Netgear R7300dst Nighthawk Dst Ac1900 Dst Router User Manual

							Use VPN to Access Your Network 
231  Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST
Set Up VPN Client Internet Access in the DST Router
By default, the DST router is set up to allow VPN connections only to your home network, but 
you can change the setting to allow Internet access. Accessing the Internet remotely through 
a VPN might be slower than accessing the Internet directly.
To allow VPN clients to use your home Internet service:
1. Launch a web browser from a computer that is connected to the network.
2. Enter http://www.routerlogin.net.
A login window displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5. Select the Enable VPN Service check box.
6. Scroll down to the Clients will use this VPN connection to access section, and select the All 
sites on the Internet & Home Network radio button. 
When you access the Internet with the VPN connection, instead of using a local Internet 
service, you use the Internet service from your home network.
7. Click the Apply button.
Your settings are saved.
8. Click For Windows or For Non Windows button and download the configuration files for 
your VPN clients.
9. Unzip the configuration files and copy them to the folder where the VPN client is installed on 
your device. 
For a client device with Windows 64-bit system, the VPN client is installed at 
C:\Program files\OpenVPN\config\ by default.
Block VPN Client Internet Access in the DST Router
By default, the DST router is set up this way to allow VPN connections only to your home 
network, not to the Internet service for your home network. If you changed this setting to 
allow Internet access, you can change it back.
To allow VPN clients to access only your home network:
1. Launch a web browser from a computer that is connected to the network.
2. Enter http://www.routerlogin.net. 
						

							Use VPN to Access Your Network 
232 Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST 
A login window displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5. Select the Enable VPN Service check box.
6. Scroll down to the Clients will use this VPN connection to access section, and select the 
Home Network only radio button.
This is the default setting. The VPN connection is only to your home network, not to the 
Internet service for your home network.
7. Click the Apply button.
Your settings are saved.
8. Click For Windows or For Non Windows button and download the configuration files for 
your VPN clients.
9. Unzip the configuration files and copy them to the folder where the VPN client is installed on 
your device. 
For a client device with Windows 64-bit system, the VPN client is installed at 
C:\Program files\OpenVPN\config\ by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1. Set up the DST router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the DST Router on page 231
2. On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3. Right-click the icon, and select Connect.
4. When the VPN connection is established, launch your Internet browser. 
						

							233
17
17.   Manage Port Forwarding and Port 
Triggering
You can use port forwarding and port triggering to set up rules for Internet traffic. You need 
networking knowledge to set up these features.
This chapter includes the following sections:
•Manage Port Forwarding to a Local Server for Services and Applications 
•Manage Port Triggering for Services and Applications  
						

							Manage Port Forwarding and Port Triggering 234
Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST 
Manage Port Forwarding to a Local Server for Services 
and Applications
If your home network includes a server, you can allow certain types of incoming traffic to 
reach the server. For example, you might want to make a local web server, FTP server, or 
game server visible and available to the Internet.
The DST router can forward incoming traffic with specific protocols to computers on your  local network. 
 You can specify the servers for applications and you can also specify a d\
efault 
DMZ server to which the DST router forwards all other incoming protocols\
.
Forward Incoming Traffic for a Default Service or Application
You can forward traffic for a default service or application to a computer on your network.
To forward incoming traffic for a default service or application:
1.  Decide which type of service, application, or game you want to provide.
2.  Find the local IP address of the computer on your network that will prov\
ide the service.
The server computer must always use the same IP address. To specify this setting, use  the reserved IP address feature. See Reserve LAN IP Addresses on page  143.
3.  Launch a web browser from a computer or WiFi device that is connected to\
 the network.
4.  Enter  http://www
 .routerlogin.net.
A login window displays.
5.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home page displays.
6.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
7. Leave the  Port Forwarding radio button selected as the service type.
8.  In the Service Name menu, select the service or application. 
						

							Manage Port Forwarding and Port Triggering 235
 Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST
If the service or application that you want to add is not in the list, c\
reate a custom service. 
See Add a Port Forwarding Rule With a Custom Service or Application 
on page
  235.
9.  In the Server IP 
 Address field, enter the IP address of the computer that will provide the 
service. 
10.  Click the  Add button.
Your settings are saved and the rule is added to the table.
Add a Port Forwarding Rule With a Custom Service or 
Application
The DST router lists default services and applications that you can use \
in port forwarding  rules. If the service or application is not predefined, you can add a po\
rt forwarding rule with a 
custom service or application.
To add a port forwarding rule with a custom service or application:
1.  Find out which port number or range of numbers the application uses.
You can usually find this information by contacting the publisher of the \
application or user  groups or news groups.
2.  Launch a web browser from a computer or WiFi device that is connected to\
 the network.
3.  Enter  http://www
 .routerlogin.net.
A login window displays.
4.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
6. Make sure that the  Port Forwarding radio button is selected. 
						

							Manage Port Forwarding and Port Triggering 236
Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST 
7. 
Click the  Add Custom Service  button.
8. In the Service Name field, enter a descriptive name. 
9.  In the Service T
 ype menu, select the protocol ( TCP or UDP) that is associated with the 
service or application.
If you are unsure, select TCP/UDP .
10.  In the  External Starting Port field, enter the beginning port number
 . 
If the service or application uses a single port, enter the same port nu\
mber in the  Ending 
Port field.
If the service or application uses a range of ports, enter the ending po\
rt number of the 
range in the External Ending Port field.
11.  Specify the internal ports by one of these methods:
• Leave the Use the same port range for Internal port check box selected.
• T
ype the port numbers in the Internal Starting Port and Internal Ending Port  fields.
12.  T
ype the IP address in the Internal IP address field or select the radio button for an 
attached device listed in the table.
13.  Click the  Apply button. 
Your settings are saved. The rule is added to the table on the Port Forwarding / Port 
T
 riggering page.
Change a Port Forwarding Rule
You can change an existing port forwarding rule.
To change a port forwarding rule:
1.  Launch a web browser from a computer or WiFi device that is connected to\
 the network.
2.  Enter  http://www
 .routerlogin.net.
A login window displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive. 
						

							Manage Port Forwarding and Port Triggering 
237  Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding / Port Triggering page displays.
5. Make sure that the Port Forwarding radio button is selected.
6. In the table, select the radio button next to the service name.
7. Click the Edit Service button.
The Ports - Custom Services page displays.
8. Specify changes to any of the following settings:
• Service Name. Type the service name.
• Service Type. If you are unsure, select TCP/UDP.
• External Starting Port: If the application uses a single port, enter the same port 
number in the External Ending Port field. If the application uses a range of ports, 
enter the ending port number of the range in the External Ending Port field.
•For the internal ports, leave the Use the same port range for Internal port check 
box selected.
• Internal IP address. Type the IP address in the Internal IP address field, or select the 
radio button for an attached device listed in the table.
9. Click the Apply button.
Your settings are saved.
Remove a Port Forwarding Entry
You can remove a port forwarding rule that you no longer need.
To delete a port forwarding entry:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
A login window displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding / Port Triggering page displays.
5. Make sure that the Port Forwarding radio button is selected.
6. In the table, select the radio button next to the service name.
7. Click the Delete Service button. 
						

							Manage Port Forwarding and Port Triggering 
238 Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST 
The rule is removed from the table.
Application Example: Make a Local Web Server Public
If you host a web server on your local network, you can use port forwarding to allow web 
requests from anyone on the Internet to reach your web server. 
To make a local web server public:
1. Assign your web server either a fixed IP address or a dynamic IP address using DHCP 
address reservation. 
In this example, your DST router always gives your web server an IP address of 
192.168.1.33. 
2. On the Port Forwarding / Port Triggering page, configure the DST router to forward the 
HTTP service to the local address of your web server at 192.168.1.33. 
HTTP (port 80) is the standard protocol for web servers.
3. (Optional) Register a host name with a Dynamic DNS service, and specify that name in the 
Dynamic DNS page of the DST router. 
Dynamic DNS makes it much easier to access a server from the Internet because you 
can type the name in the Internet browser. Otherwise, you must know the IP address that 
the ISP assigned, which typically changes.
How the DST Router Implements the Port Forwarding Rule
The following sequence shows the effects of a port forwarding rule:
1. When you type the URL www.example.com in your browser, the browser sends a web 
page request message with the following destination information: 
• Destination address. The IP address of www.example.com, which is the address of 
your DST router.
• Destination port number. 80, which is the standard port number for a web server 
process.
2. Your DST router receives the message and finds your port forwarding rule for incoming port 
80 traffic. 
3. The DST router changes the destination in the message to IP address 192.168.1.123 and 
sends the message to that computer.
4. Your web server at IP address 192.168.1.123 receives the request and sends a reply 
message to your DST router.
5. Your DST router performs Network Address Translation (NAT) on the source IP address, 
and sends the reply through the Internet to the computer or WiFi device that sent the web 
page request.  
						

							Manage Port Forwarding and Port Triggering 
239  Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST
Manage Port Triggering for Services and Applications
Port triggering is a dynamic extension of port forwarding that is useful in these cases:
•An application must use port forwarding to more than one local computer (but not 
simultaneously).
•An application must open incoming ports that are different from the outgoing port.
With port triggering, the DST router monitors traffic to the Internet from an outbound “trigger” 
port that you specify. For outbound traffic from that port, the DST router saves the IP address 
of the computer that sent the traffic. The DST router temporarily opens the incoming port or 
ports that you specify in your rule, and forwards that incoming traffic to that destination.
Port forwarding creates a static mapping of a port number or range of ports to a single local 
computer. Port triggering can dynamically open ports to any computer when needed and 
close the ports when they are no longer needed.
Note:If you use applications such as multiplayer gaming, peer-to-peer 
connections, real-time communications such as instant messaging, or 
remote assistance (a feature in Windows XP), enable Universal Plug 
and Play (UPnP). See 
Improve Network Connections With Universal 
Plug and Play on page 72.
Add a Port Triggering Service
To add a port triggering service:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Enter http://www.routerlogin.net.
A login window displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering. 
The Port Forwarding / Port Triggering page displays. 
						

							Manage Port Forwarding and Port Triggering 240
Nighthawk DST AC1900 DST Router and DST Adpater Model R7300DST 
5. 
Select the  Port Triggering radio button.
6. Click the  Add Service button.
7. In the Service Name field, enter the name of the custom service or application.
8.  In the Service User menu, select  Any
 , or select Single address and enter the IP address 
of one computer:
• Any . 
The is the default settings and allows any computer on the Internet to u\
se this 
service. 
• Single address. Restricts the service to a particular computer
 . Enter the IP address 
in the field that becomes available with this selection from the menu.
9.  Select the service type, either  TCP or UDP or  TCP/UDP (both). 
If you are not sure, select TCP/UDP .
10.  In the  T
riggering Port  field, enter the number of the outbound traffic port that will open the 
inbound ports. 
11.  Enter the inbound connection port information in the  Connection T
 ype, Starting Port, and 
Ending Port  fields.
12.  Click the  Apply button.
The service is now in the Portmap table. You must enable port triggering before the DST  router used port triggering for the service that you added. See Enable Port Triggering on 
page
  241.