Netgear Wndr3400v3 N600 Wireless Dual Band Router User Manual

							Administration 71
 N600 Wireless Dual Band Router WNDR3400v3
Guest Network (2.4 GHz and 5 GHz)
Name (SSID
). The 11N wireless network name (SSID) used by the router. The default names 
are NETGEAR-Guest and NETGEAR-5G-Guest.
Wireless AP . Indicates whether the radio feature of the router is enabled. If this \
feature is not 
enabled, the Wireless LEDs on the front panel are of
 f.
Broadcast Name . Indicates whether the router is broadcasting its SSID.
Wireless Isolation. Select this check box only if you want to prevent wireless connections\
 to 
the router.
Allow guest to access My Local Network . If selected, any user who connects to this SSID 
can access local networks associated with the router.
View Logs of Web Access or Attempted Web Access
The log is a detailed record of the websites you accessed or attempted t\
o access. Up to 
256   entries are stored in the log. Log entries appear only when keyword bloc\
king is enabled 
and no log entries are made for the trusted user
 . 
						

							Administration 72
N600 Wireless Dual Band Router WNDR3400v3 
Select 
Advanced > Administration > Logs. The Logs screen displays.
The log screen shows the following information:
• Date and time. 
 The date and time the log entry was recorded.
• Source IP address. 
 The IP address of the initiating device for this log entry.
• T
arget address. The name or IP address of the website or news group visited or to which \
access was attempted.
• Action. Whether the access was blocked or allowed.
To refresh the log screen, click the Refresh  button.
To clear the log entries, click the Clear Log button.
To email the log immediately, click the  Send Log button.
Manage the Configuration File
The configuration settings of the N600 Wireless Dual Band Router are sto\
red within the 
router in a configuration file. You can back up (save) this file to your computer, restore it, or 
reset it to the factory default settings. 
						

							Administration 73
 N600 Wireless Dual Band Router WNDR3400v3
Back Up Settings
To back up the router’s configuration settings:
1. 
Select  Advanced > 
 Administration > Back Up Settings to display the following 
screen:
2.  Click  Back Up  to save a copy of the current settings.
3.  Choose a location to store the .cfg file that is on a computer on your n\
etwork.
Restore Configuration Settings
To restore configuration settings that you backed up:
1. Enter the full path to the file on your network, or click the  Browse button to find the file. 
2.  When you have located the .cfg file, click the  Restore button to upload the file to the router.
Upon completion, the router reboots.
WARNING:
Do not interrupt the reboot process.
Erase
Under some circumstances (for example, if you move the router to a different network or if 
you have forgotten the password), you might want to erase the configura\
tion and restore the 
factory default settings. 
You can either use the Restore Factory Settings button on the back of the\
 router (see  Factory 
Settings  on page
  106), or you can click the  Erase button in this screen. 
						

							Administration 74
N600 Wireless Dual Band Router WNDR3400v3 
Erase sets the user name to admin, the password to password, and the LAN\
 IP address to 
192.168.1.1, and enables the router’s DHCP.
Set Password
This feature allows you to change the default password that is used to l\
og in to the router with 
the user name admin. 
This is not the same as changing the password for wireless access. The label on the bottom  of your router shows your unique wireless network name (SSID) and pass\
word for wireless 
access (see Label on page  14).
To set the password for the user name admin:
1. Select  Advanced > 
 Administration > Set Password  to display the following screen:
2.  Type the old password and type the new password twice in the fields on th\
is screen.
3.  If you want to be able to recover the password, select the  Enable Password Recovery 
check box.
4.  Click  Apply  so that your changes take ef
 fect.
Password Recovery
NETGEAR recommends that you enable password recovery if you change the p\
assword for 
the router’s user name of admin. You then have an easy way to recover the password if it is 
forgotten. This recovery process is supported in Internet Explorer, Firefox, and Chrome 
browsers, but not in the Safari browser.
To set up password recovery:
1. Select the Enable Password Recovery  check box. 
						

							Administration 
75  N600 Wireless Dual Band Router WNDR3400v3
2.  Select two security questions and provide answers to them.
3. Click Apply to save your changes.
When you use your browser to access the router, the login window displays. If password 
recovery is enabled, when you click Cancel, the password recovery process starts. You can 
then enter the saved answers to the security questions to recover the password.   
						

							76
8
8.   Advanced Settings
Fine-tuning your network
This chapter describes the advanced features of your router. This information is for users with a 
solid understanding of networking concepts who want to set up the router for unique situations 
such as remote access from the Internet by IP or domain name. 
This chapter includes the following sections:
•Advanced Wireless Settings 
•Port Forwarding and Port Triggering 
•Set Up Port Forwarding to Local Servers 
•Set Up Port Triggering 
•Dynamic DNS 
•Static Routes 
•Remote Management 
•USB Settings 
•Universal Plug and Play 
•IPv6 
•Traffic Meter  
						

							Advanced Settings 77
 N600 Wireless Dual Band Router WNDR3400v3
Advanced Wireless Settings
Select 
Advanced > Advanced Setup > Wireless Settings to display the following screen:
Scroll to view 
more settings
The following settings are available in this screen for the 2.4 GHz and \
5 GHz bands:
Enable Wireless Router Radio . 
 You can completely turn off the wireless portion of the 
wireless router by clearing this check box. Select this check box again \
to enable the wireless 
portion of the router. When the wireless radio is disabled, other member\
s of your household 
can use the router by connecting their computers to the router with an E\
thernet cable. 
Enable 20/40 MHz Coexistence. 
 This applies only to the 2.4 GHz band. The 20/40 MHz 
coexistence function is enabled by default when the wireless mode is set\
 to Up to 300 mbps 
(40 MHZ), which is required for Wi-Fi certification. This check box is grayed out if the wireless 
mode is set to Up to 130 Mbps.
The router can run in either 40 MHz mode or 20 MHz mode when the wireles\
s mode is set to  Up to 300 Mbps. When the Enable 20/40 MHz Coexistence check box is selec\
ted, the router 
runs in 40 MHz mode unless there is another nearby WiFi network in the a\
rea already 
running in 40 MHz mode or there is a wireless access point on the second\
ary channel. If that 
happens, the router runs in 20 MHz mode to coexist with that network.
If you want the router to always run in 40 MHz mode, clear this check bo\
x and click  Apply.
Note: The Fragmentation Length, CTS/RTS Threshold, and Preamble Mode 
options are reserved for wireless testing and advanced configuration 
only. Do not change these settings.
Turn off wireless signal by schedule. 
 You can use this feature to turn off the wireless 
signal from your router at times when you do not need a wireless connect\
ion. For example, 
you could turn it off for the weekend if you leave town.
WPS Settings.Y
 ou can add WPS devices to your network.  
						

							Advanced Settings 
78 N600 Wireless Dual Band Router WNDR3400v3 
AP Mode. You can make the WNDR3400v3 function as an access point.
Wireless Card Access List. Click the Set Up Access List button to display the Wireless 
Card Access List screen. On this screen, you can restrict access to your network to specific 
devices based on their MAC address. 
Port Forwarding and Port Triggering
By default, the router blocks inbound traffic from the Internet to your computers except replies 
to your outbound traffic. You might need to create exceptions to this rule for these purposes:
•To allow remote computers on the Internet to access a server on your local network. 
•To allow certain applications and games to work correctly when their replies are not 
recognized by your router.
Your router provides two features for creating these exceptions: port forwarding and port 
triggering. The next sections provide background information to help you understand how 
port forwarding and port triggering work, and the differences between the two.
Remote Computer Access Basics
When a computer on your network needs to access a computer on the Internet, your 
computer sends your router a message containing the source and destination address and 
process information. Before forwarding your message to the remote computer, your router 
has to modify the source information and create and track the communication session so that 
replies can be routed back to your computer. 
Here is an example of normal outbound traffic and the resulting inbound responses:
1. You open a browser, and your operating system assigns port number 5678 to this 
browser session. 
2. You type http://www.example.com into the URL field, and your computer creates a web page 
request message with the following address and port information. The request message is 
sent to your router.
Source address. Your computer’s IP address.
Source port number. 5678, which is the browser session. 
Destination address. The IP address of www.example.com, which your computer finds 
by asking a DNS server.
Destination port number. 80, which is the standard port number for a web server 
process.
3. Your router creates an entry in its internal session table describing this communication 
session between your computer and the web server at www.example.com. Before sending 
the web page request message to www.example.com, your router stores the original 
information and then modifies the source information in the request message, performing 
Network Address Translation  (NAT): 
						

							Advanced Settings 
79  N600 Wireless Dual Band Router WNDR3400v3
•The source address is replaced with your router’s public IP address. This is 
necessary because your computer uses a private IP address that is not globally 
unique and cannot be used on the Internet.
•The source port number is changed to a number chosen by the router, such as 
33333. This is necessary because two computers could independently be using the 
same session number.
Your router then sends this request message through the Internet to the web server at 
www.example.com.
4. The web server at www.example.com composes a return message with the requested web 
page data. The return message contains the following address and port information. The 
web server then sends this reply message to your router.
Source address. The IP address of www.example.com.
Source port number. 80, which is the standard port number for a web server process.
Destination address. The public IP address of your router.
Destination port number. 33333.
5. Upon receiving the incoming message, your router checks its session table to determine 
whether an active session for port number 33333 exists. Finding an active session, the 
router then modifies the message to restore the original address information replaced by 
NAT. Your router sends this reply message to your computer, which displays the web 
page from www.example.com. The message now contains the following address and port 
information.
Source address. The IP address of www.example.com.
Source port number. 80, which is the standard port number for a web server process.
Destination address. Your computer’s IP address.
Destination port number. 5678, which is the browser session that made the initial 
request.
6. When you finish your browser session, your router eventually detects a period of inactivity in 
the communications. Your router then removes the session information from its session 
table, and incoming traffic is no longer accepted on port number 33333.
Port Triggering to Open Incoming Ports
In the preceding example, requests are sent to a remote computer by your router from a 
particular service port number, and replies from the remote computer to your router are 
directed to that port number. If the remote server sends a reply to a different port number, 
your router does not recognize it and discards it. However, some application servers (such as 
FTP and IRC servers) send replies to multiple port numbers. Using the port triggering 
function of your router, you can tell the router to open additional incoming ports when a 
particular outgoing port originates a session.
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at 
destination port 6667. The IRC server not only responds to your originating source port, but  
						

							Advanced Settings 
80 N600 Wireless Dual Band Router WNDR3400v3 
also sends an “identify” message to your computer on port 113. Using port triggering, you can 
tell the router, “When you initiate a session with destination port 6667, you have to also allow 
incoming traffic on port 113 to reach the originating computer.” Using steps similar to the 
preceding example, the following sequence shows the effects of the port triggering rule you 
have defined:
1. You open an IRC client program to start a chat session on your computer. 
2. Your IRC client composes a request message to an IRC server using a destination port 
number of 6667, the standard port number for an IRC server process. Your computer then 
sends this request message to your router.
3. Your router creates an entry in its internal session table describing this communication 
session between your computer and the IRC server. Your router stores the original 
information, performs Network Address Translation (NAT) on the source address and port, 
and sends this request message through the Internet to the IRC server. 
4. Noting your port triggering rule and having observed the destination port number of 6667, 
your router creates an additional session entry to send any incoming port 113 traffic to your 
computer.
5. The IRC server sends a return message to your router using the NAT-assigned source port 
(as in the previous example, say port 33333) as the destination port. The IRC server also 
sends an identify message to your router with destination port 113.
6. Upon receiving the incoming message to destination port 33333, your router checks its 
session table to determine whether an active session for port number 33333 exists. Finding 
an active session, the router restores the original address information replaced by NAT and 
sends this reply message to your computer.
7. Upon receiving the incoming message to destination port 113, your router checks its session 
table and learns that an active session for port 113 is associated with your computer. The 
router replaces the message’s destination IP address with your computer’s IP address and 
forwards the message to your computer.
8. When you finish your chat session, your router eventually senses a period of inactivity in the 
communications. The router then removes the session information from its session table, 
and incoming traffic is no longer accepted on port numbers 33333 or 113.
To configure port triggering, you need to know which inbound ports the application needs. 
Also, you need to know the number of the outbound port that triggers the opening of the 
inbound ports. You can usually determine this information by contacting the publisher of the 
application or user groups or newsgroups.
Note:Only one computer at a time can use the triggered application.
Port Forwarding to Permit External Host Communications
In both of the preceding examples, your computer initiates an application session with a 
server computer on the Internet. However, you might need to allow a client computer on the 
Internet to initiate a connection to a server computer on your network. Normally, your router