Netgear R9000 Nighthawk X10 Smart Wifi Router User Manual

							The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5.Make sure that the Enable VPN Service check box is selected.
6.Specify any VPN service settings on the page.
For more information, see Specify VPN Service in the Router on page 126.
7.Click the For Smart Phone button to download the OpenVPN configuration files.
8.On your iOS device, download and install the OpenVPN Connect app from the Apple app store.
9.On your computer, unzip the configuration files that you downloaded and send the files to your iOS
device.
Note that when you open the .ovpn file, a list of apps displays. Select the OpenVPN Connect app to
open the .ovpn file.
For more information about using OpenVPN on your iOS device, visit
http://www.vpngate.net/en/howto_openvpn.aspx#ios.
Install OpenVPN Software on an Android Device
You must install this software on each Android device that you plan to use for VPN connections to your
router.
To install VPN client software on an Android device:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5.Make sure that the Enable VPN Service check box is selected.
6.Specify any VPN service settings on the page.
For more information, see Specify VPN Service in the Router on page 126.
7.Click the For Smart Phone button to download the OpenVPN configuration files.
8.On your Android device, download and install the OpenVPN Connect app from the Google Play Store.
Use VPN to Access Your Network
131
Nighthawk X10 AD7200 Smart WiFi Router 
						

							9.On your computer, unzip the configuration files that you downloaded and send the files to your Android
device.
10.Open the files on your Android device.
11.Open the .ovpn file using the OpenVPN Connect app.
For more information about using OpenVPN on your Android device, visit
http://www.vpngate.net/en/howto_openvpn.aspx#android.
Use a VPN Tunnel on Your Windows Computer
After you set up the router to use VPN and install the OpenVPN application on your computer, you can open
a VPN tunnel from your computer to your router over the Internet.
For the VPN tunnel to work, the local LAN IP address of the remote router must use a different LAN IP
scheme from that of the local LAN where your VPN client computer is connected. If both networks use the
same LAN IP scheme, when the VPN tunnel is established, you cannot access your home router or your
home network with the OpenVPN software.
The default LAN IP address scheme for the router is 192.x.x.x.The most common IP schemes are 192.x.x.x,
172.x.x.x, and 10.x.x.x. If you experience a conflict, change the IP scheme either for your home network or
for the network with the client VPN computer. For information about changing these settings, see Change
the LAN TCP/IP Settings on page 50.
Use VPN to Access Your Network
132
Nighthawk X10 AD7200 Smart WiFi Router 
						

							To open a VPN tunnel:
1.Launch the OpenVPN application with administrator privileges.
The OpenVPN icon displays in the Windows taskbar.
You can create a shortcut to the VPN program, then use the shortcut to access the settings
and select the run as administrator check box.Then every time you use this shortcut,
OpenVPN automatically runs with administrator privileges.
Tip
2.Right-click the OpenVPN icon.
3.Select Connect.
The VPN connection is established.You can do the following:
•Launch a web browser and log in to your router.
•Use Windows file manager to access the router’s USB device and download files.
Use VPN to Access Your Network
133
Nighthawk X10 AD7200 Smart WiFi Router 
						

							Use VPN to Access the Router’s USB Device and Media
To access a USB device and download files:
1.In the Windows file manager, select Network.
The network resources display.The ReadySHARE icon is in the Computer section and the remote
router icon is in the Media Devices section (if DLNA is enabled in the router).
See your computer's documentation for information about how to display the Network.Note
2.If the icons do not display, click the Refresh button to update the screen.
If the local LAN and the remote LAN are using the same IP scheme, the remote router icon does not
display in the Media Devices and Network Infrastructure sections.
3.To access the USB device, click the ReadySHARE icon.
4.To access media on the router’s network, click the remote router icon.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually use a local Internet service provider.
For example, at a coffee shop you might be given a code that lets you use the coffee shop’s Internet service
account to surf the web.
Nighthawk lets you use a VPN connection to access your own Internet service when you’re away from home.
You might want to do this if you travel to a geographic location that doesn’t support all the Internet services
that you use at home. For example, your Netflix account might work at home but not in a different country.
Use VPN to Access Your Network
134
Nighthawk X10 AD7200 Smart WiFi Router 
						

							Set Up VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, but you can change
the settings to allow Internet access. Accessing the Internet remotely through a VPN might be slower than
accessing the Internet directly.
To allow VPN clients to use your home Internet service:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VPN page displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the All sites on
the Internet & Home Network radio button.
When you access the Internet with the VPN connection, instead of using a local Internet service, you
use the Internet service from your home network.
7.Click the Apply button.
Your settings are saved.
8.Click the For Windows or For Non Windows button and download the configuration files for your VPN
clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Program
files\OpenVPN\config\ by default.
Block VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, not to the Internet
service for your home network. If you changed this setting to allow Internet access, you can change it back.
To allow VPN clients to access only your home network:
1.Launch a web browser from a computer or mobile device that is connected to the network.
2.Enter http://www.routerlogin.net.
A login window opens.
3.Enter the router user name and password.
Use VPN to Access Your Network
135
Nighthawk X10 AD7200 Smart WiFi Router 
						

							The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Advanced Setup > VPN Service.
The VNP page displays.
5.Select the Enable VPN Service radio button.
6.Scroll down to the Clients will use this VPN connection to access section, and select the Home Network
only radio button.
This is the default setting.The VPN connection is only to your home network, not to the Internet service
for your home network.
7.Click the Apply button.
Your settings are saved.
8.Click For Windows or For Non Windows button and download the configuration files for your VPN
clients.
9.Unzip the configuration files and copy them to the folder where the VPN client is installed on your device.
For a client device with Windows 64-bit system, the VPN client is installed at C:\Program
files\OpenVPN\config\ by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1.Set up the router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the Router on page 135.
2.On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3.Right-click the icon and select Connect.
4.When the VPN connection is established, launch your Internet browser.
Change VPN Pass-Through Settings
This feature is available only in Brazil, Russia, India, and China (the BRIC region).
When Network Address Translation (NAT) is enabled in the router, the router filters encrypted tunnel packets
through NAT, causing these packets to become invalid.VPN pass-through allows encrypted tunnel packets
to go through without being filtered and is enabled by default for IPSec, PPTP, and L2TP packets. Do not
disable VPN pass-through for IPSec, PPTP, or L2TP unless a specific reason exists.
To change the VPN pass-through settings:
1.Launch a web browser from a computer or WiFi device that is connected to the network.
2.Enter http://www.routerlogin.net.
Use VPN to Access Your Network
136
Nighthawk X10 AD7200 Smart WiFi Router 
						

							A login window opens.
3.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
4.Select ADVANCED > Setup > WAN Setup.
5.To disable VPN pass-through for one or more protocols, select the corresponding Disable radio buttons
in the VPN Pass-Through section.
By default, VPN pass-through is enabled for all protocols for which the router supports pass-through
(IPSec, PPTP, and L2TP).
6.Click the Apply button.
Your settings are saved.
Use VPN to Access Your Network
137
Nighthawk X10 AD7200 Smart WiFi Router 
						

							13
Customize Internet Traffic Rules for Ports
You can use port forwarding and port triggering to set up rules for Internet traffic.You need networking knowledge
to set up these features.
This chapter includes the following sections:
•Port Forwarding to a Local Server on page 139
•Port Triggering on page 142
138 
						

							Port Forwarding to a Local Server
If your home network includes a server, you can allow certain types of incoming traffic to reach the server.
For example, you might want to make a local web server, FTP server, or game server visible and available
to the Internet.
The router can forward incoming traffic with specific protocols to computers on your local network.You can
specify the servers for applications and you can also specify a default DMZ server to which the router
forwards all other incoming protocols.
Set Up Port Forwarding to a Local Server
To forward specific incoming protocols:
1.Decide which type of service, application, or game you want to provide.
2.Find the local IP address of the computer on your network that will provide the service.
You can usually find this information by contacting the publisher of the application or user groups or
news groups.
The server computer must always use the same IP address.
3.Assign the server computer a reserved IP address.
See Manage Reserved LAN IP Addresses on page 53.
4.Launch a web browser from a computer or mobile device that is connected to the network.
5.Enter http://www.routerlogin.net.
A login window opens.
6.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
7.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
8.Leave the Port Forwarding radio button selected as the service type.
9.From the Service Name menu, select the service name.
If the service that you want to add is not in the menu, create a custom service. See Add a Custom Port
Forwarding Service on page 140.
Customize Internet Traffic Rules for Ports
139
Nighthawk X10 AD7200 Smart WiFi Router 
						

							10.In the Server IP Address field, enter the IP address of the computer that will provide the service.
11.Click the Add button.
The service displays in the menu.
Add a Custom Port Forwarding Service
To add a custom service:
1.Find out which port number or range of numbers the application uses.
You can usually find this information by contacting the publisher of the application or user groups or
news groups.
2.Launch a web browser from a computer or WiFi device that is connected to the network.
3.Enter http://www.routerlogin.net.
A login window opens.
4.Enter the router user name and password.
The user name is admin.The default password is password.The user name and password are
case-sensitive.
The BASIC Home page displays.
5.Select ADVANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering page displays.
6.Leave the Port Forwarding radio button selected as the service type.
7.Click the Add Custom Service button.
The Ports - Custom Service page displays.
8.In the Service Name field, enter a descriptive name.
9.From the Protocol menu, select the protocol.
If you are unsure, select TCP/UDP.
10.In the External port range field enter the port range.
11.Specify the internal ports by one of these methods:
•Leave the Use the same port range for Internal port check box selected.
•Type the port numbers in the Internal Starting Port field and the Internal Ending Port field.
You can enter a port range and fixed ports in one rule. For example, external (30-50, 78, 100-102),
internal (40-60, 99, 200-202).With this rule, external ports 30-50 are forwarded to internal ports 40-60.
12.In the Internal IP address field, type the IP address or select the radio button for an attached device
listed in the table.
13.Click the Apply button.
The service is now in the list on the Port Forwarding/Port Triggering page.
Customize Internet Traffic Rules for Ports
140
Nighthawk X10 AD7200 Smart WiFi Router