Netgear Dgnd4000 N750 Wireless Dual Band Gigabit Adsl2 Plus Modem Router User Manual

							Advanced Settings 
131  N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
-Direction/Type. This setting is used when determining if the IKE policy matches 
the current traffic. Select the desired option.
-Responder only. Incoming connections are allowed, but outgoing connections 
are blocked.
-Initiator and Responder. Both incoming and outgoing connections are allowed.
-Exchange Mode. Currently, only Main Mode is supported. Ensure that the remote 
VPN endpoint is set to use Main Mode.
-Diffie-Hellman (DH) Group. The Diffie-Hellman algorithm is used when the 
connection exchanges keys. The DH Group setting determines the bit size used 
in the exchange. This value must match the value used on the remote VPN 
gateway.
-Local Identity Type. Select the desired option to match the Remote Identity Type 
setting on the remote VPN endpoint.
-WAN IP Address. Your Internet IP address.
-Fully Qualified Domain Name. Your domain name.
-Fully Qualified User Name. Your name, email address, or other ID.
-Local Identity Data. Enter the data for the selection. If WAN IP Address is 
selected, no input is required.
-Remote Identity Type. Select the desired option to match the Local Identity Type 
setting on the remote VPN endpoint.
-IP Address. The Internet IP address of the remote VPN endpoint.
-Fully Qualified Domain Name. The domain name of the remote VPN endpoint.
-Fully Qualified User Name. The name, email address, or other ID of the remote 
VPN endpoint.
-Remote Identity Data. Enter the data for the selection. If IP Address is selected, 
no input is required.
•Parameters. 
-Encryption Algorithm. The encryption algorithm used for both IKE and IPSec. 
This setting must match the setting used on the remote VPN gateway.
-Authentication Algorithm. The authentication algorithm used for both IKE and 
IPSec. This setting must match the setting used on the remote VPN gateway.
-Pre-shared Key. The key has to be entered both here and on the remote VPN 
gateway.
-SA Life Time. This setting determines the time interval before the SA (security 
association) expires. (It is automatically reestablished as required.) While using a 
short time period (or data amount) increases security, it also degrades 
performance. It is common to use periods over an hour (3600 seconds) for the SA 
lifetime. This setting applies to both IKE and IPSec SAs.
-Enable PFS (Perfect Forward Secrecy). If enabled, security is enhanced by 
ensuring that the key is changed at regular intervals. Also, even if one key is 
broken, subsequent keys are no easier to break. (Each key has no relationship to 
the previous key.) 
						

							Advanced Settings 132
N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
This setting applies to both IKE and IPSec SAs. When configuring the rem\
ote 
endpoint to match this setting, you might need to specify the key group \
used. For 
this device, the key group is the same as the DH Group setting in the IK\
E section.
4.  Click  Apply  when done.
Add or Edit a Manual VPN Policy
A Manual VPN policy requires all settings (including the keys) for the\
 VPN tunnel to be 
manually input at each end (both VPN endpoints). No third-party server\
 or organization is 
involved.
To add or edit a Manual VPN policy:
1.  Click  ADV
 ANCED > Advanced Setup > VPN Policies .
2.  Click the  Add Manual Policy button.
3. Enter or select the following parameters:
• General. 
 These settings identify this policy and determine its major characterist\
ics.
- Policy Name. Enter a unique name to identify this policy
 . This name is not 
supplied to the remote VPN endpoint. It is used only to help you manage \
the 
policies.
- Remote VPN Endpoint. Select the desired option (IP address or domain name) 
and enter the address or domain name of the remote VPN endpoint you wish\
 to 
connect to.
The remote VPN endpoint must have this VPN gateway’s address entered as its  remote VPN endpoint. 
						

							Advanced Settings 
133  N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
•Local LAN. These settings identify which computers on your LAN are covered by this 
policy. For each selection, data must be provided as follows:
-Single address. Enter an IP address in the Single/Start IP address field. 
Typically, this setting is used when you wish to make a single server on your LAN 
available to remote users.
-Range address. Enter the starting IP address in the Single/Start IP address field, 
and the finish IP address in the Finish IP address field. This setting must be an 
address range used on your LAN.
-Subnet address. Enter an IP address in the Single/Start IP address field, and the 
desired network mask in the Subnet Mask field.
The remote VPN endpoint must have these IP addresses entered as its remote 
addresses.
•Remote LAN. These identify which computers on the remote LAN are covered by this 
policy. For each selection, data must be provided as follows:
-Single PC - dynamic IP. Select this option if there is no LAN (only a single 
computer) at the remote endpoint. If this option is selected, no additional data is 
required.
-Single address. Enter an IP address in the Single/Start IP address field. This 
setting must be an address on the remote LAN. Typically, this setting is used 
when you wish to access a server on the remote LAN.
-Range address. Enter the starting IP address in the Single/Start IP address field, 
and the finish IP address in the Finish IP address field. This range must be an 
address range used on the remote LAN.
-Subnet address. Enter an IP address in the Single/Start IP address field, and the 
desired network mask in the Subnet Mask field.
The remote VPN endpoint must have these IP addresses entered as its local 
addresses.
•ESP Configuration. ESP (Encapsulating Security Payload) provides security for the 
payload (data) sent through the VPN tunnel.
-SPI. Enter the required SPIs. Each policy must have unique SPIs. These settings 
must match the remote VPN endpoint. The Incoming setting here must match the 
Outgoing setting on the remote VPN endpoint, and the Outgoing setting here 
must match the Incoming setting on the remote VPN endpoint.
-Encryption. Select the desired encryption algorithm, and enter the key in the field 
provided. For 3DES, the keys should be 24 ASCII characters (48-hex characters).
-Authentication. Select the desired authentication algorithm, and enter the key in 
the field provided. For MD5, the keys should be 16 ASCII characters (32-hex 
characters). For SHA-1, the keys should be 20 ASCII (40-hex characters).
4. Click Apply when done. 
						

							134
10
10.   Troubleshooting
Diagnose and solve problems
This chapter provides information to help you diagnose and solve problems you might have with 
your wireless modem router. If you do not find the solution here, check the NETGEAR support 
site at 
http://support.netgear.com/general/contact/default.aspx for product and contact 
information.
This chapter contains the following sections:
•Quick Tips 
•Troubleshoot with the LEDs 
•Cannot Log In to the Router 
•Cannot Access the Internet 
•Changes Not Saved 
•Incorrect Date or Time 
•Wireless Connectivity 
•Restore the Factory Settings and Password 
•Troubleshoot Your Network Using the Ping Utility  
						

							Troubleshooting 
135  N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
Quick Tips
This section describes tips for troubleshooting some common problems.
Sequence to Restart Your Network
Be sure to restart your network in this sequence:
1. Turn off and unplug the modem. 
2. Turn off the wireless modem router and computers.
3. Plug in the modem and turn it on. Wait 2 minutes.
4. Turn on the wireless modem router and wait 2 minutes.
5. Turn on the computers.
Check Ethernet Cable Connections
Make sure that the Ethernet cables are securely plugged in. 
•The Internet status LED on the wireless modem router is lit if the Ethernet cable 
connecting the wireless modem router and the modem is plugged in securely and the 
modem and wireless modem router are turned on. 
•For each powered-on computer connected to the wireless modem router by an Ethernet 
cable, the corresponding numbered router LAN port LED is lit. 
Wireless Settings
Make sure that the wireless settings in the computer and wireless modem router match 
exactly. 
•For a wirelessly connected computer, the wireless network name (SSID) and wireless 
security settings of the wireless modem router and wireless computer need to match 
exactly. 
•If you set up an access list in the Advanced Wireless Settings screen, you have to add 
each wireless computer’s MAC address to the wireless modem router’s access list.
Network Settings
Make sure that the network settings of the computer are correct. 
•Wired and wirelessly connected computers need to have network (IP) addresses on the 
same network as the wireless modem router. The simplest way to achieve this address 
commonality is to configure each computer to obtain an IP address automatically using 
DHCP. 
•Some cable modem service providers require you to use the MAC address of the 
computer initially registered on the account. You can view the MAC address in the 
Attached Devices screen. 
						

							Troubleshooting 
136 N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
Troubleshoot with the LEDs
After you turn on power to the wireless modem router, the following sequence of events 
should occur:
1. When power is first applied, verify that the Power LED is lit.
2. Verify that the Power LED turns red within a few seconds, indicating that the self-test is 
running.
3. After approximately 30 seconds, verify:
•The Power LED is solid green.
•The Internet LED is lit.
•The Ethernet LED is lit for any local port that is connected to a computer. This LED 
indicates that a link has been established to the connected device.
The LEDs on the front panel of the wireless modem router can be used for troubleshooting.
Power LED Is Off or Blinking
•Make sure that the power cord is securely connected to your wireless modem router and 
that the power adapter is securely connected to a functioning power outlet. 
•Make sure that you are using the 12V DC, 5A power adapter that NETGEAR supplied for 
this product.
•If the Power LED blinks slowly and continuously, the wireless modem router firmware is 
corrupted. This situation can happen if a firmware upgrade is interrupted, or if the wireless 
modem router detects a problem with the firmware. If the error persists, you have a 
hardware problem. For recovery instructions, or help with a hardware problem, contact 
technical support at 
www.netgear.com/support.
Power LED Stays Red
When the wireless modem router is turned on, the Power LED turns red for about 20 seconds 
and then turns green. If the LED does not turn green, the wireless modem router has a 
problem.
If the Power LED is still red one minute after you turn on power to the wireless modem router:
1. Turn the power off and back on to see if the wireless modem router recovers.
2. Press and hold the Restore Factory Settings button to return the wireless modem 
router to its factory settings. See 
Factory Settings on page 146.
If the error persists, you might have a hardware problem and should contact technical 
support at 
www.netgear.com/support. 
						

							Troubleshooting 
137  N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
LEDs Never Turn Off
When the wireless modem router is turned on, the LEDs turn on for about 10 seconds and 
then turn off. If all the LEDs stay lit, there is a fault within the wireless modem router.
If all LEDs are still lit 1 minute after power-up:
•Cycle the power to see if the wireless modem router recovers.
•Press and hold the Restore Factory Settings button to return the wireless modem router 
to its factory settings. See 
Factory Settings on page 146.
If the error persists, you might have a hardware problem and should contact technical 
support at 
www.netgear.com/support.
Internet or Ethernet Port LEDs Are Off
If either the Ethernet port LEDs or the Internet LED does not light when the Ethernet 
connection is made, check the following:
•Make sure that the Ethernet cable connections are secure at the wireless modem router 
and at the modem or computer.
•Make sure that power is turned on to the connected modem or computer.
•Make sure that you are using the correct cable.
When connecting the wireless modem router’s Internet port to a cable or DSL modem, 
use the cable that was supplied with the cable or DSL modem. This cable can be a 
standard straight-through Ethernet cable or an Ethernet crossover cable.
Wireless LEDs Are Off
If the Wireless LEDs stay off, check to see if the Wireless On/Off button on the wireless 
modem router has been pressed. This button turns the wireless radios in the wireless modem 
router on and off. The Wireless LEDs are lit when the wireless radio is turned on.
The Push N Connect (WPS) Button Blinks Green
If after you press the WPS button and the button blinks green, check the following:
•Make sure that you are using the button and not the wireless modem router’s built-in 
registrar.
•Check that PIN verification succeeded for the wireless device you are adding to the 
wireless network.
•Make sure that you have not pressed the WPS button on the top of the wireless modem 
router after disabling the WPS feature (you logged in to the wireless modem router and 
disabled this feature previously).
•Check that the wireless modem router is not in the temporary AP setup locked state (if 
you are using the wireless repeater function). 
						

							Troubleshooting 
138 N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
Cannot Log In to the Router
If you are unable to log in to the wireless modem router from a computer on your local 
network, check the following:
•If you are using an Ethernet-connected computer, check the Ethernet connection 
between the computer and the wireless modem router as described in the previous 
section.
•Make sure that your computer’s IP address is on the same subnet as the wireless modem 
router. If you are using the recommended addressing scheme, your computer’s address 
should be in the range of 192.168.0.2 to 192.168.0.254. 
•If your computer’s IP address is shown as 169.254.x.x, recent versions of Windows and 
Mac OS generate and assign an IP address if the computer cannot reach a DHCP server. 
These autogenerated addresses are in the range of 169.254.x.x. If your IP address is in 
this range, check the connection from the computer to the wireless modem router, and 
reboot your computer.
•If your wireless modem router’s IP address was changed and you do not know the current 
IP address, clear the wireless modem router’s configuration to factory defaults. This 
procedure sets the wireless modem router’s IP address to 192.168.0.1. This procedure is 
explained in 
Factory Settings on page 146.
•Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using 
Internet Explorer, click Refresh to be sure that the Java applet is loaded.
•Try quitting the browser and launching it again.
•Make sure that you are using the correct login information. The factory default login name 
is admin, and the password is password. Make sure that Caps Lock is off when you 
enter this information.
•If you are attempting to set up your NETGEAR wireless modem router as an additional 
router behind an existing router in your network, consider replacing the existing router 
instead. NETGEAR does not support such a configuration.
•If you are attempting to set up your NETGEAR wireless modem router as a replacement 
for an ADSL gateway in your network, the wireless modem router cannot perform many 
gateway services, for example, converting ADSL or cable data into Ethernet networking 
information. NETGEAR does not support such a configuration.
Cannot Access the Internet
If you can access your router but you are unable to access the Internet, first determine 
whether the wireless modem router can obtain an IP address from your Internet service 
provider (ISP). Unless your ISP provides a fixed IP address, your wireless modem router 
requests an IP address from the ISP. You can determine whether the request was successful 
using the Router Status screen. 
						

							Troubleshooting 
139  N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
To check the WAN IP address: 
1. Start your browser, and select an external site such as http://www.netgear.com.
2. Access the wireless modem router interface at http://www.routerlogin.net.
3. Select Administration > Router Status.
4. Check that an IP address is shown for the Internet port. If 0.0.0.0 is shown, your wireless 
modem router has not obtained an IP address from your ISP.
If your wireless modem router cannot obtain an IP address from the ISP, you might need to 
force your cable or DSL modem to recognize your new wireless modem router. Restart your 
network, as described in 
Sequence to Restart Your Network on page 135.
If your wireless modem router is still unable to obtain an IP address from the ISP, the problem 
might be one of the following:
•Your Internet service provider (ISP) might require a login program. 
Ask your ISP whether it requires PPP over Ethernet (PPPoE) or some other type of login.
•If your ISP requires a login, the login name and password might be set incorrectly.
•Your ISP might check for your computer’s host name. 
Assign the computer host name of your ISP account as the account name in the Internet 
Basic Settings screen.
•Your ISP allows only one Ethernet MAC address to connect to the Internet and might 
check for your computer’s MAC address. In this case, do one of the following:
-Inform your ISP that you have bought a new network device, and ask them to use the 
wireless modem router’s MAC address.
-Configure your wireless modem router to clone your computer’s MAC address.
If your wireless modem router can obtain an IP address, but your computer is unable to load 
any web pages from the Internet:
•Your computer might not recognize any DNS server addresses. 
A DNS server is a host on the Internet that translates Internet names (such as www 
addresses) to numeric IP addresses. Typically, your ISP provides the addresses of one or 
two DNS servers for your use. If you entered a DNS address during the wireless modem 
router’s configuration, reboot your computer, and verify the DNS address. You can 
configure your computer manually with DNS addresses, as explained in your operating 
system documentation.
•Your computer might not have the wireless modem router configured as its TCP/IP 
gateway.
If your computer obtains its information from the wireless modem router by DHCP, reboot 
the computer, and verify the gateway address.
•You might be running login software that is no longer needed.
If your ISP provided a program to log you in to the Internet (such as WinPoET), you no 
longer need to run that software after installing your wireless modem router. You might 
need to go to Internet Explorer and select Tools > Internet Options, click the 
Connections tab, and select Never dial a connection. 
						

							Troubleshooting 
140 N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
Troubleshoot PPPoE
If you are using PPPoE, try troubleshooting your Internet connection.
To troubleshoot a PPPoE connection:
1. Log in to the wireless modem router.
2. Select Administration > Router Status.
3. Click Connection Status. If all of the steps indicate OK, then your PPPoE connection is 
working.
If any of the steps indicate Failed, you can attempt to reconnect by clicking Connect. The 
wireless modem router continues to attempt to connect indefinitely.
If you cannot connect after several minutes, you might be using an incorrect service name, 
user name, or password. There might also be a provisioning problem with your ISP.
Note:Unless you connect manually, the wireless modem router does not 
authenticate using PPPoE until data is transmitted to the network.
Troubleshoot Internet Browsing
If your wireless modem router can obtain an IP address but your computer is unable to load 
any web pages from the Internet, check the following:
•Your computer might not recognize any DNS server addresses. A DNS server is a host 
on the Internet that translates Internet names (such as www addresses) to numeric IP 
addresses.
Typically, your ISP provides the addresses of one or two DNS servers for your use. If you 
entered a DNS address during the wireless modem router’s configuration, restart your 
computer.
Alternatively, you can configure your computer manually with a DNS address, as 
explained in the documentation for your computer.
•Your computer might not have the wireless modem router configured as its default 
gateway.
Reboot the computer, and verify that the wireless modem router address 
(www.routerlogin.net) is listed by your computer as the default gateway address.
•You might be running login software that is no longer needed. If your ISP provided a 
program to log you in to the Internet (such as WinPoET), you no longer need to run that 
software after installing your wireless modem router. You might need to go to Internet 
Explorer and select Tools > Internet Options, click the Connections tab, and select 
Never dial a connection.
If the wireless modem router does not save changes you have made in the browser 
interface, check the following: