGEAR-5G_Guest1
By def

ault, these networks are configured as open networks without security but are disabled. You can enable one
or both networks. You can also change the SSIDs for these networks.
To set up a guest network: 1.
Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter 
http://www.routerlogin.net.
A login window opens.
3. Enter the 
modem router user name and password.
The user name is 
admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays. Manage the WiFi Network Settings
108
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							4.
Select Guest Network. 5.
Enable the guest network and configure its WiFi settings as described in the following table. Description
Field
Wireless Network (2.4GHz b/g/n)
The SSID is the 2.4 GHz WiFi band name. If you did not change the SSID, the default SSID
displays, which is NETGEAR_Guest1.
To change the SSID in the 2.4 GHz WiFi band for the guest WiFi network, enter a 32-character
(maximum), case-sensitive name in this field.
Name (SSID)
This field is of an informational nature and shows the channel that is configured in the 2.4 GHz
band for the main WiFi network. You cannot change the channel in the 2.4 GHz band for the
guest WiFi network.
Channel Manage the WiFi Network Settings
109
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000 
						

							Description
Field
This field is of an informational nature and shows the mode that is configured in the 2.4 GHz
band for the main WiFi network. You cannot change the mode in the 2.4 GHz band for the guest
WiFi network.
Mode
By default, the guest WiFi network is disabled. To enable the guest WiFi network for the 2.4
GHz WiFi band, select the Enable Guest Network check box.
Enab
le Guest Network
By default, the modem router broadcasts its SSID of the 2.4 GHz WiFi band so that WiFi stations
can detect the WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast
for the 2.4 GHz WiFi band for the guest WiFi network, clear the Enable SSID Broadcast check
box.
Enable SSID Broadcast
By default, WiFi clients that are connected to the 2.4 GHz WiFi band of the guest WiFi network
cannot access WiFi devices or Ethernet devices that are connected to the main WiFi network.
To allow access to the main WiFi network, select the Allow guests to see each other and
access m

y local network check box.
Allo

w guests to see each
other and access my local
network
Security Options Manage the WiFi Network Settings
110
Nighthawk AC1900 WiFi VDSL/ADSL Modem Router Model D7000