Netgear N 600 Manual

							genie Basic Settings31
 N600 Wireless Dual Band Router WNDR3400v2
Guest Networks
Adding a guest network allows visitors at your home to use the Internet without providing 
them with your wireless security key. You can add a guest network to each wireless network: 
2.4 GHz b/g/n and 5.0 GHz a/n. 
To set up a guest network:
1. 
Select  Basic >  Guest Network  to
  display the following screen:
Scroll to 
view more 
settings
 
Scroll to 
view more 
settings
2. Select any of the following wireless settings: 
						

							genie Basic Settings
32 N600 Wireless Dual Band Router WNDR3400v2 
Note:  These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n 
bands.
Enable Guest Network. When this check box is selected, the guest network is enabled, 
and guests can connect to your network using the SSID of this profile.
Enable SSID Broadcast. If this check box is selected, the wireless access point 
broadcasts its name (SSID) to all wireless stations. Stations with no SSID can adopt the 
correct SSID for connections to this access point.
Allow guest to access My Local Network. If this check box is selected, any user who 
connects to this SSID has access to your local network, not just Internet access.
Enable Wireless Isolation. If this check box is selected, then wireless clients (computers 
or wireless devices) that join the network can use the Internet, but cannot access each 
other or access Ethernet devices on the network.
3. Give the guest network a name.
The guest network name is case-sensitive and can be up to 32 characters. You then 
manually configure the wireless devices in your network to use the guest network name in 
addition to the main nonguest SSID. 
4. Select a security option from the list. The security options are described in Guest Network 
Wireless Security Options on page 32.
5. Click Apply to save your selections.
Guest Network Wireless Security Options
A security option is the type of security protocol applied to your wireless network. The 
security protocol in force encrypts data transmissions and ensures that only trusted devices 
receive authorization to connect to your network. 
This section presents an overview of the security options and provides guidance on when to 
use which option. Note that it is also possible to set up a guest network without wireless 
security. NETGEAR does not recommend this.
Wi-Fi Protected Access (WPA) encryption is built into all hardware that has the Wi-Fi-certified 
seal. This seal means the product is authorized by the Wi-Fi Alliance (http://www.wi-fi.org/) 
because it complies with the worldwide single standard for high-speed wireless local area 
networking. 
WPA-PSK uses a passphrase to perform authentication and generate the initial data 
encryption keys. Then it dynamically varies the encryption key. WPA-PSK uses Temporal Key 
Integrity Protocol (TKIP) data encryption, implements most of the IEEE 802.11i standard, and 
is designed to work with all wireless network interface cards, but not all wireless access 
points. It is superseded by WPA2-PSK. 
						

							genie Basic Settings
33  N600 Wireless Dual Band Router WNDR3400v2
WPA2-PSK is stronger than WPA. It is advertised to be theoretically indecipherable due to 
the greater degree of randomness in encryption keys that it generates. WPA2-PSK gets 
higher speed because it is implemented through hardware, while WPA-PSK is implemented 
through software. WPA2-PSK uses a passphrase to authenticate and generate the initial data 
encryption keys. Then it dynamically varies the encryption key. 
WPS-PSK + WPA2-PSK Mixed Mode can provide broader support for all wireless clients. 
WPA2-PSK clients get higher speed and security, and WPA-PSK clients get decent speed 
and security. The product documentation for your wireless adapter and WPA client software 
should have instructions about configuring their WPA settings. 
						

							34
4
4.   genie Advanced Home
Specifying custom settings
This chapter explains the features available from the genie Advanced Home screen, shown in 
the following figure:
This screen is also 
displayed through 
the Administration 
menu.
This chapter contains the following sections:
•      Setup Wizard 
•      WPS Wizard 
•      Setup Menu 
•      WAN Setup 
•      LAN Setup 
•      Quality of Service (QoS) Setup 
Some selections on the Advanced Home  screen 
 are described in separate chapters:
•      USB
 Storage. See  Chapter 5, USB Storage .
•      Security . See Chapter 6, Security.
•      Adminis
 tration. See Chapter 7, Administration.
•      Advanc
 ed Setup. See Chapter 8, Advanced Settings . 
						

							genie Advanced Home35
 N600 Wireless Dual Band Router WNDR3400v2
Setup Wizard
The NETGEAR genie installation process is launched the first time you set up the router. 
After setting up the router the first time, if you want to perform this task again, you can run 
Setup Wizard from the Advanced tab of the genie.
1. 
Select  Se
 tup Wizard to display the following screen: 
2. Select either  Ye s or No, I want to configure the router myself . If you select No, you are 
taken to the Internet Setup screen (see Internet Setup on
  page 23 ). 
3.  If you s
elected Yes, click Next . The following screen displays:
The Setup Wizard searches your Internet connection for servers and protocols to 
determine your ISP configuration.  The following screen displays: 
						

							genie Advanced Home36
N600 Wireless Dual Band Router WNDR3400v2 
WPS Wizard
The WPS Wizard helps you add a WPS-capable cli
ent device (a wireless device or computer) 
to your network. On the client device, you need to either press its WPS button or locate its 
WPS PIN.
To use the WPS Wizard:
1.  Select  Advance
 d > WPS Wizard.
2.  Click  Next.
  The following screen lets you select the method for adding the WPS client (a 
wireless device or computer).
 
You can use either the push button or PIN method. 
3.  Select either  Push Button  or PIN Number . 
•      T
o use the push-button method, either click the  WPS button on this screen, or press 
the WPS  button on the top of the router. Within two minutes, go to the wireless client 
and press its  WPS button to join the network without entering a password.
•      T
o use the PIN method, select the  PIN Number radio button, enter the client security 
PIN, and click  Next. 
						

							genie Advanced Home37
 N600 Wireless Dual Band Router WNDR3400v2
Within two minutes, go to the client device and use its WPS software to join the 
network without entering a password.
The router attempts to add the WPS-capable device. The WPS LED 
 on the top of 
the router blinks green. When the router es t
 ablishes a WPS connection, the LED is solid 
green, and the router WPS screen displays a confirmation message. 
4.  Repe
at Step 2 and Step 3 to add another WPS client to your network.
Setup Menu
Select  Advanced > Setup  to display the Setup menu. The following selections are available:
•      Internet Setup . 
 This is a shortcut to the same Internet Setup screen that you can access 
from the dashboard on the Basic Home screen. See  Internet Setup on p
 age 23.
•      W
ireless Setup . This is a shortcut to the same Wi reless Setup screen that you can 
access from the dashboard on the Basic Home screen. See  Basic Wireless Settings on 
page  27.
•      Guest Network . This is a shortcut to th
 e same Guest Network screen that you can 
access from the dashboard on the Basic Home screen. See  Guest Networks on p
 age 31 . 
•      W
AN Setup . Internet (WAN) setup. See  WAN Setup on p age 38 .
•      LAN Setup . Lo
 cal area network (LAN) setup. See  LAN Setup on page 41 .
•      QoS Setup. Qu
 ality of Service (QoS) setup. See  Quality of Service (QoS) Setup on 
page  44. 
						

							genie Advanced Home38
N600 Wireless Dual Band Router WNDR3400v2 
WAN Setup
The WAN Setup screen lets you configure a DMZ (demilitarized zone) server, change the 
Maximum Transmit Unit (MTU) size, and enable the router to respond to a ping on the WAN 
(Internet) port. Select 
Advanced > Setup > WAN Setup  to view the following screen:
•     Disable Port Scan and DoS Protection . DoS protection protects your LAN against 
denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop Attack, 
UDP Flood, ARP Attack, Spoofing ICMP, Null  Scan, and many others. This should be 
disabled only in special circumstances. 
•      Defau
lt DMZ Server . This feature is sometimes hel pful when you are playing online 
games or videoconferencing. Be careful when using this feature because it makes the 
firewall security less effective. See the following section,  Default DMZ Server, for more 
details.
•      Resp
ond to Ping on Internet Port . If you want the router to respond to a ping from the 
Internet, select this check box. Use this only  as a diagnostic tool because it allows your 
router to be discovered. Do not select this check box unless you have a specific reason.
•      Disab
le IGMP Proxying . IGMP proxying allows a computer on the local area network 
(LAN) to receive the multicast traffic it is interested in from the Internet. If you do not need 
this feature, you can select  this check box to disable it.
•      MTU Size (in bytes
 ). The normal MTU (Maximum Transmit Unit) value for most Ethernet 
networks is 1500 bytes, or 1492 bytes for  PPPoE connections. For some ISPs, you might 
need to reduce the MTU. This is rarely required, and should not be done unless you are 
sure that it is necessary for your ISP connection. See  Change the MTU Size on p
 age 39 .
•      NA
T Filtering . Network Address Translation (NAT) determines how the router processes 
inbound traffic. Secured NAT provides a secured firewall to protect the computers on the 
LAN from attacks from the Internet, but might prevent some Internet games, point-to-point 
applications, or multimedia applications fr om functioning. Open NAT provides a much 
less secured firewall, but allows almost  all Internet applications to function.  
						

							genie Advanced Home
39  N600 Wireless Dual Band Router WNDR3400v2
Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The router is programmed to recognize some of these applications and to work 
correctly with them, but there are other applications that might not function well. In some 
cases, one local computer can run the application correctly if that computer’s IP address is 
entered as the default DMZ server.
WARNING!
DMZ servers pose a security risk. A computer designated as the 
default DMZ server loses much of the protection of the firewall 
and is exposed to exploits from the Internet. If compromised, the 
DMZ server computer can be used to attack other computers on 
your network.
Incoming traffic from the Internet is usually discarded by the router unless the traffic is a 
response to one of your local computers or a service that you have configured in the Port 
Forwarding/Port Triggering screen. Instead of discarding this traffic, you can forward it to one 
computer on your network. This computer is called the default DMZ server.
To set up a default DMZ server: 
1. On the WAN Setup screen, select the Default DMZ Server check box.
2. Type the IP address.
3. Click Apply.
Change the MTU Size
The Maximum Transmission Unit (MTU) is the largest data packet a network device 
transmits. When one network device communicates across the Internet with another, the data 
packets travel through many devices along the way. If any device in the data path has a lower 
MTU setting than the other devices, the data packets have to be split or “fragmented” to 
accommodate the device with the smallest MTU. 
The best MTU setting for NETGEAR equipment is often just the default value, and changing 
the value might fix one problem but cause another. Leave the MTU unchanged unless one of 
these situations occurs:
•     You have problems connecting to your ISP or other Internet service, and the technical 
support of either the ISP or NETGEAR recommends changing the MTU setting. These 
web-based applications might require an MTU change:
-A secure website that will not open, or displays only part of a web page
-Yahoo email
-MSN portal
-America Online’s DSL service 
						

							genie Advanced Home40
N600 Wireless Dual Band Router WNDR3400v2 
•     
You use VPN and have severe performance problems.
•      Y
ou used a program to optimize MTU fo r performance reasons, and now you have 
connectivity or performance problems.
Note:  An incorrect MTU setting can cause Internet communication 
problems such as the inability to  access certain websites, frames 
within websites, secure login pages, or FTP or POP servers.
If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are 
willing to experiment, you can gradually reduce the MTU from the maximum value of 1500 
until the problem goes away. The followi ng table describes common MTU sizes and 
applications. 
Table 2.  Common MTU sizes   
MTUApplication
1500 The largest Ethernet packet size and the default value. This is the typical setting for 
non-PPPoE, non-VPN 

connections, and is the default va lue for NETGEAR routers, 
adapters, and switches.
1492 Used in PPPoE environments.
1472 Maximum size to use for pinging. (Larger packets are fragmented.)
1468 Used in some DHCP environments.
1460 Usable by AOL if you do not have la rge emai
 l attachments, for example.
1436 Used in PPTP environments or with VPN.
1400 Maximum size for AOL DSL.
576 Typical value to connect to dial up ISPs.
 
To change the MTU size:
1. Select  Advance
 d > Setup > WAN Setup . 
2.  In
 the MTU Size field, enter a new size between 64 and 1500.
3. Click  Apply  to save 
 the settings.