Netgear N600 Wireless Router User Manual

							Router Internet Setup31
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
These fields 
display only if 
your ISP 
requires a 
login.
Encapsulation
Encapsulation is a method for enclosing multiple protocols. PPP 
stands for Point-to-Point Protocol. The choices are:
• PPPoE (PPP over Ethernet)
•  PPPoA (PPP over ATM)
Login The login name provided by your ISP. This is often an email address.
Password The password that you use to log in to your ISP. 
Idle Timeout (In 
minutes) If you want to change the login timeout, enter a new value in minutes. 
This determines how long the wireless modem router keeps the  Internet connection active after there is no Internet activity from the \
LAN. Entering a value of 0 (zero) means never log out.
Internet IP 
Address • 
Get Dynamically from ISP . Your ISP uses DHCP to assign your 
IP address. Your ISP automatically assigns these addresses.
•  Use Static IP Address. Enter the IP address, IP subnet mask, and 
the gateway IP address that your ISP assigned. The gateway is the 
ISP’s wireless modem router to which your wireless modem router 
will connect.
This field displays only 
if no login is required. Use IP Over ATM (IPoA)
. Your ISP uses classical IP addresses (RFC 
1577). Enter the IP address, IP subnet mask, and gateway IP 
addresses that your ISP assigned. 
Domain Name Server (DNS) Address The DNS server is used to look up site addresses based on their 
names. 
• Get Automatically from ISP . Your ISP uses DHCP to assign your 
DNS servers. Your ISP automatically assigns this address. 
•  Use These DNS Servers. If you know that your ISP does not 
automatically transmit DNS addresses to the wireless modem 
router during login, select this option, and enter the IP address of 
your ISP’s primary DNS server. If a secondary DNS server address 
is available, enter it also.
Table 11.  Basic Settings Screen Description
SettingsDescription 
						

							Router Internet Setup32
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
ADSL Settings
ADSL settings of your wireless modem router work fine for most ISPs. How\
ever, some ISPs 
use a specific multiplexing method and virtual circuit number for the vi\
rtual path identifier 
(VPI) and virtual channel identifier (VCI).
Note:   You must use the Setup Wizard to select the correct country for the 
default ADSL settings to work.
NAT (Network Address Translation) NAT automatically assigns private IP addresses (10.1.1.x) to 
LAN-connected devices.
• Enable. Usually NAT is enabled.
•  Disable. This disables NAT, but leaves the firewall active. Disable 
NAT only if you are sure you do not need it. When NAT is disabled, 
only standard routing is performed by this router. Classical routing 
lets you directly manage the IP addresses that the wireless modem 
router uses. Classical routing should be selected only by 
experienced users.
1
•  Disable firewall . This disables the firewall in addition to disabling 
NAT. With the firewall disabled, the protections usually provided to 
your network are disabled.
These fields 
display only if 
no login is 
required. Router MAC Address
The Ethernet MAC address used by the wireless modem router on 
the Internet port. Some ISPs register the MAC address of the 
network interface card in your computer when your account is first 
opened. They will then accept traffic only from the MAC address of 
that computer. This feature allows your wireless modem router to use 
your computer’s MAC address (this is also called cloning). 
• Use Default Address. Use the default MAC address.
•  Use Computer MAC Address . The wireless modem router will 
capture and use the MAC address of the computer that you are 
now using. You must be using the one computer that is allowed by 
the ISP.
•  Use This MAC Address. Enter the MAC address that you want to 
use.
1. Disabling NAT reboots the wireless modem router and resets its config\
uration settings to the factory defaults. 
Disable NAT only if you plan to set up the wireless modem router in a se\
tting where you will be manually 
administering the IP address space on the LAN side of the router.
Table 11.  Basic Settings Screen Description
SettingsDescription 
						

							Router Internet Setup33
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
If your ISP provided you with a multiplexing method or VPI/VCI number, e\
nter the 
setting:
1. 
Select  Setup >  ADSL Settings to display the following screen:
Figure 12.  ADSL Settings screen
2. In the Multiplexing Method drop-down list, select LLC-based or  VC-based.
3.  For the VPI, type a number between 0 and 255. The default is 8 for the U\
.S. version, 0 for 
the worldwide version, and 1 for the German version. 
4.  For the VCI, type a number between 32 and 65535. The default is 35 for t\
he U.S. version, 
38 for the worldwide version, and 32 for the German version.
5.  Click  Apply .
Unsuccessful Internet Connection
1. Review your settings to be sure you have selected the correct options an\
d typed 
everything correctly. 
2.  Contact your ISP to verify that you have the correct configuration infor\
mation.
3.  Read  Chapter 9, Troubleshooting. If problems persist, register your NETGEAR product and 
contact NETGEAR technical support.
Note:   If you cannot connect to the wireless router, check the Internet 
Protocol (TCP/IP) properties in the Network Connections section of 
your PC Control Panel. They should be set to obtain both IP and 
DNS server addresses automatically. 
Change Password and Login Time-Out
For security reasons, the wireless modem router has its own user name an\
d password that 
default to  admin and password. You can and should change this password to a secure 
password that is easy to remember. The ideal password contains no dictio\
nary words from 
any language and is a mixture of uppercase and lowercase letters, number\
s, and symbols. It 
can be up to 30 characters. 
						

							Router Internet Setup34
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Note:  The router user name and password are not the same as the user 
name and password for logging in to your Internet connection. See 
Types of Logins on page  34 for more information about login types.
To change your password or login timeout:
1. Select  Maintenance > Set Password to display the following screen:
Figure 13.  Set router login password
2. Enter the old password.
3.  Enter the new password twice.
4.  Change the login time-out to a value between 1 and 99 minutes if the def\
ault value of 5 
minutes does not meet your needs. 
The administrator’s login to the wireless modem router configuration \
times out after a 
period of inactivity to prevent someone else from accessing the router i\
nterface when you 
step away.
5.  Click  Apply to save your changes. 
After changing the password, you are required to log in again to continu\
e the  configuration. If you have backed up the wireless modem router settings \
previously, you 
should do a new backup so that the saved settings file includes the new \
password. See 
Back Up on page  67 for information about backing up your network configuration.
Log Out Manually
The router interface provides a Logout command at the bottom of the rout\
er menus. Log out 
when you expect to be away from your computer for a relatively long peri\
od of time.
Types of Logins
There are three separate types of logins that have different purposes. I\
t is important that you 
understand the difference so that you know which login to use when.
•     Router login logs you in to the router interface. See Log In to the N600 Modem Router 
on page   24 for details about this login. 
						

							Router Internet Setup35
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
•     
ISP login logs you in to your Internet service. Your service provider has provide\
d you with 
this login information in a letter or some other way. If you cannot find\
 this login 
information, contact your service provider.
•      Wi-Fi network name and passphrase  logs you in to your wireless network. This login is 
preconfigured and can be found on the label on the bottom of your unit. \
See Chapter 3, 
Wireless Settings, for more information. 
						

							36
3
3.   Wireless Settings
Protecting your wireless network
This chapter describes how to use the Wireless Settings screen to view a\
nd change (if needed) your wireless network settings. Security features to prevent objectionab\
le content from reaching 
your PCs are covered in Chapter 4, Security Settings. 
This chapter contains the following sections: •     Wireless Security Requirements and Recommendations 
•     Wireless Security Basics 
•     Add Clients (Devices) to Your Network 
•     Wireless Settings Screen 
Note:   If you use the Internet for activities like purchases or banking, those \
Internet sites use a highly secure data encryption protocol called 
Secure Sockets Layer (SSL). If a website uses SSL, the address 
begins with https instead of http. If you do not see https, it is more 
secure to do your business in person or over the phone. 
						

							Wireless Settings37
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Wireless Security Requirements and Recommendations
You should set the following security:
•     Wi-Fi network name (SSID) identifies your network so devices can find it.
-The default SSID for the 2.4 GHz wireless network is NETGEAR.
- The default SSID for the 5 GHz wireless is NETGEAR-5G.
•     Security option is the type of security protocol applied to your wireless network. The \
 security protocol in force encrypts data transmissions and ensures that \
only trusted 
devices receive authorization to connect to your network. The recommende\
d security 
option is WPA-PSK/WPA2-PSK mixed mode, described in  Wireless Security Options on 
page   38.
•     Passphrase controls access to your network. Devices that know the SSID and the  passphrase can find your wireless network and connect.
- Use a passphrase for the 2.4 GHz wireless network that is easy for you t\
o remember, 
but hard for others to guess.
- For maximum security, use a different passphrase for the 5 GHz wireless \
network that 
is easy for you to remember, but hard for others to guess.
Note:  Your network names (SSIDs) and passphrases are case-sensitive. 
Your network name, security method, and passphrase has to be the 
same for all the wireless devices connected to your router on a 
network.
Wireless Security Basics
Unlike wired network data, wireless data transmissions extend beyond you\
r walls and can be 
received by any device with a compatible wireless adapter (radio). For\
 this reason, it is very 
important to maintain the preset security and understand the other secur\
ity features available 
to you. Besides the preset security settings described earlier, your wir\
eless modem router 
has the security features described here and in  Chapter 4, Security Settings.
•     Turn off wireless connectivity
•     Disable SSID broadcast
•     Restrict access by MAC address
•     Wireless security options 
						

							Wireless Settings38
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Turn Off Wireless Connectivity
You can completely turn off the wireless connectivity of the wireless mo\
dem router by 
pressing the Wireless On/Off button on its front panel
. For example, if you use your 
notebook computer to wirelessly connect to your wireless modem router an\
d you take a 
business trip, you can turn off the wireless portion of the modem router\
 while you are 
traveling. Other members of your household who use computers connected t\
o the wireless 
modem router through Ethernet cables can still use the wireless modem ro\
uter.
Disable SSID Broadcast
By default, the wireless modem router broadcasts its Wi-Fi network name \
(SSID) so devices 
can find it. If you change this setting to not allow the broadcast, wire\
less devices will not find 
your wireless modem router  unless they are configured with the same SSID.  See Wireless 
Access Point Settings on page  44 for the procedure.
Note:  Turning off SSID broadcast nullifies the wireless network discovery 
feature of some products such as Windows XP, but the data is still 
fully exposed to a determined snoop using specialized test 
equipment like wireless sniffers. If you allow the broadcast, be sure 
to keep wireless security enabled.
Restrict Access by MAC Address
You can enhance your network security by allowing access to only specifi\
c PCs based on 
their Media Access Control (MAC) addresses. You can restrict access to\
 only trusted PCs so 
that unknown PCs cannot wirelessly connect to the wireless modem router.\
 MAC address 
filtering adds an obstacle against unwanted access to your network, but \
the data broadcast 
over the wireless link is fully exposed (unencrypted).The Wireless Sta\
tion Access List 
determines which wireless hardware devices are allowed to connect to the\
 wireless modem 
router by MAC address. See Wireless Station Access List Settings on page  44 for the 
procedure.
Wireless Security Options
A security option is the type of security protocol applied to your wirel\
ess network. The  security protocol in force encrypts data transmissions and ensures that \
only trusted devices 
receive authorization to connect to your network. There are two types of\
 encryption: Wired 
Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WPA has s\
everal options 
including pre-shared key (PSK) encryption and 802.1x encryption for en\
terprises. 
This section presents an overview of the security options and provides g\
uidance on when to 
use which option. Note that it is also possible to disable wireless secu\
rity. NETGEAR does 
not recommend this. 
						

							Wireless Settings39
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
WEP Encryption
WEP uses an old encryption method and can be easily decoded with today’\
s powerful 
computers. Use this mode only when you have a very old legacy wireless c\
lient that does not 
support WPA-PSK. The Wi-Fi alliance highly recommends against using WEP \
and plans to 
make it obsolete. If you do decide to use WEP, see 
Set WEP Encryption and Passphrase: on 
page   46 for the procedure.
WPA Encryption
WPA encryption is built into all hardware that has the Wi-Fi-certified s\
eal. This seal means 
the product is authorized by the Wi-Fi Alliance ( http://www.wi-fi.org/) because it complies with 
the worldwide single standard for high-speed wireless local area network\
ing. For information 
about how to use the WPA home options, see  Change WPA Security Option and 
Passphrase: on page  46.
WPA-PSK uses a much stronger encryption algorithm than WEP so it is hard\
er to decode. 
This option uses a passphrase to perform the authentication and generate\
 the initial data 
encryption keys. Then it dynamically varies the encryption key. WPA-PSK \
uses Temporal Key 
Integrity Protocol (TKIP) data encryption, implements most of the IEEE\
 802.11i standard, and 
is designed to work with all wireless network interface cards, but not a\
ll wireless access 
points. It is superseded by WPA2-PSK.
WPA2-PSK is the strongest. It is advertised to be theoretically indeciph\
erable due to the 
greater degree of randomness in encryption keys that it generates. WPA2-\
PSK gets higher 
speed because it is usually implemented through hardware, while WPA-PSK \
is usually 
implemented through software. WPA2-PSK uses a passphrase to authenticate\
 and generate 
the initial data encryption keys. Then it dynamically varies the encrypt\
ion key. 
WPS-PSK + WPA2-PSK mixed mode is the preconfigured security mode on the \
wireless 
modem router. NETGEAR recommends mixed mode because it provides broader \
support for 
all wireless clients. WPA2-PSK clients get higher speed and security, an\
d WPA-PSK clients 
get decent speed and security. The product documentation for your wirele\
ss adapter and 
WPA client software should have instructions about configuring their WPA\
 settings.
WPA-802.1x is enterprise-level security and requires an authentication s\
erver to recognize 
and authorize client access. The authentication server is called Remote \
Authentication Dial 
In User Service (RADIUS). Every wireless client has a user login on th\
e RADIUS server, and 
the wireless modem router has a client login on the RADIUS server. Data \
transmissions are 
encrypted with an automatically generated key. For information about how\
 to use the WPA 
enterprise option, see  Set WPA-802.1x Server and Passphrase:  on page
  46. 
						

							Wireless Settings40
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Add Clients (Devices) to Your Network
Choose either the manual or the WPS method to add wireless devices, incl\
uding guest 
devices, and other equipment to your wireless network.
Manual Method
To add clients (devices) to your network manually:
1. 
Open the software that manages your wireless connections on the wireless\
 device 
(laptop computer, gaming device, iPhone) that you want to connect to y\
our router. This 
software scans for all wireless networks in your area.
2.  Look for your network and select it. If you did not change the name of y\
our network during 
the setup process, look for the default Wi-Fi network name (SSID) and \
select it. The default 
Wi-Fi network name (SSID) is located on the product label on the botto\
m of the router.
3.  Enter the wireless modem router passphrase and click  Connect. The default wireless 
modem router passphrase is located on the product label on the bottom of\
 the router.
4.  Repeat steps 1–3 to add other wireless devices.
Wi-Fi Protected Setup (WPS) Method
Wi-Fi Protected Setup (WPS) is a standard for easily adding computers \
and other devices to 
a home network while maintaining security. To use WPS, make sure that al\
l wireless devices 
to be connected to the network are Wi-Fi certified and support WPS. Duri\
ng the connection 
process, the client gets the security settings from the router so that e\
very device in the 
network has the same security settings. 
Note:  However, if you find that the router is generating new security 
settings for each added device, it means that the default value for 
Keep Existing Wireless Settings has changed. See  WPS Settings on 
page  131 for more information about this setting.
All Wi-Fi-certified and WPS-capable products are compatible with the NET\
GEAR products  that have Push N Connect, which is based on WPS.
1 For information about how to view a 
list of all wireless and wired devices connected to your modem router, s\
ee  View Attached 
Devices on page   72.
Note:  WEP security does not support WPS. If you try to use WPS to 
connect a WEP device to your network, it will not connect.
1. For a list of other Wi-Fi-certified products available from NETGEAR, \
go to http://www.wi-fi.org.