Netgear R7000p Nighthawk Smart Wifi Router With Mu Mimo User Manual

							Use Keywords to Block Internet Sites
You can use keywords to block certain Internet sites from your network.You can use blocking all the time
or based on a schedule.
To block Internet sites:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > Block Sites.
The Block Sites page displays.
5.Select a keyword blocking option:
•Per Schedule.Turn on keyword blocking according to a schedule that you set. For more information,
see Schedule When to Block Internet Sites and Services on page 44.
•Always.Turn on keyword blocking all the time, independent of the Schedule page.
6.In the Type keyword or domain name here field, enter a keyword or domain that you want to block.
For example:
•Specify XXX to block http://www.badstuff.com/xxx.html.
•Specify .com if you want to allow only sites with domain suffixes such as .edu or .gov.
•Enter a period (.) to block all Internet browsing access.
7.Click the Add Keyword button.
The keyword is added to the keyword list.The keyword list supports up to 32 entries.
8.Click the Apply button.
Keyword blocking takes effect.
Delete Keywords From the Blocked List
To delete keywords from the list:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
Control Access to the Internet
41
Nighthawk AC2300 Smart WiFi Router 
						

							3.Enter the router user name and password.
The user name is admin.The default password is admin.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security >Block Sites.
The Block Sites page displays.
5.Do one of the following:
•To delete a single word, select it and click the Delete Keyword button.
The keyword is removed from the list.
•To delete all keywords on the list, click the Clear List button.
All keywords are removed from the list.
6.Click the Apply button.
Your settings are saved.
Avoid Blocking on a Trusted Computer
You can exempt one trusted computer from blocking.The computer that you exempt must be assigned a
fixed IP address.You can use the reserved IP address feature to specify the IP address. See Manage
Reserved LAN IP Addresses on page 53.
To specify a trusted computer:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > Block Sites.
The Block Sites page displays.
5.Scroll down and select the Allow trusted IP address to visit blocked sites check box.
6.In the Trusted IP Address field, enter the IP address of the trusted computer.
7.Click the Apply button.
Your settings are saved.
Control Access to the Internet
42
Nighthawk AC2300 Smart WiFi Router 
						

							Block Services From the Internet
You can block Internet services on your network based on the type of service.You can block the services
all the time or based on a schedule.
To block services:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > Block Services.
The Block Services page displays.
5.Specify when to block the services:
•To block the services all the time, select the Always radio button.
•To block the services based on a schedule, select the Per Schedule radio button.
For information about how to specify the schedule, see Schedule When to Block Internet Sites and
Services on page 44.
6.Click the Add button.
The Block Services Setup page displays.
7.To add a service that is in the Service Type menu, select the application or service.
The settings for this service automatically display in the fields.
8.To add a service or application that is not in the menu, select User Defined, and do the following:
a.If you know that the application uses either TCP or UDP, select the appropriate protocol. Otherwise,
select TCP/UDP (both).
b.Enter the starting port and ending port numbers.
If the service uses a single port number, enter that number in both fields.To find out which port
numbers the service or application uses, you can contact the publisher of the application, ask user
groups or newsgroups, or search on the Internet.
9.Select a filtering option:
•Only This IP Address. Block services for a single computer.
•IP Address Range. Block services for a range of computers with consecutive IP addresses on your
network.
•All lP Addresses. Block services for all computers on your network.
10.Click the Add button.
Your settings are saved.
Control Access to the Internet
43
Nighthawk AC2300 Smart WiFi Router 
						

							Manage Network Access Control Lists
You can use access control to block or allow access to your network.
To manage devices that are allowed or blocked:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > Access Control.
The Access Control page displays.
5.Select the Turn on Access Control radio button.
6.Click the View list of allowed devices not currently connected to the network link.
The list displays.
7.Select the check box for a device.
8.Use the Add button, Edit button, and Remove from the list button as needed.
9.Click the Apply button.
Your changes take effect.
Schedule When to Block Internet Sites and Services
When you schedule blocking, the same schedule is used to block sites and to block services. For information
about how to specify what you want the router to block, see Use Keywords to Block Internet Sites on page
41 and Block Services From the Internet on page 43.
To schedule blocking:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > Schedule.
The Schedule page displays.
Control Access to the Internet
44
Nighthawk AC2300 Smart WiFi Router 
						

							5.Specify when to block keywords and services:
•Days to Block. Select the check box for each day that you want to block the keywords, or select
the Every Day check box, which automatically selects the check boxes for all days.
•Time of Day to Block. Select a start and end time in 24-hour format, or select the All Day check
box for 24-hour blocking.
6.Select your time zone from the menu.
7.If you live in a region that observes daylight saving time, select the Automatically adjust for daylight
savings time check box.
8.Click the Apply button.
Your settings are saved.
Set Up Security Event Email Notifications
The router can email you its logs of router activity.The log records router activity and security events such
as attempts to access blocked sites or services.
To set up email notifications:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security >E-mail.
The E-mail page displays.
5.Select the Turn E-mail Notification On check box.
6.In the Send to This E-mail Address field, enter the email address you want to send alerts and logs to.
7.In the Your Outgoing Mail Server field, enter the name of your ISP outgoing (SMTP) mail server (such
as mail.myISP.com).
You might be able to find this information in the configuration window of your email program. If you leave
this field blank, log and alert messages are not sent.
8.In the Outgoing Mail Server Port Number section, select the Auto Detection port number or the
Specific Port Number radio button:
You might be able to find this information in the configuration window of your email program. If you leave
this field blank, log and alert messages are not sent.
9.If your outgoing email server requires authentication, select the My Mail Server requires authentication
check box, and do the following:
Control Access to the Internet
45
Nighthawk AC2300 Smart WiFi Router 
						

							a.In the User Name field, type the user name for the outgoing email server.
b.In the Password field, type the password for the outgoing email server.
10.To send alerts when someone attempts to visit a blocked site, select the Send Alerts Immediately
check box.
Email alerts are sent immediately when someone attempts to visit a blocked site.
11.To send logs based on a schedule, specify these settings:
a.From Send logs according to this schedule menu, select the schedule type.
b.From the Day menu, select the day.
c.From the Time menu, select the time, and select the am or pm radio button.
12.Click the Apply button.
Your settings are saved.
Logs are sent automatically according to the schedule that you set. If the log fills before the specified
time, it is sent. After the log is sent, it is cleared from the router memory. If the router cannot email the
log and the log buffer fills, the router overwrites the log.
Control Access to the Internet
46
Nighthawk AC2300 Smart WiFi Router 
						

							5
Network Settings
The router comes ready for WiFi, Ethernet, and USB connections.You can customize the router’s network
settings.We recommend that you install the router and connect it to the Internet before you change its network
settings.
This chapter includes the following sections:
•View or Change WAN Settings on page 48
•Set Up a Default DMZ Server on page 49
•Change the Router’s Device Name on page 49
•Change the LAN TCP/IP Settings on page 50
•Specify the IP Addresses That the Router Assigns on page 51
•Disable the DHCP Server Feature in the Router on page 52
•Manage Reserved LAN IP Addresses on page 53
•Use the WPS Wizard for WiFi Connections on page 55
•Specify Basic WiFi Settings on page 55
•Change the WiFi Mbps Settings on page 57
•Change the WiFi Password or Security Level on page 57
•Set Up a Guest WiFi Network on page 58
•Control the WiFi Radios on page 59
•Set Up a WiFi Schedule on page 60
•Specify WPS Settings on page 60
•Manage Implicit Beamforming on page 61
•Manage Airtime Fairness on page 62
•Manage MU-MIMO on page 62
•Use the Router as a WiFi Access Point on page 63
•Set Up the Router in Bridge Mode on page 64
•Set Up a Bridge for a Port Group or VLAN Tag Group on page 65
•Custom Static Routes on page 68
47 
						

							View or Change WAN Settings
You can view or configure wide area network (WAN) settings for the Internet port.You can set up a DMZ
(demilitarized zone) server, change the maximum transmit unit (MTU) size, and enable the router to respond
to a ping to its WAN (Internet) port.
To view or change the WAN settings:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
The following settings display:
•Disable Port Scan and DoS Protection. DoS protection protects your LAN against denial of service
attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. Select this check box
only in special circumstances.
•Default DMZ Server.This feature is sometimes helpful when you are playing online games or
videoconferencing, but it makes the firewall security less effective. See Set Up a Default DMZ Server
on page 49.
•Respond to Ping on Internet Port.This feature allows your router to be discovered. Use this
feature only as a diagnostic tool or for a specific reason.
•Disable IGMP Proxying. IGMP proxying allows a computer on the local area network (LAN) to
receive the multicast traffic it is interested in from the Internet. If you do not need this feature, you
can select this check box to disable it.
•MTU Size (in bytes).The normal MTU (maximum transmit unit) value for most Ethernet networks
is 1500 bytes, or 1492 bytes for PPPoE connections. Change the MTU only if you are sure that it
is necessary for your ISP connection. See Change the MTU Size on page 35.
•NAT Filtering. Network Address Translation (NAT) determines how the router processes inbound
traffic. Secured NAT protects computers on the LAN from attacks from the Internet but might prevent
some Internet games, point-to-point applications, or multimedia applications from working. Open
NAT provides a much less secured firewall but allows almost all Internet applications to work.
•Disable SIP ALG. Some voice and video communication applications do not work well with the SIP
ALG. Disabling the SIP ALG might help your voice and video applications to create and accept a
call through the router.
5.Click the Apply button.
Your settings are saved.
Network Settings
48
Nighthawk AC2300 Smart WiFi Router 
						

							Set Up a Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and videoconferencing
applications that are incompatible with Network Address Translation (NAT).The router is programmed to
recognize some of these applications and to work correctly with them, but other applications might not
function well. In some cases, one local computer can run the application correctly if the IP address for that
computer is entered as the default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the default DMZ
server loses much of the protection of the firewall and is exposed to exploits
from the Internet. If compromised, the DMZ server computer can be used to
attack other computers on your network.
The router usually detects and discards incoming traffic from the Internet that is not a response to one of
your local computers or a service that you configured on the Port Forwarding/Port Triggering page. Instead
of discarding this traffic, you can specify that the router forwards the traffic to one computer on your network.
This computer is called the default DMZ server.
To set up a default DMZ server:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
5.Select the Default DMZ Server check box.
6.Type the IP address.
7.Click the Apply button.
Your settings are savedt.
Change the Router’s Device Name
The router’s default device name is based on its model number, such as R7000P.This device name displays
in the file manager when you browse your network.
To change the router's device name:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Type http://www.routerlogin.net.
Network Settings
49
Nighthawk AC2300 Smart WiFi Router 
						

							A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5.Click the Edit button next tot he device name.
The Device Name page displays.
6.In the Device Name field, type a new name.
7.Click the Apply button.
Your settings are saved.
Change the LAN TCP/IP Settings
The router is preconfigured to use private IP addresses on the LAN side and to act as a DHCP server.The
router’s default LAN IP configuration is as follows:
•LAN IP address. 192.168.1.1
•Subnet mask. 255.255.255.0
These addresses are part of the designated private address range for use in private networks and are
suitable for most applications. If your network requires a different IP addressing scheme, you can change
these settings.
You might want to change these settings if you need a specific IP subnet that one or more devices on the
network use, or if you use competing subnets with the same IP scheme.
To change the LAN TCP/IP settings:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5.In the IP Address field, type the IP address.
6.In the IP Subnet Mask, type the subnet mask of the router.
Network Settings
50
Nighthawk AC2300 Smart WiFi Router