Netgear R8300 Nighthawk X8 Ac5000 Smart Wifi Router User Manual

							8.To specify the destination folder, click the Browse button and select a destination folder.
9.Click the Install button.
The window displays the progress of the installation and then displays the final installation page.
10.Click the Finish button.
11.Unzip the configuration files that you downloaded and copy them to the folder where the VPN client is installed
on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Programfiles\OpenVPN\config\
by default.
12.For a client device with Windows, modify the VPN interface name to NETGEAR-VPN:
a.In Windows, select Control Panel > Network and Internet > Network Connections.
b.In the local area connection list, find the local area connection with the device name TAP-Windows Adapter.
c.Select the local area connection and change its name (not its device name) to NETGEAR-VPN.
If you do not change the VPN interface name, the VPN tunnel connection will fail.
Use VPN to Access Your Network
161
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							Use a VPN Tunnel
After you set up the router to use VPN and install the OpenVPN application on your computer, you can open a VPN
tunnel from your computer to your router over the Internet.
For the VPN tunnel to work, the local LAN IP address of the remote router must use a different LAN IP scheme from
that of the local LAN where your VPN client computer is connected. If both networks use the same LAN IP scheme,
when the VPN tunnel is established, you cannot access your home router or your home network with the OpenVPN
software.
The default LAN IP address scheme for the router is 192.x.x.x.The most common IP schemes are 192.x.x.x, 172.x.x.x,
and 10.x.x.x. If you experience a conflict, change the IP scheme either for your home network or for the network
with the client VPN computer. For information about changing these settings, see Change the LAN TCP/IP Settings
on page 71.
To open a VPN tunnel:
1.Launch the OpenVPN application with administrator privileges.
The OpenVPN icon displays in the Windows taskbar.
You can create a shortcut to the VPN program, then use the shortcut to access the settings and
select the run as administrator check box.Then every time you use this shortcut, OpenVPN
automatically runs with administrator privileges.
Tip
2.Right-click the OpenVPN icon.
3.Select Connect.
The VPN connection is established.You can do the following:
Use VPN to Access Your Network
162
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							•Launch a web browser and log in to your router.
•Use Windows file manager to access the router’s USB device and download files.
Use VPN to Access the Router’s USB Device and Media
To access a USB device and download files:
1.In Windows file manager, select the Network folder.
The network resources display.The ReadySHARE icon is in the Computer section and the remote R8300 icon
is in the Media Devices section (if DLNA is enabled in the router).
2.If the icons do not display, click the Refresh button to update the screen.
If the local LAN and the remote LAN are using the same IP scheme, the remote router icon does not display in
the Media Devices and Network Infrastructure sections.
3.To access the USB device, click the ReadySHARE icon.
4.To access media on the router’s network, click the remote router icon.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually use a local Internet service provider. For
example, at a coffee shop you might be given a code that lets you use the coffee shop’s Internet service account to
surf the web.
Nighthawk lets you use a VPN connection to access your own Internet service when you’re away from home.You
might want to do this if you travel to a geographic location that doesn’t support all the Internet services that you use
at home. For example, your Netflix account might work at home but not in a different country.
Set Up VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network but you can change the settings
to allow Internet access. Accessing the Internet remotely through a VPN might be slower than accessing the Internet
directly.
Use VPN to Access Your Network
163
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							To allow VPN clients to use your home Internet service:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VPN page displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the All sites on the Internet
& Home Network radio button.
When you access the Internet with the VPN connection, instead of using a local Internet service, you use the
Internet service from your home network.
7.Click the Apply button.
Your settings are saved.
8.Click the For Windows or For Non Windows button and download the configuration files for your VPN clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Programfiles\OpenVPN\config\
by default.
Block VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, not to the Internet service for
your home network. If you changed this setting to allow Internet access, you can change it back.
To allow VPN clients to access only your home network:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
Use VPN to Access Your Network
164
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VNP page displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the Home Network only
radio button.
This is the default setting.The VPN connection is only to your home network, not to the Internet service for your
home network.
7.Click the Apply button.
Your settings are saved.
8.Click For Windows or For Non Windows button and download the configuration files for your VPN clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Programfiles\OpenVPN\config\
by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1.Set up the router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the Router on page 163.
2.On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3.Right-click the icon and select Connect.
4.When the VPN connection is established, launch your Internet browser.
Use VPN to Access Your Network
165
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							14
Customize Internet Traffic Rules for Ports
You can use port forwarding and port triggering to set up rules for Internet traffic.You need networking knowledge to
set up these features.
This chapter includes the following sections:
•Set Up Port Forwarding to a Local Server on page 167
•Port Triggering on page 171
166 
						

							Set Up Port Forwarding to a Local Server
To forward specific incoming protocols:
1.Decide which type of service, application, or game you want to provide.
2.Find the local IP address of the computer on your network that will provide the service.
You can usually find this information by contacting the publisher of the application or user groups or news groups.
The server computer must always use the same IP address.
3.Assign the server computer a reserved IP address.
See Manage Reserved LAN IP Addresses on page 75.
4.Launch a web browser from a computer or WiFi device that is connected to the network.
5.Enter http://www.routerlogin.net.
A login window opens.
6.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
7.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
8.Leave the Port Forwarding radio button selected as the service type.
9.From the Service Name menu, select the service name.
If the service that you want to add is not in the menu, create a custom service. See Add a Custom Port Forwarding
Service on page 168.
10.In the Server IP Address field, enter the IP address of the computer that will provide the service.
11.Click the Add button.
The service displays in the menu.
Customize Internet Traffic Rules for Ports
167
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							Add a Custom Port Forwarding Service
To add a custom service:
1.Find out which port number or range of numbers the application uses.
You can usually find this information by contacting the publisher of the application or user groups or news groups.
2.Launch a web browser from a computer or wireless device that is connected to the network.
3.Enter http://www.routerlogin.net .
A login window opens.
4.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
5.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
6.Leave the Port Forwarding radio button selected as the service type.
7.Click the Add Custom Service button.
8.In the Service Name field, enter a descriptive name.
9.From the Protocol menu, select the protocol.
If you are unsure, select TCP/UDP.
10.In the External port range field, enter the port numbers.
11.Specify the internal ports by one of these methods:
•Leave the Use the same port range for Internal port check box selected.
Customize Internet Traffic Rules for Ports
168
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							•Type the port numbers in the Internal Port Range field.
12.In the Internal IP address field, type the IP addressor select the radio button for an attached device listed in
the table.
13.Click the Apply button.
The service is now in the list on the Port Forwarding/Port Triggering page.
Edit a Port Forwarding Service
To edit a port forwarding entry:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
5.Leave the Port Forwarding radio button selected as the service type.
6.In the table, select the radio button next to the service name.
7.Click the Edit Service button.
The Ports - Custom Services page displays.
8.Change the settings as needed.
9.Click the Apply button.
Your settings are saved.
Delete a Port Forwarding Entry
To delete a port forwarding entry:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
Customize Internet Traffic Rules for Ports
169
Nighthawk X8 AC5000 Tri-Band WiFi Router 
						

							3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
5.Leave the Port Forwarding radio button selected.
6.In the table, select the radio button next to the service name.
7.Click the Delete Service button.
The service is deleted.
Application Example: Make a Local Web Server Public
If you host a web server on your local network, you can use port forwarding to allow web requests from anyone on
the Internet to reach your web server.
To make a local web server public:
1.Assign your web server either a fixed IP address or a dynamic IP address using DHCP address reservation.
In this example, your router always gives your web server an IP address of 192.168.1.33.
2.On the Port Forwarding/Port Triggering page, configure the router to forward the HTTP service to the local
address of your web server at 192.168.1.33.
HTTP (port 80) is the standard protocol for web servers.
3.(Optional) Register a host name with a Dynamic DNS service and specify that name in the Dynamic DNS page
of the router.
Dynamic DNS makes it much easier to access a server from the Internet because you can type the name in the
Internet browser. Otherwise, you must know the IP address that the ISP assigned, which typically changes.
How the Router Implements the Port Forwarding Rule
The following sequence shows the effects of a port forwarding rule:
1.When you type the URL www.example.com in your browser, the browser sends a web page request message
with the following destination information:
•Destination address.The IP address of www.example.com, which is the address of your router.
•Destination port number. 80, which is the standard port number for a web server process.
2.Your router receives the message and finds your port forwarding rule for incoming port 80 traffic.
Customize Internet Traffic Rules for Ports
170
Nighthawk X8 AC5000 Tri-Band WiFi Router