Netgear Wnr2000v5 N300 Wifi Router User Manual

							Control Access to the Internet 
51  N300 WiFi Router
Schedule When to Block Internet Sites and Services
When you schedule blocking, the same schedule is used to block sites and to block services. 
For information about how to specify what you want the router to block, see 
Use Keywords to 
Block Internet Sites on page 47 and Block Services from the Internet on page 49.
To schedule blocking:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. In the address field of the web browser, enter www.routerlogin.net or 
www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Security > Schedule.
The Schedule screen displays.
5. Specify when to block keywords and services:
•Days to Block. Select the check box for each day that you want to block the 
keywords or select the Every Day check box, which automatically selects the check 
boxes for all days. 
•Time of Day to Block. Select a start and end time in 24-hour format or select All Day 
for 24-hour blocking. 
6. Select your time zone from the list. 
7. If you live in an area that observes daylight saving time, select the Automatically adjust for 
daylight savings time check box. 
8. Click the Apply button. 
Your settings are saved.
Avoid Blocking on a Trusted Computer
You can exempt one trusted computer from blocking. The computer you exempt must have a 
fixed IP address. You can use the reserved IP address feature to specify the IP address. See 
Reserve LAN IP Addresses on page 60.
To specify a trusted computer:
1. Launch a web browser from a computer or wireless device that is connected to the 
network. 
						

							Control Access to the Internet 52
N300 WiFi Router 
2. 
In the address field of the web browser, enter  www.routerlogin.net or 
www.routerlogin.com.
A login screen displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4.  Select  ADV
 ANCED > Security > Block Sites .
The Block Sites screen displays.
5.  Scroll down and select the  Allow trusted IP address to visit blocked sites  check box.
6. In the Trusted IP Address  field, enter the IP address of the trusted computer.
7.  Click the  Apply button.
Your changes are saved.
Set Up Security Event Email Notifications
The router  can email you its logs. The log records  router activity and security events such as 
attempts to access blocked sites or services. 
To set up email notifications:
1. Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
2. In the address field of the web browser
 , enter www.routerlogin.net  or 
www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home screen displays. 
						

							Control Access to the Internet 53
 N300 WiFi Router
4.
Select  ADVANCED > Security >  E-mail.
5. Select the Turn E-mail Notification On  check box.
6. In the  Y
our Outgoing Mail Server  field, enter the name of your Internet provider outgoing 
(SMTP) mail server (such as mail.myISP.com). 
You might be able to find this information in the configuration screen of\
 your email  program. If you leave this field blank, log and alert messages are not s\
ent.
7. In the Send to This E-mail 
 Address field, enter the email address to which logs and alerts 
are sent. 
This email address is also used for the From address. If this field is b\
lank, log and alert  messages are not sent.
8. If your outgoing email server requires authentication, select the  My Mail Server requires 
authentication  check box.
a. In the User Name field, type the user name for the outgoing email server
 .
b. In the  Password field, type the password for the outgoing email server
 .
9. T
o send alerts when someone attempts to visit a blocked site, select the \
 Send Alerts 
Immediately  check box.
10. T
o send logs based on a schedule, specify these settings:
•From Send logs according to this schedule  list, select the schedule type.
• From the Day  list, select the day
 .
• From the T
 ime  list, select the time, and select the am  or pm radio button.
11 . Click the  Apply button.
Your settings are saved.
Logs are sent according to the schedule that you set. If the log fills b\
efore the specified 
time, it is sent. 
 After the log is sent, it is cleared from the router memory. If the router 
cannot email the log and the log buffer fills up, the router overwrites the log. 
						

							54
6
6.   Specify Network Settings
This chapter includes the following sections:
•View or Change the WAN Settings 
•Set Up a Default DMZ Server 
•Change the Router’s Device Name 
•Change the LAN TCP/IP Settings 
•Specify the IP Addresses That the Router Assigns 
•Reserve LAN IP Addresses 
•Use the WPS Wizard for WiFi Connections 
•Specify Basic WiFi Settings 
•Change the WiFi Security Option 
•Use the Router as a Wireless Access Point 
•Set Up a WiFi Guest Network 
•Control the Wireless Radio 
•Set Up a WiFi Schedule 
•Specify WPS Settings 
•Dynamic DNS  
						

							Specify Network Settings 55
 N300 WiFi Router
View or Change the WAN Settings
You can view the wide area network (WAN) settings for the Internet port. You can set up a 
DMZ (demilitarized zone) server, change the maximum transmit unit (MTU) size, and enable 
the router to respond to a ping to its WAN (Internet) port. 
To view or change the WAN settings:
1.  Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
2.  In the address field of the web browser
 , enter www.routerlogin.net  or 
www.routerlogin.com.
A login screen displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4.  Select  ADV
 ANCED > Setup > WAN Setup.
5.  V
iew or change the following settings:
•Disable Port Scan and DoS Protection. DoS protection protects your LAN against 
denial of service attacks such as Syn flood, Smurf 

Attack, Ping of Death, and many 
others. Select this check box only in special circumstances. 
• Default DMZ Server . 
 This feature is sometimes helpful when you are playing online 
games or videoconferencing, but it makes the firewall security less effective. See  Set 
Up a Default DMZ Server  on page
  56.
• Respond to Ping on Internet Port . This 
 feature allows your router to be discovered. 
Use this feature only as a diagnostic tool or if you have a specific rea\
son. 
• Disable IGMP Proxying . IGMP proxying allows a computer on the local area network 
(LAN) to receive the multicast traf
 fic it is interested in from the Internet. If you do not 
need this feature, you can select this check box to disable it.
• MTU Size (in bytes). 
 The normal MTU (maximum transmit unit) value for most 
Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. Ch\
ange the  
						

							Specify Network Settings 
56 N300 WiFi Router 
MTU only if you are sure that it is necessary for your Internet connection. See Change 
the MTU Size on page 30.
6. Click the Apply button.
Your changes are saved.
Set Up a Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The router is programmed to recognize some of these applications and to work 
correctly with them, but other applications might not function well. In some cases, one local 
computer can run the application correctly if the IP address for that computer is entered as 
the default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the 
default DMZ server loses much of the protection of the firewall and 
is exposed to exploits from the Internet. If compromised, the DMZ 
server computer can be used to attack other computers on your 
network.
The router usually detects and discards incoming traffic from the Internet that is not a 
response to one of your local computers or a service that you configured in the Port 
Forwarding/Port Triggering screen. Instead of discarding this traffic, you can specify that the 
router forwards the traffic to one computer on your network. This computer is called the 
default DMZ server.
To set up a default DMZ server: 
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. In the address field of the web browser, enter www.routerlogin.net or 
www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4. Select ADVANCED > Setup > WAN Setup.
The WAN Setup screen displays.
5. Select the Default DMZ Server check box. 
						

							Specify Network Settings 57
 N300 WiFi Router
6. 
Type the IP address.
7.  Click the  Apply button.
Your settings are saved.
Change the Router’s Device Name
The  router’s  device name is WNR2000v5. This device name displays in a file manager when 
you browse your network.
To change the router’s device name:
1.  Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
2.  In the address field of the web browser
 , enter www.routerlogin.net  or 
www.routerlogin.com.
A login screen displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4.  Select  ADV
 ANCED > Setup > LAN Setup .
5. In the Device Name field, type a new name.
6.  Click the  Apply button.
Your settings are saved. 
						

							Specify Network Settings 58
N300 WiFi Router 
Change the LAN TCP/IP Settings
The router is preconfigured to use private IP addresses on the LAN side \
and to act as a 
DHCP server. The router’s default LAN IP configuration is as follows:
• LAN IP address. 192.168.1.1
• Subnet mask. 255.255.255.0
These addresses are part of the designated private address range for use\
 in private networks  and are suitable for most applications. If your network requires a dif
 ferent IP addressing 
scheme, you can change these settings.
You might want to change these settings if you need a specific IP subnet \
that one or more  devices on the network use or if you have competing subnets with the sam\
e IP scheme.
To change the LAN TCP/IP settings:
1.  Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
2.  In the address field of the web browser
 , enter www.routerlogin.net  or 
www.routerlogin.com.
A login screen displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.
The BASIC Home screen displays.
4.  Select  ADV
 ANCED > Setup > LAN Setup .
5. In the IP Address field, type the IP address.
6.  In the IP Subnet Mask  field, type the subnet mask of the router.  
						

							Specify Network Settings 
59  N300 WiFi Router
The IP address and subnet mask identify which addresses are local to a specific device 
and which must be reached through a gateway or router.
7. Click the Apply button.
Your settings are saved.
If you changed the LAN IP address of the router, you are disconnected when this change 
takes effect.
To reconnect, close your browser, relaunch it, and log in to the router.
Specify the IP Addresses That the Router Assigns
By default, the router acts as a Dynamic Host Configuration Protocol (DHCP) server. The 
router assigns IP, DNS server, and default gateway addresses to all computers connected to 
the LAN. The assigned default gateway address is the LAN address of the router. 
These addresses must be part of the same IP address subnet as the router’s LAN IP 
address. Using the default addressing scheme, define a range between 192.168.0.2 and 
192.168.0.254, although you can save part of the range for devices with fixed addresses.
The router delivers the following parameters to any LAN device that requests DHCP:
•An IP address from the range that you define
•Subnet mask
•Gateway IP address (the router’s LAN IP address)
•DNS server IP address (the router’s LAN IP address)
To specify the pool of IP addresses that the router assigns:
1. Launch a web browser from a computer or wireless device that is connected to the 
network.
2. In the address field of the web browser, enter www.routerlogin.net or 
www.routerlogin.com.
A login screen displays.
3. Enter the router user name and password.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
The BASIC Home screen displays. 
						

							Specify Network Settings 60
N300 WiFi Router 
4. 
Select  ADVANCED > Setup > LAN Setup .
5. Specify the range of IP addresses that the router assigns:
a. In the Starting IP 
 Address field, type the lowest number in the range.
This IP address must be in the same subnet as the router.
b.  In the Ending IP 
 Address field, type the number at the end of the range of IP 
addresses.
This IP address must be in the same subnet as the router.
6.  Click the  Apply button.
Your settings are saved.
Reserve LAN IP Addresses
When you specify a reserved IP address for a computer on the LAN, that c\
omputer always 
receives the same IP address each time it accesses the router’s DHCP server. Assign 
reserved IP addresses to computers or servers that require permanent IP \
settings. 
To reserve an IP address: 
1.  Launch a web browser from a computer or wireless device that is connecte\
d to the 
network.
2.  In the address field of the web browser
 , enter www.routerlogin.net  or 
www.routerlogin.com.
A login screen displays.
3.  Enter the router user name and password.
The user name is  admin. 
 The default password is password . The user name and 
password are case-sensitive.