Netgear R6200 Manual

							Genie Basic Settings31
 Dual Band 11ac WiFi Router R6200
Guest Networks
Adding a guest network allows visitors at your home to use the Internet \
without giving them 
your wireless security key. You can add a guest network to each wireless network: 2.4 GHz 
b/g/n and 5.0 GHz a/n. 
To set up a guest network:
1. Select  Basic >  Guest Network  to display the following screen:
2.For a 5 GHz network, scroll down to view that section of the Guest Netwo\
rk screen.
3. Select any of the following wireless settings:
Enable Guest Network . When this check box is selected, the guest network is enabled, 
and guests can connect to your network using the SSID of this profile.
Enable Wireless Isolation . If this check box is selected, then wireless clients (computers 
or wireless devices) that join the network can use the Internet, but ca\
nnot access each 
other or access Ethernet devices on the network.
Enable SSID Broadcast. If this check box is selected, the wireless access point 
broadcasts its name (SSID) to all wireless stations. Stations with no \
SSID can adopt the 
correct SSID for connections to this access point.
Allow guest to access My Local Network . If this check box is selected, anyone who 
connects to this SSID has access to your local network, not just Interne\
t access.
4. Give the guest network a name.
The guest network name is case-sensitive and can be up to 32 characters.\
 You then  manually configure the wireless devices in your network to use the guest\
 network name 
in addition to the main SSID. 
5. Select a security option from the list. 
 The security options are described in Guest Network 
Wireless Security Options  on page  32.
6. Click  Apply to save your selections. 
						

							Genie Basic Settings
32 Dual Band 11ac WiFi Router R6200 
Guest Network Wireless Security Options
A security option is the type of security protocol applied to your wireless network. The 
security protocol in force encrypts data transmissions and ensures that only trusted devices 
receive authorization to connect to your network. Wi-Fi Protected Access (WPA) has several 
options including pre-shared key (PSK) encryption. 
This section presents an overview of the security options and provides guidance on when to 
use which option. It is possible to set up a guest network without wireless security. NETGEAR 
does not recommend this.
WPA Encryption
WPA encryption is built into all hardware that has the Wi-Fi-certified seal. This seal means 
the product is authorized by the Wi-Fi Alliance (http://www.wi-fi.org/) because it complies with 
the worldwide single standard for high-speed wireless local area networking. 
WPA uses a passphrase to perform authentication and generate the initial data encryption 
keys. Then it dynamically varies the encryption key. WPA-PSK uses Temporal Key Integrity 
Protocol (TKIP) data encryption, implements most of the IEEE 802.11i standard, and is 
designed to work with all wireless network interface cards, but not all wireless access points. 
It is superseded by WPA2-PSK.
WPA2-PSK is stronger than WPA-PSK. It is advertised to be theoretically indecipherable due 
to the greater degree of randomness in encryption keys that it generates. WPA2-PSK gets 
higher speed because it is usually implemented through hardware, while WPA-PSK is usually 
implemented through software. WPA2-PSK uses a passphrase to authenticate and generate 
the initial data encryption keys. Then it dynamically varies the encryption key. 
WPS-PSK + WPA2-PSK Mixed Mode can provide broader support for all wireless clients. 
WPA2-PSK clients get higher speed and security, and WPA-PSK clients get decent speed 
and security.  
						

							33
4
4.   Genie Advanced Home
Specifying custom settings
This chapter contains the following sections:
•NETGEAR genie Advanced Screen 
•Setup Wizard 
•WPS Wizard 
•Setup Menu 
•WAN Setup 
•LAN Setup 
•Quality of Service (QoS) Setup 
Some selections on the Advanced Home screen are described in separate chapters:
•USB Storage. See Chapter 5, USB Storage.
•Security. See Chapter 7, Security.
•Administration. See Chapter 8, Administration.
•Advanced Setup. See Chapter 9, Advanced Settings. 
						

							Genie Advanced Home34
Dual Band 11ac WiFi Router R6200 
NETGEAR genie Advanced Screen
The genie Advanced Home screen is shown in the following figure:
This screen is 
also 
displayed 
through the 
Administratio n menu.
Setup Wizard
The NETGEAR genie installation process is launched the first time you se\
t up the router. 
After you set up the router the first time, to use the Setup Wizard agai\
n, log in to the router  and select the Advanced tab.
1. Select  Setup W
 izard to display the following screen: 
2.Select either  Ye s or No, I want to configure the router myself . If you select No, you are 
taken to the Internet Setup screen (see  Internet Setup on page  22).  
						

							Genie Advanced Home35
 Dual Band 11ac WiFi Router R6200
3.
If you selected Yes, click Next. The following screen displays:
The Setup Wizard searches your Internet connection for servers and proto\
cols to 
determine your ISP configuration. The following screen displays:
WPS Wizard
The WPS Wizard helps you add a WPS-capable client device (a wireless de\
vice or computer) to your network. On the client device, either press its WPS b\
utton or locate its 
WPS PIN.
To use the WPS Wizard:
1. Select  Advanced > WPS W
 izard. 
						

							Genie Advanced Home36
Dual Band 11ac WiFi Router R6200 
2.
Click  Next. The following screen lets you select the method for adding the WPS clien\
t (a 
wireless device or computer).
 
You can use either the push button or PIN method. 
3. Select either  Push Button or  PIN Number. 
• T
o use the push-button method, either click the WPS button on this screen, or press 
the WPS button on the side of the router. Within 2 minutes, go to the wireless \
client 
and press its WPS button to join the network without entering a password.
• T
o use the PIN method, select the  PIN Number radio button, enter the client security 
PIN, and click Next.
Within 2 minutes, go to the client device and use its WPS software to jo\
in the network 
without entering a password.
The router attempts to add the WPS-capable device. The WPS LED 
on the front of 
the router blinks green. When the router establishes a WPS connection, t\
he LED is solid 
green, and the router WPS screen displays a confirmation message. 
4. Repeat Step 2 and Step 3 to add another WPS client to your network. 
						

							Genie Advanced Home37
 Dual Band 11ac WiFi Router R6200
Setup Menu
To display the Setup menu:
Select  Advanced > Setup to display the Setup menu. 
The following selections are available: • Internet Setup . Go to the same Internet Setup screen that you can access from the 
dashboard on the Basic Home screen. See  Internet Setup on page 22.
• W
ireless Setup . Go to the same Wireless Settings screen that you can access from 
the dashboard on the Basic Home screen. See  Basic Wireless Settings on page 28.
• Guest Network. 
 This is a shortcut to the same Guest Network screen that you can 
access from the dashboard on the Basic Home screen. See Guest Networks on 
page
  31.
• W
AN Setup. Internet (WAN) setup. See  WAN Setup on page 37.
• LAN Setup. Local area network (LAN) setup. See  LAN Setup on page 40.
• QoS Setup . Quality of Service (QoS) setup. See Quality of Service (QoS) Setup on 
page
  43.
WAN Setup
The WAN Setup screen lets you configure a DMZ (demilitarized zone) server, change the 
Maximum Transmit Unit (MTU) size, and enable the router to respond to a ping on\
 the WAN 
(Internet) port. 
To view or change the WAN settings:
Select  Advanced > Setup > W
 AN Setup:
The following settings are available: 
						

							Genie Advanced Home
38 Dual Band 11ac WiFi Router R6200 
•Disable Port Scan and DoS Protection. DoS protection protects your LAN against 
denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop 
Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. This 
should be disabled only in special circumstances. 
•Default DMZ Server. This feature is sometimes helpful when you are playing online 
games or videoconferencing. Be careful when using this feature because it makes the 
firewall security less effective. See the following section, 
Default DMZ Server, for 
more details.
•Respond to Ping on Internet Port. If you want the router to respond to a ping from 
the Internet, select this check box. Use this setting only as a diagnostic tool because it 
allows your router to be discovered. Do not select this check box unless you have a 
specific reason.
•Disable IGMP Proxying. IGMP proxying allows a computer on the local area network 
(LAN) to receive the multicast traffic it is interested in from the Internet. If you do not 
need this feature, you can select this check box to disable it.
•MTU Size (in bytes). The normal MTU (Maximum Transmit Unit) value for most 
Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some 
ISPs, you might need to reduce the MTU. This is rarely required. Only reduce the 
MTU if you are sure that it is necessary for your ISP connection. See 
Change the 
MTU Size on page 39.
•NAT Filtering. Network Address Translation (NAT) determines how the router 
processes inbound traffic. Secured NAT provides a secured firewall to protect the 
computers on the LAN from attacks from the Internet, but might prevent some Internet 
games, point-to-point applications, or multimedia applications from functioning. Open 
NAT provides a much less secured firewall, but allows almost all Internet applications 
to function. 
Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The router is programmed to recognize some of these applications and to work 
correctly with them, but there are other applications that might not function well. In some 
cases, one local computer can run the application correctly if the IP address for that computer 
is entered as the default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the 
default DMZ server loses much of the protection of the firewall and 
is exposed to exploits from the Internet. If compromised, the DMZ 
server computer can be used to attack other computers on your 
network. 
						

							Genie Advanced Home
39  Dual Band 11ac WiFi Router R6200
The router usually detects and discards Incoming traffic from the Internet that is not a 
response to one of your local computers or a service that you have configured in the Port 
Forwarding/Port Triggering screen. Instead of discarding this traffic, you can have the router 
forward the traffic to one computer on your network. This computer is called the default DMZ 
server.
To set up a default DMZ server: 
1.On the WAN Setup screen, select the Default DMZ Server check box.
2.Type the IP address.
3.Click Apply.
Change the MTU Size
The maximum transmission unit (MTU) is the largest data packet a network device transmits. 
When one network device communicates across the Internet with another, the data packets 
travel through many devices along the way. If a device in the data path has a lower MTU 
setting than the other devices, the data packets have to be split or “fragmented” to 
accommodate the device with the smallest MTU. 
The best MTU setting for NETGEAR equipment is often just the default value. In some 
situations, changing the value fixes one problem but causes another. Leave the MTU 
unchanged unless one of these situations occurs:
•You have problems connecting to your ISP or other Internet service, and the technical 
support of either the ISP or NETGEAR recommends changing the MTU setting. These 
web-based applications might require an MTU change:
-A secure website that does not open, or displays only part of a web page
-Yahoo email
-MSN portal
-America Online’s DSL service
•You use VPN and have severe performance problems.
•You used a program to optimize MTU for performance reasons, and now you have 
connectivity or performance problems.
Note:An incorrect MTU setting can cause Internet communication 
problems. For instance, you might not be able to access certain 
websites, frames within websites, secure login pages, or FTP or 
POP servers.
If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are 
willing to experiment, you can gradually reduce the MTU from the maximum value of 1500  
						

							Genie Advanced Home40
Dual Band 11ac WiFi Router R6200 
until the problem goes away. The following table describes common MTU sizes and 
applications. 
Table 2.  Common MTU Sizes 
 
MTUApplication
1500 The largest Ethernet packet size and the default value. This setting is typical for 
connections that do not use PPPoE or VPN, and is the default value for N\
ETGEAR 
routers, adapters, and switches.
1492 Used in PPPoE environments.
1472 Maximum size to use for pinging. (Larger packets are fragmented.)
1468 Used in some DHCP environments.
1460 Usable by AOL if you do not have large email attachments, for example.
1436 Used in PPTP environments or with VPN.
1400 Maximum size for AOL DSL.
576 Typical value to connect to dial-up ISPs.
 
To change the MTU size:
1.Select  Advanced > Setup > W
 AN Setup. 
2. In the MTU Size field, enter a value from 64 to 1500.
3. Click  Apply  to save the settings.
LAN Setup
The LAN Setup screen allows configuration of LAN IP services such as Dyn\
amic Host 
Configuration Protocol (DHCP) and Routing Information Protocol (RIP)\
.
The router is shipped preconfigured to use private IP addresses on the L\
AN side and to act  as a DHCP server
 . The router’s default LAN IP configuration is:
• LAN IP address. 192.168.1.1
• Subnet mask. 255.255.255.0
These addresses are part of the designated private address range for use\
 in private networks  and are suitable for most applications. If your network requires a dif
 ferent IP addressing 
scheme, you can change these settings in the LAN Setup screen.