Netgear Wndr3700v5 N600 Wifi Router User Manual

							Use VPN to Access Your Network 
131  N600 WiFi Dual Band Gigabit Router
Specify VPN Service in the Router
You must specify the VPN service settings in the router before you can use a VPN 
connection.
To specify the VPN service:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN Service screen displays.
5. Select the Enable VPN Service check box.
By default, the VPN uses the UDP service type and uses port 12974. If you want to 
customize the service type and port, NETGEAR recommends that you change these 
settings before you install the OpenVPN software.
6. To change the service type, scroll down and select the TCP radio button.
7. To change the port, scroll down to the Service Port field, and type the port number that you 
want to use.
8. Click the Apply button.
Your changes are saved. VPN is enabled in the router, but you must install and set up 
OpenVPN software on your computer before you can use a VPN connection.
Install OpenVPN Software on Your Computer 
You must install this software on each computer that you plan to use for VPN connections to 
your router.
To install VPN client software:
1. Visit http://openvpn.net/index.php/download/community-downloads.html.
2. In the Windows Installer section of the screen, double-click the 
openVPN-install-xxx.exe link.
3. Download the file. 
						

							Use VPN to Access Your Network 132
N600 WiFi Dual Band Gigabit Router 
4. 
To install the Open VPN software on your computer, click the 
openVPN-install-xxx.exe file.
5.  Click the  Next button.
6.  Read the License 
 Agreement and click the  I Agree button.
7. Leave the check boxes selected as shown, and click the  Next button.
8.  T
o specify the destination folder, click the  Browse button, select a destination folder, and 
click the  Next button.
9. Click the  Install button. 
						

							Use VPN to Access Your Network 133
 N600 WiFi Dual Band Gigabit Router
The screen displays the progress of the installation and then displays t\
he final installation 
screen.
10.  Click the  Finish button.
11.  Unzip the configuration files that you downloaded and copy them to the f\
older where the 
VPN client is installed on your device. 
For a client device with Windows 64-bit system, the VPN client is instal\
led at 
C:\Program files\OpenVPN\config\ by default.
12.  For a client device with Windows, modify the VPN interface name to  NETGEAR-VPN: 
a. In Windows, select Start > Control Panel > Network and Internet > Network 
Connections.
b.  In the local area connection menu, find the local area connection with t\
he device 
name  T

AP-Windows Adapter .
c.  Select the local area connection and change its name (not its device na\
me) to 
NETGEAR-VPN.
If you do not change the VPN interface name, the VPN tunnel connection w\
ill fail.
Use a VPN Tunnel
After you set up the router to use VPN and install the OpenVPN applicati\
on on your  computer, you can open a VPN tunnel from your computer to your router over the I\
nternet.
For the VPN tunnel to work, the local LAN IP address of the remote WNDR3\
700v5 router 
must use a dif
 ferent LAN IP scheme from that of the local LAN where your VPN client 
computer is connected. If both networks use the same LAN IP scheme, when\
 the VPN tunnel 
is established, you cannot access your home router or your home network \
with the OpenVPN 
software.
The default LAN IP address scheme for the WNDR3700v5 router is 192.x.x.x\
. The most  common IP schemes are 192.x.x.x, 172.x.x.x, and 10.x.x.x. If you experie\
nce a conflict, 
change the IP scheme either for your home network or for the network wit\
h the client VPN  
						

							Use VPN to Access Your Network 134
N600 WiFi Dual Band Gigabit Router 
computer. For information about changing these settings, see Change the LAN TCP/IP 
Settings on page
  11 2.
To open a VPN tunnel:
1.  Launch the OpenVPN application with administrator privileges.
The OpenVPN icon displays in the Windows taskbar.
Tip: Y
ou can create a shortcut to the VPN program, then use the shortcut 
to access the settings and select the run as administrator check 
box. Then every time you use this shortcut, OpenVPN automatically 
runs with administrator privileges.
2.  Right-click the  OpenVPN icon.
3. Select  Connect.
The VPN connection is established. You can do the following:
• Launch a web browser and log in to your router
 .
• Use Windows file manager to access the router
 ’s USB device and download files. 
						

							Use VPN to Access Your Network 135
 N600 WiFi Dual Band Gigabit Router
Use VPN to Access the Router’s USB Device and Media
To access a USB device and download files:
1. 
In Windows file manager
 , select the Network folder.
The network resources display. The  ReadySHARE icon is in the Computer section and 
the remote  WNDR3700v5 icon is in the Media Devices section (if DLNA is enabled in the 
router).
2.  If the icons do not display
 , click the Refresh button to update the screen.
If the local LAN and the remote LAN are using the same IP scheme, the re\
mote 
WNDR3700v5 icon does not display in the Media Devices and Network Infrastructure 
sections.
3.  T
o access the USB device, click the ReadySHARE  icon.
4.  T
o access media on the router’s network, click the  WNDR3700v5 icon.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually u\
se a local Internet 
service provider. For example, at a coffee shop you might be given a code that lets you use 
the coffee shop’s Internet service account to surf the web.
The router lets you use a VPN connection to access your own Internet ser\
vice when you’re  away from home. 
 You might want to do this if you travel to a geographic location that doe\
sn’t 
support all the Internet services that you use at home. For example, you\
r Netflix account 
might work at home but not in a different country. 
Set Up VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your h\
ome network but you 
can change the setting to allow Internet access. Accessing the Internet remotely through a 
VPN might be slower than accessing the Internet directly. 
						

							Use VPN to Access Your Network 
136 N600 WiFi Dual Band Gigabit Router 
To allow VPN clients to use your home Internet service:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VPN screen displays.
5. Select the Enable VPN Service radio button.
6. Scroll down to the Clients will use this VPN connection to access section, and select the All 
sites on the Internet & Home Network radio button. 
When you access the Internet with the VPN connection, instead of using a local Internet 
service, you use the Internet service from your home network.
7. Click the Apply button.
Your settings are saved.
8. Click the For Windows or For Non Windows button and download the configuration files 
for your VPN clients.
9. Unzip the configuration files and copy them to the folder where the VPN client is installed on 
your device. 
For a client device with Windows 64-bit system, the VPN client is installed at 
C:\Program files\OpenVPN\config\ by default.
Block VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, not to 
the Internet service for your home network. If you changed this setting to allow Internet 
access, you can change it back.
To allow VPN clients to access only your home network:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. Type http://www.routerlogin.net or http://www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password. 
						

							Use VPN to Access Your Network 
137  N600 WiFi Dual Band Gigabit Router
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Advanced Setup > VPN Service.
The VNP screen displays.
5. Select the Enable VPN Service radio button.
6. Scroll down to the Clients will use this VPN connection to access section, and select the 
Home Network only radio button.
This is the default setting. The VPN connection is only to your home network, not to the 
Internet service for your home network.
7. Click the Apply button.
Your settings are saved.
8. Click For Windows or For Non Windows button and download the configuration files for 
your VPN clients.
9. Unzip the configuration files and copy them to the folder where the VPN client is installed on 
your device. 
For a client device with Windows 64-bit system, the VPN client is installed at 
C:\Program files\OpenVPN\config\ by default.
Use a VPN Tunnel to Access Your Internet Service at Home
To access your Internet service:
1. Set up the router to allow VPN access to your Internet service.
See Set Up VPN Client Internet Access in the Router on page 135.
2. On your computer, launch the OpenVPN application.
The OpenVPN icon displays in the Windows taskbar.
3. Right-click the icon and select Connect.
4. When the VPN connection is established, launch your Internet browser. 
						

							138
12
12.   Specify Internet Port Settings
You can use port forwarding and port triggering to set up rules for Internet traffic. You need 
networking knowledge to set up these features.
This chapter includes the following sections:
•Set Up Port Forwarding to a Local Server 
•Set Up Port Triggering  
						

							Specify Internet Port Settings 139
 N600 WiFi Dual Band Gigabit Router
Set Up Port Forwarding to a Local Server
If your home network includes a server, you can allow certain types of incoming traffic to 
reach the server. For example, you might want to make a local web server, FTP server, or 
game server visible and available to the Internet.
The router can forward incoming traffic with specific protocols to computers on your local  network. 
 You can specify the servers for applications and you can also specify a d\
efault DMZ 
server to which the router forwards all other incoming protocols.
To forward specific incoming protocols:
1.  Decide which type of service, application, or game you want to provide.
2.  Find the local IP address of the computer on your network that will prov\
ide the service.
You can usually find this information by contacting the publisher of the \
application or user  groups or news groups.
The server computer must always use the same IP address. Assign the server computer  a reserved IP address. See Manage Reserved LAN IP Addresses  on page
  11 5.
3.  Launch a web browser from a computer or wireless device that is connecte\
d to the network.
4.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login screen displays.
5.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
6.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
7. Leave the  Port Forwarding  radio button selected as the service type.
8.  T
o add a service that is in the  Service Name menu, do the following:
a. Select a service from the menu.
b.  In the  Server IP address  field, enter the port number
 .
c.  Click the  Add button.
The service displays in the menu. 
						

							Specify Internet Port Settings 140
N600 WiFi Dual Band Gigabit Router 
If the service that you want to add is not in the menu, create a custom \
service. See 
Add a 
Custom Port Forwarding Service on page  140.
Add a Custom Port Forwarding Service
To add a custom service:
1. Find out which port number or range of numbers the application uses.
You can usually find this information by contacting the publisher of the \
application or user  groups or news groups.
2.  Launch a web browser from a computer or wireless device that is connecte\
d to the network.
3.  T
ype  http://www.routerlogin.net  or http://www.routerlogin.com .
A login screen displays.
4.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home screen displays.
5.  Select  ADV
 ANCED > Advanced Setup > Port Forwarding/Port Triggering.
The Port Forwarding/Port Triggering screen displays.
6.  Leave the  Port Forwarding radio button selected as the service type.
7.  Click the  Add Custom Service  button.
8. In the Service Name field, enter a descriptive name. 
9.  In the Service T
 ype field, select the protocol. 
If you are unsure, select TCP/UDP .
10.  In the  External port range field, enter the port numbers. 
11.  Specify the internal ports by one of these methods:
• Leave the Use the same port range for Internal port check box selected.
• T
ype the port numbers in the Internal Port Range field.