Netgear R6220 Ac1200 Smart Wifi Router With External Antennas User Manual

							Use VPN to Access Your Network 
131  AC1200 Smart WiFi Router with External Antennas
Specify VPN Service in the Router
You must specify the VPN service settings in the router before you can use a VPN 
connection.
To specify the VPN service:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service screen displays.
5. Select the Enable VPN Service check box.
By default, the VPN uses the UDP service type and uses port 12974. If you want to 
customize the service type and port, NETGEAR recommends that you change these 
settings before you install the OpenVPN software.
6. To change the service type, scroll down and select the TCP radio button.
7. To change the port, scroll down to the Service Port field, and type the port number that you 
want to use.
8. Click the Apply button.
Your changes are saved. VPN is enabled in the router, but you must install and set up 
OpenVPN software on your computer before you can use a VPN connection.
Install OpenVPN Software on Your Computer 
You must install this software on each computer that you plan to use for VPN connections to 
your router.
To install VPN client software:
1. Visit http://openvpn.net/index.php/download/community-downloads.html.
2. In the Windows Installer section of the screen, double-click the 
openVPN-install-xxx.exe link.
3. Download the file. 
						

							Use VPN to Access Your Network 132
AC1200 Smart WiFi Router with External Antennas 
4. 
To install the Open VPN software on your computer, click the 
openVPN-install-xxx.exe file.
5.  Click the  Next button.
6.  Read the License 
 Agreement and click the  I Agree button.
7. Leave the check boxes selected as shown, and click the  Next button.
8.  T
o specify the destination folder, click the  Browse button, select a destination folder, and 
click the  Next button.
9. Click the  Install button. 
						

							Use VPN to Access Your Network 133
 AC1200 Smart WiFi Router with External Antennas
The screen displays the progress of the installation and then displays t\
he final installation 
screen.
10.  Click the  Finish button.
11.  Unzip the configuration files that you downloaded and copy them to the f\
older where the 
VPN client is installed on your device. 
For a client device with Windows 64-bit system, the VPN client is instal\
led at 
C:\Program files\OpenVPN\config\ by default.
12.  For a client device with Windows, modify the VPN interface name to  NETGEAR-VPN: 
a. In Windows, select Start > Control Panel > Network and Internet > Network 
Connections.
b.  In the local area connection list, find the local area connection with t\
he device name 
T

AP-Windows Adapter .
c.  Select the local area connection and change its name (not its device na\
me) to 
NETGEAR-VPN.
If you do not change the VPN interface name, the VPN tunnel connection w\
ill fail.
Use a VPN Tunnel
After you set up the router to use VPN and install the OpenVPN applicati\
on on your  computer, you can open a VPN tunnel from your computer to your router over the I\
nternet.
For the VPN tunnel to work, the local LAN IP address of the remote R6220\
 router must use a 
dif
 ferent LAN IP scheme from that of the local LAN where your VPN client co\
mputer is 
connected. If both networks use the same LAN IP scheme, when the VPN tun\
nel is 
established, you cannot access your home router or your home network wit\
h the OpenVPN 
software.
The default LAN IP address scheme for the R6220 router is 192.x.x.x. The most common IP  schemes are 192.x.x.x, 172.x.x.x, and 10.x.x.x. If you experience a conf\
lict, change the IP 
scheme either for your home network or for the network with the client V\
PN computer

. For  
						

							Use VPN to Access Your Network 134
AC1200 Smart WiFi Router with External Antennas 
information about changing these settings, see Change the LAN TCP/IP Settings on 
page  
11 2.
To open a VPN tunnel:
1.  Launch the OpenVPN application with administrator privileges.
The OpenVPN icon displays in the Windows taskbar.
Tip: Y
ou can create a shortcut to the VPN program, then use the shortcut 
to access the settings and select the run as administrator check 
box. Then every time you use this shortcut, OpenVPN automatically 
runs with administrator privileges.
2.  Right-click the  OpenVPN icon.
3. Select  Connect.
The VPN connection is established. You can do the following:
• Launch a web browser and log in to your router
 .
• Use Windows file manager to access the router
 ’s USB device and download files. 
						

							Use VPN to Access Your Network 135
 AC1200 Smart WiFi Router with External Antennas
Use VPN to Access the Router’s USB Device and Media
To access a USB device and download files:
1. 
In Windows file manager
 , select the Network folder.
The network resources display. The  ReadySHARE icon is in the Computer section and 
the remote  R6220 icon is in the Media Devices section (if DLNA is enabled in the router\
).
2.  If the icons do not display
 , click the Refresh button to update the screen.
If the local LAN and the remote LAN are using the same IP scheme, the re\
mote R6220 
icon does not display in the Media Devices and Network Infrastructure se\
ctions.
3.  T
o access the USB device, click the ReadySHARE  icon.
4.  T
o access media on the router’s network, click the  R6220 icon.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually u\
se a local Internet 
service provider. For example, at a coffee shop you might be given a code that lets you use 
the coffee shop’s Internet service account to surf the web.
The router lets you use a VPN connection to access your own Internet ser\
vice when you’re  away from home. 
 You might want to do this if you travel to a geographic location that doe\
sn’t 
support all the Internet services that you use at home. For example, you\
r Netflix account 
might work at home but not in a different country. 
Set Up VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your h\
ome network but you 
can change the setting to allow Internet access. Accessing the Internet remotely through a 
VPN might be slower than accessing the Internet directly. 
						

							Use VPN to Access Your Network 
136 AC1200 Smart WiFi Router with External Antennas 
To allow VPN clients to use your home Internet service:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN screen displays.
5. Select the Enable VPN Service radio button.
6. Scroll down to the Clients will use this VPN connection to access section, and select the All 
sites on the Internet & Home Network radio button. 
When you access the Internet with the VPN connection, instead of using a local Internet 
service, you use the Internet service from your home network.
7. Click the Apply button.
Your settings are saved.
8. Click the For Windows or For Non Windows button and download the configuration files 
for your VPN clients.
9. Unzip the configuration files and copy them to the folder where the VPN client is installed on 
your device. 
For a client device with Windows 64-bit system, the VPN client is installed at 
C:\Program files\OpenVPN\config\ by default.
Block VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, not to 
the Internet service for your home network. If you changed this setting to allow Internet 
access, you can change it back.
To allow VPN clients to access only your home network:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password. 
						

							Use VPN to Access Your Network 
137  AC1200 Smart WiFi Router with External Antennas
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VNP screen displays.
5. Select the Enable VPN Service radio button.
6. Scroll down to the Clients will use this VPN connection to access section, and select the 
Home Network only radio button.
This is the default setting. The VPN connection is only to your home network, not to the 
Internet service for your home network.
7. Click the Apply button.
Your settings are saved.
8. Click For Windows or For Non Windows button and download the configuration files for 
your VPN clients.
9. Unzip the configuration files and copy them to the folder where the VPN client is installed on 
your device. 
For a client device with Windows 64-bit system, the VPN client is installed at 
C:\Program files\OpenVPN\config\ by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1. Set up the router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the Router on page 135.
2. On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3. Right-click the icon and select Connect.
4. When the VPN connection is established, launch your Internet browser. 
						

							138
12
12.   Specify Internet Port Settings
You can use port forwarding and port triggering to set up rules for Internet traffic. You need 
networking knowledge to set up these features.
This chapter includes the following sections:
•Set Up Port Forwarding to a Local Server 
•Set Up Port Triggering  
						

							Specify Internet Port Settings 139
 AC1200 Smart WiFi Router with External Antennas
Set Up Port Forwarding to a Local Server
If your home network includes a server, you can allow certain types of incoming traffic to 
reach the server. For example, you might want to make a local web server, FTP server, or 
game server visible and available to the Internet.
The router can forward incoming traffic with specific protocols to computers on your local  network. 
 You can specify the servers for applications and you can also specify a d\
efault DMZ 
server to which the router forwards all other incoming protocols.
To forward specific incoming protocols:
1.  Decide which type of service, application, or game you want to provide.
2.  Find the local IP address of the computer on your network that will prov\
ide the service.
You can usually find this information by contacting the publisher of the \
application or user  groups or news groups.
The server computer must always use the same IP address. Assign the server computer  a reserved IP address. See Manage Reserved LAN IP Addresses  on page
  11 5.
3.  Launch a web browser from a computer or wireless device that is connecte\
d to the network.
4.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login screen displays.
5.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
6.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
7. Leave the  Port Forwarding  radio button selected as the service type.
8.  T
o add a service that is in the  Service Name list:
a. Select a service from the list.
b.  In the  Server IP address  field, enter the port number
 .
c.  Click the  Add button.
The service displays in the list. 
						

							Specify Internet Port Settings 140
AC1200 Smart WiFi Router with External Antennas 
If the service that you want to add is not in the list, create a custom \
service. See Add a 
Custom Port Forwarding Service on page
 140.
Add a Custom Port Forwarding Service
To add a custom service:
1. Find out which port number or range of numbers the application uses.
You can usually find this information by contacting the publisher of the \
application or user  groups or news groups.
2.  Launch a web browser from a computer or wireless device that is connecte\
d to the network.
3.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login screen displays.
4.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home screen displays.
5.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering screen displays.
6.  Leave the  Port Forwarding radio button selected as the service type.
7.  Click the  Add Custom Service  button.
8. In the Service Name field, enter a descriptive name. 
9.  In the Service T
 ype field, select the protocol. 
If you are unsure, select TCP/UDP .
10.  In the  External port range field, enter the port numbers. 
11.  Specify the internal ports by one of these methods:
• Leave the Use the same port range for Internal port check box selected.
• T
ype the port numbers in the Internal Port Range field.