Netgear R7500v2 Nighthawk Dual Band Gigabit Wireless Router 802 11ac User Manual

							Set Up a VPN Connection
A virtual private network (VPN) lets you use the Internet to securely access your network when you aren’t
home.
Figure 14.VPN provides a secure tunnel between your home network and a remote computer
This type of VPN access is called a client-to-gateway tunnel.The computer is the client, and the router
is the gateway.To use the VPN feature, you must log in to the router and enable VPN, and you must
install and run VPN client software on the computer.
The router currently does not support iOS or Android VPN client software.Note
VPN uses DDNS or a static IP address to connect with your router.
To use a DDNS service, register for an account with a host name (sometimes called a domain name).
You use the host name to access your network.The router supports these accounts: NETGEAR, No-IP,
and Dyn.
If your Internet service provider (ISP) assigned a static WAN IP address (such as 50.196.x.x or 10.x.x.x)
that never changes to your Internet account, the VPN can use that IP address to connect to your home
network.
Specify VPN Service in the Router
You must specify the VPN service settings in the router before you can use a VPN connection.
To specify the VPN service:
1.Launch a web browser from a computer or wireless device that is connected to the network.
2.Type http://www.routerlogin.net .
Use VPN to Access Your Network
151 
						

							A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5.Select the Enable VPN Service check box.
By default, the VPN uses the UDP service type and uses port 12974. If you want to customize the
service type and port, NETGEAR recommends that you change these settings before you install the
OpenVPN software.
6.To change the service type, scroll down and select the TCP radio button.
7.To change the port, scroll down to the Service Port field, and type the port number that you want to
use.
8.To specify when VPN clients use the VPN service, select a Clients will use this VPN connection to
access radio button:
•Auto.The router checks the Internet connection and makes its best effort to use the VPN service
only to access Internet sites and services that cannot be directly accessed without VPN.
•All sites on the Internet & Home Network.The VPN client uses the VPN to access all Internet
sites and services, including those that are accessible to you without using VPN.
If you are traveling outside of your home region, this setting can allow you to access sites that
have geographical restrictions in your home region. Because all Internet access goes through
VPN, this setting reduces the access speed for the Internet sites and services without geographic
restrictions that you access using VPN.
•Home Network Only.The VPN client can access only the home network through the VPN service.
9.Click the Apply button.
Your changes are saved.VPN is enabled in the router but you must install and set up OpenVPN
software on your computer before you can use a VPN connection.
Install OpenVPN Software on Your Computer
You must install this software on each computer that you plan to use for VPN connections to your router.
Use VPN to Access Your Network
152 
						

							To install VPN client software:
1.Visit http://openvpn.net/index.php/download/community-downloads.html.
2.In the Windows Installer section of the screen, double-click the openVPN-install-xxx.exe link.
3.Download the file.
4.To install the Open VPN software on your computer, click the openVPN-install-xxx.exe file.
5.Click the Next button.
6.Read the License Agreement and click the I Agree button.
7.Leave the check boxes selected as shown, and click the Next button.
8.To specify the destination folder, click the Browse button and select a destination folder.
Use VPN to Access Your Network
153 
						

							9.Click the Install button.
The window displays the progress of the installation and then displays the final installation page.
10.Click the Finish button.
11.Unzip the configuration files that you downloaded and copy them to the folder where the VPN client
is installed on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Program
files\OpenVPN\config by default.
12.For a client device with Windows, modify the VPN interface name to NETGEAR-VPN:
a.In Windows, select Control Panel > Network and Internet > Network Connections.
b.In the local area connection list, find the local area connection with the device name TAP-Windows
Adapter.
c.Select the local area connection and change its name (not its device name) to NETGEAR-VPN.
If you do not change the VPN interface name, the VPN tunnel connection will fail.
Use VPN to Access Your Network
154 
						

							Use a VPN Tunnel
After you set up the router to use VPN and install the OpenVPN application on your computer, you can
open a VPN tunnel from your computer to your router over the Internet.
For the VPN tunnel to work, the local LAN IP address of the remote R7500 router must use a different
LAN IP scheme from that of the local LAN where your VPN client computer is connected. If both networks
use the same LAN IP scheme, when the VPN tunnel is established, you cannot access your home router
or your home network with the OpenVPN software.
The default LAN IP address scheme for the R7500 router is 192.x.x.x.The most common IP schemes
are 192.x.x.x, 172.x.x.x, and 10.x.x.x. If you experience a conflict, change the IP scheme either for your
home network or for the network with the client VPN computer. For information about changing these
settings, see Change the LAN TCP/IP Settings on page 128.
To open a VPN tunnel:
1.Launch the OpenVPN application with administrator privileges.
The OpenVPN icon displays in the Windows taskbar.
You can create a shortcut to the VPN program, then use the shortcut to access the
settings and select the run as administrator check box.Then every time you use this
shortcut, OpenVPN automatically runs with administrator privileges.
Tip
2.Right-click the OpenVPN icon.
Use VPN to Access Your Network
155 
						

							3.Select Connect.
The VPN connection is established.You can do the following:
•Launch a web browser and log in to your router.
•Use Windows file manager to access the router’s USB device and download files.
Use VPN to Access the Router’s USB Device and Media
To access a USB device and download files:
1.In Windows file manager, select the Network folder.
Use VPN to Access Your Network
156 
						

							The network resources display.The ReadySHARE icon is in the Computer section and the remote
R7500 icon is in the Media Devices section (if DLNA is enabled in the router).
2.If the icons do not display, click the Refresh button to update the screen.
If the local LAN and the remote LAN are using the same IP scheme, the remote R7500 icon does not
display in the Media Devices and Network Infrastructure sections.
3.To access the USB device, click the ReadySHARE icon.
4.To access media on the router’s network, click the R7500 icon.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually use a local Internet service provider.
For example, at a coffee shop you might be given a code that lets you use the coffee shop’s Internet
service account to surf the web.
Nighthawk lets you use a VPN connection to access your own Internet service when you’re away from
home.You might want to do this if you travel to a geographic location that doesn’t support all the Internet
services that you use at home. For example, your Netflix account might work at home but not in a different
country.
Set Up VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network but you can change
the setting to allow Internet access. Accessing the Internet remotely through a VPN might be slower than
accessing the Internet directly.
To allow VPN clients to use your home Internet service:
1.Launch a web browser from a computer or wireless device that is connected to the network.
2.Type http://www.routerlogin.net .
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
Use VPN to Access Your Network
157 
						

							The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VPN screen displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the All sites on
the Internet & Home Network radio button.
When you access the Internet with the VPN connection, instead of using a local Internet service, you
use the Internet service from your home network.
7.Click the Apply button.
Your settings are saved.
8.Click the For Windows or For Non Windows button and download the configuration files for your
VPN clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your
device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Program
files\OpenVPN\config by default.
Block VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, not to the Internet
service for your home network. If you changed this setting to allow Internet access, you can change it
back.
To allow VPN clients to access only your home network:
1.Launch a web browser from a computer or wireless device that is connected to the network.
2.Type http://www.routerlogin.net .
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
Use VPN to Access Your Network
158 
						

							The VNP page displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the Home Network
only radio button.
This is the default setting.The VPN connection is only to your home network, not to the Internet service
for your home network.
7.Click the Apply button.
Your settings are saved.
8.Click For Windows or For Non Windows button and download the configuration files for your VPN
clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your
device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Program
files\OpenVPN\config by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1.Set up the router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the Router on page 157.
2.On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3.Right-click the icon and select Connect.
4.When the VPN connection is established, launch your Internet browser.
Use VPN to Access Your Network
159 
						

							13
Specify Internet Port Settings
You can use port forwarding and port triggering to set up rules for Internet traffic.You need networking
knowledge to set up these features.
This chapter includes the following sections:
•Set Up Port Forwarding to a Local Server on page 161
•Set Up Port Triggering on page 166
160