Netgear R7800 Nighthawk X4s Ac2600 Smart Wifi Router User Manual

							a.If you know that the application uses either TCP or UDP, select the appropriate protocol. Otherwise, select
TCP/UDP (both).
b.Enter the starting port and ending port numbers.
If the service uses a single port number, enter that number in both fields.To find out which port numbers
the service or application uses, you can contact the publisher of the application, ask user groups or
newsgroups, or search on the Internet.
9.Select a filtering option:
•Only This IP Address. Block services for a single computer.
•IP Address Range. Block services for a range of computers with consecutive IP addresses on your network.
•All lP Addresses. Block services for all computers on your network.
10.Click the Add button.
Your settings are saved.
Delete Keywords From the Blocked List
To delete keywords from the list:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is admin.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security >Block Sites.
The Block Sites page displays.
5.Do one of the following:
•To delete a single word, select it and click the Delete Keyword button.
The keyword is removed from the list.
•To delete all keywords on the list, click the Clear List button.
All keywords are removed from the list.
6.Click the Apply button.
Your settings are saved.
Control Access to the Internet
51
Nighthawk X4S AC2600 Smart WiFi Router 
						

							Avoid Blocking on a Trusted Computer
You can exempt one trusted computer from blocking.The computer that you exempt must be assigned a fixed IP
address.You can use the reserved IP address feature to specify the IP address. See Manage Reserved LAN IP
Addresses on page 64.
To specify a trusted computer:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > Block Sites.
The Block Sites page displays.
5.Scroll down and select the Allow trusted IP address to visit blocked sites check box.
6.In the Trusted IP Address field, enter the IP address of the trusted computer.
7.Click the Apply button.
Your settings are saved.
Manage Network Access Control Lists
You can use access control to block or allow access to your network.
To manage devices that are allowed or blocked:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
Control Access to the Internet
52
Nighthawk X4S AC2600 Smart WiFi Router 
						

							4.Select ADVANCED > Security > Access Control.
5.Select the Turn on Access Control radio button.
6.Click the View list of allowed devices not currently connected to the network link.
The list displays.
7.Select the check box for a device.
8.Use the Add button, Edit button, and Remove from the list button as needed.
9.Click the Apply button.
Your changes take effect.
Schedule When to Block Internet Sites and Services
When you schedule blocking, the same schedule is used to block sites and to block services. For information about
how to specify what you want the router to block, see Use Keywords to Block Internet Sites on page 48 and Block
Services From the Internet on page 49.
Control Access to the Internet
53
Nighthawk X4S AC2600 Smart WiFi Router 
						

							To schedule blocking:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > Schedule.
5.Specify when to block keywords and services:
•Days to Block. Select the check box for each day that you want to block the keywords, or select the Every
Day check box, which automatically selects the check boxes for all days.
•Time of Day to Block. Select a start and end time in 24-hour format, or select the All Day check box for
24-hour blocking.
6.Select your time zone from the menu.
7.If you live in a region that observes daylight saving time, select the Automatically adjust for daylight savings
time check box.
8.Click the Apply button.
Your settings are saved.
Control Access to the Internet
54
Nighthawk X4S AC2600 Smart WiFi Router 
						

							Set Up Security Event Email Notifications
The router can email you its logs of router activity.The log records router activity and security events such as attempts
to access blocked sites or services.
To set up email notifications:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security >E-mail.
5.Select the Turn E-mail Notification On check box.
6.In the Your Outgoing Mail Server field, enter the name of your ISP outgoing (SMTP) mail server (such as
mail.myISP.com).
You might be able to find this information in the configuration window of your email program. If you leave this
field blank, log and alert messages are not sent.
7.In the Send to This E-mail Address field, type the email address to which logs and alerts are to be sent.
This email address is also used for the From address. If this field is blank, log and alert messages are not sent.
8.If your outgoing email server requires authentication, select the My Mail Server requires authentication check
box, and do the following:
Control Access to the Internet
55
Nighthawk X4S AC2600 Smart WiFi Router 
						

							a.In the User Name field, type the user name for the outgoing email server.
b.In the Password field, type the password for the outgoing email server.
9.To send alerts when someone attempts to visit a blocked site, select the Send Alerts Immediately check box.
Email alerts are sent immediately when someone attempts to visit a blocked site.
10.To send logs based on a schedule, specify these settings:
a.From Send logs according to this schedule menu, select the schedule type.
b.From the Day menu, select the day.
c.From the Time menu, select the time, and select the am or pm radio button.
11.Click the Apply button.
Your settings are saved.
Logs are sent automatically according to the schedule that you set. If the log fills before the specified time, it is
sent. After the log is sent, it is cleared from the router memory. If the router cannot email the log and the log
buffer fills, the router overwrites the log.
Set Up IP-MAC Binding
This features is available only in the China and Russa regions.
To set IP-MAC ginding:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Security > ARP Protection/IPMAC Binding.
The ARP Protection/IPMAC Binding page displays. By default, the IP-MAC binding feature is turned off.
5.To turn on this feature, select the Enable check box.
6.Click the Apply button.
The IP address reservation table becomes the IPMAC binding table.The router is set to use a static ARP table
for the LAN environment and no longer recieves ARP replies from LAN ports. Internet access is granted only
to LAN devices that are registered in the IP binding table.
Control Access to the Internet
56
Nighthawk X4S AC2600 Smart WiFi Router 
						

							5
Network Settings
The router comes ready for WiFi, Ethernet, and USB connections.You can customize the router’s network settings.We
recommend that you install the router and connect it to the Internet before you change its network settings.
This chapter includes the following sections:
•View or Change WAN Settings on page 58
•Set Up a Default DMZ Server on page 59
•Change the Router’s Device Name on page 60
•Change the LAN TCP/IP Settings on page 60
•Specify the IP Addresses That the Router Assigns on page 62
•Disable the DHCP Server Feature in the Router on page 64
•Manage Reserved LAN IP Addresses on page 64
•Use the WPS Wizard for WiFi Connections on page 66
•Specify Basic WiFi Settings on page 67
•Change the WiFi Password or Security Level on page 71
•Set Up a WiFi Schedule on page 77
•Enable or Disable WiFi 160 MHz on page 72
•Enable a WiFi Video Network on page 72
•Set Up a Guest WiFi Network on page 73
•Enable a WiFi Video Network on page 72
•Control the WiFi Radios on page 76
•Set Up a WiFi Schedule on page 77
•Specify WPS Settings on page 78
•Use the Router as a WiFi Access Point on page 79
•Use the Router in Bridge Mode on page 80
•Set Up a Bridge for a Port Group or VLAN Tag Group on page 82
57 
						

							View or Change WAN Settings
You can view or configure wide area network (WAN) settings for the Internet port.You can set up a DMZ (demilitarized
zone) server, change the maximum transmit unit (MTU) size, and enable the router to respond to a ping to its WAN
(Internet) port.
To view or change the WAN settings:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Setup > WAN Setup.
The following settings display:
•Disable Port Scan and DoS Protection. DoS protection protects your LAN against denial of service attacks
such as Syn flood, Smurf Attack, Ping of Death, and many others. Select this check box only in special
circumstances.
•Default DMZ Server.This feature is sometimes helpful when you are playing online games or
videoconferencing, but it makes the firewall security less effective. See Set Up a Default DMZ Server on
page 59.
•Respond to Ping on Internet Port.This feature allows your router to be discovered. Use this feature only
as a diagnostic tool or for a specific reason.
Network Settings
58
Nighthawk X4S AC2600 Smart WiFi Router 
						

							•Disable IGMP Proxying. IGMP proxying allows a computer on the local area network (LAN) to receive the
multicast traffic it is interested in from the Internet. If you do not need this feature, you can select this check
box to disable it.
•MTU Size (in bytes).The normal MTU (maximum transmit unit) value for most Ethernet networks is 1500
bytes, or 1492 bytes for PPPoE connections. Change the MTU only if you are sure that it is necessary for
your ISP connection. See Change the MTU Size on page 41.
•NAT Filtering. Network Address Translation (NAT) determines how the router processes inbound traffic.
Secured NAT protects computers on the LAN from attacks from the Internet but might prevent some Internet
games, point-to-point applications, or multimedia applications from working. Open NAT provides a much
less secured firewall but allows almost all Internet applications to work.
5.Click the Apply button.
Your changes are saved.
Set Up a Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and videoconferencing applications
that are incompatible with Network Address Translation (NAT).The router is programmed to recognize some of
these applications and to work correctly with them, but other applications might not function well. In some cases,
one local computer can run the application correctly if the IP address for that computer is entered as the default
DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the default DMZ server
loses much of the protection of the firewall and is exposed to exploits from the
Internet. If compromised, the DMZ server computer can be used to attack other
computers on your network.
The router usually detects and discards incoming traffic from the Internet that is not a response to one of your local
computers or a service that you configured on the Port Forwarding/Port Triggering page. Instead of discarding this
traffic, you can specify that the router forwards the traffic to one computer on your network.This computer is called
the default DMZ server.
To set up a default DMZ server:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
Network Settings
59
Nighthawk X4S AC2600 Smart WiFi Router 
						

							4.Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
5.Select the Default DMZ Server check box.
6.Type the IP address.
7.Click the Apply button.
Your change takes effect.
Change the Router’s Device Name
The router’s default device name is based on its model number, such as R7500 or R7800.This device name displays
in the file manager when you browse your network.
To change the router’s device name:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Type http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5.In the Device Name field, type a new name.
6.Click the Apply button.
Your change is saved.
Change the LAN TCP/IP Settings
The router is preconfigured to use private IP addresses on the LAN side and to act as a DHCP server.The router’s
default LAN IP configuration is as follows:
•LAN IP address. 192.168.1.1
•Subnet mask. 255.255.255.0
These addresses are part of the designated private address range for use in private networks and are suitable for
most applications. If your network requires a different IP addressing scheme, you can change these settings.
Network Settings
60
Nighthawk X4S AC2600 Smart WiFi Router