Netgear R7000p Nighthawk Smart Wifi Router With Mu Mimo User Manual

							To open a VPN tunnel:
1.Launch the OpenVPN application with administrator privileges.
The OpenVPN icon displays in the Windows taskbar.
You can create a shortcut to the VPN program, then use the shortcut to access the settings
and select the run as administrator check box.Then every time you use this shortcut,
OpenVPN automatically runs with administrator privileges.
Tip
2.Right-click the OpenVPN icon.
3.Select Connect.
The VPN connection is established.You can do the following:
•Launch a web browser and log in to your router.
•Use Windows file manager to access the router’s USB device and download files.
Use VPN to Access the Router’s USB Device and Media
To access a USB device and download files:
1.In the Windows file manager, select Network.
The network resources display.The ReadySHARE icon is in the Computer section and the remote
router icon is in the Media Devices section (if DLNA is enabled in the router).
2.If the icons do not display, click the Refresh button to update the screen.
If the local LAN and the remote LAN are using the same IP scheme, the remote router icon does not
display in the Media Devices and Network Infrastructure sections.
Use VPN to Access Your Network
131
Nighthawk AC2300 Smart WiFi Router 
						

							3.To access the USB device, click the ReadySHARE icon.
4.To access media on the router’s network, click the remote router icon.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually use a local Internet service provider.
For example, at a coffee shop you might be given a code that lets you use the coffee shop’s Internet service
account to surf the web.
Nighthawk lets you use a VPN connection to access your own Internet service when you’re away from home.
You might want to do this if you travel to a geographic location that doesn’t support all the Internet services
that you use at home. For example, your Netflix account might work at home but not in a different country.
Set Up VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, but you can change
the settings to allow Internet access. Accessing the Internet remotely through a VPN might be slower than
accessing the Internet directly.
To allow VPN clients to use your home Internet service:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VPN page displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the All sites on
the Internet & Home Network radio button.
When you access the Internet with the VPN connection, instead of using a local Internet service, you
use the Internet service from your home network.
7.Click the Apply button.
Your settings are saved.
8.Click the For Windows or For non-Windows button and download the configuration files for your VPN
clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Program
files\OpenVPN\config\ by default.
Use VPN to Access Your Network
132
Nighthawk AC2300 Smart WiFi Router 
						

							Block VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, not to the Internet
service for your home network. If you changed this setting to allow Internet access, you can change it back.
To allow VPN clients to access only your home network:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VNP page displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the Home Network
only radio button.
This is the default setting.The VPN connection is only to your home network, not to the Internet service
for your home network.
7.Click the Apply button.
Your settings are saved.
8.Click For Windows or For Non Windows button and download the configuration files for your VPN
clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Program
files\OpenVPN\config\ by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1.Set up the router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the Router on page 132.
2.On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3.Right-click the icon and select Connect.
4.When the VPN connection is established, launch your Internet browser.
Use VPN to Access Your Network
133
Nighthawk AC2300 Smart WiFi Router 
						

							13
Customize Internet Traffic Rules for Ports
You can use port forwarding and port triggering to set up rules for Internet traffic.You need networking knowledge
to set up these features.
This chapter includes the following sections:
•Port Forwarding to a Local Server on page 135
•Port Triggering on page 138
134 
						

							Port Forwarding to a Local Server
If your home network includes a server, you can allow certain types of incoming traffic to reach the server.
For example, you might want to make a local web server, FTP server, or game server visible and available
to the Internet.
The router can forward incoming traffic with specific protocols to computers on your local network.You can
specify the servers for applications and you can also specify a default DMZ server to which the router
forwards all other incoming protocols.
Set Up Port Forwarding to a Local Server
To forward specific incoming protocols:
1.Decide which type of service, application, or game you want to provide.
2.Find the local IP address of the computer on your network that will provide the service.
You can usually find this information by contacting the publisher of the application or user groups or
news groups.
The server computer must always use the same IP address.
3.Assign the server computer a reserved IP address.
See Manage Reserved LAN IP Addresses on page 53.
4.Launch a web browser from a computer or mobile device that is connected to the network.
5.Enter http://www.routerlogin.net.
A login window opens.
6.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
7.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
8.Leave the Port Forwarding radio button selected as the service type.
9.From the Service Name menu, select the service name.
If the service that you want to add is not in the menu, create a custom service. See Add a Custom Port
Forwarding Service on page 136.
10.In the Server IP Address field, enter the IP address of the computer that will provide the service.
11.Click the Add button.
The service displays in the menu.
Customize Internet Traffic Rules for Ports
135
Nighthawk AC2300 Smart WiFi Router 
						

							Add a Custom Port Forwarding Service
To add a custom service:
1.Find out which port number or range of numbers the application uses.
You can usually find this information by contacting the publisher of the application or user groups or
news groups.
2.Launch a web browser from a computer or WiFi device that is connected to the network.
3.Enter http://www.routerlogin.net.
A login window opens.
4.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
5.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
6.Leave the Port Forwarding radio button selected as the service type.
7.Click the Add Custom Service button.
The Ports - Custom Service page displays.
8.In the Service Name field, enter a descriptive name.
9.From the Protocol menu, select the protocol.
If you are unsure, select TCP/UDP.
10.In the External port range field enter the port range.
11.Specify the internal ports by one of these methods:
•Leave the Use the same port range for Internal port check box selected.
•Type the port numbers in the Internal Starting Port field and the Internal Ending Port field.
You can enter a port range and fixed ports in one rule. For example, external (30-50, 78, 100-102),
internal (40-60, 99, 200-202).With this rule, external ports 30-50 are forwarded to internal ports 40-60.
12.In the Internal IP address field, type the IP address or select the radio button for an attached device
listed in the table.
13.Click the Apply button.
The service is now in the list on the Port Forwarding/Port Triggering page.
Edit a Port Forwarding Service
To edit a port forwarding entry:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
Customize Internet Traffic Rules for Ports
136
Nighthawk AC2300 Smart WiFi Router 
						

							A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
5.Leave the Port Forwarding radio button selected as the service type.
6.In the table, select the radio button next to the service name.
7.Click the Edit Service button.
The Ports - Custom Services page displays.
8.Change the settings as needed.
9.Click the Apply button.
Your settings are saved.
Delete a Port Forwarding Entry
To delete a port forwarding entry:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter therouter user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
5.Leave the Port Forwarding radio button selected.
6.In the table, select the radio button next to the service name.
7.Click the Delete Service button.
The service is deleted.
Application Example: Make a Local Web Server Public
If you host a web server on your local network, you can use port forwarding to allow web requests from
anyone on the Internet to reach your web server.
Customize Internet Traffic Rules for Ports
137
Nighthawk AC2300 Smart WiFi Router 
						

							To make a local web server public:
1.Assign your web server either a fixed IP address or a dynamic IP address using DHCP address
reservation.
In this example, your router always gives your web server an IP address of 192.168.1.33.
2.On the Port Forwarding/Port Triggering page, configure the router to forward the HTTP service to the
local address of your web server at 192.168.1.33.
HTTP (port 80) is the standard protocol for web servers.
3.(Optional) Register a host name with a Dynamic DNS service and specify that name on the Dynamic
DNS page of the router.
Dynamic DNS makes it much easier to access a server from the Internet because you can type the
name in the Internet browser. Otherwise, you must know the IP address that the ISP assigned, which
typically changes.
How the Router Implements the Port Forwarding Rule
The following sequence shows the effects of a port forwarding rule:
1.When you type the URL www.example.com in your browser, the browser sends a web page request
message with the following destination information:
•Destination address.The IP address of www.example.com, which is the address of your router.
•Destination port number. 80, which is the standard port number for a web server process.
2.Your router receives the message and finds your port forwarding rule for incoming port 80 traffic.
3.The router changes the destination in the message to IP address 192.168.1.123 and sends the message
to that computer.
4.Your web server at IP address 192.168.1.123 receives the request and sends a reply message to your
router.
5.Your router performs Network Address Translation (NAT) on the source IP address and sends the reply
through the Internet to the computer or WiFi device that sent the web page request.
Port Triggering
Port triggering is a dynamic extension of port forwarding that is useful in these cases:
•An application must use port forwarding to more than one local computer (but not simultaneously).
•An application must open incoming ports that are different from the outgoing port.
With port triggering, the router monitors traffic to the Internet from an outbound “trigger” port that you specify.
For outbound traffic from that port, the router saves the IP address of the computer that sent the traffic.The
router temporarily opens the incoming port or ports that you specify in your rule and forwards that incoming
traffic to that destination.
Customize Internet Traffic Rules for Ports
138
Nighthawk AC2300 Smart WiFi Router 
						

							Port forwarding creates a static mapping of a port number or range of ports to a single local computer. Port
triggering can dynamically open ports to any computer when needed and close the ports when they are no
longer needed.
If you use applications such as multiplayer gaming, peer-to-peer connections, real-time
communications such as instant messaging, or remote assistance (a feature in Windows
XP), enable Universal Plug and Play (UPnP). See Improve Network Connections With
Universal Plug and Play on page 73.
Note
Add a Port Triggering Service
To add a port triggering service:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
5.Select the Port Triggering radio button.
The page adjusts.
6.Click the Add Service button.
7.In the Service Name field, type a descriptive service name.
8.From the Service User menu, select a user option:
•Any (the default) allows any computer on the Internet to use this service.
•Single address restricts the service to a particular computer.
9.From the Service Type menu, select TCP or UDP.
10.In the Triggering Port field, enter the number of the outbound traffic port that will open the inbound
ports.
11.From the Connection Type menu, select TCP/UDP, TCP, or UDP.
12.In the Starting Port, and Ending Port fields, enter the inbound connection information.
13.Click the Apply button.
The service is now in the Portmap Table.You must enable port triggering before the router uses port
triggering. See Enable Port Triggering on page 140.
Customize Internet Traffic Rules for Ports
139
Nighthawk AC2300 Smart WiFi Router 
						

							Enable Port Triggering
To enable port triggering:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
5.Select the Port Triggering radio button.
6.Clear the Disable Port Triggering check box.
If this check box is selected, the router does not use port triggering even if you specified port triggering
settings.
7.In the Port Triggering Timeout field, enter a value up to 9999 minutes.
This value controls how long the inbound ports stay open when the router detects no activity.This value
is required because the router cannot detect when the application terminates.
8.Click the Apply button.
Your settings are saved.
Application Example: Port Triggering for Internet Relay Chat
Some application servers, such as FTP and IRC servers, send replies to multiple port numbers. Using port
triggering, you can tell the router to open more incoming ports when a particular outgoing port starts a
session.
An example is Internet Relay Chat (IRC).Your computer connects to an IRC server at destination port 6667.
The IRC server not only responds to your originating source port but also sends an “identify” message to
your computer on port 113. Using port triggering, you can tell the router, “When you initiate a session with
destination port 6667, you must also allow incoming traffic on port 113 to reach the originating computer.”
The following sequence shows the effects of this port triggering rule:
1.You open an IRC client program to start a chat session on your computer.
2.Your IRC client composes a request message to an IRC server using a destination port number of 6667,
the standard port number for an IRC server process.Your computer then sends this request message
to your router.
3.Your router creates an entry in its internal session table describing this communication session between
your computer and the IRC server.Your router stores the original information, performs Network Address
Customize Internet Traffic Rules for Ports
140
Nighthawk AC2300 Smart WiFi Router