Netgear Wndr3400v3 N600 Wireless Dual Band Router User Manual

							genie Basic Settings 31
 N600 Wireless Dual Band Router WNDR3400v3
Enable SSID Broadcast. This feature allows the router to broadcast its SSID so wireless 
stations can see this wireless name (SSID) in their scanned network li\
sts. This check box is 
selected by default. To turn off the SSID broadcast, clear the check box, and click 
Apply.
Name (SSID). The  SSID is also known as the wireless network name. Enter a 32-character 
(maximum) name in this field. 
 This field is case-sensitive. The default SSID is randomly 
generated, and NETGEAR strongly recommends that you do not change this.
Channel. 
This setting is the wireless channel used by the gateway. Enter a value from 1 
through 13. (For products in the North America market, only Channels 1 through 11 can be 
operated.) Do not change the channel unless you experience interference\
 (shown by lost 
connections or slow data transfers). If this happens, experiment with d\
ifferent channels to 
see which is the best. 
Mode. Up to 130 Mbps is the default and allows 802.1
 1n and 802.11g wireless devices to join 
the network. g & b  supports up to 54 Mbps. The 300 Mbps setting allows 802.11n devices to 
connect at this speed.
Security Options Settings
Note: These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n 
bands.
The Security Options section of the Wireless Setup screen lets you chang\
e the security  option and password.  NETGEAR recommends that you not change the security option 
or password, but if you want to change these settings, this section explains how

. Do not 
disable security .
Change WPA Security Option and Password
Note:These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n 
bands.
1.  Under Security Options, select the WP
 A option you want.
2. In the password field that displays when you select a WPA security option, enter the network 
key (password) that you want to use. It is a text string from 8 to 63 \
characters. 
						

							genie Basic Settings 32
N600 Wireless Dual Band Router WNDR3400v3 
Guest Networks
Adding a guest network allows visitors at your home to use the Internet \
without using your 
wireless security key. You can add a guest network to each wireless network: 2.4 GHz b/g/n 
and 5.0 GHz a/n. 
To set up a guest network:
1.  Select  Basic >  Guest Network to display the following screen:
Scroll to 
view more 
settings
 
Scroll to 
view more 
settings
2. Select any of the following wireless settings:
Note: These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n 
bands. 
						

							genie Basic Settings 
33  N600 Wireless Dual Band Router WNDR3400v3
Enable Guest Network. When this check box is selected, the guest network is enabled, 
and guests can connect to your network using the SSID of this profile.
Enable Wireless Isolation. If this check box is selected, wireless clients (computers or 
wireless devices) that join the network can use the Internet, but cannot access each other 
or access Ethernet devices on the network.
Enable SSID Broadcast. If this check box is selected, the wireless access point 
broadcasts its name (SSID) to all wireless stations. Stations with no SSID can adopt the 
correct SSID for connections to this access point.
Allow guest to access My Local Network. If this check box is selected, any user who 
connects to this SSID has access to your local network, not just Internet access.
3. Give the guest network a name.
The guest network name is case-sensitive and can be up to 32 characters. You then 
manually configure the wireless devices in your network to use the guest network name 
in addition to the main nonguest SSID. 
4. Select a security option from the list. The security options are described in Guest Network 
Wireless Security Options on page 33.
5. Click Apply to save your selections.
Guest Network Wireless Security Options
A security option is the type of security protocol applied to your wireless network. The 
security protocol in force encrypts data transmissions and ensures that only trusted devices 
receive authorization to connect to your network. 
This section presents an overview of the security options and provides guidance on when to 
use which option. Although it is possible to set up a guest network without wireless security, 
NETGEAR does not recommend it.
Wi-Fi Protected Access (WPA) encryption is built into all hardware that has the Wi-Fi-certified 
seal. This seal means that the product is authorized by the Wi-Fi Alliance 
(http://www.wi-fi.org/) because it complies with the worldwide single standard for high-speed 
wireless local area networking. 
WPA-PSK uses a password to perform authentication and generate the initial data encryption 
keys. Then it dynamically varies the encryption key. WPA-PSK uses Temporal Key Integrity 
Protocol (TKIP) data encryption, implements most of the IEEE 802.11i standard, and is 
designed to work with all wireless network interface cards, but not all wireless access points. 
It is superseded by WPA2-PSK.
WPA2-PSK is stronger than WPA. It is advertised to be theoretically indecipherable due to 
the greater degree of randomness in encryption keys that it generates. WPA2-PSK gets 
higher speed because it is implemented through hardware, while WPA-PSK is implemented 
through software. WPA2-PSK uses a password to authenticate and generate the initial data 
encryption keys. Then it dynamically varies the encryption key. 
WPS-PSK + WPA2-PSK Mixed Mode can provide broader support for all wireless clients. 
WPA2-PSK clients get higher speed and security, and WPA-PSK clients get decent speed  
						

							genie Basic Settings 
34 N600 Wireless Dual Band Router WNDR3400v3 
and security. The product documentation for your wireless adapter and WPA client software 
should have instructions about configuring their WPA settings. 
						

							35
4
4.   genie Advanced Home
Specifying custom settings
This chapter explains the features available from the genie Advanced Home screen, shown in the following figure:
This screen is also 
displayed through 
the Administration 
menu.
This chapter contains the following sections:
•Setup Wizard 
• WPS Wizard 
• Setup Menu 
• WAN Setup 
• LAN Setup 
• Quality of Service (QoS) Setup 
Some selections on the Advanced Home screen are described in separate chapters: •USB Storage. See Chapter 5, USB Storage.
• Security . See Chapter 6, Security.
• Administration . See Chapter 7, Administration.
• Advanced Setup . See Chapter 8, Advanced Settings. 
						

							genie Advanced Home 36
N600 Wireless Dual Band Router WNDR3400v3 
Setup Wizard
The NETGEAR genie installation process is launched the first time you se\
t up the router. 
After setting up the router the first time, if you want to perform this \
task again, you can run  Setup Wizard from the Advanced tab of NETGEAR genie.
1.  Select  Setup W
 izard to display the following screen: 
2. Select either  Ye s or No, I want to configure the router myself . If you select No, you are 
taken to the Internet Setup screen (see  Internet Setup on page  23). 
3.  If you selected 
 Yes, click Next. The following screen displays:
The Setup Wizard searches your Internet connection for servers and proto\
cols to 
determine your ISP configuration. The following screen displays: 
						

							genie Advanced Home 37
 N600 Wireless Dual Band Router WNDR3400v3
WPS Wizard
The WPS Wizard helps you add a WPS-capable client device (a wireless de\
vice or 
computer) to your network. On the client device, you need to either pre\
ss its WPS button or 
locate its WPS PIN.
To use the WPS Wizard:
1.  Select  Advanced > WPS W
 izard.
2.  Click  Next. 
 The following screen lets you select the method for adding the WPS clien\
t (a 
wireless device or computer).
 
You can use either the push button or PIN method. 
3.  Select either Push Button or  PIN Number. 
• T
o use the push button method, either click the WPS button on this screen, or press 
the WPS button on the side of the router until the LED status changes. Within 2\
 
minutes, go to the wireless client and press its  WPS button to join the network without 
entering a password.
• T
o use the PIN method, select the PIN Number  radio button, enter the client security 
PIN, and click  Next. 
						

							genie Advanced Home 38
N600 Wireless Dual Band Router WNDR3400v3 
Within 2 minutes, go to the client device and use its WPS software to jo\
in the network 
without entering a password.
The router attempts to add the WPS-capable device. The WPS LED 
 on the router 
blinks green. When the router establishes a WPS connection, the LED is s\
olid green, and 
the router WPS screen displays a confirmation message. 
4.  Repeat Step 2 and Step 3 to add another WPS client to your network.
Setup Menu
Select  Advanced > Setup to display the Setup menu. The following selections are available:
• Internet Setup. 
 This is a shortcut to the same Internet Setup screen that you can access\
 
from the dashboard on the Basic Home screen. See Internet Setup on page  23.
• W
ireless Setup . This is a shortcut to the same Wireless Setup screen that you can 
access from the dashboard on the Basic Home screen. See Basic Wireless Settings on 
page   29.
• W
AN Setup. Internet (WAN) setup. See  WAN Setup on page
  39.
• LAN Setup. Local area network (LAN) setup. See LAN Setup on page  42.
• QoS Setup. Quality of Service (QoS) setup. See Quality of Service (QoS) Setup on 
page
  45.
• Guest Network. 
 This is a shortcut to the same Guest Network screen that you can 
access from the dashboard on the Basic Home screen. See  Guest Networks on page 32.  
						

							genie Advanced Home 39
 N600 Wireless Dual Band Router WNDR3400v3
WAN Setup
The WAN Setup screen lets you configure a DMZ (demilitarized zone) server, change the 
maximum transmit unit (MTU) size, and enable the router to respond to \
a ping on the WAN 
(Internet) port. Select  Advanced > Setup > WAN Setup  to view the following screen:
•Disable Port Scan and DoS Protection. DoS protection protects your LAN against 
denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop 
Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. This should  be disabled only in special circumstances. 
• Default DMZ Server . 
 This feature is sometimes helpful when you are playing online 
games or videoconferencing. Be careful when using this feature because i\
t makes the 
firewall security less effective. See the following section,  Default DMZ Server, for more 
details.
• Respond to Ping on Internet Port. If you want the router to respond to a ping from the 
Internet, select this check box. Use this only as a diagnostic tool beca\
use it allows your 
router to be discovered. Do not select this check box unless you have a \
specific reason.
• Disable IGMP Proxying. IGMP proxying allows a computer on the local area network 
(LAN) to receive the multicast traf

fic it is interested in from the Internet. If you do not need 
this feature, you can select this check box to disable it.
• MTU Size (in bytes). 
 The normal MTU (maximum transmit unit) value for most Ethernet 
networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some IS\
Ps, you might 
need to reduce the MTU. This is rarely required, and should not be done unless you are 
sure that it is necessary for your ISP connection. See Change the MTU Size on page  40.
• NA
T Filtering . Network Address Translation (NAT) determines how the router processes 
inbound traffic. Secured NAT provides a secured firewall to protect the computers on the 
LAN from attacks from the Internet, but might prevent some Internet game\
s, 
point-to-point applications, or multimedia applications from functioning\
. Open NAT 
provides a much less secured firewall, but allows almost all Internet ap\
plications to 
function.  
						

							genie Advanced Home 
40 N600 Wireless Dual Band Router WNDR3400v3 
Default DMZ Server
eTThe default DMZ server feature is helpful when you are using some online games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The router is programmed to recognize some of these applications and to work 
correctly with them, but other applications might not function well. In some cases, one local 
computer can run the application correctly if that computer’s IP address is entered as the 
default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the 
default DMZ server loses much of the protection of the firewall and 
is exposed to exploits from the Internet. If compromised, the DMZ 
server computer can be used to attack other computers on your 
network.
Incoming traffic from the Internet is discarded by the router unless the traffic is a response to 
one of your local computers or a service that you have configured in the Port Forwarding/Port 
Triggering screen. Instead of discarding this traffic, you can forward it to one computer on 
your network. This computer is called the default DMZ server.
To set up a default DMZ server: 
1. On the WAN Setup screen, select the Default DMZ Server check box.
2. Type the IP address.
3. Click Apply.
Change the MTU Size
The maximum transmission unit (MTU) is the largest data packet a network device transmits. 
When one network device communicates across the Internet with another, the data packets 
travel through many devices along the way. If any device in the data path has a lower MTU 
setting than the other devices, the data packets have to be split or “fragmented” to 
accommodate the device with the smallest MTU. 
The best MTU setting for NETGEAR equipment is often just the default value, and changing 
the value might fix one problem but cause another. Leave the MTU unchanged unless one of 
these situations occurs:
•You have problems connecting to your ISP or other Internet service, and the technical 
support of either the ISP or NETGEAR recommends changing the MTU setting. These 
web-based applications might require an MTU change:
-A secure website that does not open, or displays only part of a web page
-Yahoo email
-MSN portal