Netgear Dm111pspv2 Adsl2 Plus Ethernet Modem User Manual

							Modem Internet Setup
21  Broadband ADSL2+ Modem DM111PSPv2
Note:  The Setup Wizard cannot detect a Point-to-Point Tunneling Protocol 
(PPTP) connection. If your ISP uses PPTP, you have to set your 
Internet connection through the screen described in 
Manual Setup 
(Basic Settings) described on 21.
Manual Setup (Basic Settings)
The Basic Settings screen displays when you select No. I want to configure the Modem 
myself in the Setup Wizard and is also available from the modem menus. It is where you view 
or change ISP information. The fields that display vary depending on whether or not your 
Internet connection requires a login.
Note:  Check that the country and language are set as described Setup 
Wizard on page 20 before proceeding with the manual setup. 
To perform a manual setup:
1. Select Set Up > Basic Settings, and select Yes or No depending on whether or not 
your ISP requires a login. The following Basic Settings screens show both forms of the 
Basic Settings screen.
•     Yes. Select the encapsulation method and enter the login name. If you want to 
change the login time-out, enter a new value in minutes.
•     No. Enter the account and domain names, as needed.
2. Enter the settings for the IP address and DNS server. The default DSL settings usually work 
fine. If you have problems with your connection, check the DSL settings, and see 
ADSL 
Settings on page 24 for more information.
3. If no login is required, you can specify the MAC Address setting.
4. Click Apply to save your settings.
5. Click Test to test your Internet connection. If the NETGEAR website does not appear within 
1 minute, see 
Troubleshooting on page 65. 
						

							ISP does not require loginISP does require login
Modem Internet Setup
22
Broadband ADSL2+ Modem DM111PSPv2 
The following descriptions explain all of the possible fields in the Bas\
ic Settings screen. Note 
that which fields appear in this screen depends on whether or not an ISP\
 login is required.
Does Your ISP Require a Login?
 Answer either yes or no.
•     When no login is required, these fields display: Account Name (If required) . Enter the account name provided by your ISP. This 
might also be called the host name.
Domain Name (If required). Enter the domain name provided by your ISP.
•     When your ISP requires a login, these fields display: Encapsulation. Encapsulation is a method for enclosing multiple protocols. PPP 
stands for Point-to-Point Protocol. The choices are PPPoE (PPP over Eth\
ernet) or 
PPPoA (PPP over ATM).
Login. The login name provided by your ISP. This is often an email address.
Password. The password that you use to log in to your ISP.  
						

							Modem Internet Setup
23  Broadband ADSL2+ Modem DM111PSPv2
Idle Timeout (In minutes). If you want to change the login timeout, enter a new value 
in minutes. This determines how long the broadband ADSL2+ modem keeps the 
Internet connection active after there is no Internet activity from the LAN. Entering a 
value of 0 (zero) means never log out.
Internet IP Address.
•     When a login is required, these fields display:
Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address. Your ISP 
automatically assigns these addresses.
Use Static IP Address. Enter the IP address, IP subnet mask, and the gateway IP 
address that your ISP assigned. The gateway is the ISP’s broadband ADSL2+ 
modem to which your broadband ADSL2+ modem will connect.
•     When a login is not required, this field displays:
Use IP Over ATM (IPoA). Your ISP uses classical IP addresses (RFC 1577). Enter the 
IP address, IP subnet mask, and gateway IP addresses that your ISP assigned. 
Domain Name Server (DNS) Address. The DNS server is used to look up site addresses 
based on their names. 
Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP 
automatically assigns this address. 
Use These DNS Servers. If you know that your ISP does not automatically transmit DNS 
addresses to the broadband ADSL2+ modem during login, select this option, and enter 
the IP address of your ISP’s primary DNS server. If a secondary DNS server address is 
available, enter it also.
NAT (Network Address Translation). NAT automatically assigns private IP addresses 
(192.168.0.x) to LAN-connected devices.
Enable. Usually NAT is enabled.
Disable. This disables NAT, but leaves the firewall active. Disable NAT only if you are 
sure you do not need it. When NAT is disabled, only standard routing is performed by this 
modem. Classical routing lets you directly manage the IP addresses that the broadband 
ADSL2+ modem uses. Classical routing should be selected only by experienced users.
1
Disable firewall. This check box disables the firewall in addition to disabling NAT. With 
the firewall disabled, the protections usually provided to your network are disabled.
When no login is required, this field displays:
Modem MAC Address. The Ethernet MAC address used by the broadband ADSL2+ modem 
on the Internet port. Some ISPs register the MAC address of the network interface card in 
your computer when your account is first opened. They will then accept traffic only from the 
MAC address of that computer. This feature allows your broadband ADSL2+ modem to use 
your computer’s MAC address (this is also called cloning). 
1. Disabling NAT reboots the broadband ADSL2+ modem and resets its configuration settings to the factory defaults. 
Disable NAT only if you plan to set up the broadband ADSL2+ modem in a setting where you will be manually 
administering the IP address space on the LAN side of the modem. 
						

							Modem Internet Setup24
Broadband ADSL2+ Modem DM111PSPv2 
Use Default Address
. Use the default MAC address.
Use Computer MAC Address. The broadband ADSL2+ modem will capture and use the 
MAC address of the computer that you are now using. You have to use the \
one computer 
that is allowed by the ISP.
Use This MAC Address. Enter the MAC address that you want to use.
ADSL Settings
The DSL settings of your modem work fine for most ISPs. However, some IS\
Ps use a specific 
multiplexing method and virtual circuit number for the virtual path iden\
tifier (VPI) and virtual 
channel identifier (VCI).
Note:  You are required to use the Setup Wizard to select the correct 
country for the default DSL settings to work.
If your ISP gave you a multiplexing method or VPI/VCI number, enter the \
setting:
1.  Select  Setup >  ADSL Settings to display the following screen:
2.  In the Multiplexing Method drop-down list, select  LLC-based or VC-based.
3.  For the VPI, type a number between 0 and 255. The default is 0. 
4.  For the VCI, type a number between 32 and 65535. The default is 35.
5.  Click  Apply . 
						

							Modem Internet Setup25
 Broadband ADSL2+ Modem DM111PSPv2
Unsuccessful Internet Connection
If you cannot connect to the Internet, you can do one or more of the fol\
lowing:
•     Review your settings to be sure you have selected the correct options an\
d typed 
everything correctly. 
•     Contact your ISP to verify that you have the correct configuration infor\
mation.
•     Read Chapter 6, Troubleshooting . If problems persist, register your NETGEAR product 
and contact NETGEAR technical support.
•     Check the Internet Protocol (TCP/IP) properties in the Network Connect\
ions section of  your PC Control Panel. They should be set to obtain both  IP and DNS server addresses 
automatically. See your computer documentation for more information.
Change Password and Login Time-Out
For security reasons, the broadband ADSL2+ modem has its own user name a\
nd password 
that default to admin and password. You can and should change these to a secure user 
name and password that are easy to remember. The ideal password contains\
 no dictionary 
words from any language and is a mixture of uppercase and lowercase lett\
ers, numbers, and 
symbols. It can be up to 30 characters.
Note:   The modem  user name and password are not the same as the user 
name and password for logging in to your Internet connection. See 
Types of Logins  on page
  26 for more information about login types.
To change your password and login time-out:
1. Select  Maintenance > Set Password  to display the following screen:
.
2.  Enter the old password, and then enter the new password twice.
3.  Change the login time-out to a value between 1 and 99 minutes if the def\
ault value of 5 
minutes does not meet your needs. 
						

							Modem Internet Setup
26 Broadband ADSL2+ Modem DM111PSPv2 
The administrator’s login to the modem configuration times out after a period of inactivity 
to prevent someone else from accessing the modem interface when you step away.
4. Click Apply to save your changes. 
After changing the password, you are required to log in again to continue the 
configuration. If you have backed up the modem settings previously, you should do a new 
backup so that the saved settings file includes the new password. See 
Back Up on 
page 47 for information about backing up your network configuration.
Log Out Manually
The modem interface provides a Logout command at the bottom of the modem menus. Log 
out when you expect to be away from your computer for a relatively long period of time.
To log out manually:
Click Log Out at the bottom of the modem menus.
Types of Logins
There are two separate types of logins that have different purposes. It is important that you 
understand the difference so that you know which login to use when.
•     Modem login logs you in to the modem interface. See Log In to the Modem on page 17 
for details about this login.
•     ISP login logs you in to your Internet service. Your service provider has provided you with 
this login information in a letter or some other way. If you cannot find this login 
information, contact your service provider. 
						

							27
3
3.   Security Settings
Keeping unwanted content out of your network
This chapter explains how to use the basic firewall features of the modem to prevent 
objectionable content from reaching the PCs and other devices connected to your network. 
This chapter contains the following sections:
•     Keyword Blocking of HTTP Traffic 
•     Firewall Rules to Control Network Access 
•     Configure Services 
•     Set the Time Zone 
•     Schedule Firewall Services 
•     Enable Security Event Email Notification  
						

							Security Settings28
Broadband ADSL2+ Modem DM111PSPv2 
Keyword Blocking of HTTP Traffic
Use keyword blocking to prevent certain types of HTTP traffic from acces\
sing your network. 
The blocking can be always or according to a schedule.
To block by keywords:
1. 
Select  Security >  Block Sites.
2.  Select one of the keyword blocking options:
•     Per Schedule. Turn on keyword blocking according to the Schedule screen settings.
•     Always . Turn on keyword blocking all the time, independent of the Schedule scr\
een.
3.  In the Keyword field, enter a keyword or domain, click  Add Keyword, and click Apply.
The Keyword list. supports up to 32 entries. Here are some sample entrie\
s:
•     Specify XXX to block http://www.badstuff.com/xxx.html.
•      Specify .com if you want to allow only sites with domain suffixes such a\
s .edu or .gov.
•     Enter a period (. ) to block all Internet browsing access.
Delete a Keyword or Domain
To delete a keyword or domain:
1. Select the keyword you want to delete from the list.
2.  Click  Delete Keyword, and click Apply  to save your changes. 
						

							Security Settings
29  Broadband ADSL2+ Modem DM111PSPv2
Specify a Trusted Computer
You can exempt one trusted computer from blocking and logging. That computer has to be 
configured to use a a fixed IP address.
To specify a trusted computer:
1. In the Trusted IP Address field, enter the IP address.
2. Click Apply to save your changes.
Firewall Rules to Control Network Access
By default your router blocks any inbound traffic from the Internet to your computers except 
for replies to your outbound traffic. You might need to create exceptions to this rule to allow 
remote computers to access a server on your local network or to allow certain applications 
and games to work correctly. Your router provides firewall rules for creating these exceptions.
Authorized communications are established according to inbound and outbound rules. The 
firewall has the following two default rules. You can create custom rules to further restrict the 
outbound communications or more widely open the inbound communications:
•     Inbound. Block all access from outside except responses to requests from the LAN side.
•     Outbound. Allow all access from the LAN side to the outside.
Remote Computer Access Basics
When a computer on your network needs to access a computer on the Internet, your 
computer sends your router a message containing the source and destination address and 
process information. Before forwarding your message to the remote computer, your router 
has to modify the source information and create and track the communication session so that 
replies can be routed back to your computer. 
Here is an example of normal outbound traffic and the resulting inbound responses:
1. You open a browser, and your operating system assigns port number 5678 to this 
browser session. 
2. You type http://www.example.com into the URL field, and your computer creates a web 
page request message with the following address and port information. The request 
message is sent to your router.
Source address. Your computer’s IP address.
Source port number. 5678, which is the browser session. 
Destination address. The IP address of www.example.com, which your computer finds 
by asking a DNS server.
Destination port number. 80, which is the standard port number for a web server 
process. 
						

							Security Settings
30 Broadband ADSL2+ Modem DM111PSPv2 
3. Your router creates an entry in its internal session table describing this communication 
session between your computer and the web server at www.example.com. Before sending 
the web page request message to www.example.com, your router stores the original 
information and then modifies the source information in the request message, performing 
Network Address Translation (NAT):
•     The source address is replaced with your router’s public IP address. This is 
necessary because your computer uses a private IP address that is not globally 
unique and cannot be used on the Internet.
•     The source port number is changed to a number chosen by the router, such as 33333. 
This is necessary because two computers could independently be using the same 
session number.
Your router then sends this request message through the Internet to the web server at 
www.example.com.
4. The web server at www.example.com composes a return message with the requested web 
page data. The return message contains the following address and port information. The 
web server then sends this reply message to your router.
Source address. The IP address of www.example.com.
Source port number. 80, which is the standard port number for a web server process.
Destination address. The public IP address of your router.
Destination port number. 33333.
5. Upon receiving the incoming message, your router checks its session table to determine 
whether there is an active session for port number 33333. Finding an active session, the 
router then modifies the message to restore the original address information replaced by 
NAT. Your router sends this reply message to your computer, which displays the web 
page from www.example.com. The message now contains the following address and port 
information:
Source address. The IP address of www.example.com.
Source port number. 80, which is the standard port number for a web server process.
Destination address. Your computer’s IP address.
Destination port number. 5678, which is the browser session that made the initial 
request.
6. When you finish your browser session, your router eventually detects a period of inactivity in 
the communications. Your router then removes the session information from its session 
table, and incoming traffic is no longer accepted on port number 33333.
Open Inbound Ports (Port Forwarding)
In the preceding example, requests are sent to a remote computer by your router from a 
particular service port number, and replies from the remote computer to your router are 
directed to that port number. If the remote server sends a reply back to a different port 
number, your router does not recognize it and discards it. However, some application servers