Netgear N450 N450 Cg3000dv2 Wifi Cable Model Router User Manual

							Advanced Settings 61
 N450 WiFi Cable Modem Router Model N450/CG3000Dv2
A login screen displays.
2. 
Enter the modem router user name and password.
The default user name is admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select Port Blocking.
The Port Blocking screen displays.
4.  Click the  Reset button.
The  Add Custom Service table is cleared, or the radio button you selected from the 
Active Filters table is unselected.
Port Forwarding
A firewall has default rules for inbound traffic (WAN to LAN) and for outbound traffic. Port  forwarding affects the inbound rules. These rules restrict access from outsiders. By \
default, 
the modem router blocks access from outside except for responses to requ\
ests from the LAN 
side. You can use port forwarding to add rules to specify exceptions to the def\
ault rule.
Because the modem router uses Network Address Translation (NAT), your network presents 
only one IP address to the Internet, and outside users cannot directly a\
ddress any of your 
local computers. However, by defining an inbound rule you can make a local server (for 
example, a web server or game server) or computer visible and available\
 to the Internet. The 
rule tells the modem router to direct inbound traffic for a particular service to one local server 
or computer based on the destination port number. Directing traffic is also known as port 
forwarding.
Some residential broadband ISPs do not allow you to run server processes\
 (such as a web or 
FTP server) from your location. Your ISP might check for servers and suspend your account 
if it finds active services at your location. See the ISP’s Acceptable Use policy.
Pay attention to the following considerations before configuring port fo\
rwarding:
• If DHCP assigns the IP address of the local server computer
 , the address might change 
when the computer is rebooted. To keep the address from changing, you can assign a 
static IP address to your server outside the range that DHCP assigns, bu\
t in the same  
						

							Advanced Settings 62
N450 WiFi Cable Modem Router Model N450/CG3000Dv2 
subnet as your LAN. By default, the IP addresses from 192.168.0.2 throug\
h 192.168.0.9 
are reserved for this purpose.
• Local computers must access the local server using the computers’ loc\
al LAN address 
(192.168.0.XXX, by default). 

Attempts by local computers to access the server using the 
external WAN IP address fail.
• Port forwarding opens holes in your firewall. Enable only ports that are\
 necessary
 .
To configure port forwarding and services for specific inbound traffic:
1. T
ype  http://192.168.0.1 in the address field of your web browser. 
A login screen displays.
2.  Enter the modem router user name and password.
The default user name is  admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select Port Forwarding.
4.  From the Service list, select the service for which you want to configure port forwardin\
g. 
The following screen displays:
5.  To add a custom rule that is not in the list of services, specify these s\
ettings in the Add 
Custom Rules table: 
						

							Advanced Settings 
63  N450 WiFi Cable Modem Router Model N450/CG3000Dv2
•Name. A name for the service.
•Start Port. The start port for the service.
•End Port. The end port for the service.
•Protocol. The protocol for the ports:
-TCP. TCP only.
-UDP. UDP only.
-Both. Both TCP and UDP.
•Local IP Address. Complete the local IP address for the computer that is using the 
service.
6. Perform one of these actions:
•Click the Add button. The Active Forwarding Rules table displays the list of forwarded 
ports.
•To delete a service, select the radio button in the Active Forwarding Rules table for 
the service that you want to delete, and click the Delete button.
•To reset the selection in the Service list and to clear all the fields in the Add Custom 
Rules, click the Reset button.
Port Triggering
Port triggering is an advanced feature that you can use to allow gaming and other Internet 
applications that the firewall would otherwise block. You must know the port numbers the 
application uses. Port triggering operates as follows:
1. A computer makes an outgoing connection using a port number defined in the Port 
Triggering table.
2. The modem router records this connection, opens the incoming port or ports associated with 
this entry in the Port Triggering List, and associates them with the computer.
3. The remote system receives the computer’s request, and responds using a different port 
number.
4. The modem router matches the response to the previous request, and forwards the 
response to the computer. (Without port triggering, this response would be treated as a new 
connection request rather than a response. As such, it would be handled in accordance with 
the port forwarding rules.)
Note:Only one computer at a time can use port triggering. After a computer 
finishes using a port triggering application, a short time-out period 
passes before another computer can use the application.
To configure port triggering:
1. Type http://192.168.0.1 in the address field of your web browser.  
						

							Advanced Settings 64
N450 WiFi Cable Modem Router Model N450/CG3000Dv2 
A login screen displays.
2. 
Enter the modem router user name and password.
The default user name is  admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select Port Triggering.
The following screen displays:
4.  For each port trigger, enter the settings in the Port Triggering List:
• T
rigger Range . To specify the range of outgoing ports that are monitored to trigger 
the incoming port forwarding rule, enter the start port  and end port.
• T
arget Range. To specify the range of incoming ports that are opened when 
triggered, enter the start port  and end port.
• Protocol. Select the protocol for the ports:
- TCP . TCP 
 only.
- UDP . UDP only
 . 
						

							Advanced Settings 65
 N450 WiFi Cable Modem Router Model N450/CG3000Dv2
-
Both. Both TCP and UDP. 
5.  Select the Enable check box for the port trigger
 .
6.  Click the  Apply button.
Your changes are saved and the port trigger is activated.
To remove a configured port trigger from the table:
1.  T
ype  http://192.168.0.1 in the address field of your web browser. 
A login screen displays.
2.  Enter the modem router user name and password.
The default user name is admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select Port Triggering.
The port triggering screen displays.
4.  Select the radio button next to the port trigger
 .
5.  Click the  delete button.
The port trigger is removed.
To return all trigger and target ranges to zero:
1.  T
ype  http://192.168.0.1 in the address field of your web browser. 
A login screen displays.
2.  Enter the modem router user name and password. 
						

							Advanced Settings 66
N450 WiFi Cable Modem Router Model N450/CG3000Dv2 
The default user name is 
admin. The default password is  password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select Port Triggering.
The port triggering screen displays.
4.  Click the  Reset button.
The trigger and target ranges return to zero.
DMZ Host
You can set up a default DMZ computer. Specifying a default DMZ computer allows you to  set up a computer that is available to anyone on the Internet for servic\
es that you have not 
defined. To minimize security risks, set up the DMZ host only if you are willing t\
o risk open 
access. If you do not define a DMZ host, the modem router discards any u\
ndefined service 
requests.
To set up a DMZ host:
1.  T
ype  http://192.168.0.1 in the address field of your web browser. 
A login screen displays.
2.  Enter the modem router user name and password.
The default user name is  admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select DMZ Host. 
						

							Advanced Settings 67
 N450 WiFi Cable Modem Router Model N450/CG3000Dv2
The following screen displays:
4. 
Select the Respond to Ping on WAN Port  check box.
When you select this check box, the modem router, not the DMZ computer, responds to a 
ping request.
For example, some systems tracking the performance of the broadband conn\
ections in 
terms of latency and packet loss need the modem router to reply to ping \
requests.
5.  T
ype the last digits of the IP address in the  DMZ Address field.
The DMZ host feature is disabled when the last digit is zero.
6.  Click the  Apply button.
LAN IP Setup
You can configure LAN services such as the IP address of the modem router\
 and DHCP. The 
TCP/IP and DHCP default values work fine in most cases. 
Note:If you disable the DHCP server, assign a static IP address to your 
computer to reconnect to the modem router and enable the DHCP 
server again.
To configure LAN IP settings:
1. T
ype  http://192.168.0.1 in the address field of your web browser. 
A login screen displays. 
						

							Advanced Settings 68
N450 WiFi Cable Modem Router Model N450/CG3000Dv2 
2. 
Enter the modem router user name and password.
The default user name is  admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select LAN IP.
The following screen displays:
4.  Specify these settings:
• LAN IP 
 Address. The factory default setting is 192.168.0.1.
• Subnet Mask. 
 The network number portion of an IP address. Unless you are 
implementing subnetting, use 255.255.255.0 as the subnet mask.
• DHCP Server . The Ye
 s radio button is selected by default so that the modem router 
acts as a DHCP server, providing the TCP/IP configuration for all the computers 
connected to it. 
If you plan to assign IP addresses manually, or you have another DHCP server on 
your network, select the No radio button.
• Starting IP 
 Address and Ending IP Address . These fields specify the range in the IP 
address pool. 
• Max Users. 
 The maximum number of users on the network.
• DHCP Lease. For more information, see Reserve an IP Address for DHCP Use  on 
page   69.
5.  Click the  Apply button. 
						

							Advanced Settings 69
 N450 WiFi Cable Modem Router Model N450/CG3000Dv2
Reserve an IP Address for DHCP Use
To reserve an IP address for DHCP use, enter the DHCP server reservation \
settings for the 
private LAN under DHCP Reservation Lease Info in the LAN IP screen.
To reserve an IP address for DHCP:
1.  T
ype  http://192.168.0.1 in the address field of your web browser. 
A login screen displays.
2.  Enter the modem router user name and password.
The default user name is admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select LAN IP.
The LAN IP screen displays.
4.  In the DHCP Reservation Lease Info section, enter the MAC address of the\
 computer for 
which you want to reserve an IP address.
5.  Enter the permanent IP address for the computer
 .
6.  Click the  Add button.
Your changes are saved.
The MAC address and IP address are displayed in the DHCP Client Lease In\
fo table. The  current system time is also displayed.
To delete an IP address from the DHCP Client Lease Info table:
1.  T
ype  http://192.168.0.1 in the address field of your web browser.  
						

							Advanced Settings 70
N450 WiFi Cable Modem Router Model N450/CG3000Dv2 
A login screen displays.
2. 
Enter the modem router user name and password.
The default user name is  admin. The 
 default password is password. The user name and 
password are case-sensitive.
The modem router main menu displays.
3.  In the main menu, under 
 Advanced, select LAN IP.
The LAN IP screen displays.
4.  In the DHCP Client Lease Info table, select the radio button for the MAC\
 and IP address that 
you want to remove.
5.  Click the  Delete button.
The information for the selected MAC and IP address is removed from the \
DHCP Client  Lease Info table.
6.  T
o remove all information from the DHCP Client Lease Info table, click th\
e  Clear DHCP 
Leases button.
LAN Switch
The modem router’s LAN interference is a 10/100/1GBASE-T Ethernet switch. The switch 
ports are set to automatically negotiate speed and duplex communication \
with any connected 
device. You might want to configure the port if the devices do not auto-negotiate\
 correctly. 
To configure the switch ports:
1.  T
ype  http://192.168.0.1 in the address field of your web browser.