Netgear Rbk50 Orbi Ac3000 Tri Band Wifi System User Manual

							Customize Internet Traffic Rules for Ports 
101  Orbi High-Performance AC3000 Tri-band WiFi System
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at 
destination port 6667. The IRC server not only responds to your originating source port, but 
also sends an “identify” message to your computer on port 113. Using port triggering, you can 
tell the router, “When you initiate a session with destination port 6667, you must also allow 
incoming traffic on port 113 to reach the originating computer.” The following sequence 
shows the effects of the port triggering rule you define:
1. You open an IRC client program to start a chat session on your computer. 
2. Your IRC client composes a request message to an IRC server using a destination port 
number of 6667, the standard port number for an IRC server process. Your computer then 
sends this request message to your router.
3. Your router creates an entry in its internal session table describing this communication 
session between your computer and the IRC server. Your router stores the original 
information, performs Network Address Translation (NAT) on the source address and port, 
and sends this request message through the Internet to the IRC server. 
4. Noting your port triggering rule and observing the destination port number of 6667, your 
router creates another session entry to send any incoming port 113 traffic to your computer.
5. The IRC server sends a return message to your router using the NAT-assigned source port 
(for example, port 33333) as the destination port. The IRC server also sends an “identify” 
message to your router with destination port 113.
6. When your router receives the incoming message to destination port 33333, it checks its 
session table to see if a session is active for port number 33333. Finding an active session, 
the router restores the original address information replaced by NAT and sends this reply 
message to your computer.
7. When your router receives the incoming message to destination port 113, it checks its 
session table and finds an active session for port 113 associated with your computer. The 
router replaces the message’s destination IP address with your computer’s IP address and 
forwards the message to your computer.
8. When you finish your chat session, your router eventually senses a period of inactivity in the 
communications. The router then removes the session information from its session table, 
and incoming traffic is no longer accepted on port numbers 33333 or 113. 
						

							102
9
9.   Use VPN to Access Your Network
You can use OpenVPN software to remotely access your router using virtual private networking 
(VPN). This chapter explains how to set up and use VPN access.
This chapter includes the following sections:
•Set Up a VPN Connection
•Install OpenVPN Software
•Use a VPN Tunnel on Your Windows Computer
•Use VPN to Access Your Internet Service at Home 
						

							Use VPN to Access Your Network 103
 Orbi High-Performance
 AC3000 Tri-band WiFi System
Set Up a VPN Connection
A virtual private network (VPN) lets you use the Internet to securely \
access your network 
when you aren’t home.
Secure
remote access
InternetOpen VPN Client
Figure 7. VPN provides a secure tunnel between your home network and a r\
emote computer
This type of VPN access is called a client-to-gateway tunnel. The computer is the client, and 
the router is the gateway. To use the VPN feature, you must log in to the router and enable 
VPN, and you must install and run VPN client software on the computer.
VPN uses DDNS or a static IP address to connect with your router.
To use a DDNS service, register for an account with a host name (sometim\
es called a  domain name). 
 You use the host name to access your network. The router supports these 
accounts: NETGEAR, No-IP, and Dyn.
If your Internet service provider (ISP) assigned a static WAN IP address (such as 50.196.x.x 
or 10.x.x.x) that never changes to your Internet account, the VPN can u\
se that IP address to 
connect to your home network.
Specify VPN Service in the Router
You must specify the VPN service settings in the router before you can us\
e a VPN  connection.
To specify the VPN service:
1.  Launch a web browser from a WiFi-enabled computer or mobile device that \
is 
connected to the network.
2.  Enter  orbilogin.com.
A login window opens.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive. 
						

							Use VPN to Access Your Network 
104 Orbi High-Performance AC3000 Tri-band WiFi System 
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5. Select the Enable VPN Service check box.
By default, the VPN uses the UDP service type and uses port 12974. If you want to 
customize the service type and port, we recommend that you change these settings 
before you install the OpenVPN software.
6. To change the service type, scroll down and select the TCP radio button.
7. To change the port, scroll down to the Service Port field, and type the port number that you 
want to use.
8. Click the Apply button.
Your settings are saved. VPN is enabled in the router, but you must install and set up 
OpenVPN software on your computer before you can use a VPN connection.
Install OpenVPN Software
You must install this software on each Windows computer, Mac computer, iOS device, or 
Android device that you plan to use for VPN connections to your router.
Install OpenVPN Software on Your Windows Computer
You must install this software on each Windows computer that you plan to use for VPN 
connections to your router.
To install VPN client software on your Windows computer:
1. Launch a web browser from a WiFi-enabled computer or mobile device that is 
connected to the network.
2. Enter orbilogin.com.
A login window opens.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5. Make sure that the Enable VPN Service check box is selected.
6. Specify any VPN service settings on the page.
For more information, see Specify VPN Service in the Router on page 103. 
						

							Use VPN to Access Your Network 105
 Orbi High-Performance
 AC3000 Tri-band WiFi System
7. Click the  For Windows button to download the OpenVPN configuration files.
8.  V
isit openvpn.net/index.php/download/community-downloads.html  to download the 
OpenVPN client utility.
9.  In the Windows Installer section of the page, double-click the  openVPN-install-xxx.exe link.
10.  Download and install the Open VPN software on your computer
 , click the 
openVPN-install-xxx.exe  file.
11. Click the  Next button.
12.  When prompted, read the License 
 Agreement and click the I Agree button.
13. Leave the check boxes selected, and click the  Next button. 
						

							Use VPN to Access Your Network 106
Orbi High-Performance
 AC3000 Tri-band WiFi System 
14. To specify the destination folder, click the  Browse button and select a destination folder.
A Windows Security window opens.
15.  Click the  Install button.
The window displays the progress of the installation and then displays t\
he final installation  page.
16.  Click the  Finish button.
17.  Unzip the configuration files that you downloaded and copy them to the f\
older where the 
VPN client is installed on your device.
For a client device with Windows 64-bit system, the VPN client is instal\
led at 
C:\Programfiles\OpenVPN\config\ by default.
18.  For a client device with Windows, modify the VPN interface name to  NETGEAR-VPN:
a. On your computer
 , go to the Networks page. If you are using Windows 10, select 
Control Panel > Network and Sharing Center > Change adapter settings.
b.  In the local area connection list, find the local area connection with t\
he device name 
T

AP-Windows Adapter .
c.  Select the local area connection and change its name (not its device na\
me) to 
NETGEAR-VPN.
If you do not change the VPN interface name, the VPN tunnel connection w\
ill fail.
For more information about using OpenVPN on your Windows computer, visit 
https://openvpn.net/index.php/open-source/documentation/howto.html#quick\
. 
						

							Use VPN to Access Your Network 
107  Orbi High-Performance AC3000 Tri-band WiFi System
Install OpenVPN Software on Your Mac Computer
You must install this software on each Mac computer that you plan to use for VPN 
connections to your router.
To install VPN client software on your Mac computer:
1. Launch a web browser from a WiFi-enabled computer or mobile device that is 
connected to the network.
2. Enter orbilogin.com.
A login window opens.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5. Make sure that the Enable VPN Service check box is selected.
6. Specify any VPN service settings on the page.
For more information, see Specify VPN Service in the Router on page 103.
7. Click the FOR MAC OS button to download the OpenVPN configuration files.
8. Visit https://tunnelblick.net/index.html to download the OpenVPN client utility for Mac OS X.
9. Download and install the file.
10. Unzip the configuration files that you downloaded and copy them to the folder where the 
VPN client is installed on your device.
The client utility must be installed by a user with administrative priviledges.
For more information about using OpenVPN on your Mac computer, visit 
https://openvpn.net/index.php/access-server/docs/admin-guides/183-how-to-connect-to-
access-server-from-a-mac.html.
Install OpenVPN Software on an iOS Device
You must install this software on each iOS device that you plan to use for VPN connections to 
your router.
To install VPN client software on an iOS device:
1. Launch a web browser from a WiFi-enabled computer or mobile device that is 
connected to the network.
2. Enter orbilogin.com.
A login window opens. 
						

							Use VPN to Access Your Network 
108 Orbi High-Performance AC3000 Tri-band WiFi System 
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5. Make sure that the Enable VPN Service check box is selected.
6. Specify any VPN service settings on the page.
For more information, see Specify VPN Service in the Router on page 103.
7. Click the FOR SMART PHONE button to download the OpenVPN configuration files.
8. On your iOS device, download and install the OpenVPN Connect app from the Apple app 
store.
9. On your computer, unzip the configuration files that you downloaded and send the files to 
your iOS device.
Note that when you open the .ovpn file, a list of apps displays. Select the OpenVPN 
Connect app to open the .ovpn file.
For more information about using OpenVPN on your iOS device, visit 
http://www.vpngate.net/en/howto_openvpn.aspx#ios.
Install OpenVPN Software on an Android Device
You must install this software on each Android device that you plan to use for VPN 
connections to your router.
To install VPN client software on an Android device:
1. Launch a web browser from a WiFi-enabled computer or mobile device that is 
connected to the network.
2. Enter orbilogin.com.
A login window opens.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service page displays.
5. Make sure that the Enable VPN Service check box is selected.
6. Specify any VPN service settings on the page. 
						

							Use VPN to Access Your Network 109
 Orbi High-Performance
 AC3000 Tri-band WiFi System
For more information, see Specify VPN Service in the Router on page  103.
7.  Click the  FOR SMART PHONE button to download the OpenVPN configuration files.
8.  On your 
 Android device, download and install the OpenVPN Connect app from the Go\
ogle 
Play Store.
9.  On your computer
 , unzip the configuration files that you downloaded and send the files t\
o 
your Android  device.
10.  Open the files on your 
 Android device.
11.  Open the .ovpn file using the OpenVPN Connect app.
For more information about using OpenVPN on your Android device, visit 
http://www.vpngate.net/en/howto_openvpn.aspx#android.
Use a VPN Tunnel on Your Windows Computer
After you set up the router to use VPN and install the OpenVPN applicati\
on on your  computer, you can open a VPN tunnel from your computer to your router over the I\
nternet.
For the VPN tunnel to work, the local LAN IP address of the remote route\
r must use a 
dif
 ferent LAN IP scheme from that of the local LAN where your VPN client co\
mputer is 
connected. If both networks use the same LAN IP scheme, when the VPN tun\
nel is 
established, you cannot access your home router or your home network wit\
h the OpenVPN 
software.
The default LAN IP address scheme for the router is 192.x.x.x.The most c\
ommon IP  schemes are 192.x.x.x, 172.x.x.x, and 10.x.x.x. If you experience a conf\
lict, change the IP 
scheme either for your home network or for the network with the client V\
PN computer

. For 
information about changing these settings, see Change the  Change the LAN TCP/IP Settings 
on page   62.
To open a VPN tunnel:
1. Launch the OpenVPN application with administrator privileges.
The OpenVPN icon displays in the Windows taskbar. 
						

							Use VPN to Access Your Network 110
Orbi High-Performance
 AC3000 Tri-band WiFi System 
Tip:You can create a shortcut to the VPN program, then use the shortcut 
to access the settings and select the run as administrator check 
box.Then every time you use this shortcut, OpenVPN automatically 
runs with administrator privileges.
2.  Right-click the  OpenVPN icon.
3. Select  Connect.
The VPN connection is established.You can do the following:
• Launch a web browser and log in to your router
 .
• Use Windows file manager to access the router
 ’s USB device and download files.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually u\
se a local Internet 
service provider. For example, at a coffee shop you might be given a code that lets you use 
the coffee shop’s Internet service account to surf the web.
Nighthawk lets you use a VPN connection to access your own Internet serv\
ice when you’re 
away from home. 

You might want to do this if you travel to a geographic location that doe\
sn’t 
support all the Internet services that you use at home. For example, you\
r Netflix account 
might work at home but not in a different country.
Set Up VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your h\
ome network, but you 
can change the settings to allow Internet access. Accessing the Internet remotely through a 
VPN might be slower than accessing the Internet directly.
To allow VPN clients to use your home Internet service:
1.  Launch a web browser from a WiFi-enabled computer or mobile device that \
is 
connected to the network.
2.  Enter  orbilogin.com.
A login window opens.