Netgear N600 Wireless Router User Manual

							Wireless Settings41
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
You can use the WPS (Push N Connect) or router interface method to add wireless devices 
and other equipment to your wireless network.
WPS (Push N Connect) Method
If your wireless device supports WPS (Push N Connect), follow these \
steps:
1.  Press the WPS button on the router front panel
.
2.  Within 2 minutes, press the WPS button on your wireless device, or follow the WPS 
instructions that came with the device. The device is now connected to y\
our router.
3.  Repeat steps 1–2 to add other WPS wireless devices.
Router Interface Method
To add clients (devices) using the router interface:
1. Select  Add WPS Client  at the top of the router menus.  If you cannot select Add WPS 
Client, select Setup > Wireless Settings and make sure that WPS is selected.
2.  Click  Next. The following screen lets you select the method for adding the WPS cli\
ent.
Figure 14.  Add WPS Client with push button method
3. Select either Push Button or  PIN Number. With  either method, the client wireless device 
attempts to detect the WPS signal from the wireless modem router and est\
ablish a 
wireless connection in the time allotted.
The PIN method displays this screen so you can enter the client security\
 PIN number:
Figure 15.  Add WPS Client with PIN number method
•     While the wireless modem router attempts to connect to a WPS-capable dev\
ice, the 
WPS LED on the front of the wireless modem router blinks green. When the\
 wireless 
modem router establishes a WPS connection, the LED is solid green.
•     If a connection is established, the wireless modem router WPS screen dis\
plays a  confirmation message. 
4.  Repeat to add another WPS client to your network. 
						

							Wireless Settings42
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Wireless Settings Screen
The Wireless Settings screen lets you view or configure the wireless net\
work configuration. 
Once you have established basic wireless connectivity, you can enable se\
curity settings 
appropriate to your needs.
Note:  
If you use a wireless computer to change the wireless network name 
(SSID) or other wireless security settings, you are disconnected 
when you click Apply. To avoid this problem, use a computer with a 
wired connection to access the modem router.
Consider Every Device on Your Network
Before you begin, check the following:
•      Every wireless computer has to be able to obtain an IP address by DHCP f\
rom the router 
as described in Use Standard TCP/IP Properties for DHCP on page  23. 
•     Each computer or wireless adapter in your network has to have the same S\
SID and  wireless mode (bandwidth/data rate) as the router. Check that the wire\
less adapter on 
each computer can support the mode and security option you want to use.
•     The security option on each wireless device in the network has to match \
the router. For  example, if you select a security option that requires a passphrase, be \
sure to use same 
passphrase for each wireless computer in the network.  
						

							Wireless Settings43
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Configure Wireless Settings
To configure the wireless settings:
1. 
Select  Setup > Wireless Settings  to display the following screen.
Figure 16.  Wireless Settings screen
2. Make any changes that are needed, and click  Apply when done to save your settings.
Note:  The screen sections, settings, and procedures are explained in the 
following sections.
3.  After you finish adjusting settings and click Apply, configure and test \
your computers for 
wireless connectivity: 
						

							Wireless Settings44
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
a.
Program the wireless adapter of your computers to have the same SSID and\
 channel 
that you specified in the router.
b.  Check that the adapters have a wireless link and can obtain an IP addres\
s by DHCP 
from the wireless modem router.
Wireless Network Settings
Name (SSID). The  SSID is also known as the wireless network name. Enter a 32-character 
(maximum) name in this field. This field is case-sensitive.
Region. The location where the wireless modem router is used. It might not be \
legal to 
operate the wireless modem router in a region other than the regions lis\
ted.
Channel. The wireless channel used by the gateway: 1 through 13. Do not change \
the 
channel unless you experience interference (shown by lost connections o\
r slow data 
transfers). If this happens, experiment with different channels to see \
which is the best.
Mode. Up to 145 Mbps is the default and allows 802.11n and 802.11g wireless \
devices to join 
the network. g & b supports up to 54 Mbps. Up to 65 Mbps supports up to 65 Mbps.
Wireless Access Point Settings
Enable. When this  check box is selected, the router accepts wireless clients. When the che\
ck 
box is not selected, the router accepts wired clients only. This check b\
ox is selected  by 
default.
Allow Broadcast of Name (SSID). This setting allows the wireless modem router to 
broadcasts its SSID so wireless stations can see this wireless name (SS\
ID) in its scanned 
network list. This check box is selected by default. To turn off the SSI\
D broadcast, clear the 
Allow Broadcast of Name (SSID) check box and click  Apply.
Wireless Isolation. When this check box is selected, wireless stations cannot communicate 
with each other or with stations on the wired network. This check box is\
 not selected by 
default.
Wireless Station Access List Settings
The Wireless Stations Access List lets you restrict access to your netwo\
rk to a specific list of 
devices based on their MAC addresses. This section explains how to set u\
p the list.
To set up the wireless station access list:
1.  On the Wireless Settings screen, click the  Setup Access List button to display the 
Wireless Station Access List screen shown in the figure that follows and\
 introduced 
here:
•     The Turn Access Control On check box at the top is not selected by defau\
lt to allow  any computer configured with the correct wireless network name (SSID) \
and 
passphrase to access the network. 
•     Trusted Wireless Stations lists the trusted computers that have access t\
o your  network. 
						

							Wireless Settings45
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
•     
Available Wireless Stations lists the currently untrusted computers that\
 are connected 
to your network.
Figure 17.  Wireless Station Access List
2.  Select the Turn Access Control On  check box to enable access restriction by MAC 
address.
3.  In the Add New Station Manually section, click Add to add your computer’s MAC address so 
you do not lose your wireless connection when you click Apply. If you lo\
se your wireless 
connection, you have to access the wireless modem router from a wired co\
mputer or from a 
wireless computer that is on the access control list.
4.  If a wireless station that you want to add to the Trusted Wireless Stati\
ons list is connected to 
the network, select it from the Available Wireless Stations list and cli\
ck  Add.
5.  If the wireless station is not currently connected, you can enter its ad\
dress manually. The 
MAC address is usually printed on the wireless card, or it might appear \
in the wireless 
modem router’s DHCP table. The MAC address is 12  hexadecimal digits.
You can also copy and paste the MAC addresses from the wireless modem ro\
uter’s 
Attached Devices screen (see  View Attached Devices on page 72) into the MAC Address 
field. To do this, configure each wireless computer to obtain a wireless\
 link to the wireless 
modem router. The computer should then appear in the Attached Devices sc\
reen.
6.  Click  Apply to save your settings and return to the Wireless Settings screen.
Security Options Settings
The Security Options section of the Wireless Settings screen lets you ch\
ange the security 
option and passphrase. See Wireless Security Options on page  38 for an explanation of the 
security options and when to use which one. Please note that  NETGEAR recommends that 
you not change the security option or passphrase, but if you want to change these 
settings, this section explains how.  Do not disable security. 
						

							Wireless Settings46
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Change WPA Security Option and Passphrase:
1. 
In the Security Options sections, select the WPA options you want.
Figure 18.  WPA2-PSK Security Encryption
2. In the Passphrase field that displays when you select a WPA security opt\
ion, enter the 
network keys (passphrases) that you want to use. They are text strings\
 from 8 to 63 
characters (in the preceding figure, HomeNetwork1 and HomeNetwork2 are \
used as 
examples).
Set WPA-802.1x Server and Passphrase:
1. In the Security Options section, select WPA-802.1x to display the following fields:
Figure 19.  WPA-802.1x Settings
2. In the Radius Server Name/IP Address field, enter the name or IP address\
 of the RADIUS 
server on your LAN. This is a required field.
3.  In the Radius Port field, enter the port number used for connections to \
the RADIUS server. 
The default port is 1812.
4.  In the Shared Key field, enter the RADIUS server passphrase for client l\
ogins. The router 
has to have this passphrase to log in to the RADIUS server as a client.
Set WEP Encryption and Passphrase:
When configuring WEP from a wireless computer, you lose your wireless co\
nnection when 
you click Apply. You have to either configure your wireless adapter to m\
atch the wireless 
modem router WEP settings or access the wireless modem router from a wir\
ed computer. 
						

							Wireless Settings47
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
1. 
In the Security Options section, select WEP to display the following screen:
Figure 20.  WEP Security Encryption section
2. Select the authentication type. The default is Automatic. Other choices \
are Open System 
(any client can authenticate itself to the network) and Shared Key (a\
 passphrase and a 
four-way challenge is needed for authentication).
3.  Select the encryption strength setting, either 64 bit or 128 bit.
4.  Enter the four data encryption keys either manually or automatically. Th\
ese values have to 
be identical on all computers and access points in your network.
•      Automatic. Enter a word or group of printable characters in the Passphra\
se field, and 
click  Generate . The four key fields are automatically populated with key values.
•     Manual. The number of hexadecimal digits that you enter depends on the e\
ncryption  strength sett ing:
-     For 64-bit WEP, enter 10 hexadecimal digits (any combination of 0–9,\
 a–f, or  A–F). 
-     For 128-bit WEP, enter 26 hexadecimal digits (any combination of 0–9\
, a–f, or  A–F).
5.  Select the radio button for the key you want to make active.
Make sure that you understand how the WEP key settings are configured in\
 your wireless 
adapter. Wireless adapter configuration utilities such as the one in Win\
dows XP allow one 
key entry, which has to match the default key you set in the wireless mo\
dem router.
6.  Click  Save to save your settings or click Apply so your changes to take effect immediately. 
						

							48
4
4.   Security Settings
Keeping unwanted content out of your network
This chapter explains how to use the basic firewall features of the wire\
less modem router to 
prevent objectionable content from reaching the PCs and other devices co\
nnected to your 
network. 
This chapter contains the following sections: •     Keyword Blocking of HTTP Traffic 
•     Firewall Rules to Control Network Access 
•     Configure Services 
•     Set the Time Zone 
•     Schedule Firewall Services 
•     Enable Security Event Email Notification 
•     Log the Network Activity  
						

							Security Settings49
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Keyword Blocking of HTTP Traffic
Use keyword blocking to prevent certain types of HTTP traffic from acces\
sing your network. 
The blocking can be always or according to a scheduled.
To set up keyword blocking:
1. 
Select  Content Filtering >  Block Sites.
Figure 21.  Block Sites screen
.
2. Select one of the keyword blocking options:
•     Per Schedule. Turn on keyword blocking according to the Schedule screen settings.
•     Always . Turn on keyword blocking all the time, independent of the Schedule scr\
een.
3.  In the Keyword field, enter a keyword or domain, click  Add Keyword, and click Apply.
The Keyword list supports up to 32 entries. Here are some sample entries\
:
•     Specify XXX to block http://www.badstuff.com/xxx.html.
•      Specify .com if you want to allow only sites with domain suffixes such a\
s .edu or .gov.
•     Enter a period ( .) to block all Internet browsing access.
Delete a Keyword or Domain
To delete a keyword or domain:
1.  Select the keyword you want to delete from the list.
2.  Click  Delete Keyword  and click Apply to save your changes.
Specify a Trusted Computer
You can exempt one trusted computer from blocking and logging. The compu\
ter you exempt 
has to have a fixed IP address. 
						

							Security Settings50
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
To specify a trusted computer:
1. 
In the  Trusted IP Address  field, enter the IP address.
2.  Click  Apply  to save your changes.
Firewall Rules to Control Network Access
By default your router blocks any inbound traffic from the Internet to y\
our computers except 
for replies to your outbound traffic. You might need to create exception\
s to this rule to allow 
remote computers to access a server on your local network or to allow ce\
rtain applications 
and games to work correctly. Your router provides port forwarding and po\
rt triggering for 
creating these exceptions. 
This section covers the following topics:
•     Remote Computer Access Basics 
•     Port Triggering to Open Incoming Ports 
•     Port Forwarding to Permit External Host Communications 
•     How Port Forwarding Differs from Port Triggering 
•     Configure Port Forwarding to Local Servers 
•     Configure Port Triggering 
Remote Computer Access Basics
When a computer on your network needs to access a computer on the Intern\
et, your 
computer sends your router a message containing the source and destinati\
on address and 
process information. Before forwarding your message to the remote comput\
er, your router 
has to modify the source information and create and track the communicat\
ion session so that 
replies can be routed back to your computer. 
Here is an example of normal outbound traffic and the resulting inbound \
responses:
1. You open a browser and your operating system assigns port number 5678 to\
 this 
browser session. 
2.  You type http://www.example.com into the URL field, and your computer cr\
eates a web page 
request message with the following address and port information. The req\
uest message is 
sent to your router.
Source address. Your computer’s IP address.
Source port number . 5678, which is the browser session. 
Destination address. The IP address of www.example.com, which your computer finds 
by asking a DNS server.
Destination port number . 80, which is the standard port number for a web server 
process.