Netgear N600 Wireless Router User Manual

							Advanced Settings131
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Note:  
The wireless router is already configured with the optimum settings. 
Do not alter these settings unless directed by NETGEAR support. 
Incorrect settings might disable the wireless router unexpectedly.
Wireless Advanced Settings
Enable Wireless Router Radio. The wireless access point of this router can be enabled or 
disabled to allow wireless access. The Wireless LED on the front of the \
router also displays 
the current status of the wireless access point to let you know if it is\
 disabled or enabled. If it 
is enabled, wireless stations can access the Internet. If it is disabled\
, wireless stations cannot 
access the Internet.
Enable SSID Broadcast. If this feature is enabled, the wireless router broadcasts its name 
(SSID) to all wireless stations. Stations that have no SSID (or a nul\
l value) can then adopt the 
correct SSID for connections to this access point.
Fragmentation Threshold, CTS/RTS Threshold, and Preamble Mode. Do not change 
these settings. The Fragmentation Threshold, CTS/RTS Threshold, and Prea\
mble Mode 
settings are reserved for wireless testing and advanced configuration on\
ly. 
WPS Settings
Router’s PIN. The PIN number that you use on a registrar (for example, from the Net\
work 
Explorer on a Vista Windows PC) to configure the wireless modem router’\
s wireless settings 
through WPS. You can also find the PIN on the wireless modem router’s\
 product label.
Disable Router’s PIN. The PIN function might temporarily be disabled when the wireless 
modem router detects suspicious attempts to break into the wireless mode\
m router’s wireless 
settings by using the wireless modem router’s PIN through WPS. You ca\
n manually enable 
the PIN function by clearing the Disable Router’s PIN check box.
Keep Existing Wireless Settings. By default, the Keep Existing Wireless Settings check 
box is selected. This shows whether the router is in the WPS configured \
state.
If the Keep Existing Wireless Settings check box is not selected, adding\
 a new wireless client 
changes the router’s wireless settings to an automatically generated \
random SSID and 
security key. NETGEAR does not recommend this. In addition, if this opti\
on is selected, some 
external registrars (e.g., Network Explorer on Vista Windows) might no\
t see the router.
Configuring the basic wireless settings from the router’s management \
interface selects this 
option automatically.
Wireless Card Access List . By default, any wireless PC that is configured with the correct 
SSID is allowed access to your wireless network. For increased security,\
 you can restrict 
access to the wireless network to allow only specific PCs based on their\
 MAC addresses. On  
						

							Advanced Settings132
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
the Wireless Settings screen, select Setup Access List to display the Wireless Access List 
screen.
Building Wireless Bridging and Repeating Networks
With the DGND3700 wireless modem router, you can build large bridged wir\
eless networks 
that form an IEEE  
802.11n Wireless Distribution System (WDS). Using the modem router 
with other access points (APs) and wireless devices, you can connect c\
lients by using their 
MAC addresses rather than by specifying IP addresses.
Here are some examples of wireless bridged configurations:
•     Point-to-point bridge. The wireless modem router communicates with another  bridge-mode wireless station. See Point-to-Point Bridge Configuration on page  133.
•      Multi-point bridge . The wireless modem router is the “master” for a group of bridge-\
mode 
wireless stations. Then all traffic is sent to this master, rather than \
to other access points. 
See Multi-Point Bridge on page  134.
•     Repeater with wireless client association . Sends all traffic to the remote access point. 
See Repeater with Wireless Client Association  on page  136.
Note:  The wireless bridging and repeating feature uses the default 
security profile to send and receive traffic. 
						

							Advanced Settings133
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
To view or change these configurations, from the main menu, select 
Wireless Repeating 
Function :
Enable Wireless Repeating. Select this if you wish to use either bridge mode or repeater 
mode, and then select the mode you want for your environment.
Wireless Repeater . In this mode, the router communicates only with another base 
station–mode wireless station. You have to enter the MAC address (ph\
ysical address) of the 
other base station–mode wireless station in the field provided. WEP c\
an (and should) be 
used to protect this communication.
Wireless Base Station. Select this only if this router is the master for a group of 
repeater-mode wireless stations. The other repeater-mode wireless statio\
ns have to be set to 
wireless repeater mode, using this router’s MAC address. They then se\
nd all traffic to this 
master, rather than communicating directly with each other. WEP can (an\
d should) be used 
to protect this traffic.
If this option is selected, you have to enter the MAC addresses of the o\
ther access points in 
the fields provided. 
Point-to-Point Bridge Configuration
In point-to-point bridge mode, the wireless modem router communicates as\
 an access point 
with another bridge-mode wireless station. As a bridge, wireless client \
associations are 
disabled—only wired clients can be connected. You have to enter the M\
AC address of the  
						

							Advanced Settings134
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
other bridge-mode wireless station in the field provided. Use wireless s\
ecurity to protect this 
communication. The following figure shows an example of point-to-point b\
ridge mode.
 
 
LAN Segment 1 PC’s
PC’s
LAN Segment 2 Switch or hub AP 2
Both access points (APs) are in
Internet
AP 1 (DGND3700 modem router) point-to-point bridge mode.
192.168.0.1
Figure 52. Point-to-point bridge mode

To set up a point-to-point bridge configuration:
1.  Configure the DGND3700 wireless modem router (AP 1) on LAN Segment 1 i\
n 
point-to-point bridge mode.
2.  Configure the other access point (AP 2) on LAN Segment 2 in point-to-p\
oint bridge mode. 
The DGND3700 wireless modem router has to have AP 2’s MAC address in \
its  Remote 
MAC Address field, and AP 2 has to have the DGND3700’s MAC address in its  Remote 
MAC Address field. 
3.  Configure both APs and verify that both APs are using the same SSID, cha\
nnel, 
authentication mode, if any, and security settings if security is in use\
.
4.  Disable the DHCP server on AP 2. AP 1 will then be the DHCP server.
5.  Verify connectivity across LAN Segment 1 and LAN Segment 2. A computer o\
n either LAN 
segment should be able to connect to the Internet or share files and pri\
nters of any other 
PCs or servers connected to LAN Segment 1 or LAN Segment 2.
Multi-Point Bridge 
Multi-point bridge mode allows a router to bridge to multiple peer acces\
s points 
simultaneously. Wireless client associations are disabled. Only wired cl\
ients can be 
connected. Multi-point bridge mode configuration includes the following \
steps:
•     Enter the MAC addresses of the other access points in the fields provide\
d. 
•     Set the other bridge-mode access points to point-to-point bridge mode, u\
sing the MAC 
address of this DGND3700 as the remote MAC address. 
•     Use wireless security to protect this traffic. 
						

							Internet
LAN Segment 1PCs
PCs
Hub or switch AP 3
AP 2 Point-to-point
bridge mode
bridge mode
Point-to-point
AP 1
DGND3700
PCs Hub or switch
LAN Segment 3
LAN Segment 2
192.168.0.1
Advanced Settings 135
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Figure 53. Multi-point bridge mode

To set up the multi-point bridge configuration:
1.  Configure the operating mode of the wireless modem routers.
•     Because it is in a central location, configure the DGND3700 wireless mod\
em router   
(AP 1) on LAN segment 1 in point-to-multi-point bridge mode, and enter\
 the MAC 
addresses of AP 2 and AP 3 in the Remote MAC Address 1 and Remote MAC 
Address 2  fields.
•     Configure the access point (AP 2) on LAN segment 2 in point-to-point b\
ridge mode  with the remote MAC address of the DGND3700 wireless modem router.
•     Configure the access point (AP 3) on LAN segment 3 in point-to-point b\
ridge mode  with the remote MAC address of the DGND3700 wireless modem router.
2.  Disable the DHCP server on AP 2 and AP 3. AP 1 will then be the DHCP ser\
ver.
3.  Verify the following for all access points:
•     The LAN network configuration of the wireless modem router and other acc\
ess points 
are configured to operate in the same LAN network address range as the L\
AN 
devices.
•     Only one access point, the DGND3700 wireless modem router in the precedi\
ng  figure, is configured in point-to-multi-point bridge mode; all the other\
s are in 
point-to-point bridge mode.
•      All APs, including the DGND3700 wireless modem router, have to be on the\
 same 
LAN. That is, all the access point LAN IP addresses have to be in the sa\
me network.
•     If you are using DHCP, for all access points, in the Basic Settings scre\
en, in the  Internet IP Address section, the  Get Dynamically from ISP check box should be 
selected. 
						

							Advanced Settings136
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
•     
All APs, including the DGND3700 wireless modem router, have to use the s\
ame 
SSID, channel, authentication mode, if any, and WEP security settings if\
 security is in 
use.
•      All point-to-point APs have to have the MAC address of AP 1 (the DGND37\
00 
wireless modem router in the previous figure) in the Remote AP MAC address field.
4.  Verify connectivity across the LANs. A computer on any LAN segment shoul\
d be able to 
connect to the Internet or share files and printers with any other PCs o\
r servers connected to 
any of the three LAN segments.
Note:  Wireless stations configured as they are in  Figure  52 on page  134 
will not be able to connect to the wireless modem router or access 
points. If you require wireless stations to access any LAN segment, 
you can use additional access points configured in wireless access 
point mode in any LAN segment.
Repeater with Wireless Client Association
In the repeater mode with wireless client association, the DGND3700 wire\
less modem router 
sends all traffic to a remote access point. For the repeater mode, you h\
ave to enter the MAC 
address of the remote “parent” access point. Alternatively, you ca\
n configure the DGND3700 
wireless modem router as the parent by entering the address of a “chi\
ld” access point. Note 
that the following restrictions apply:
•      You  do not have the option of disabling client associations with this DGND3700 wir\
eless 
modem router. 
•      You cannot configure a sequence of parent-child APs. You are limited to \
only one parent 
access point, although if the DGND3700 wireless modem router is the pare\
nt access 
point, it can connect with up to four child APs.  
						

							Advanced Settings137
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
The following figure shows an example of a repeater mode configuration.
Internet
PCs
Wireless PC
 
AP 1 (parent AP in repeater mode)
AP 3 in repeater mode  
Wireless PC
associated
with AP 3
AP 2 in repeater mode associated
with AP 2
Wireless PC
with AP 1
associated
DGND3700
192.168.0.1
 
Figure 54. Repeater mode

To set up a repeater with wireless client association:
1.  Configure the operating mode of the devices.
•     Configure AP 1 (the DGND3700 wireless modem router in the preceding fig\
ure) with 
the MAC address of AP  2 and AP  3 in the first two Remote MAC Address fields.
•     Configure AP 2 with the MAC address of AP 1 in the Remote MAC Address field.
•     Configure AP 3 with the MAC address of AP 1 in the Remote MAC Address field.
2.  Verify the following for both access points:
•     The LAN network configuration of each access point is configured to oper\
ate in the 
same LAN network address range as the LAN devices.
•      The access points have to be on the same LAN. That is, the LAN IP addres\
ses for the 
access points have to be in the same network.
•     If you are using DHCP, for all access points, in the Basic Settings scre\
en, in the  Internet IP Address section, the  Get Dynamically from ISP check box should be 
selected.
•      Access point devices have to use the same SSID, channel, authentication \
mode, and 
encryption.
3.  Verify connectivity across the LANs. A computer on any LAN segment shoul\
d be able to 
connect to the Internet or share files and printers with any other PCs o\
r servers connected 
to any of the three WLAN segments.
Remote Management
The Remote Management screen lets you allow a user or users on the Inter\
net to configure, 
upgrade, and check the status of your wireless modem router. 
						

							Advanced Settings138
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
To configure remote management:
1. 
Select  Advanced > Remote Management to display this screen:
Figure 55.  Remote Management screen
2. Select the  Turn Remote Management On  check box.
3.  Specify the external addresses of wireless modem routers than can access\
 remote 
management. For security, restrict access to as few external IP addresse\
s as practical:
•     To allow access from a single IP address on the Internet, select  Only This Computer 
and enter the IP address that is allowed access. 
•      To allow access from a range of IP addresses on the Internet, select  IP Address and 
enter a beginning and ending IP address to define the allowed range. 
•     To allow access from any IP address on the Internet, select  Everyone. 
4.  Specify the port number to be used for accessing the router interface.
Web browser access usually uses the standard HTTP service port 80. For g\
reater 
security, you can change it so the remote router interface uses a custom\
 port by entering 
that number in the field provided. Choose a number between 1024 and 6553\
5, but do not 
use the number of any common service port. The default is 8080, which is\
 a common 
alternate for HTTP.
5.  Click  Apply to save your changes.
To access your wireless modem router from the Internet, type your wirele\
ss modem 
router’s WAN IP address in your browser’s Address field, followed \
by a colon (:) and the 
custom port number. For example, if your external address is 134.177.0.1\
23 at port 
number 8080, enter the following in your browser:
http://134.177.0.123:8080 
Note:  The http:// has to be included in the address. 
						

							Advanced Settings139
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Static Routes
Static routes provide additional routing information to your router. Und\
er normal 
circumstances, the router has adequate routing information after it has \
been configured for 
Internet access, and you do not need to configure additional static rout\
es. You have to 
configure static routes only for unusual cases such as multiple routers \
or multiple IP subnets 
located on your network.
Static Route Example
As an example of when a static route is needed, consider the following c\
ase:
•     Your primary Internet access is through a cable modem to an ISP.
•     You have an ISDN router on your home network for connecting to the compa\
ny where 
you are employed. This router’s address on your LAN is 192.168.0.100.\
•     Your company’s network address is 134.177.0.0.
When you first configured your router, two implicit static routes were c\
reated. A default route 
was created with your ISP as the wireless modem router, and a second sta\
tic route was 
created to your local network for all 192.168.0.x addresses. With this c\
onfiguration, if you 
attempt to access a device on the 134.177.0.0 network, your router forwa\
rds your request to 
the ISP. The ISP forwards your request to the company where you are empl\
oyed, and the 
request is likely to be denied by the company’s firewall.
In this case you have to define a static route, telling your router that\
 134.177.0.0 should be 
accessed through the ISDN router at 192.168.0.100. The static route setu\
p would look like 
Figure   57, Adding a static route .
In this example:
•     The Destination IP Address  and IP Subnet Mask fields specify that this static route 
applies to all 134.177.x.x addresses. 
•     The Gateway IP Address field specifies that all traffic for these addresses are to be  forwarded to the ISDN router at 192.168.0.100. 
•      The value in the  Metric field represents the number of routers between your network and 
the destination. This is a direct connection, so it can be set to the mi\
nimum value of 2.
•      The  Private check box is selected only as a precautionary security measure in case \
RIP 
is activated. 
						

							Advanced Settings140
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Configure Static Routes
To configure static routes:
1. 
Select  Advanced > Static Routes to display the following screen:
Figure 56.  Static Routes screen
2. To add a static route:
a.Click Add to open the following screen.
Figure 57.  Adding a static route
b. In the Route Name field, enter a route name for this static route. This \
name is for 
identification purpose only. 
c.  Select  Private  if you want to limit access to the LAN only. The static route will not \
be 
reported in RIP. 
d.  Select  Active to make this route effective. 
e.  Enter the IP address of the final destination. 
f.  Enter the IP subnet mask for this destination. If the destination is a s\
ingle host, type 
255.255.255.255. 
g.  Enter the gateway IP address, which has to be a router on the same LAN s\
egment 
as the router. 
h.  In the Metric field, enter a number between 2 and 15 as the metric value\
. This 
represents the number of routers between your network and the destinatio\
n. Usually, 
a setting of 2 or 3 works.