Netgear R7900 Nighthawk X6 Ac3000 Tri Band Wifi Gigabit Router User Manual

							Use VPN to Access Your Network 
161  Nighthawk X6 AC3000 Tri-Band WiFi Router
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VNP screen displays.
5. Select the Enable VPN Service radio button.
6. Scroll down to the Clients will use this VPN connection to access section, and select the 
Home Network only radio button.
This is the default setting. The VPN connection is only to your home network, not to the 
Internet service for your home network.
7. Click the Apply button.
Your settings are saved.
8. Click For Windows or For Non Windows button and download the configuration files for 
your VPN clients.
9. Unzip the configuration files and copy them to the folder where the VPN client is installed on 
your device. 
For a client device with Windows 64-bit system, the VPN client is installed at 
C:\Program files\OpenVPN\config\ by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1. Set up the router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the Router on page 159
2. On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3. Right-click the icon, and select Connect.
4. When the VPN connection is established, launch your Internet browser. 
						

							162
14
14.   Specify Internet Port Settings
You can use port forwarding and port triggering to set up rules for Internet traffic. You need 
networking knowledge to set up these features.
This chapter includes the following sections:
•Set Up Port Forwarding to a Local Server 
•Set Up Port Triggering  
						

							Specify Internet Port Settings 163
 Nighthawk
 X6 AC3000  Tri-Band WiFi  Router
Set Up Port Forwarding to a Local Server
If your home network includes a server, you can allow certain types of incoming traffic to 
reach the server. For example, you might want to make a local web server, FTP server, or 
game server visible and available to the Internet.
The router can forward incoming traffic with specific protocols to computers on your local  network. 
 You can specify the servers for applications and you can also specify a d\
efault DMZ 
server to which the router forwards all other incoming protocols.
To forward specific incoming protocols:
1.  Decide which type of service, application, or game you want to provide.
2.  Find the local IP address of the computer on your network that will prov\
ide the service.
You can usually find this information by contacting the publisher of the \
application or user  groups or news groups.
The server computer must always use the same IP address. Assign the server computer  a reserved IP address. See Reserve LAN IP Addresses on page  11 9.
3.  Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
4.  Enter  http://www
 .routerlogin.net or http://www.routerlogin.com  in the address field of the 
web browser.
A login screen displays.
5.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
6.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
7. Leave the  Port Forwarding  radio button selected as the service type.
8.  In the Service Name menu, select the service name.
If the service that you want to add is not in the list, create a custom \
service. See  Add a 
Custom Port Forwarding Service on page  164. 
						

							Specify Internet Port Settings 164
Nighthawk
 X6 AC3000
 Tri-Band WiFi  Router 
9. In the Server IP Address field, enter the IP address of the computer that will provide the 
service. 
10.  Click the  Add button.
The service displays in the list.
Add a Custom Port Forwarding Service
To add a custom service:
1.  Find out which port number or range of numbers the application uses.
You can usually find this information by contacting the publisher of the \
application or user  groups or news groups.
2.  Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
3.  Enter  http://www
 .routerlogin.net or http://www.routerlogin.com  in the address field of the 
web browser.
A login screen displays.
4.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home screen displays.
5.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering screen displays.
6.  Leave the  Port Forwarding radio button selected as the service type.
7.  Click the  Add Custom Service  button.
8. In the Service Name field, enter a descriptive name. 
9.  From the Protocol  menu, select the protocol. 
If you are unsure, select TCP/UDP .
10.  In the  External Port Range field, enter the external port range.  
						

							Specify Internet Port Settings 
165  Nighthawk X6 AC3000 Tri-Band WiFi Router
In the field, you can enter the port, port range, or both. If you enter more than one value in 
the field, separate each value with a comma. For example, 30, 50–60.
11. Specify the internal ports by one of these methods:
•Leave the Use the same port range for Internal port check box selected.
•Clear the Use the same port range for Internal port check box and type the internal 
port range in the Internal Port Range field.
In the field, you can enter the port, port range, or both. If you enter more than one 
value in the field, separate each value with a comma. For example, 30, 50–60.
12. In the Internal IP address field, type the IP address, or select the radio button for an 
attached device listed in the table.
13. Click the Apply button. 
The service is now in the list on the Port Forwarding/Port Triggering screen.
Edit a Port Forwarding Service
To edit a port forwarding entry:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Enter http://www.routerlogin.net or http://www.routerlogin.com in the address field of the 
web browser.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering screen displays.
5. Leave the Port Forwarding radio button selected as the service type.
6. In the table, select the radio button next to the service name.
7. Click the Edit Service button.
The Ports - Custom Services screen displays.
8. Change the settings as needed.
9. Click the Apply button.
Your changes are saved. 
						

							Specify Internet Port Settings 
166 Nighthawk  X6 AC3000 Tri-Band WiFi Router 
Delete a Port Forwarding Entry
To delete a port forwarding entry:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Enter http://www.routerlogin.net or http://www.routerlogin.com in the address field of the 
web browser.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering screen displays.
5. Leave the Port Forwarding radio button selected as the service type.
6. In the table, select the radio button next to the service name.
7. Click the Delete Service button.
The service is deleted.
Application Example: Make a Local Web Server Public
If you host a web server on your local network, you can use port forwarding to allow web 
requests from anyone on the Internet to reach your web server. 
To make a local web server public:
1. Assign your web server either a fixed IP address or a dynamic IP address using DHCP 
address reservation. 
In this example, your router always gives your web server an IP address of 192.168.1.33. 
2. In the Port Forwarding/Port Triggering screen, configure the router to forward the HTTP 
service to the local address of your web server at 192.168.1.33. 
HTTP (port 80) is the standard protocol for web servers.
3. (Optional) Register a host name with a Dynamic DNS service and specify that name in the 
Dynamic DNS screen of the router. 
Dynamic DNS makes it much easier to access a server from the Internet because you 
can type the name in the Internet browser. Otherwise, you must know the IP address that 
the ISP assigned, which typically changes. 
						

							Specify Internet Port Settings 
167  Nighthawk X6 AC3000 Tri-Band WiFi Router
How the Router Implements the Port Forwarding Rule
The following sequence shows the effects of a port forwarding rule:
1. When you type the URL www.example.com in your browser, the browser sends a web 
page request message with the following destination information: 
•Destination address. The IP address of www.example.com, which is the address of 
your router.
•Destination port number. 80, which is the standard port number for a web server 
process.
2. Your router receives the message and finds your port forwarding rule for incoming port 80 
traffic. 
3. The router changes the destination in the message to IP address 192.168.1.123 and sends 
the message to that computer.
4. Your web server at IP address 192.168.1.123 receives the request and sends a reply 
message to your router.
5. Your router performs Network Address Translation (NAT) on the source IP address, and 
sends the reply through the Internet to the computer or wireless device that sent the web 
page request. 
Set Up Port Triggering
Port triggering is a dynamic extension of port forwarding that is useful in these cases:
•An application must use port forwarding to more than one local computer (but not 
simultaneously).
•An application must open incoming ports that are different from the outgoing port.
With port triggering, the router monitors traffic to the Internet from an outbound “trigger” port 
that you specify. For outbound traffic from that port, the router saves the IP address of the 
computer that sent the traffic. The router temporarily opens the incoming port or ports that 
you specify in your rule, and forwards that incoming traffic to that destination.
Port forwarding creates a static mapping of a port number or range of ports to a single local 
computer. Port triggering can dynamically open ports to any computer when needed and 
close the ports when they are no longer needed.
Note:If you use applications such as multiplayer gaming, peer-to-peer 
connections, real-time communications such as instant messaging, or 
remote assistance (a feature in Windows XP), enable Universal Plug 
and Play (UPnP). See 
Improve Network Connections with Universal 
Plug and Play on page 50. 
						

							Specify Internet Port Settings 168
Nighthawk
 X6 AC3000
 Tri-Band WiFi  Router 
Add a Port Triggering Service
To add a port triggering service:
1. Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
2.  Enter  http://www
 .routerlogin.net or http://www.routerlogin.com  in the address field of the 
web browser.
A login screen displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.  
The Port Forwarding/Port Triggering screen displays.
5.  Select the  Port T
 riggering radio button.
6.  Click the  Add Service button.
7. In the Service Name field, type a descriptive service name. 
8.  From the Service User list, select a user option:
• Any (the default) allows any computer on the Internet to use this service\
. 
• Single address restricts the service to a particular computer
 . 
9.  From the Service T
 ype list, select TCP or UDP or TCP/UDP (both). 
If you are not sure, select TCP/UDP . 
						

							Specify Internet Port Settings 169
 Nighthawk
 X6 AC3000  Tri-Band WiFi  Router
10. In the Triggering Port  field, enter the number of the outbound traffic port that will open the 
inbound ports. 
11.  In the Connection T
 ype, Starting Port , and Ending Port  fields, enter the inbound 
connection information.
12.  Click the  Apply button.
The service is now in the Portmap table. You must enable port triggering before the  router uses port triggering. See  Enable Port Triggering on page 169.
Enable Port Triggering
To enable port triggering: 
1. Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
2.  Enter  http://www
 .routerlogin.net or http://www.routerlogin.com  in the address field of the 
web browser.
A login screen displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering screen displays.
5.  Select the Port T
 riggering radio button.
6. Clear the Disable Port Triggering check box.
If this check box is selected, the router does not use port triggering e\
ven if you have 
specified port triggering settings.
7.  In the Port T
 riggering Timeout  field, enter a value up to 9999 minutes.  
						

							Specify Internet Port Settings 
170 Nighthawk  X6 AC3000 Tri-Band WiFi Router 
This value controls how long the inbound ports stay open when the router detects no 
activity. This value is required because the router cannot detect when the application 
terminates.
Application Example: Port Triggering for Internet Relay Chat 
Some application servers, such as FTP and IRC servers, send replies to multiple port 
numbers. Using port triggering, you can tell the router to open more incoming ports when a 
particular outgoing port starts a session.
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at 
destination port 6667. The IRC server not only responds to your originating source port but 
also sends an “identify” message to your computer on port 113. Using port triggering, you can 
tell the router, “When you initiate a session with destination port 6667, you must also allow 
incoming traffic on port 113 to reach the originating computer.” The following sequence shows 
the effects of this port triggering rule:
1. You open an IRC client program to start a chat session on your computer. 
2. Your IRC client composes a request message to an IRC server using a destination port 
number of 6667, the standard port number for an IRC server process. Your computer then 
sends this request message to your router.
3. Your router creates an entry in its internal session table describing this communication 
session between your computer and the IRC server. Your router stores the original 
information, performs Network Address Translation (NAT) on the source address and port, 
and sends this request message through the Internet to the IRC server. 
4. Noting your port triggering rule and observing the destination port number of 6667, your 
router creates another session entry to send any incoming port 113 traffic to your computer.
5. The IRC server sends a return message to your router using the NAT-assigned source port 
(for example, port 33333) as the destination port and sends an “identify” message to your 
router with destination port 113.
6. When your router receives the incoming message to destination port 33333, it checks its 
session table to see if a session is active for port number 33333. Finding an active session, 
the router restores the original address information replaced by NAT and sends this reply 
message to your computer.
7. When your router receives the incoming message to destination port 113, it checks its 
session table and finds an active session for port 113 associated with your computer. The 
router replaces the message’s destination IP address with your computer’s IP address and 
forwards the message to your computer.
8. When you finish your chat session, your router eventually senses a period of inactivity in the 
communications. The router then removes the session information from its session table and 
incoming traffic is no longer accepted on port numbers 33333 or 113.