Home

N300 Wireless ADSL2+ Modem Router DGN2200v4

1. Hardware Setup 10 N300 Wireless ADSL2 Modem Router DGN2200v4 Back Panel The back panel has the buttons and port connections as shown in the following figure ADSL port LAN port or WAN cable fiber Internet port Ethernet LAN ports USB port Reset button On Off button Power adapter input Figure 3 Back panel connections and buttons For information about resetting the modem router to its factory settings see Factory Settings on page 128 Label The label on the bottom of the modem router shows the preset login information MAC address and serial number NETGEAR oo M Ooo M _ MAC address Serial Wi Fi network name number and password Figure 4 Label on modem router bottom Hardware Setup 11 N300 Wireless ADSL2 Modem Router DGN2200v4 Position Your Modem Router The modem router lets you access your network from virtually anywhere within the operating range of your wireless network However the operating distance or range of your wireless connection can vary significantly depending on the physical placement of your modem router For example the thickness and number of walls the wireless signal passes through can limit the range For best results place your modem router Near the center of the area where your computers and other devices operate and preferably within line of sight to your wireless devices e Soitis accessible to an AC power outlet and near Ethernet cables for wired c
2. Port Triggering Service Mame FTF TCP 20 21 Security 63 N300 Wireless ADSL2 Modem Router DGN2200v4 2 From the Service Name list select the service or game that you will host on your network If the service does not appear in the list see Add a Custom Service on page 64 3 In the Action list select when you want to allow or block this port forwarding rule 4 In the Server IP Address field enter IP address of your local computer that will receive the inbound traffic covered by this rule 5 In the WAN Servers field fill in the IP addresses covered by this rule 6 In the Log list select Never or Always to specify when to log packets covered by this rule 7 Click Add The service appears in the list on the Port Forwarding screen Add a Custom Service To define a service game or application that does not appear in the Service Name list first determine which port number or range of numbers the application uses You can usually determine this information by contacting the publisher of the application or user groups or news groups When you have the port number information follow these steps To add a custom service 1 Select Advanced gt Advanced Setup gt Port Forwarding Port Triggering 2 Select the Port Forwarding radio button as the service type 3 Click the Add Custom Service button Ports Senece Name Senece Type External taning Port Enema Enders Port 7 Use the same port range for intemal p
3. Quality of Service QoS Setup QoS is an advanced feature that can be used to prioritize some types of traffic ahead of others The modem router can provide QoS prioritization over the wireless link and on the Internet connection WMM QoS for Wireless Multimedia Applications The modem router supports Wi Fi Multimedia Quality of Service WMM QoS to prioritize wireless voice and video traffic over the wireless link WMM QoS provides prioritization of wireless data packets from different applications based on four access categories voice video best effort and background For an application to receive the benefits of WMM QoS both it and the client running that application have to have WMM enabled Legacy applications that do not support WMM and applications that do not require QoS are assigned to the best effort category which receives a lower priority than voice and video WMM QoS is enabled by default gt To disable WMM QoS 1 Select Advanced Setup QoS Setup Kato WMI AM Fi maftimedia settings O Term terme Access Ges On C Turn Baesdeiditl Control On Upbek bandwidth Meimum 256 Kbps Automate ity check Inemet Upink bandwidth Check osmennem EED 2 Clear the Enable WMM check box 3 Click Apply NETGEAR genie Advanced Home 43 N300 Wireless ADSL2 Modem Router DGN2200v4 Set Up QoS for Internet Access You can give prioritized Internet access to the following types of traffic e Specific applicat
4. Advanced Settings 92 N300 Wireless ADSL2 Modem Router DGN2200v4 Your changes take effect Requirements for Entering IPv6 Addresses IPv6 addresses are denoted by eight groups of hexadecimal quartets that are separated by colons Any four digit group of zeroes within an IPv6 address can be reduced to a single zero or altogether omitted The following errors invalidate an IPv6 address e More than eight groups of hexadecimal quartets e More than four hexadecimal characters in a quartet e More than two colons in a row Advanced Settings 93 N300 Wireless ADSL2 Modem Router DGN2200v4 Auto Detect Tosetup an IPv6 Internet connection through auto detection 1 Select Advanced gt Advanced Setup gt IPv6 The IPv6 screen displays In the Internet Connection Type list select Auto Detect The screen adjusts Bu Dads ow CHO Dabit thal deci aic L R Senn Faure 8 ibn ode ena On j M Ho Keg ida Babe ect Hon seed ho Lp DHCP Serger DT Tti Thin Inber acus NY The modem router automatically detects the information in the following fields e Connection Type This field indicates the connection type that is detected e Router s IPv6 Address on WAN This field shows the IPv6 address that is acquired for the modem router s WAN or Internet interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquire
5. Troubleshooting NETGEAR genie Basic Settings 23 N300 Wireless ADSL2 Modem Router DGN2200v4 Internet Setup Screen Fields The following descriptions explain all of the possible fields in the Internet Setup screen The fields that display in this screen depend on whether tan ISP login is required Does Your Internet connection require a login Answer either yes or no These fields display when no login is required Account Name If required Enter the account name provided by your ISP This might also be called the host name Domain Name If required Enter the domain name provided by your ISP These fields display when your ISP requires a login Internet Service Provider The choices are PPPoE or PPPoA e Login The login name provided by your ISP This login name is often an email address e Password The password that you use to log in to your ISP e Service Name if Required If your ISP provided a service name enter it here e Connection Mode Always On Dial on Demand or Manually Connect Idle Timeout In minutes If you want to change the login time out enter a new value in minutes This setting determines how long the modem router keeps the Internet connection active after there is no Internet activity from the LAN A value of 0 zero means never log out Internet IP Address Get Dynamically from ISP Your ISP uses DHCP to assign your IP address Your ISP automatically assigns these addresses e
6. 0F 19 Vednesday Feb 20 2019 10 76 25 initialised fitmware version V1 0 0 5 0 3 Vednesday Feb 20 2013 36 36 17 The log screen shows the following information e Date and time The date and time the log entry was recorded e Source IP The IP address of the initiating device for this log entry Target address The name or IP address of the website or news group visited or to which access was attempted Action Whether the access was blocked or allowed To refresh the log screen click the Refresh button To clear the log entries click the Clear Log button To email the log immediately click the Send Log button Administration 75 N300 Wireless ADSL2 Modem Router DGN2200v4 Manage the Configuration File The configuration settings of the modem router are stored within the modem router in a configuration file You can back up save this file to your computer restore it or reset it to the factory default settings Back Up Settings gt To back up the modem router s configuration settings 1 Select Advanced Administration Backup Settings Backup Settings Save a Copy of current settings Restore caved settings from a fie Revert to factory defaut settings 2 Click Backup Settings A copy of the current settings is saved 3 Choose a location to store the cfg file that is on a computer on your network Restore Configuration Settings gt To restore configuration settings that yo
7. Click Next read the note and click Next again to proceed Because Live Parental Controls uses free OpenDNS accounts you are prompted to log in or create a free account Setting up Live Parental Controls Welcome this setup wizard wil quiddy configure NETGEAR Live Parental Controls Powered by OpenDNS on your NETGEAR router In order to use Live Parental Controls you need a free OpenDNS account Do you already have one Yes use my existing OpenDNS account No I need to create a free OpenONS account 5 Select the radio button that applies to you and click Next e f you already have an OpenDNS account leave the Yes radio button selected e If you do not have an OpenDNS account select the No radio button If you are creating an account the following screen displays Create a free OpenDNS account Username Password e Fill in the fields and click Next NETGEAR genie Basic Settings 26 N300 Wireless ADSL2 Modem Router DGN2200v4 After you log on or create your account the filtering level screen displays Live Parental Controls choose a filtering level for your network All computers connected to your router will be protected from the content you select below You can customize your Live Parental Controls later on our website O High Protects against al aduit elated sites legal activity social networking sites video sharing sites phishing attacks and general time wasters O Moderate Protects against
8. NOTE IMPORTANTE D claration d exposition aux radiations Cet quipement est conforme aux limites d exposition aux rayonnements IC tablies pour un environnement non contr l Cet quipement doit tre install et utilis avec un minimum de 20 cm de distance entre la source de rayonnement et votre corps Interference Reduction Table The table below shows the recommended minimum distance between NETGEAR equipment and household appliances to reduce interference in feet and meters Recommended Minimum Distance in feet and meters Household Appliance Microwave ovens 30 feet 9 meters Baby Monitor Analog 20 feet 6 meters Baby Monitor Digital 40 feet 12 meters Cordless phone Analog 20 feet 6 meters Cordless phone Digital 30 feet 9 meters Bluetooth devices 20 feet 6 meters ZigBee 20 feet 6 meters Notification of Compliance 133
9. the modem router wireless settings change to an automatically generated random SSID and security key 4 Click Apply Your changes are saved Set Up a Wireless Access List by MAC Address You can set up a list of computers and wireless devices that are allowed to join the wireless network This list is based on the unique MAC address of each computer and device Each network device has a MAC address which is a unique 12 character physical address containing the hexadecimal characters 0 9 a f or A F only and separated by colons for example 00 09 AB CD EF 01 Typically the MAC address is on the label of the wireless card or network interface device If you do not have access to the label you can display the MAC address using the network configuration utilities of the computer You might also find the MAC addresses in the Attached Devices screen Torestrict access based on MAC addresses 1 Select Advanced gt Advanced Setup gt Wireless Settings 2 Click the Setup Access List button Visie Card Kcccum iwi CO Tenn eii Comm od Oe 3 Click Add The Wireless Card Access Setup screen opens and displays a list of currently active wireless cards and their Ethernet MAC addresses 4 f the computer or device you want is in the Available Wireless Cards list select that radio button otherwise type a name and the MAC address You can usually find the MAC address on the bottom of the wireless device Adv
10. 1 2 pom FS d Select Advanced Advanced Setup USB Settings Enable any USB Device connectedto the USB port Ows Ono MTOTO Click the Approved Devices button USH Drive Approved Devices This screen shows the approved USB devices and the available USB devices You can remove or add approved USB devices In the Available USB Devices list select the drive that you want to approve Click Add Select the Allow only approved devices check box Click Apply Your change takes effect If you want to work with another USB device first click the Safely Remove USB Device button for the currently connected USB device Connect the other USB device and repeat this process USB Storage 57 Security This chapter explains how to use the basic firewall features of the modem router to prevent objectionable content from reaching the computers and devices on your network This chapter includes the following sections Keyword Blocking of HTTP Traffic Set Up Firewall Rules to Control Network Access Port Triggering to Open Incoming Ports Port Forwarding to Permit External Host Communications How Port Forwarding Differs from Port Triggering Set Up Port Forwarding to Local Servers Set Up Port Triggering Schedule When to Block the Internet Security Event Email Notifications 58 N300 Wireless ADSL2 Modem Router DGN2200v4 Keyword Blocking of HTTP Traffic Use keyword blocking to prevent certain types
11. 1 Launch your browser and select an external site such as www netgear com 2 Access the main menu of the modem routers configuration at http 192 168 0 1 3 Click the Advanced tab and check that an IP address is shown for the WAN port If 0 0 0 0 is shown your modem router has not obtained an IP address from your ISP If your modem router is unable to obtain an IP address from the ISP the problem might be one of the following e f you have selected a login program the service name user name or password might be incorrectly set See the following section Troubleshoot PPPoE or PPPoA e Your ISP might check for your computer s host name Assign the computer host name of your ISP account to the modem router in the browser based Setup Wizard e Your ISP allows only one Ethernet MAC address to connect to Internet and might check for your computer s MAC address In this case do one of the following Inform your ISP that you have bought a new network device and ask them to use the modem router s MAC address Configure your modem router to spoof your computer s MAC address This can be done in the Basic Settings screen Troubleshoot PPPoE or PPPoA To debut the PPPoE or PPPoA connection 1 Access the main menu of the modem router at http 192 168 0 1 2 Select Maintenance Router Status 3 Click the Connection Status button If all of the steps indicate OK your PPPoE or PPPoA connection is up and working If any o
12. 108 N300 Wireless ADSL2 Modem Router DGN2200v4 The VPN Policies screen displays showing that the new tunnel is enabled 8 Repeat these steps for the gateway on LAN B and pay special attention to the following network settings e WAN IP of the remote VPN gateway for example 14 15 16 17 e LAN IP settings of the remote VPN gateway IP address for example 192 168 0 1 Subnet mask for example 255 255 255 0 Pre shared key for example 12345678 Activate a VPN Tunnel To activate a VPN tunnel you can use the VPN Status screen or start using the tunnel gt To use the VPN Status screen to activate a VPN tunnel 1 Select Advanced gt Advanced VPN gt VPN Status and click the VPN Status button The Current VPN Tunnels SAs screen displays Current VPN Tunnels SAS a SPi iin SPIL OUt Policy Name Remote Endpoint Action SLifeTime HLifeTime 2 Click Connect for the VPN tunnel that you want to activate gt To activate a VPN tunnel by using it Use a web browser to go to a URL whose IP address or range is covered by the policy for that VPN tunnel Virtual Private Networking 109 N300 Wireless ADSL2 Modem Router DGN2200v4 View or Change the Status of a VPN Tunnel The VPN Status Log screen displays the status gt To check the status of a VPN tunnel 1 Select Advanced gt Advanced VPN gt VPN Status The VPN Status Log screen displays ILE Es Soe 2003 01 02 00 09 07 added c
13. Use Static IP Address Enter the IP address IP subnet mask and the gateway IP address that your ISP assigned The gateway is the ISP s modem router to which your modem router will connect Domain Name Server DNS Address The DNS server is used to look up site addresses based on their names Get Automatically from ISP Your ISP uses DHCP to assign your DNS servers Your ISP automatically assigns this address Use These DNS Servers If you know that your ISP requires specific servers select this option Enter the IP address of your ISP s primary DNS server If a secondary DNS server address is available enter it also NAT Network Address Translation NAT allows computers on your home network to share the modem router Internet connection NAT is enabled by default because it is needed in most situations The following settings are available e Enable e Disable e Disable Port Scan and DoS Protection NETGEAR genie Basic Settings 24 N300 Wireless ADSL2 Modem Router DGN2200v4 Router MAC Address The Ethernet MAC address that the modem router uses on the Internet port Some ISPs register the MAC address of the network interface card in your computer when your account is first opened They accept traffic only from the MAC address of that computer This feature allows your modem router to use your computer s MAC address also called cloning Use Default Address Use the default MAC address Use Computer MAC Address Th
14. al adult related sites Begal activity and phishing attacks O tow Protects against pornography and phishing attacks Minimal Protects only against phishing attacks O None Nothing blocked 6 Select the radio button for the filtering level that you want and click Next Setup is complete You have successfully setup NETGEAR Live Parental Controls Powered by OpenDNS Next tme you run the Management Utlity it wil take you to the status screen where you can check whether Live Parental Controls are enabled disable oc enable Live Parental Controls e modify basic settings change custom settings such as per user and tme of day based Live Parental Controis 7 Click the Take me to the status screen button Parental controls are now set up for the modem router The dashboard shows Parental Controls as Enabled Basic Wireless Settings The Wireless Settings screen lets you view or configure the wireless network setup The modem router comes with preset security This means that the Wi Fi network name SSID network key password and security option encryption protocol are preset in the factory You can find the preset SSID and password on the bottom of the unit Note The preset SSID and password are uniquely generated for every device to protect and maximize your wireless security NETGEAR genie Basic Settings 27 N300 Wireless ADSL2 Modem Router DGN2200v4 NETGEAR recommends that you do not change y
15. and switches 1492 Used in PPPoE environments 1472 Maximum size to use for pinging Larger packets are fragmented 1468 Used in some DHCP environments 1460 Usable by AOL if you do not have large email attachments for example 1436 Used in PPTP environments or with VPN 1400 Maximum size for AOL DSL 576 Typical value to connect to dial up ISPs To change the MTU size 1 Select Advanced Setup WAN Setup 2 In the MTU Size field enter a value from 64 to 1500 3 Click Apply Your change is saved NETGEAR genie Advanced Home 39 N300 Wireless ADSL2 Modem Router DGN2200v4 LAN Setup The LAN Setup screen allows configuration of LAN IP services such as Dynamic Host Configuration Protocol DHCP and Routing Information Protocol RIP The modem router is shipped preconfigured to use private IP addresses on the LAN side and to act as a DHCP server The modem router s default LAN IP configuration is e LAN IP address 192 168 0 1 e Subnet mask 255 255 255 0 These addresses are part of the designated private address range for use in private networks and are suitable for most applications By default the modem router acts as a DHCP server The modem router assigns IP DNS server and default gateway addresses to all computers connected to the LAN The assigned default gateway address is the LAN address of the modem router The modem router tests each address before it is assigned to avoid duplicate addres
16. http support netgear com If you want instructions about how to wall mount your modem router see Wall Mount Your Router at htto support netgear com app answers detail a_id 18725 N300 Wireless ADSL2 Modem Router DGN2200v4 Unpack Your Modem Router Your box should contain the following items N300 Modem Router Your package might contain more items The filter or splitter provided depends on the region and in some locations a CD is included E i n a Power adapter Filter splitter cm Phone cable Ethernet cable Figure 1 Package contents If any parts are incorrect missing or damaged contact your NETGEAR dealer Keep the carton and original packing materials in case you need to return the product for repair Hardware Features Before you cable your modem router take a moment to become familiar with the front panel back panel and label Pay particular attention to the LEDs on the front panel Hardware Setup 8 N300 Wireless ADSL2 Modem Router DGN2200v4 Front Panel The modem router front panel has the status LEDs and icons shown in the figure The WiFi and WPS icons are buttons WPS button WiFi On Off button Internet DSL Ethernet WAN USB LAN ports 1 4 Power Figure 2 Front panel LEDs and icons The following table describes the LEDs icons and buttons on the front panel Table 1 Front panel icons for buttons and LEDs Icon Descripti
17. no address is acquired the field displays Not Available e Router s IPv6 Address on LAN This field shows the IPv6 address that is acquired for the modem router s LAN interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquired the field displays Not Available In the Login fields enter the login information for the ISP connection Advanced Settings 100 N300 Wireless ADSL2 Modem Router DGN2200v4 This is usually the name that you use in your email address For example if your main mail account is JerAB ISP com then you would type JerAB in this field Some ISPs like Mindspring Earthlink and T DSL require that you use your full email address when you log in If your ISP requires your full email address type it in this field In the Password field enter the password for the ISP connection In the Service Name name field enter a service name If your ISP did not provide a service name leave this field blank Note The default setting of the Connection Mode field is Always on to provide a steady IPv6 connection The modem router never terminates the connection If the connection is terminated for example when the modem is turned off the modem router attempts to reestablish the connection immediately after the PPPoE connection becomes available again Specify how the modem router assigns IPv6 addresses to the devices on
18. or fax machine e Splitter Use with a one line ADSL microfilter to share an outlet with a phone and the modem router e Two line ADSL microfilter with built in splitter Use to share an outlet with a phone and the modem router Hardware Setup 13 N300 Wireless ADSL2 Modem Router DGN2200v4 Cable Your Modem Router You can use either a DSL or a cable fiber Internet connection DSL Internet LEONS P T5 25 e 2s Sans or Cable fiber Figure 7 Cable connections CAUTION Incorrectly connecting a filter to your modem router blocks your DSL connection For help with installation see the installation guide that came in the package with your product For information about how to access the modem router to view or change the settings see Chapter 2 Access the Modem Router Hardware Setup 14 Access the Modem Router This chapter explains how to use NETGEAR genie to set up your modem router after you complete cabling as described in the installation guide and in the previous chapter This chapter contains the following sections Modem Router Setup Preparation Types of Logins and Access NETGEAR genie Setup Use NETGEAR genie after Installation Upgrade the Firmware Dashboard Basic Home Screen Join Your Wireless Network NETGEAR genie App and Mobile genie App 15 N300 Wireless ADSL2 Modem Router DGN2200v4 Modem Router Setup Preparation You can set up
19. password for admin is the same one that you use to access the modem router By default it is password The guest user account has no password e Onthe FTP site the person receiving the files uses the guest user account and enters the password FTP requires that you type something in the password field e Be sure to select the FTP via Internet check box in the USB Storage Advanced Settings screen This option supports both downloading and uploading of files You can enable the HTTP via Internet option on the USB Storage Advanced Settings screen to share large files This option supports downloading files only View a USB Device Attached to the Modem Router To view basic information about the USB storage device 1 Select Basic ReadySHARE USB Storage Rasic Settings Bsti Network Device Mame lee adystere Avalable Network Folders By default the Basic radio button is selected and the screen displays a USB storage device if it is attached to the modem router USB port If you logged in to the modem router before you connected your USB device you might not see your USB device in this screen If this happens log out and then log back in 2 Optional To view the files and folders on the USB device click the network device name or the share name 3 Optional To view more detail or to change the USB device settings click Edit The USB Storage Advanced Settings screen displays See USB Storage
20. subnet mask allows a device to know which other addresses are local to it and which addresses have to be reached through a gateway or modem router e RIP Direction Router Information Protocol RIP allows the modem router to exchange routing information with other routers This setting controls how the modem router sends and receives RIP packets Both is the default setting With the Both or Out Only setting the modem router broadcasts its routing table periodically With the Both or In Only setting the modem router incorporates the RIP information that it receives e RIP Version This setting controls the format and the broadcasting method of the RIP packets that the modem router sends It recognizes both formats when receiving By default the RIP function is disabled RIP 1 is universally supported It is adequate for most networks unless you have an unusual network setup RIP 2 carries more information Both RIP 2B and RIP 2M send the routing data in RIP 2 format RIP 2B uses subnet broadcasting RIP 2M uses multicasting Use Router as a DHCP Server Usually this check box is selected so that the modem router functions as a Dynamic Host Configuration Protocol DHCP server Starting IP Address Specify the start of the range for the pool of IP addresses in the same subnet as the modem router Ending IP Address Specify the end of the range for the pool of IP addresses in the same subnet as the modem router Address Rese
21. such as www netgear com into IP addresses Show Statistics Button gt To view statistics 1 Select Advanced Home or select Administration gt Router Status 2 Inthe Internet Provider WAN Setup pane click the Show Statistics button em Up Time 09 04 30 pA i po te Pet WAN tans voowrun LAN LinkDown_ m ER LANJ LinkOown Ts 145 EL AS i stream stream 0 _ Conmection Speed E 8s YY 2100 The following information is displayed System Up Time The time elapsed since the modem router was last restarted Port The statistics for the WAN Internet and LAN Ethernet ports For each port the screen displays e Status The link status of the port e TxPkts The number of packets transmitted on this port since reset or manual clear e RxPkts The number of packets received on this port since reset or manual clear e Collisions The number of collisions on this port since reset or manual clear e Tx B s The current transmission outbound bandwidth used on the WAN and LAN ports e Rx B s The current reception inbound bandwidth used on the WAN and LAN ports Up Time The time elapsed since this port acquired the link e Poll Interval The interval at which the statistics are updated in this screen To change the polling frequency enter a time in seconds in the Poll Interval field and click Set Interval To stop the polling entirely click Stop A
22. supported by the modem router Types of Logins and Access There are separate types of logins that have different purposes It is important that you understand the difference so that you know which login to use when Modem Router login logs you in to the modem router interface For more information about this login see Use NETGEAR genie after Installation on page 18 e ISP login logs you in to your Internet service Your service provider has provided you with this login information in a letter or some other way If you cannot find this login information contact your service provider e Wireless network key or password Your modem router is preset with a unique wireless network name SSID and password for wireless access This information is on the label on the bottom of your modem router Access the Modem Router 16 N300 Wireless ADSL2 Modem Router DGN2200v4 NETGEAR genie Setup NETGEAR genie runs on any device with a web browser Installation and basic setup takes about 15 minutes to complete Touse NETGEAR genie to set up your modem router 1 2 4 Turn on the modem router by pressing the On Off button Make sure that your computer or wireless device is connected to the modem router with an Ethernet cable wired or wirelessly with the preset security settings listed on the bottom label Launch your Internet browser The first time you set up the Internet connection for your modem router the browser g
23. the IP address setting that you want to use Get an IP address dynamically from the other router The other router on the network assigns an IP address to the modem router while the modem routerr is in AP mode Fixed IP address not recommended Use this setting if you want to manually assign a specific IP address to the modem router while it is in AP mode Using this option effectively requires advanced network experience Advanced Settings 83 N300 Wireless ADSL2 Modem Router DGN2200v4 5 If the other router or gateway in your network also has wireless capability NETGEAR recommends that you use a different wireless channel 6 Click Apply The IP address of the modem router changes and you are disconnected To reconnect close and restart your web browser and type http www routerlogin net Wireless Distribution System WDS You can set up the modem router to be used as a wireless access point AP Doing this enables the modem router to act as a wireless repeater A wireless repeater connects to another wireless modem router as a client where the network to which it connects becomes the ISP service Wireless repeating is a type of Wireless Distribution System WDS A WDS allows a wireless network to be expanded through multiple access points instead of using a wired backbone to link them The following figure shows a wireless repeating scenario Base station access point Repeater access point Figure 12 W
24. this case the modem router overwrites the log and discards its contents 8 Click Apply Your settings are saved Security 69 Administration Manage your network This chapter describes the modem router settings for administering and maintaining your modem router and home network See Remote Management on page 90 for information about upgrading or checking the status of your modem router over the Internet See Traffic Meter on page 102 for information about monitoring Internet traffic This chapter includes the following sections Update the Modem Router Firmware View Router Status View Logs of Web Access or Attempted Web Access Manage the Configuration File Change the Password Password Hecovery 70 N300 Wireless ADSL2 Modem Router DGN2200v4 Update the Modem Router Firmware The modem router firmware routing software is stored in flash memory You can update the firmware from the Administration menu on the Advanced tab You might see a message at the top of the genie screens when new firmware is available for your product You can use the Check button on the Router Update screen to check and update to the latest firmware for your product if new firmware is available gt To check for new firmware and update your modem router 1 Select Advanced Administration Router Update Check fot new version from the intere Click Check Locate and select the upgrade file on your hard disk 2 Cl
25. to access a server on the remote LAN If you want to specify a range fill in the Finish IP Address field This range must be an address range used on the remote LAN Fill in the Subnet Mask field The remote VPN endpoint must have these IP addresses entered as its local addresses Specify the ESP Encapsulating Security Payload settings ESP provides security for the payload data sent through the VPN tunnel In the SPI field enter the required security policy indexes SPIs Each policy has to have unique SPIs These settings need to match the remote VPN endpoint The in setting here has to match the out setting on the remote VPN endpoint and the out setting here has to match the in setting on the remote VPN endpoint From the Encryption list select DES or 3DES and fill in the Key field For 3DES the keys should be 24 ASCII characters and for DES the keys should be 8 ASCII characters DES The Data Encryption Standard DES processes input data that is 64 bits wide encrypting these values using a 56 bit key Faster but less secure than 3DES 3DES Triple DES achieves a higher level of security by encrypting the data three times using DES with three different unrelated keys From the Authentication list select MD5 or SHA 1 and fill in the Key field Virtual Private Networking 118 Troubleshooting This chapter provides information to help you diagnose and solve problems you might have with your m
26. to set up a guest network without wireless security NETGEAR does not recommend this NETGEAR genie Basic Settings 29 N300 Wireless ADSL2 Modem Router DGN2200v4 WPA encryption is built into all hardware that has the Wi Fi certified seal This seal means that the product is authorized by the Wi Fi Alliance http www wi fi org because it complies with the worldwide single standard for high speed wireless local area networking WPA uses a passphrase for authentication and to generate the initial data encryption keys Then it dynamically varies the encryption key WPA PSK uses Temporal Key Integrity Protocol TKIP data encryption implements most of the IEEE 802 11i standard and works with all wireless network interface cards but not all wireless access points WPA2 PSK is stronger than WPA PSK It is advertised to be theoretically indecipherable due to the greater degree of randomness in encryption keys that it generates WPA2 PSK gets higher speed because it is implemented through hardware while WPA PSK is usually implemented through software WPA2 PSK uses a passphrase to authenticate and generate the initial data encryption keys Then it dynamically varies the encryption key WPS PSK WPA2 PSK Mixed Mode can provide broader support for all wireless clients WPA2 PSK clients get higher speed and security and WPA PSK clients get decent speed and security For help with WPA settings on your wireless computer or device see the instr
27. 00 00 eee 123 Troubleshoot PPPoE or PPPOA 0000 ee 123 Troubleshoot Internet Browsing 0000 cece eee eee 124 TCP IP Network Not Responding 000ec cence eee 124 Test the LAN Path to Your Modem Router 0005 124 Test the Path from Your Computer to a Remote Device 125 GhahgesNot Saved sisse sam de Esser fa edente dcr sped ead 125 incorrect Date OF TIME 23 RR ase EGER oS EROR eo d 126 Appendix A Supplemental Information Factory SeN Sies ss cede Fa dana a a PE DE Pa weed 128 SDOCITICtOlS x 6 Cox mud nme c UNUS mA CE Rd E baat acess 130 Appendix B Notification of Compliance Hardware Setup The N300 Wireless ADSL2 Modem Router DGN2200v4 provides an easy and secure way to set up a wireless home network with fast access to the Internet You can connect the modem router to a high speed digital subscriber line DSL or behind a fiber cable modem using an Ethernet WAN interface If you have not already set up your new modem router using the installation guide that comes in the box this chapter walks you through the hardware setup Chapter 2 Access the Modem Router explains how to set up your Internet connection This chapter contains the following sections e Unpack Your Modem Router e Hardware Features e Position Your Modem Router e ADSL Microfilters e Cable Your Modem Router For more information about the topics covered in this manual visit the support website at
28. 00v4 Set Up Firewall Rules to Control Network Access Your modem router has a firewall that blocks unauthorized access to your wireless network and permits authorized inbound and outbound communications Authorized communications are established according to inbound and outbound rules The firewall has the following two default rules Inbound Block all access from outside except responses to requests from the LAN side Outbound Allow all access from the LAN side to the outside You can add rules to further restrict the outbound communications or more widely open the inbound communications Exceptions can be based on the service or application source or destination IP addresses and time of day You can log traffic that matches or does not match the rule and change the order of rule precedence Traffic attempting to pass through the firewall is subjected to the rules in the order shown in the Rules table from the top highest precedence to the bottom In some cases the order of precedence determines which communications are allowed into or out of the network To set up firewall rules 1 Select Advanced gt Security gt Firewall Rules z E Service Type I assises dabas annman One owas Fa ew dl Fades Aeon LAN Uset s WAN Servers te z Row a m ww ew dandi Knead Wien Fu coud Fates Click bere to set up Intound f cewadl Piste foe Oarrang and offer Appic stong 2 You can add edit
29. 6 address that is acquired for the modem router s WAN or Internet interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquired the field displays Not Available e Router s IPv6 Address on LAN This field shows the IPv6 address that is acquired for the modem router s LAN interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquired the field displays Not Available Advanced Settings 96 N300 Wireless ADSL2 Modem Router DGN2200v4 3 Configure the remote 6to4 relay modem router settings by selecting one of the following buttons e Auto Your modem router uses any remote relay router that is available on the Internet This is the default setting Static IP Address Enter the static IPv4 address of the remote relay router This address is usually provided by your IPv6 ISP 4 Specify how the modem router assigns IPv6 addresses to the devices on your home network the LAN by selecting one of the following radio buttons e Use DHCP Server This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function e Auto Config This is the default setting 5 Optional Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 a
30. CKOUNGNS qu icta e dr dh fem ge Dac eau Gadd aceti diee cut 12 One Line ADSL Microfilter lI 12 Two Line ADSL Microfilter llle 13 MUMMY RERO TRETEN 13 Cable Your Modem Router ilis 14 Chapter 2 Access the Modem Router Modem Router Setup Preparation liliis 16 Use Standard TCP IP Properties for DHCP 05 16 Gather ISP Information s anata ucc etant an decr ae wiley ete a 16 Wireless Devices and Security Settings 00 000005 16 Types of Logins and Access 0 000 elles 16 NETGEAR genie Setup xax dort aen aik a an E AE 17 Use NETGEAR genie after Installation llle 18 Upgrade the Firmware nananana annaa 18 Dashboard Basic Home Screen 0 000 eee eee 19 Join Your Wireless Network 2 0 0 0 0000 eee 20 Manual Method sui anecdotes aera ddia EE ardet done 20 Wi Fi Protected Setup WPS Method 00000000 ae 20 NETGEAR genie App and Mobile genie App 05 21 Chapter 3 NETGEAR genie Basic Settings nternet Setup 3x bbc e S E OEQUPINQISQ ERI ba ES 23 Internet Setup Screen Fields 0 0000 cee ee eee 24 Parental Controls iuuenes ice acht 3I Yea Ru waned Raa eaten med ER 25 Basic Wireless Settings a o eode ten Eso eges c ERE reads 27 Wireless Settings Screen Fields 0000 cece eae eee 29 Change WPA Security Option and Passphrase 30 Set Upa Gu
31. Device Network and Access Settings on page 54 USB Storage 53 N300 Wireless ADSL2 Modem Router DGN2200v4 USB Storage Device Network and Access Settings You can set up the device name workgroups and network folders for your USB device gt To view or change the USB storage advanced settings 1 Select Advanced USB Storage Advanced Settings USH Sher ape Advanced Settings p CE teadyshare Workgroup fae access eme wn Pon a a S biz ineat e nderiogn cal hana in Ma intecned taps FO 0 0 shares FT FIP v intemet Rp 0 0 O shares 2 Specify access to the USB storage device e Network Device Name The default is readyshare This is the name used to access the USB device connected to the modem router e Workgroup If you are using a Windows workgroup rather than a domain the workgroup name is displayed here The name works only in an operating system that supports NetBIOS such as Microsoft Windows e Access Method Select the check boxes for the access methods that you want Network Neighborhood MacShare Enabled by default HTTP Enabled by default You can type http readyshare routerlogin net shares to access the USB drive HTTP via Internet Disabled by default If you enable this setting remote users can type http lt public IP address shares for example http 1 1 10 102 shares or a URL domain name to access the USB drive over the Internet This feature suppor
32. Doe Liga DHEP Derer gute Crest use Tite inertiae ND The modem router automatically detects the information in the following fields e Router s IPv6 Address on WAN This field shows the IPv6 address that is acquired for the modem router s WAN or Internet interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquired the field displays Not Available Router s IPv6 Address on LAN This field shows the IPv6 address that is acquired for the modem router s LAN interface The number after the slash is the length of the prefix which is also indicated by the underline under the IPv6 address If no address is acquired the field displays Not Available Optional In the DHCP User Class If Required field enter a host name Most people do not need to fill in this field but if your ISP has given you a specific host name enter it here Optional In the Domain Name If Required field enter a domain name You can type the domain name of your IPv6 ISP Do not enter the domain name for the IPv4 ISP here For example if your ISP s mail server is mail xxx yyy zzz you would type XXX yyy zzz as the domain name If your ISP provided a domain name type it in this field For example Earthlink Cable might require a host name of home and Comcast sometimes supplies a domain name Specify how the modem router assigns IPv6 a
33. EN es isi a amp Plins SPA teal Pulsy Hune Remote Emilpoanit Action iee Hlief ae oe i 131 711 100 17 Drop 358U SEU 2 Click Drop for the VPN tunnel that you want to deactivate Virtual Private Networking 111 N300 Wireless ADSL2 Modem Router DGN2200v4 Delete a VPN Tunnel Todelete VPN tunnel 1 Select Advanced gt Advanced VPN gt VPN Policies Ene Mame Mpe Lona Pite ise 4 a mo 192 168 0 1 755 255 255 0 472 106 0 1 255 755 2550 Mes ELE E 2 Select the radio button for the VPN tunnel 3 Click Delete Auto Policy Example You need to configure matching VPN settings on both VPN endpoints The outbound VPN settings on one end have to match to the inbound VPN settings on other end and vice versa Auto policy creates a typical automated Internet Key Exchange IKE setup Auto Policy uses the IKE protocol to define the authentication scheme and automatically generate the encryption keys Gateway A Gateway B IP 192 168 0 1 VPN Tunnel IP 192 168 3 1 14 15 16 17 22 23 24 25 Figure 15 Example of an Auto policy for a gateway to gateway tunnel Virtual Private Networking 112 N300 Wireless ADSL2 Modem Router DGN2200v4 Add or Edit a VPN Auto Policy An Auto VPN policy uses the IKE Internet Key Protocol to exchange and negotiate parameters for the IPSec SA security association Because of this negotiation not all of the settings on this VPN gateway have to match the settings
34. Environmental Operating temperature 0 to 40 C 32 to 104 F Operating humidity 10 to 90 relative humidity noncondensing Storage temperature 20 to 70 C 4 to 158 F Storage humidity 5 to 95 relative humidity noncondensing Regulatory compliance Interface specifications FCC Part 15 Class B FCC Part 68 VCCI Class B EN 55 022 CISPR 22 Class B LAN 10BASE T or 100BASE Tx RJ 45 WAN ADSL Dual RJ 11 pins 2 and 3 T1 413 G DMT G Lite ITU Annex A hardware or Annex B hardware ITU G 992 5 ADSL2 Supplemental Information 130 Notification of Compliance NETGEAR wireless routers gateways APs Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices Failure of the end user to comply with the applicable requirements may result in unlawful operation and adverse action against the end user by the applicable National regulatory authority This product s firmware limits operation to only the channels allowed in a particular Region or Country Therefore all options described in this user s guide may not be available in your version of the product Europe EU Declaration of Conformity Products bearing the marking comply with the following EU directives EMC Directive 2004 108 EC Low Voltage Directive 2006 95 EC If this product has t
35. Existing QoS Policy gt To edit or delete a QoS policy T 2 Select Advanced QoS Setup Select the radio button next to the QoS policy that you want to edit or delete and do one of the following e Click Delete to remove the QoS policy e Click Edit to edit the QoS policy Follow the instructions in the preceding sections to change the policy settings Click Apply Your changes are saved in the QoS Setup screen NETGEAR genie Advanced Home 47 USB Storage This chapter describes how to access and configure a USB storage drive attached to your modem router The USB port on the modem router can be used only to connect USB storage devices like flash drives or hard drives Do not connect computers USB modems CD drives or DVD drives to the modem router USB port This chapter contains the following sections USB Drive Requirements Connect a USB Storage Device to the Modem Router Safely Hemove a USB Drive Access the USB Storage Device File Sharing Scenarios Available Network Folders USB Storage Device Network and Access Settings Specify Approved USB Devices For more about ReadySHARE features visit www netgear com readyshare 48 N300 Wireless ADSL2 Modem Router DGN2200v4 USB Drive Requirements The modem router works with 1 0 and 1 1 USB Full Speed and 2 0 USB High Speed standards The approximate USB bus speeds are shown in the following table Actual bus speeds can vary depending on the CP
36. For automatic key exchange the SPI is generated by the IKE protocol e Policy Name The VPN policy associated with this SA e Remote Endpoint The IP address on the remote VPN endpoint e Action Either a Drop or a Connect button Virtual Private Networking 110 N300 Wireless ADSL2 Modem Router DGN2200v4 e SLifeTime Secs The remaining soft lifetime for this SA in seconds When the soft lifetime becomes 0 zero the SA security association is renegotiated HLifeTime Secs The remaining hard lifetime for this SA in seconds When the hard lifetime becomes 0 zero the SA security association is terminated It is reestablished if necessary Deactivate a VPN Tunnel Sometimes a VPN tunnel has to be deactivated for testing purposes You can deactivate a VPN tunnel from two places e Policy table on VPN Policies screen e VPN Status screen Touse the Policy Table to deactivate a VPN tunnel 1 Select Advanced gt Advanced VPN gt VPN Policies L3 Ae b LH ric Rent PELMULA V PMLESS ESSO pols a e ow ee arane ues 2 Inthe Policy Table clear the Enable check box for the VPN tunnel that you want to deactivate 3 Click Apply To reactivate the tunnel select the Enable check box and click Apply Touse the VPN Status Screen to deactivate a VPN tunnel 1 Advanced gt Advanced VPN gt VPN Status and click the VPN Status button The Current VPN Tunnels SAs screen displays Coane V
37. Mad Sere Sere to This E mail Address My rial carea L quit e aufth ente ation User Name Password Send Alert immeditety When someone attempts to vist a blocked site Send bogs acco da to this schedute Ov 2 Select the Turn Email Notification On check box 3 In the Your Outgoing Mail Server field enter the name of your ISP s outgoing SMTP mail server such as mail mylSP com You might be able to find this information in the configuration screen of your email program If you leave this field blank log and alert messages are not sent 4 Enter the email address to which logs and alerts are sent in the Send to This Email Address field This email address is also used for the From address If you leave this field blank log and alert messages are not sent 5 If your outgoing email server requires authentication select the My Mail Server requires authentication check box Fill in the User Name and Password fields for the outgoing email server 6 Optional Select the Send Alerts Immediately check box Email alerts are sent immediately when someone attempts to visit a blocked site 7 Optional Fill in the fields in the Send logs according to this schedule section of the screen Logs are sent automatically If the log fills up before the specified time the log is emailed After the log is sent the log is cleared from the modem router memory If the modem router cannot email the log file the log buffer might fill up In
38. Modem Router 18 N300 Wireless ADSL2 Modem Router DGN2200v4 Dashboard Basic Home Screen The modem router Basic Home screen has a dashboard that lets you see the status of your Internet connection and network at a glance You can click any of the six sections of the dashboard to view and change the settings The left column has menus You can use the Advanced tab to access more menus and screens NETGEAR genie Language Menus eae Click the Click to Advanced view details tab to view G3 m more seta Central ReadySHARE Guest Network Help Figure 8 Basic Home screen with dashboard language and online help Home This dashboard screen displays when you log in to the modem router Internet Set update and check the ISP settings of your modem router e Wireless View or change the wireless settings for your modem router Attached Devices View the devices connected to your network e Parental Controls Download and set up parental controls to prevent objectionable content from reaching your computers e ReadySHARE If you connected a USB storage device to the modem router then it is displayed here e Guest Network Set up a guest network to allow visitors to use your modem router s Internet connection Advanced tab Set the modem router up for unique situations such as when remote access by IP or by domain name from the Internet is needed See Chapter 8 Advanced Settings You need a solid understanding of
39. NETGEAR N300 Wireless ADSL2 Modem Router DGN2200v4 User Manual March 2013 202 11157 01 350 East Plumeria Drive San Jose CA 95134 USA N300 Wireless ADSL2 Modem Router DGN2200v4 Support Thank you for selecting NETGEAR products After installing your device locate the serial number on the label of your product and use it to register your product at https my netgear com You must register your product before you can use NETGEAR telephone support NETGEAR recommends registering your product through the NETGEAR website For product updates and web support visit htto support netgear com Phone US amp Canada only 1 888 NETGEAR Phone Other Countries Check the list of phone numbers at http support netgear com general contact default aspx Trademarks NETGEAR the NETGEAR logo and Connect with Innovation are trademarks and or registered trademarks of NETGEAR Inc and or its subsidiaries in the United States and or other countries Information is subject to change without notice 2013 All rights reserved Contents Chapter 1 Hardware Setup Unpack Your Modem ROUGE 2s oper rbv fe REF REP Ww 8 Hardware Features xsu secar eee anea ong 8 Front Pale teat betur due Ro d Uode bn e EE e dp ai 9 Back Pali amp lsu sid wes Sestri matt sa x tabo ERR aD nc RU heo Sa n 11 AD lle ccs xatd HOS ROCHE EP Rd IHRE HER Redon RERO HP 11 Position Your Modem Router 0 000 c eee eee eee ees 12 ADS LIMI
40. Router DGN2200v4 complies with Part 15 Subpart B of FCC CFR47 Rules Operation is subject to the following two conditions This device may not cause harmful interference and e This device must accept any interference received including interference that may cause undesired operation 131 N300 Wireless ADSL2 Modem Router DGN2200v4 FCC Radio Frequency Interference Warnings amp Instructions This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following methods Reorient or relocate the receiving antenna Increase the separation between the equipment and the receiver Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected Consult the dealer or an experienced radio TV technicia
41. Router as DHCP Server check box Click Apply If no DHCP server is on your network set your computers IP addresses manually so that they can access the modem router AOUN Address Reservation When you specify a reserved IP address for a computer on the LAN that computer always receives the same IP address each time it accesses the modem router s DHCP server Reserved IP addresses should be assigned to computers or servers that require permanent IP settings To reserve an IP address 1 Select Advanced gt Setup gt LAN Setup 2 In the Address Reservation section of the screen click the Add button 3 Inthe IP Address field type the IP address to assign to the computer or server Choose an IP address from the modem router s LAN subnet such as 192 168 0 x 4 Type the MAC address of the computer or server NETGEAR genie Advanced Home 42 N300 Wireless ADSL2 Modem Router DGN2200v4 Tip If the computer is already on your network you can copy its MAC address from the Attached Devices screen and paste it here 5 Click Apply The reserved address is entered into the table The reserved address is not assigned until the next time the computer contacts the modem router s DHCP server Reboot the computer or access its IP configuration and force a DHCP release and renew To edit or delete a reserved address entry select the radio button next to the reserved address you want to edit or delete Then click Edit or Delete
42. Select USB Storage gt Basic Settings 2 Click the Safely Remove USB Device button This takes the drive offline 3 Physically disconnect the USB drive Access the USB Storage Device When you connect the USB device to the modem router USB port it might take up to 2 minutes before it is ready for sharing By default the USB storage device is available to all computers on your local area network LAN gt To access the USB device from a Mac 1 Select Go Connect to Server 2 Enter smb readyshare as the server address 3 Click Connect Toaccess the USB device from Windows Use any of these methods to access the USB device e Select Start gt Run Enter readyshare in the dialog box and click OK e Open a browser and enter Weadyshare in the address bar e Open My Network Places and enter Weadyshare in the address bar To map the USB device to a Windows network drive 1 Visit www netgear com readyshare 2 In the ReadySHARE USB Storage Access pane click PC Utility The readyshareconnect exe file is downloaded to your computer USB Storage 50 N300 Wireless ADSL2 Modem Router DGN2200v4 3 Launch readyshareconnect exe What network folder would you like to map Speuty the drive leer for the connection and the folder that you want to connect to Qe z Felder auvUUETTT Example server share 4 Becconest a logon Connect uung different credentials Lennect 16 4 Vick ste that you Cam vis f
43. Server The primary DNS server that resolves IPv6 domain name records for the modem router Secondary DNS Server The secondary DNS server that resolves IPv6 domain name records for the modem router Note f you do not specify the DNS servers the modem router uses the DNS servers that are configured for the IPv4 Internet connection on the Internet Setup screen See Internet Setup on page 23 4 Specify how the modem router assigns IPv6 addresses to the devices on your home network the LAN by selecting one of the following radio buttons e Use DHCP Server This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function e Auto Config This is the default setting 5 In the IPv6 Address Prefix Length fields specify the static IPv6 address and prefix length of the modem router s LAN interface If you do not specify an ID here the modem router generates one automatically from its MAC address 6 Click the Apply button Advanced Settings 98 N300 Wireless ADSL2 Modem Router DGN2200v4 IPv6 DHCP Tosetup an IPv6 Internet connection with a DHCP server 1 Select Advanced gt Advanced Setup gt IPv6 The IPv6 screen displays In the Internet Connection Type list select DHCP The screen adjusts inter ned C onreecten Typs lka fla Peed Daan ome S RA Fei B rbi es m ATUM Hol Acacia AH Sera Beaders E Bikk ns Cm RB Hed Hase ee P idie Lim
44. The normal MTU maximum transmit unit value for most Ethernet networks is 1500 bytes or 1492 bytes for PPPoE connections For some ISPs you might need to reduce the MTU This is rarely required You should change the setting in this field only if you are sure that it is necessary for your ISP connection See Change the MTU Size on page 38 NAT Filtering Network Address Translation NAT determines how the modem router processes inbound traffic Secured NAT provides a secured firewall to protect the computers on the LAN from attacks from the Internet but might prevent some Internet games point to point applications or multimedia applications from functioning Open NAT provides a much less secured firewall but allows almost all Internet applications to function Disable SIP ALG The Session Initiation Protocol SIP Application Level Gateway ALG is enabled by default to optimize VoIP phone calls that use the SIP Select the Disable SIP ALG check box to disable the SIP ALG Disabling the SIP ALG might be useful when you are running certain applications NETGEAR genie Advanced Home 37 N300 Wireless ADSL2 Modem Router DGN2200v4 Default DMZ Server The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation NAT The modem router recognizes some of these applications and works correctly with them but other applications might n
45. U speed memory speed of the network and other variables Table 3 USB drive speeds Bus Speed Sec USB 1 1 12 Mbits USB 2 0 480 Mbits The modem router works with most USB compliant external flash and hard drives For the most up to date list of USB drives that the modem router supports visit http kbserver netgear com readyshare The modem router supports both read and write for FAT16 FAT32 NTFS and Linux file systems EXT2 Note Some USB external hard drives and flash drives require you to load the drivers onto the computer before the computer can access the USB device Such USB devices do not work with the modem router Connect a USB Storage Device to the Modem Router ReadySHARE lets you access and share or a USB drive connected the modem router USB port If your USB device has special drivers it is not compatible gt To connect a USB storage device 1 Insert your USB storage device into the USB port on the rear panel of the modem router 2 If your USB device has a power supply you must use it when you connect the USB device to the modem router USB Storage 49 N300 Wireless ADSL2 Modem Router DGN2200v4 It might take up to 2 minutes before the USB device is ready for sharing Safely Remove a USB Drive If you want to physically disconnect a USB drive from the modem router USB port first log in to the modem router and safely remove it Toremove a USB disk drive safely 1
46. When you first set up your modem router NETGEAR genie automatically starts when you launch an Internet browser on a computer that is connected to the modem router If you want to view or change settings for the modem router you can use genie again 1 Launch your browser from a computer or wireless device that is connected to the modem router 2 Type http www routerlogin net or http www routerlogin com The login window displays 3 Enter admin for the modem router user name and password for the modem router password both in lowercase letters Note The modem router user name and password are different from the user name and password for logging in to your Internet connection For more information see Types of Logins and Access on page 16 Upgrade the Firmware When you set up your modem router and are connected to the Internet the modem router automatically checks for you to see if newer firmware is available If it is a message is displayed on the top of the screen For more information see Update the Modem Router Firmware on page 71 Click the message when it shows up and click Yes to upgrade the modem router with the latest firmware After the upgrade the modem router restarts A CAUTION Do not try to go online turn off the modem router shut down the computer or do anything else to the modem router until the modem router finishes restarting and the Power LED has stopped blinking for several seconds Access the
47. You have to configure static routes only for unusual cases such as multiple modem routers or multiple IP subnets on your network As an example of when a static route is needed consider the following case e Your primary Internet access is through a cable modem to an ISP e You have an ISDN modem router on your home network for connecting to the company where you are employed This modem router s address on your LAN is 192 168 0 100 e Your company s network address is 134 177 0 0 When you first configured your modem router two implicit static routes were created A default route was created with your ISP as the gateway and a second static route was created to your local network for all 192 168 0 x addresses With this configuration if you attempt to access a device on the 134 177 0 0 network your modem router forwards your request to the ISP The ISP forwards your request to the company where you are employed and the request is likely to be denied by the company s firewall In this case you have to define a static route telling your modem router that 134 177 0 0 should be accessed through the ISDN modem router at 192 168 0 100 In this example e The Destination IP Address and IP Subnet Mask fields specify that this static route applies to all 134 177 x x addresses The Gateway IP Address field specifies that all traffic for these addresses should be forwarded to the ISDN modem router at 192 168 0 100 e A metric value of 1 w
48. anced Settings 82 6 7 8 1 2 N300 Wireless ADSL2 Modem Router DGN2200v4 You can copy and paste the MAC addresses from the Attached Devices screen into the MAC Address field of this screen To do this use each wireless computer to join the wireless network The computer should then appear in the Attached Devices screen Click Add The screen changes back to the list screen Add each computer or device you want to allow to connect wirelessly Select the Turn Access Control On check box Click Apply gt To edit a wireless device or delete it from the access list Select Advanced gt Advanced Setup gt Wireless Settings The Advanced Wireless Settings screen displays In the table select the radio button next to the wireless device that you want to edit or delete 3 Do one of the following a b Click the Edit button The Edit Wireless Card screen displays Edit the address information Click the Accept button Click the Delete button The address is removed from the table Wireless AP You can set up the modem router to run as an access point AP on the same local network as another router gt To set up the modem router as an AP 1 Use an Ethernet cable to connect the Ethernet WAN port Ethernet port 4 of this modem router to a LAN port in the other router Select Advanced gt Advanced Setup gt Wireless AP Select the Enable Access Point Mode check box Select the check box for
49. and sends this reply message to your computer 7 Upon receiving the incoming message to destination port 113 your modem router checks its session table and learns that there is an active session for port 113 associated with your computer The modem router replaces the message s destination IP address with your computer s IP address and forwards the message to your computer 8 When you finish your chat session your modem router eventually senses a period of inactivity in the communications The modem router then removes the session information from its session table and incoming traffic is no longer accepted on port numbers 33333 or 113 To configure port triggering you need to know which inbound ports the application needs Also you need to know the number of the outbound port that will trigger the opening of the inbound ports You can usually determine this information by contacting the publisher of the application or the relevant user groups or news groups Only one computer at a time can use the triggered application Security 61 N300 Wireless ADSL2 Modem Router DGN2200v4 Port Forwarding to Permit External Host Communications In both of the preceding examples your computer initiates an application session with a server computer on the Internet However you might need to allow a client computer on the Internet to initiate a connection to a server computer on your network Normally your modem router ignores any inbound tra
50. angues Medie 99 ludum pP ETE 100 TAG MCT e eeens ur bernard Bod ariescedsg dirus aile deg d Decus iei d 102 Chapter9 Virtual Private Networking Overview of VPN Configuration 0000 cece eee eee 105 Client to Gateway VPN Tunnels 00000 ee eee eee 105 Gateway to Gateway VPN Tunnels 00000 eee eae 105 Set Up a Client to Gateway VPN 00 000 cece eee eee 106 Add a Gateway to Gateway VPN Tunnel 0000000 107 Aciivateva VPN TUNNE st sscss sau tags eames whna salen ae Cesena 109 View or Change the Status of a VPN Tunnel 20 110 Deactivate a VPN Tunnel 0 0000 eee tees 111 Delete a VPN Tunnel 4s cris 3m me eom Sees 112 AWO Foley Example suco dosamid nana comea abuse s ADR a seer SUR ER 112 Add or Edit a VPN Auto Policy e is amea llli elei 113 Add or Edit a Manual VPN Policy isses 117 N300 Wireless ADSL2 Modem Router DGN2200v4 Chapter 10 Troubleshooting Troubleshoot with the LEDS 5 su err eek mm rar tace 120 Power LEDS Off sca vances dandandar rami d Gebet ard mao anm 120 Power LED SB case he iss doa REGE REUS hd NOD ecc a 120 LAN LED ISOM ue ocRpRRD PRiGEqGer HERR S PEE ahead 120 Cannot Log In to the Modem Router 0 000 e eee eee 121 Troubleshoot the Internet Connection 0 000 cee eee 122 PID SE MEM LL 122 Internet LED Is Red 0 0 0 eee 122 Obtaining an Internet IP Address
51. both incoming and outgoing connections are allowed Ensure that the remote VPN endpoint is set to use Main Mode Select the Diffie Hellman DH Group from the list The Diffie Hellman algorithm is used when keys are exchanged The DH Grroup setting determines the bit size used in the exchange This value needs to match the value used on the remote VPN gateway Select the local identity type Select an option to match the Remote Identity Type setting on the remote VPN endpoint WAN IP Address Your Internet IP address Fully Qualified Domain Name Your domain name Fully Qualified User Name Your name email address or other ID Select the remote identity type Virtual Private Networking 114 N300 Wireless ADSL2 Modem Router DGN2200v4 Select the option that matches the Local Identity Type setting on the remote VPN endpoint IP Address The Internet IP address of the remote VPN endpoint Fully Qualified Domain Name The domain name of the remote VPN endpoint Fully Qualified User Name The name email address or other ID of the remote VPN endpoint 7 Specify the following parameters Select the encryption algorithm This is the encryption algorithm used for both IKE and IPSec This setting has to match the setting used on the remote VPN gateway DES and 3DES are supported DES The Data Encryption Standard DES processes input data that is 64 bits wide encrypting these values using a 56 bit key Fas
52. close the ports when they are no longer needed Security 65 N300 Wireless ADSL2 Modem Router DGN2200v4 Note If you use applications such as multiplayer gaming peer to peer connections real time communications such as instant messaging or remote assistance a feature in Windows XP you should also enable Universal Plug and Play UPnP To configure port triggering you need to know which inbound ports the application needs and the number of the outbound port that will trigger the opening of the inbound ports You can usually determine this information by contacting the publisher of the application or user groups or news groups Toenable port triggering 1 Select Advanced gt Port Forwarding Port Triggering 2 Select the Port Triggering radio button Port Forwarding Port Triggering Please select the service type O Port Forwarding Por Trigpering LIDisab e Port Triggering Port Triggering Time out in minutes Port Triggeramg Portmap Table Te tease Service Nome Service Te T rei Coonmction Service User dhamma ammai by 3 Clear the Disable Port Triggering check box Note If the Disable Port Triggering check box is selected after you configure port triggering port triggering is disabled However any port triggering configuration information you added to the modem router is retained even though it is not used 4 In the Port Triggering Timeout field enter a value up to 9999 minutes Th
53. could see share partition1 directory1 You can read and copy files from the USB folder USB Storage 51 N300 Wireless ADSL2 Modem Router DGN2200v4 File Sharing Scenarios You can share files on the USB drive for a wide variety of business and recreational purposes The files can be any Windows Mac or Linux file type including text Word PowerPoint Excel MP3 pictures and multimedia files USB drive applications include e Sharing multimedia with friends and family such as MP3 files pictures and other multimedia with local and remote users e Sharing resources on your network You can store files in a central location so that you do not have to power up a computer to perform local sharing In addition you can share files between Macintosh Linux and Windows computers by using the USB drive as a go between across the systems Sharing files such as Word documents PowerPoint presentations and text files with remote users A few common uses are described in the following sections Share Photos You can create your own central storage location for photos and multimedia This method eliminates the need to log in to and pay for an external photo sharing site gt To share files with your friends and family 1 Insert your USB drive into the USB port on the modem router either directly or with a USB cable Computers on your local area network LAN can automatically access this USB drive using a web browser or Micros
54. ction is through the ADSL port or the WAN Ethernet port 4 You can use this field to select Must use DSL WAN or Must use Ethernet WAN Use port 4 as By default Auto Detect is selected so that the modem router detects if Ethernet port 4 is used as a LAN or WAN port For example if you connect a computer to Ethernet port 4 then it works as a LAN port You can select LAN or WAN if you do not want to use the auto detect setting Disable Port Scan and DoS Protection DoS protection protects your LAN against denial of service attacks such as Syn flood Smurf Attack Ping of Death Teardrop Attack UDP Flood ARP Attack Spoofing ICMP Null Scan and many others This should be disabled only in special circumstances Default DMZ Server This feature is sometimes helpful when you are playing online games or videoconferencing Be careful when using this feature because it makes the firewall security less effective See the following section Default DMZ Server Respond to Ping on Internet Port If you want the modem router to respond to a ping from the Internet select this check box Use this feature only as a diagnostic tool because it allows your modem router to be discovered Do not select this check box unless you have a specific reason Disable IGMP Proxying The IGPM proxying feature lets a LAN computer receive the multicast traffic directed to it from the Internet Selecting this check box prevents this from occurring MTU Size in bytes
55. d the field displays Not Available e Router s IPv6 Address on LAN This field shows the IPv6 address that is acquired for the modem router s LAN interface The number after the slash is the length of the prefix which is also indicated by the underline under the IPv6 address If no address is acquired the field displays Not Available Specify how the modem router assigns IPv6 addresses to the devices on your home network the LAN by selecting one of the following radio buttons e Use DHCP Server This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function e Auto Config This is the default setting Optional Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the modem router s LAN interface If you do not specify an ID here the modem router generates one automatically from its MAC address 5 Click the Apply button Advanced Settings 94 N300 Wireless ADSL2 Modem Router DGN2200v4 IPv6 Auto Config Tosetup an IPv6 Internet connection through auto configuration 1 Select Advanced gt Advanced Setup gt IPv6 The IPv6 screen displays In the Internet Connection Type list select Auto Config The screen adjusts iene C omeen Tepe DOP isa Clase O6 Repani EEP Daman Home 6 Hague Rs ri 8 Baa Bbi eg H ad Hol decet uod LAM Saa Route Ex Bd ei iml BR Hy ecu ui FORO nu
56. d you can Mwiryit update me parameters rough f VPN temno links en fe efl men 3 Click Next pep dE diae Fon Haw ind Foe reine I Ten Yh i Fe ie binii lr Ue Visa id Tob be sni kan 11142478 Fh uH Bonn uel Esa Ae E A mires PH Gaira 1 peers PY Cle denies PCT Virtual Private Networking 107 N300 Wireless ADSL2 Modem Router DGN2200v4 4 Fill in the Connection Name and pre shared key fields Select the A remote VPN Gateway radio button and click Next iepzof X Ferne Pea eun er the lii erred rame MEUM ro Esa mmeo PANY IP dda ont dna rra raTa ey acu D EZ 5 Fill in the IP address or FQDN for the target VPN endpoint WAN connection and click Next Fiep Jof fee Commecion Remade Rccsunddie aa ee Top ana LAN UP aede arse Slane eed Magi Pe LER a 189 l Sub Mark IER EER LEE 6 Fill in the IP Address and Subnet Mask fields for the target endpoint that can use this tunnel and click Next The VPN Wizard Summary screen displays Bhika riety eee dp Cones Marre Frirrssdi eM E roiie Bares Der dcii E Thira Fia P Veg 16g E 1061595 255 Th 8 Ferrata Ex Lis i Clap Bic ei ir lutea Level a vid ed 244 244 8 Les id i Vee cee ci nu hn varese Ea VPE nrc reed preter Faris rich Tams iz app Eon haga To view the VPNC recommended authentication and encryption settings used by the VPN Wizard click the here link 7 Click Done on the Summary screen Virtual Private Networking
57. ddress of the modem router s LAN interface If you do not specify an ID here the modem router generates one automatically from its MAC address 6 Click the Apply button IPv6 Pass Through In pass through mode the modem router works as a Layer 2 Ethernet switch with two ports LAN and WAN Ethernet ports for IPv6 packets The modem router does not process any IPv6 header packets Tosetup a pass through IPv6 Internet connection 1 Select Advanced gt Advanced Setup gt IPv6 The IPv6 screen displays 2 Inthe Internet Connection Type list select Pass Through The screen adjusts but no additional fields display 3 Click the Apply button IPv6 Fixed Tosetup a pass through IPv6 Internet connection 1 Select Advanced gt Advanced Setup gt IPv6 The IPv6 screen displays 2 Select Fixed from the menu Advanced Settings 97 N300 Wireless ADSL2 Modem Router DGN2200v4 The screen adjusts ll rri ivi V miu Fini jue WAH Soh Pal AG sus af Longus dirti A cani LAM Taiga OP Add enn Happen lee CHOF Tawar 17 Agi Geng 346 Ades Prete Leng 3 Configure the fixed IPv6 addresses for the WAN connection The following fields are included in this screen e IPv6 Address Prefix Length The IPv6 address and prefix length of the modem router WAN interface e Default IPv6 Gateway The IPv6 address of the default IPv6 gateway which is supposed to be on the modem router s WAN interface e Primary DNS
58. ddresses to the devices on your home network the LAN by selecting one of the following radio buttons Advanced Settings 95 N300 Wireless ADSL2 Modem Router DGN2200v4 e Use DHCP Server This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function e Auto Config This is the default setting 6 Optional Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the modem router s LAN interface If you do not specify an ID here the modem router generates one automatically from its MAC address 7 Click the Apply button IPv6 6to4 Tunnel The remote relay router is the router to which your modem router creates the 6to4 tunnel Make sure that the IPv4 Internet connection is working before you apply the 6to4 tunnel settings for the IPv6 connection gt To set up an IPv6 Internet connection by using a 6to4 tunnel 1 Select Advanced gt Advanced Setup gt IPv6 The IPv6 screen displays 2 Inthe Internet Connection Type list select 6to4 Tunnel The screen adjusts Bi mi Ive ami Te e Berets il eb Ela Pad ea Tri daga mur N ADEL LAN Sets Boii SS eddie Ont LAM Pigi Awad n Lans LATT TETI CT Dhia DRC Sere p a Tr agio Denia liia is iiber aac The modem router automatically detects the information in the following fields e Router s IPv6 Address on WAN This field shows the IPv
59. detected or the device is in bridge mode an external device handles the ISP connection DSL Solid green You have a DSL connection In technical terms the DSL port is synchronized with an ISP s network access device Xe Blinking green The modem router is negotiating the best possible speed on the DSL line Solid red The DSL connection could not be established Off The unit is off or there is no DSL link established WAN Network Solid green The modem router obtained a WAN IP address over Ethernet WAN port 4 and the Internet connection is established Off Ethernet WAN port 4 is not being used as a WAN port or the ISP has not yet assigned an IP address over this port Solid green A USB device is connected and ready to use Blinking green A USB device is in use Off No USB device connected or someone clicked the Safely Remove Hardware button or an error has occurred with the device Solid green The LAN port has detected an Ethernet link with a device Off No link is detected on this port Power Solid green Power is supplied to the modem router e Solid red POST power on self test failed or a device malfunction has occurred e Off Power is not supplied to the modem router Blinking When the Restore Factory Settings button is pressed for 6 seconds pressing it briefly resets the unit the Power LED blinks red three times and then turns green as the modem router resets to the factory defaults
60. dministration 73 N300 Wireless ADSL2 Modem Router DGN2200v4 Connection Status Button gt To view the Internet connection status 1 2 Select Advanced Home or select Administration gt Router Status In the Internet Connection pane click the Connection Status button Connection Status Connection Time 00 04 16 Connection Status On Negotiation Authentication IP Address 989 143 119 147 Subnet Mask 255 255 255 255 The following information displays Connection Time The time elapsed since the last connection to the Internet through the DSL port e Connection Status On or Off e Negotiation On or Off Authentication On or Off IP Address The IP address that is assigned to the modem router e Subnet Mask The subnet mask that is assigned to the modem router Optional Connect or disconnect the modem router to the Internet e Click Connect e Click Disconnect The Close Window button closes the Connection Status screen Wireless Settings 2 4 GHz The following settings are displayed Name SSID The wireless network name SSID that the modem router uses Region The geographic region where the modem router is being used It might be illegal to use the wireless features of the modem router in some parts of the world Channel The operating channel of the wireless port being used The default channel is Auto When Auto is selected the modem router finds the best operatin
61. e HTTP port in from the Internet Outbound communications going Enabled all out to the Internet Source MAC filtering Disabled Supplemental Information 128 Table 4 Factory default settings Continued Feature N300 Wireless ADSL2 Modem Router DGN2200v4 Default Behavior Wireless Wireless communication Enabled SSID name Security Can be found on the label on the bottom of the unit Can be found on the label on the bottom of the unit Broadcast SSID Enabled Country region RF channel Operating mode United States in North America otherwise varies by region Auto Up to 145 Mbps Data rate Output power Access point Best Full Enabled Authentication type Wireless card access list Pre shared Key All wireless stations allowed Supplemental Information 129 Specifications Table 5 Specification Network protocol and standards compatibility N300 Wireless ADSL2 Modem Router DGN2200v4 Description TCP IP RIP 1 RIP 2 DHCP PPPoE or PPPoA RFC 1483 Bridged or Routed Ethernet and RFC 1577 Classical IP over ATM Power adapter North America 120V 60 Hz input UK Australia 240V 50 Hz input Europe 230V 50 Hz input All regions output 12V 1A output Physical Dimensions 6 80 in x 5 03 in x 1 28 in 173 mm x 128 mm x 33 mm Weight 0 65 lbs without the stand 0 29 kg
62. e WPS button on your wireless device or follow the WPS instructions that came with the device The WPS process automatically sets up your wireless computer with the network password and connects you to the wireless network Access the Modem Router 20 N300 Wireless ADSL2 Modem Router DGN2200v4 NETGEAR genie App and Mobile genie App The genie app is the easy dashboard for managing monitoring and repairing your home network See the NETGEAR genie App User Manual for details about the genie apps Retrieve wireless password atrovo Wireless p About genie Language Menu 2 uill WEF Connection 8 Dashboard Click to view details STATUS Connected Wertes od demon 7 LI Cin NETGEAR Sxpericnce your laptop Seach NETGEAR Supa am E lt Support Figure 9 genie app dashboard The genie app can help you with the following e Automatically repair common wireless network problems e Have easy access to features like Live Parental Controls guest access Internet traffic meter speed test and more The genie mobile app works on your iPhone iPad or Android phone Log in to the router J sahil LLL LL lt gi Information about genie mobile app support router Figure 10 genie mobile app home screen Access the Modem Router 21 NETGEAR genie Basic Settings This chapter contains the following sections e Internet Setup e Parental Controls e Basic Wireless Se
63. e a ping utility for sending an echo request packet to the designated device The device responds with an echo reply to tell whether a TCP IP network is responding to requests Test the LAN Path to Your Modem Router You can ping the modem router from your computer to verify that the LAN path to your modem router is set up correctly To ping the modem router from a computer running Windows 95 or later 1 2 From the Windows taskbar click the Start button and select Run In the field provided type ping followed by the IP address of the modem router as in this example ping 192 168 0 1 Click OK You should see a message like this one Pinging IP address with 32 bytes of data If the path is working you see this message Reply from IP address gt bytes 32 time NN ms TTL xxx Troubleshooting 124 N300 Wireless ADSL2 Modem Router DGN2200v4 If the path is not working you see this message Request timed out If the path is not functioning correctly you could have one of the following problems e Wrong physical connections Make sure that the LAN port LED is lit If the LED is off follow the instructions in LAN LED Is Off on page 120 e Wrong network configuration Verify that the Ethernet card driver software and TCP IP software are both installed and configured on your computer or workstation Verify that the IP address for your modem router and your workstation are correct and that the add
64. e application or game 6 In the Priority Category list select either Applications or Online Gaming A list of applications or games displays 7T Select an existing item from the list scroll and select Add a New Application or Add a New Game as applicable 8 If prompted in the Connection Type list select either TCP UDP or both TCP UDP Specify the port number or range of port numbers that the application or game uses 9 From the Priority list select the priority for Internet access for this traffic relative to other applications and traffic The options are Low Normal High and Highest 10 Click Apply The rule is saved in the QoS Policy list The QoS Setup screen displays QoS for a Modem Router LAN Port To create a QoS policy for a device connected to a LAN port 1 Select Advanced Setup QoS Setup Select the Turn Internet Access QoS On check box Click the Setup QoS Rule button Click the Add Priority Rule button From the Priority Category list select Ethernet LAN Port m ogqe qe Prieeity QoS Policy for LAN Port Prsnty Category Ethernet LAN Poa v LAN Port 1 Priority Normal v NETGEAR genie Advanced Home 45 N300 Wireless ADSL2 Modem Router DGN2200v4 6 From the QoS Policy for list select the LAN port 7 From the Priority list select the priority for Internet access for this port s traffic relative to other applications The options are Low Normal High and Highest 8 Clic
65. e from 1 to 255 The default value for the advertisement time to live is 4 hops which should be fine for most home networks If you notice that some devices are not being updated or reached correctly it might be necessary to increase this value Click the Apply button The UPnP Portmap Table displays the IP address of each UPnP device that is accessing the modem router The UPnP Portmap Table also shows which ports are open what type of ports are open and whether each open port is still active for each IP address To refresh the information in the UPnP Portmap Table click the Refresh button IPv6 You can use this feature to set up an IPv6 Internet connection type if genie does not detect it automatically Tosetup an IPv6 Internet connection type 1 Select Advanced gt Advanced Setup gt IPv6 internet Conmsection Type Desabled Auto Detect 194 Tunnel Pace Though Fued DHCP PPPoE In the Internet Connection Type list select the IPv6 connection type Your Internet service provider ISP can provide this information e f your ISP did not provide details you can select IPv6 Tunnel e f you are not sure select Auto Detect so that the modem router detects the IPv6 type that is in use e f your Internet connection does not use PPPoE DHCP or fixed but is IPv6 select Auto Config For more detailed information about Internet connection types see the following sections Click the Apply button
66. e modem router captures and uses the MAC address of the computer that you are now using You have to use the one computer that the ISP allows e Use This MAC Address Enter the MAC address that you want to use Parental Controls gt gt The first time you select Parental Controls from the Basic Home screen your browser goes to the Live Parental Controls website You can learn more about Live Parental Controls or download the application NETGEAR Prodate Dea Frid eater Weeb hy Depot Moren Commuwy At W Wepepng Con P Live Parental Controls od Web ther Figure 11 Live Parental Controls website To set up Live Parental Controls 1 Select Parental Controls on the Dashboard screen 2 Click either the Windows Users or Mac Users button 3 Follow the onscreen instructions to download and install the NETGEAR Live Parental Controls Management Utility NETGEAR genie Basic Settings 25 N300 Wireless ADSL2 Modem Router DGN2200v4 After installation Live Parental Controls automatically starts NETGEAR Youlre about to setup NETGEAR Live Parental Controls Powered by OpenONS on your router t filter websites visited on your Computers and other networked devices v Set different bering rules for euh Wer on your network Set cules based on the time of doy MINO LOW Our custom settngs let you relax security settings for some users or at some tmes of the day Lear more 4
67. e network folder Volume Name Volume name from the storage device either USB drive or HDD Total Space and Free Space Shows the current utilization of the storage device gt To add a network folder 1 Select Advanced ReadySHARE 2 Click Edit USB Storage 55 N300 Wireless ADSL2 Modem Router DGN2200v4 3 To add a folder click Create Network Folder If the Add a Network Folder screen does not display your web browser might be blocking pop ups If it is then change the browser settings to allow pop ups p In the Folder field browse and select the folder Fill in the Share Name field In the Read Access list and the Write Access list select the setting that you want on The user name account name for All no password is guest The password for admin is the same one that is used to log in to the modem router By default it is password Click Apply The folder is added on the USB device gt To edit a network folder 1 Select Advanced ReadySHARE 2 Click the Edit button The Edit Network Folder screen displays the same settings shown in the Add a Network Folder screen N 3 Change the settings in the fields as needed 4 Click Apply Your changes are saved USB Storage 56 N300 Wireless ADSL2 Modem Router DGN2200v4 Specify Approved USB Devices For more security you can set up the modem router to share only approved USB devices gt To set up approved USB devices
68. eee eee eens 55 Specify Approved USB Devices 0002 e eee eee 57 Chapter 6 Security Keyword Blocking of HTTP Traffic 0200 c eee eee eee 59 Set Up Firewall Rules to Control Network Access 0005 60 Port Triggering to Open Incoming Ports 0 0c eee eee eae 61 Port Forwarding to Permit External Host Communications 62 How Port Forwarding Differs from Port Triggering 63 Set Up Port Forwarding to Local Servers llle 63 Add a Custom Service xs smo dorzcosee Sae da mp sam den sisse 64 Edit or Delete a Port Forwarding Entry liliis 65 Set Up Port TIriggefing x uses Seeds EROS Shee Seq See edu 65 Schedule When to Block the Internet liliis 68 Security Event Email Notifications llle 69 Chapter 7 Administration Update the Modem Router Firmware llle 71 Vew Router StalliSs cd cara d t RE oa Indeed RU ded d edd 72 Router Information 0600 cca eri amm om hh mh hm aa 72 ICSE RP OR uu se i a oiea gan Robot d eint Mob dern edi we ob E ated sl an d 72 N300 Wireless ADSL2 Modem Router DGN2200v4 Wireless Settings 2 4 GHz 0000 cee eee 74 View Logs of Web Access or Attempted Web Access 75 Manage the Configuration File llle 76 Back UD SettlligS 2 banda irae ln eris Redde dp dn d f atn iua Ses 76 Restore Configuration Settings llli less 76 Erase the Curre
69. elecommunications functionality it also complies with the requirements of the following EU Directive e R amp TTE Directive 1999 5 EC Compliance with these directives implies conformity to harmonized European standards that are noted in the EU Declaration of Conformity Intended for indoor use only in all EU member states EFTA states and Switzerland This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP in the frequency range of 2454 2483 5 MHz For detailed information the end user should contact the national spectrum authority in France FCC Requirements for Operation in the United States FCC Information to User This product does not contain any user serviceable components and is to be used with approved antennas only Any product changes or modifications will invalidate all applicable regulatory certifications and approvals FCC Guidelines for Human Exposure This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance of 20 cm between the radiator and your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter FCC Declaration of Conformity We NETGEAR Inc 350 East Plumeria Drive San Jose CA 95134 declare under our sole responsibility that the N300 Wireless ADSL2 Modem
70. ent Associaton Base Staton MAL Address U Wireless Base Station Disable Wireless Chent Associaton Regester MAC Address t Repeater MAC Address 2 Repeater MAC Address 3 Repeater MAC Address 4 Fill in the Repeater IP Address field Advanced Settings 86 N300 Wireless ADSL2 Modem Router DGN2200v4 This IP address has to be in the same subnet as the base station but different from the LAN IP address of the base station 7 Optional Select the Disable 8 In the Base Station MAC Address field 9 Click Apply Your changes are saved 10 Verify connectivity across the LANs A computer on any wireless or wired LAN segment of the modem router can connect to the Internet or share files and printers with any other computer or server connected to the other access point Dynamic DNS If your ISP assigned you a fixed IP address you can register a domain name and link it to your IP address by public DNS However most Internet accounts use dynamically assigned IP addresses that can change frequently In this case you can use a commercial Dynamic DNS service This type of service lets you register your domain to their IP address and forwards traffic directed at your domain to your frequently changing IP address If your ISP assigns a private WAN IP address such as 192 168 x x or 10 x x x the Dynamic DNS service does not work because private addresses are not routed on the Internet Your modem router contains a client that can connec
71. er LED Is Red When the modem router is turned on it performs a power on self test during which time the Power LED turns red If the Power LED does not turn green within a minute or so or if it turns red at any other time during normal operation there is a fault within the modem router If the Power LED turns red to indicate a modem router fault turn the power off and on to see if the modem router recovers If the Power LED is still red 1 minute after power up e Turn the power off and on one more time to see if the modem router recovers Clear the modem router s configuration to factory defaults as explained in Factory Settings on page 128 This sets the modem router s IP address to 192 168 0 1 If the error persists you could have a hardware problem and should contact NETGEAR technical support LAN LED Is Off If the LAN LED for a port does not light when you connect a device check the following The Ethernet cable connections are secure at the modem router and at the hub or device e The power is turned on to the connected hub or device Troubleshooting 120 N300 Wireless ADSL2 Modem Router DGN2200v4 You are using the correct cable Cannot Log In to the Modem Router If you are unable to log in to the modem router from a computer on your local network check the following If you are using an Ethernet connected computer check the Ethernet connection between the computer and the modem router as described in the p
72. ery your inputs Connecton Name toiset Remote Eexdpost Remote Client Access amp ingle PC no Subnet Remote if Omare Local Client Access By Subnet Local iP 192 168 0 1 255 745 245 0 You can click here to view the VPNC cecomemnended parameters Please click Done to apply the changes Note To view the VPNC recommended authentication and encryption settings used by the VPN Wizard click the here link Virtual Private Networking 106 N300 Wireless ADSL2 Modem Router DGN2200v4 5 Click Done The VPN Policies screen displays showing that the new tunnel is enabled Policy Table Enable Nome E Local Ej wem 192 16001255 255 255 0 KB ELA 6 Optional To view or modify a tunnel s settings select its radio button and click Edit 7 Use VPN client software on the computer to configure it as a VPN client Add a Gateway to Gateway VPN Tunnel This section describes how to use the VPN Wizard to set up the VPN tunnel between two gateways The LAN IP address ranges of each VPN endpoint have to be different The connection will fail if both are using the default address range of 192 168 0 x gt To add a gateway to gateway VPN tunnel 1 Log in to Gateway A on LAN A 2 Select Advanced Advanced VPN VPN Wizard The Wizard sete most parameters 1o defaults as proposed by Pa VPN Consortium VPNC and assumes Pre shared key which greatly cenpltes setup Aft ceeateg Tt policies eough fie VPN Vizar
73. ess Osta Loca LAN IP Agsress Subnet address SingetSiat P Address Finish IP Address Subnet Miik Subnet address v SitglelStart P Address Finish IP Actress Subnet Mark I iu od Showtide Help Center 2 Specify the general settings e n the Policy Name field enter a unique name This name is not supplied to the remote VPN endpoint It is used only to help you manage the policies From the Address Type list select Fully Qualified Domain Name or select Fixed IP Address and fill in the Address Data field You can set up multiple remote dynamic IP policies but only one such policy can be enabled at a time 3 Specify the Local LAN settings From the IP Address list select Subnet address Single address or Range address e Fill in the Single Start IP Address field e f you are specifying a range fill in the Finish IP Address field This range must be an address range used on your LAN For a single IP address do not fill in the Finish IP Address field The remote VPN endpoint must have these IP addresses entered as its remote addresses Virtual Private Networking 117 N300 Wireless ADSL2 Modem Router DGN2200v4 Specify the Remote LAN settings From the IP Address list select Single PC no Subnet Single address Range address or Subnet address If there is no LAN only a single computer at the remote endpoint select the Single PC no Subnet option The Single address option is typically used
74. f the steps indicates Failed you can attempt to reconnect by clicking Connect The modem router continues to attempt to connect indefinitely If you cannot connect after several minutes you might be using an incorrect service name user name or password There also might be a provisioning problem with your ISP Troubleshooting 123 N300 Wireless ADSL2 Modem Router DGN2200v4 Unless you connect manually the modem router does not authenticate using PPPoE or PPPoA until data is transmitted to the network Troubleshoot Internet Browsing If your modem router can obtain an IP address but your computer is unable to load any web pages from the Internet Your computer might not recognize any DNS server addresses A DNS server is a host on the Internet that translates Internet names such as www addresses to numeric IP addresses Typically your ISP provides the addresses of one or two DNS servers for your use If you entered a DNS address when you set up the modem router reboot your computer and verify the DNS address Alternatively you can configure your computer manually with DNS addresses as explained in your operating system documentation Your computer might not have the modem router configured as its TCP IP modem router If your computer obtains its information from the modem router by DHCP reboot the computer and verify the modem router address TCP IP Network Not Responding Most TCP IP terminal devices and routers hav
75. ffic that is not a response to your own outbound traffic You can configure exceptions to this default rule by using the port forwarding feature A typical application of port forwarding can be shown by reversing the client server relationship from the previous web server example In this case a remote computer s browser needs to access a web server running on a computer in your local network Using port forwarding you can tell the modem router When you receive incoming traffic on port 80 the standard port number for a web server process forward it to the local computer at 192 168 0 123 The following sequence shows the effects of the port forwarding rule you have defined 1 The user of a remote computer opens a browser and requests a web page from www example com which resolves to the public IP address of your modem router The remote computer composes a web page request message with the following destination information Destination address The IP address of www example com which is the address of your modem router Destination port number 80 which is the standard port number for a web server process The remote computer then sends this request message through the Internet to your modem router Your modem router receives the request message and looks in its rules table for any rules covering the disposition of incoming port 80 traffic Your port forwarding rule specifies that incoming port 80 traffic should be forwarded t
76. g channel available If you notice interference from nearby devices you can select a different channel Channels 1 6 and 11 do not interfere with each other Administration 74 N300 Wireless ADSL2 Modem Router DGN2200v4 Mode The wireless communication mode Up to 54 Mbps Up to 217 Mbps default and Up to 1300 Mbps Wireless AP Indicates whether the radio feature of the modem router is enabled If this feature is not enabled the WiFi LED on the front panel is off Broadcast Name Indicates whether the modem router is broadcasting its SSID Wireless Isolation Wireless isolation prevents wireless clients from communicating with each other when they join the wireless network Wi Fi Protected Setup Indicates whether WPS is configured for this network View Logs of Web Access or Attempted Web Access The log is a detailed record of the websites you have accessed or attempted to access Up to 256 entries are stored in the log Log entries appear only when keyword blocking is enabled and no log entries are made for the trusted user gt To view logs Current Time Wednesday Feb 20 2013 184239 Admin login from source 192 165 0 2 Wednesday Feb 20 2015 18 35 15 Time synchronited with NTP server Wednesday Feb 20 2013 18 36 41 Internet connected IP address 99 1413 119 147 Wednesday Feb 20 2013 18 36 40 DSL Event DIL Up Wednesday Feb 20 2013 10 36 20 DNCP IP 192 160 0 2 to MAC address 00 1A 6D 6D
77. g or remote assistance a feature in Windows XP you should enable UPnP Toturn on Universal Plug and Play 1 Select Advanced Advanced Setup UPnP E Turn UPnP On Advertisement Period im mires Bdovctrnnemit Tine to Live 05 hopt UPnP Portmap Table Active Pratoce Cnt Port 2 Select the Turn UPnP On check box By default this check box is selected UPnP for automatic device configuration can be enabled or disabled If the Turn UPnP On check box is cleared the modem router does not allow any device to automatically control the resources such as port forwarding mapping of the modem router 3 Type the advertisement period in minutes The advertisement period specifies how often the modem router broadcasts its UPnP information This value can range from 1 to 1440 minutes The default period is 30 minutes Shorter durations ensure that control points have current device status at the expense of additional network traffic Longer durations can Advanced Settings 91 N300 Wireless ADSL2 Modem Router DGN2200v4 compromise the freshness of the device status but can significantly reduce network traffic Type the advertisement time to live in hops The time to live for the advertisement is measured in hops steps for each UPnP packet sent The time to live hop count is the number of steps a broadcast packet is allowed to propagate for each UPnP advertisement before it disappears The number of hops can rang
78. have to be on the same LAN IP subnet That is all of the access point LAN IP addresses are in the same network e All LAN devices wired and wireless computers are configured to operate in the same LAN network address range as the access points Set Up the Base Station The wireless repeating function works only in hub and spoke mode The units cannot be daisy chained You have to know the wireless settings for both units You have to know the MAC address of the remote unit First set up the base station and then set up the repeater Tosetup the base station 1 Set up both units with the same wireless settings SSID mode channel and security The wireless security option has to be set to None or WEP 2 Select Advanced Advanced Setup Wireless Repeating Function dnab e Wireless Repeating Function Wireless MAC of tes router 2 ES 2A 2A C KEC O Wireless Repeater Repemer IP Address 192 168 0 Disable Wireless Client Association Date Staton MAC Address Wireless Race Station m Cis abto Viveless Client Associaton Repester MAC Address 1 Repeater MAC Address 2 Repeater MAC Address 3 Repeater MAC Address 4 3 Select the Enable Wireless Repeating Function check box 4 Select the Wireless Base Station radio button Advanced Settings 85 5 N300 Wireless ADSL2 Modem Router DGN2200v4 Optional Select the Disable Wireless Client Association check box to prevent wireless clients from associating
79. hold 1 2347 2947 Preamitie Mode Long Preamble v Tum of wirstess ugnal by schedule The wireless signal is schedufed to Parm off daring Ihe flowing thee period 5m sun a Pwomrmebanem eai Mia mi WPS Settings Routere PIN 21539213 7 fatis Routers PIN E Keep Busing Wveiess Semogs roots Cana Accent ccs By default the Enable Wireless Router Radio check box is selected 2 Select or clear the Enable Wireless Router Radio check box If you clear this check box this turns off the WiFi feature of the wireless modem router 3 Optional Select the Turn off wireless signal by schedule check box and fill in the fields to specify the times when you do not need a wireless connection For instance you could turn off the wireless signal for the weekend if you leave town 4 Click Apply Your changes take effect Advanced Settings 80 N300 Wireless ADSL2 Modem Router DGN2200v4 Set Up a Wireless Schedule You can use this feature to turn off the wireless signal from your modem router at times when you do not need a wireless connection For example you could turn it off for the weekend if you leave town gt To configure and enable the wireless schedule 1 5 6 Select Advanced gt Advanced Setup gt Wireless Settings The Advanced Wireless Settings screen displays Click the Add a new period button The screen adjusts furs of misiem mage by wr hrdua Mihei pa Tuas odi aa eben s kpi imit Ve
80. ice and use its WPS software to join the network without entering a password The modem router attempts to add the WPS capable device The WPS LED fs on the front of the modem router blinks green When the modem router establishes a WPS connection the LED is solid green and the modem router WPS screen displays a confirmation message WAN Setup You can use the WAN Setup screen to specify the ADSL or Ethernet port setting for your Internet connection though by default the modem router automatically detects the Internet port The WAN Setup screen also lets you configure a DMZ demilitarized zone server change the maximum transmit unit MTU size and enable the modem router to respond to a ping on the WAN Internet port gt To view or change the WAN settings 1 Select Advanced Setup WAN Setup WAN Preference Use port d as C Disable Port Scan and DoS Protection C Detna DMZ Server C Respond to Ping om hvternet Port Disable IGMP Proxying MTU S re n bytes MAT Finec iaj Secusd Open C pesabte St ALO 2 Specify the settings for your Internet connection The fields in this screen are described in the following section 3 Click Apply NETGEAR genie Advanced Home 36 N300 Wireless ADSL2 Modem Router DGN2200v4 WAN Setup Screen Fields The following fields are available WAN Preference By default this field is set to Auto Detect so that the modem router automatically detects if the Internet conne
81. ick Check The modem router finds new firmware information if any is available 3 Click Yes The modem router locates the firmware you downloaded the file ends in img and begins the update WARNING When uploading firmware to the modem router do not interrupt the web browser by closing the window clicking a link or loading a new page If the browser is interrupted it could corrupt the firmware When the upload is complete your modem router restarts The upgrade process typically takes about 1 minute Read the new firmware release notes to determine whether you need to reconfigure the modem router after upgrading Administration 71 N300 Wireless ADSL2 Modem Router DGN2200v4 View Router Status To view modem router status and usage information Select Advanced Home or select Administration Router Status Router information internet Port JVESIAIACS EO Wardware Version DON2200v4 MAC Address Fumware Version 1 0 0 5_5 0 3 IP Address GUI Language Version v10912 21175 Connection T IP Subiset Mask MAC Address 20 52A2A C5 amp K IP Address 192 16801 once On BS amp M Domain Name Server 5 68 495 GEL GEL TE Wireless Settings 2 4GHz amp Guest Network 2 4 GHz Wanne SS NETOEAR14 Name SSID NETGEAR Guest Regen Europe Wireless AP os Choemel fi 1 Bi od ast Norme Mode Jo to 145 Mips Wii ele ss isolation Wireless AP 0 Allow guest to access cu Broadcast Name Q My Local Network Wire
82. igure your modem router to clone or spoof the MAC address from the authorized computer Changes Not Saved If the modem router does not save the changes you make in the modem router interface check the following Troubleshooting 125 N300 Wireless ADSL2 Modem Router DGN2200v4 e When entering configuration settings always click the Apply button before moving to another screen or tab or your changes are lost e Click the Refresh or Reload button in the web browser The changes might have occurred but the old settings might be in the web browser s cache Incorrect Date or Time The modem router uses the Network Time Protocol NTP to obtain the current time from one of several network time servers on the Internet Each entry in the log is stamped with the date and time of day Problems with the date and time function can include the following e Date shown is January 1 2003 This means the modem router has not yet reached a network time server Check that your Internet access is configured correctly If you have just finished setting up the modem router wait at least 5 minutes and check the date and time again Time is off by one hour The modem router has an automatic daylight savings time setting To change the modem router setting for daylight savings time 1 Select Security Schedule 2 Select the Automatically adjust for daylight savings time check box 3 Click Apply Your change is saved Troublesh
83. ions e Specific online games e Individual Ethernet LAN ports of the modem router e A specific device by MAC address To specify prioritization of traffic create a policy for the type of traffic and add the policy to the QoS Policy table in the QoS Setup screen For convenience the QoS Policy table lists many common applications and online games that can benefit from QoS handling QoS for Applications and Online Gaming gt To create a QoS policy for applications and online games 1 Select Advanced Setup QoS Setup 2 Select the Turn Internet Access QoS On check box 3 Click the Setup QoS Rule button The QoS Priority Rule list displays QoS Priority Rute list Vonage IP Phone Applications FTP Applicatons SMTP Appicabons Q Hep Center Shaw thde Help Center You can edit or delete a rule by selecting its radio button and clicking either the Edit or Delete button You can also delete all the rules by clicking the Delete All button NETGEAR genie Advanced Home 44 N300 Wireless ADSL2 Modem Router DGN2200v4 4 To add a priority rule scroll down to the bottom of the QoS Setup screen and click Add Priority Rule QoS Priorty Rules NLIS ES Pricsity QoS Polcy for Pricey Category Appkcatons v Apphtadons Add amp new application v Peority Normal ww Specified Port Range Connection Type TCPAJDP w Starting Port 1 655235 Ending Port 1465535 5 In the QoS Policy for field type the name of th
84. ireless repeating scenario Note To use the wireless repeating function you need to select None as the security option in the Wireless Setup screen and you cannot select Auto Channel Wireless Base Station The modem router acts as the parent access point that bridges traffic to and from the child repeater access point The base station also handles wireless and Advanced Settings 84 N300 Wireless ADSL2 Modem Router DGN2200v4 wired local computers To configure this mode you have to know the MAC addresses of the child repeater access point Often the MAC address is on the product label Wireless Repeater The modem router sends all traffic from its local wireless or wired computers to a remote access point To configure this mode you have to know the MAC address of the remote parent access point The modem router is always in dual band concurrent mode unless you turn off one radio If you enable the wireless repeater in either radio band the wireless base station or wireless repeater cannot be enabled in the other radio band However if you enable the wireless base station in either radio band and use the other radio band as a wireless modem router or wireless base station dual band concurrent mode is not affected For you to set up a wireless network with WDS both access points have to meet the following conditions e Both access points have to use the same SSID wireless channel and encryption mode e Both access points
85. is value controls the inactivity timer for the designated inbound ports The inbound ports close when the inactivity time expires This is required because the modem router cannot detect when the application has terminated Security 66 N300 Wireless ADSL2 Modem Router DGN2200v4 gt To add a port triggering service P On the Port Triggering screen click Add Service Service Senece Name Sette User Amy E Serice Type TOP Triggering Port 1 65535 arbos Connection Connection Type TCP JOP Shang Port 1 645535 Ending Pert 1 845535 In the Service Name field type a descriptive service name In the Service User list select Any or Single address and enter the IP address of one computer Any the default allows any computer on the Internet to use this service e Single address restricts the service to a particular computer Select the service type either TCP or UDP or both TCP UDP If you are not sure select TCP UDP In the Triggering Port field enter the number of the outbound traffic port that will cause the inbound ports to be opened Enter the inbound connection port information in the Connection Type Starting Port and Ending Port fields Click Apply The service appears in the Port Triggering Portmap Table Make sure that you enable port triggering so that the service that you added will be used Security 67 N300 Wireless ADSL2 Modem Router DGN2200v4 Schedule When to Block
86. k Apply The rule is saved in the QoS Policy list The QoS Setup screen displays 9 In the QoS Setup screen click Apply QoS for a MAC Address gt To create a QoS policy for traffic from a specific MAC address 1 Select Advanced Setup QoS Setup and click the Setup QoS Rule button The QoS Setup screen displays 2 Click Add Priority Rule 3 From the Priority Category list select MAC Address Prieeity QoS Poly for Priority Category MAC Address v MAC Device List O05 Policy T muy Desce Nama MAC Aiii ess TECHPUDS 00 1469 80 95 19 MAC Address Oevice Nae Pronty Nome v Add Eat Y Delete Retesh Het Conter Pi ShowHde Help Center 4 lf the device to be prioritized appears in the MAC Device List select its radio button The information from the MAC Device List populates the policy name MAC Address and Device Name fields If the device does not appear in the MAC Device List click Refresh If it still does not appear fill in these fields manually 5 From the Priority list select the priority for Internet access for this device s traffic reelative to other applications and traffic The options are Low Normal High and Highest 6 Click Apply This rule is saved in the QoS Policy list The QoS Setup screen displays 7 Select the Turn Internet Access QoS On check box 8 Click Apply NETGEAR genie Advanced Home 46 N300 Wireless ADSL2 Modem Router DGN2200v4 Edit or Delete an
87. k box is selected the wireless access point broadcasts its name SSID to all wireless stations Stations with no SSID can adopt the correct SSID for connections to this access point Allow guest to access My Local Network If this check box is selected anyone who connects to this SSID has access to your local network not just Internet access Enable Wireless Isolation If this check box is selected wireless computers or devices that join the network can use the Internet but cannot access each other or access Ethernet devices on the network 3 Give the guest network a name The guest network name is case sensitive and can be up to 32 characters You then manually configure the wireless devices in your network to use the guest network name in addition to the main SSID 4 Select a security option from the list The security options are described in Wireless Security Options on page 29 5 Click Apply Your settings are saved NETGEAR genie Basic Settings 31 N300 Wireless ADSL2 Modem Router DGN2200v4 View Attached Devices Use the Attached Device screen to view all computers or devices that are currently connected to your network gt To go to the Attached Devices screen From the Basic Home screen select Attached Devices Wie LT MACAMAeRS T8 168016 TO IAGBEOOF 8 Wired devices are connected to the modem router with Ethernet cables Wireless devices have joined the wireless network number The o
88. l Rules screen For information about port forwarding and port triggering see Chapter 6 Security This chapter includes the following sections Advanced Wireless Settings Wireless AP Wireless Distribution System WDS Dynamic DNS Static Routes Remote Management Universal Plug and Play IPv6 Traffic Meter For information about the Approve USB feature see Specify Approved USB Devices on page 57 79 N300 Wireless ADSL2 Modem Router DGN2200v4 Advanced Wireless Settings You can use this screen to turn on and off the wireless radio to specify WPS settings to use AP mode and to set up a wireless access list The Fragmentation Length CTS RTS Threshold and Preamble Mode options in this screen are reserved for wireless testing and advanced configuration only Do not change these settings unless you have a specific reason to do so Control the Wireless Radio By default the wireless radio is enabled so that you can connect wirelessly to the modem router You can turn the wireless radio on or off in the Advanced Wireless Settings screen or by using the WiFi On Off button on the modem router front panel When the wireless radio is off you can still use an Ethernet cable for a LAN connection to the modem router Toturn the wireless radio on or off 1 Select Advanced gt Advanced Setup gt Wireless Settings Advanced We eless Semngs Enatie viretess Router Rato Fragmertaton Length 256 2348 CTSIRTS Thres
89. ld be able to connect all your telephones If disconnecting telephones does not result in a green ADSL link LED check for the following e Check that the telephone company has made the connection to your line and tested it e Verify that you are connected to the correct telephone line If you have more than one phone line be sure that you are connected to the line with the ADSL service It might be necessary to use a swapper if your ADSL signal is on pins 1 and 4 or the RJ 11 jack The modem router uses pins 2 and 3 Internet LED Is Red If the Internet LED is red the device was unable to connect to the Internet Verify the following Troubleshooting 122 N300 Wireless ADSL2 Modem Router DGN2200v4 e Check that your login credentials are correct or that the information you entered on the Internet Setup screen is correct Check if your ISP has a problem it might not be that the modem router cannot connect to the Internet but rather that your ISP that cannot provide an Internet connection Obtaining an Internet IP Address If your modem router is unable to access the Internet and your Internet LED is green see if the modem router can obtain an Internet IP address from the ISP Unless you have been assigned a static IP address your modem router requests an IP address from the ISP You can determine whether the request was successful using the browser interface To check the Internet IP address from the browser interface
90. less isobanien on Wi fi Protected Setup Contgured Router Information Hardware Version The modem router model Firmware Version The version of the modem router firmware It changes if you upgrade the modem router firmware GUI Language Version The localized language of the user interface LAN Port MAC Address The Media Access Control address This is the unique physical address used by the Ethernet LAN port of the modem router IP Address The IP address used by the Ethernet LAN port of the modem router The default is 192 168 0 1 e DHCP Identifies whether the modem router s built in DHCP server is active for devices on the LAN Internet Port MAC Address The Media Access Control address which is the unique physical address used by the Internet WAN port of the modem router IP Address The IP address used by the Internet WAN port of the modem router If no address is shown or the address is 0 0 0 the modem router cannot connect to the Internet Administration 72 N300 Wireless ADSL2 Modem Router DGN2200v4 Connection This shows if the modem router is using a fixed IP address on the WAN If the value is DHCP Client the modem router obtains an IP address dynamically from the ISP IP Subnet Mask The IP subnet mask used by the Internet WAN port of the modem router Domain Name Server The Domain Name Server addresses used by the modem router A Domain Name Server translates human language URLs
91. ls to determine your ISP configuration The following screen displays WPS Wizard The WPS Wizard helps you add a WPS capable client device a wireless device or computer to your network On the client device either press its WPS button or locate its WPS PIN Touse the WPS Wizard 1 Select Advanced WPS Wizard 2 Click Next The following screen lets you select the method for adding the WPS client a wireless device or computer oo Add WPS Cheni Select a senap method 9 Push Button recommended bu can etther press the physical push bution on fw router or click Pur bution 08 push tation in Pus screen O PIN Number You can use either the push button or PIN method 3 Select either Push Button or PIN Number e To use the push button method either click the WPS button on this screen or press the WPS button on the side of the modem router Within 2 minutes go to the wireless client and press its WPS button to join the network without entering a password NETGEAR genie Advanced Home 35 N300 Wireless ADSL2 Modem Router DGN2200v4 e To use the PIN method select the PIN Number radio button enter the client security PIN and click Next Select setup method O Push Bufton ecommerce PIN Number This is a security PIN of me WPS chent Wee connectisg VPS enabled adapters provide a raodemhy senarated Security PIN Enter Client s PIN EN Within 2 minutes go to the client dev
92. m 1 through 13 For products in the North America market only Channels 1 through 11 can be operated Do not change the channel unless you experience interference shown by lost connections or slow data transfers If this happens experiment with different channels to see which is the best When you use multiple access points it is better if adjacent access points use different radio frequency channels to reduce interference The recommended channel spacing between adjacent access points is 5 channels for example use Channels 1 and 6 or 6 and 11 Mode Up to 145 Mbps is the default setting which allows 802 11n and 802 11g wireless devices to join the network The other settings are Up to 54 Mbps and Up to 300 Mbps Security Options Settings The Security Options section of the Wireless Settings screen lets you change the security option and passphrase NETGEAR recommends that you do not change these settings but this section explains how Do not disable security Wireless Security Options A security option is the type of security protocol applied to your wireless network The security protocol in force encrypts data transmissions and ensures that only trusted devices receive authorization to connect to your network Wi Fi Protected Access WPA has several options including pre shared key PSK encryption This section presents an overview of the security options and provides guidance on when to use which option It is also possible
93. n for help FCC Caution e Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment e This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation For product available in the USA market only channel 1 11 can be operated Selection of other channels is not possible This device and its antenna s must not be co located or operation in conjunction with any other antenna or transmitter FCC Part 68 This equipment complies with Part 68 of the FCC rules and the requirements adopted by the ACTA On the product label of this equipment is a label that contains among other information a product identifier in the format US 5NHDLO01BDGN2200v4 If requested this number must be provided to the telephone company TV Tuner on Selected Models Note to CATV System Installer This reminder is provided to call the CATV system installer s attention to Section 820 93 of the National Electrical Code which provides guidelines for proper grounding and in particular specifies that the Coaxial cable shield be connected to the grounding system of the building as close to the point of cable entry as possible Canadian Department of Communications Radio I
94. ndpoint to match this setting you might have to specify the key group used For this device the key group is the same as the DH Group setting in the IKE section 8 Click Apply Virtual Private Networking 115 N300 Wireless ADSL2 Modem Router DGN2200v4 The VPN Policies screen displays Policy Table 2 Enable Name M Local ESP Z ObeoChen Aso 19216801 2552552550 WES 2 OtoG Auto 19216001 255255 255 0 1921690 1 1 255 255 2550 JOES Add Auto Policy gt Add Manual Policy 9 Repeat these steps for the gateway on LAN B Pay special attention to the following network settings General Remote Address Data for example 14 15 16 17 e Remote LAN Start IP Address JP Address for example 192 168 0 1 Subnet Mask for example 255 255 255 0 Pre shared Key for example 12345678 10 To activate the VPN tunnel start using it or use the VPN Status screen select the tunnel and click Connect Virtual Private Networking 116 N300 Wireless ADSL2 Modem Router DGN2200v4 Add or Edit a Manual VPN Policy A manual VPN policy requires all settings for the VPN tunnel to be manually entered at each end both VPN endpoints gt To add or edit a manual policy 1 Select Advanced gt Advanced VPN gt VPN Policies and click the Add Manual Policy radio button The VPN Manual Policy screen displays KB D ELLEN Getei ad Policy Nama Remote Enap Address Type Food IP Address Aser
95. networking to use this tab e Help amp Support Go to the NETGEAR support site to get information help and product documentation These links work once you have an Internet connection Access the Modem Router 19 N300 Wireless ADSL2 Modem Router DGN2200v4 Join Your Wireless Network You can use the manual or the WPS method to join your wireless network For instructions about how to set up a guest network see Set Up a Guest Network on page 31 Manual Method With the manual method choose the network that you want and type its password to connect Toconnect manually 1 On your computer or wireless device open the software that manages your wireless connections This software scans for all wireless networks in your area 2 Look for your network and select it The unique WiFi network name SSID and password are on the modem router label If you changed these settings look for the network name that you used 3 Enter the modem router password and click Connect Wi Fi Protected Setup WPS Method Wi Fi Protected Setup WPS lets you connect to a secure WiFi network without typing its password Instead press a button or enter a PIN NETGEAR calls WPS Push N Connect Some older WiFi equipment is not compatible with WPS WPS works only with WPA2 or WPA wireless security gt To use WPS to join the wireless network 1 Press the WPS button on the modem router front panel s 2 Within 2 minutes press th
96. nge Enter a beginning and ending IP address to define the allowed range e To specify IP addresses select IP Address List and type in the allowed IP addresses e To allow access from any IP address on the Internet select Everyone 4 Specify the port number for accessing the web management interface Advanced Settings 90 N300 Wireless ADSL2 Modem Router DGN2200v4 Normal web browser access uses the standard HTTP service port 80 For greater security enter a custom port number for the remote web management interface Choose a number from 1024 to 65535 but do not use the number of any common service port The default is 8080 which is a common alternate for HTTP 5 Click Apply Your changes take effect 6 When you access your modem router from the Internet type your modem router s WAN IP address into your browser s address or location field followed by a colon and the custom port number For example if your external address is 134 177 0 123 and you use port number 8080 enter http 134 177 0 123 8080 in your browser Universal Plug and Play Universal Plug and Play UPnP helps devices such as Internet appliances and computers access the network and connect to other devices as needed UPnP devices can automatically discover the services from other registered UPnP devices on the network If you use applications such as multiplayer gaming peer to peer connections or real time communications such as instant messagin
97. nt Configuration Settings 05 76 Change the Password 0 00 c eee eee tees 77 Password HecoVelby s upard sa dcn E nd etri dards miaa dai ini Sama eens 77 Chapter 8 Advanced Settings Advanced Wireless SettingS 20 0 0 e cece eee 80 Control the Wireless Radio 80 Set Up a Wireless Schedule 1 0 0 eee 81 View or Change WPS Settings 0 0 ccc eee eee 81 Set Up a Wireless Access List by MAC Address 82 Wir lesSiAP 15 5 acd nd prac any a ORDRE oa SER Bun dos ava lcd ara ss 83 Wireless Distribution System WDS 2000 cece eee 84 Set Up the Base Station 0 0 0 0 eee 85 Set Upa Repeater ue ase canned deeds eau mer m RR ha dra 86 Dynami DNS o cided catis pad e uou Sanka tee soos XE e PUE dud 87 Statie ROUTES x adiri oraina Hex qp ee aoe enone aoe TS 88 Remote Management 0 000 c eee eet res 90 Universal Plug and Play seco 2mm hem ease a RE ADARA t 91 WMG oa su ik seht ind EUN E UD S ERU fatui geansapeete ed eins SR MS E 92 Requirements for Entering IPv6 Addresses 00 0 055 93 PUIOIDOIBCE 4 13 pe SR ERXIpINMCORESDUNP Ca eRe EM b EAE S 94 PVG ANO CODO s coeunt cedoreede UnEAI ERG EA T eR ER 95 IPv6 6to4 Tunflel o wise epi nce a ah Rem pere n t Roxy nt 96 PVO Fass MOU e s scesutectam d ui dci aen e Pd eiecti Du rer mat as 97 IPVO FIXBO csetera d dedos Gr Rede c RUND M Moe sce d d 97 PYS DHCP aed es easi dac dad quet c du
98. nterference Regulations This digital apparatus N300 Wireless ADSL2 Modem Router DGN2200v4 does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications This Class B digital apparatus complies with Canadian ICES 003 Cet appareil num rique de la classe B est conforme la norme NMB 003 du Canada Industry Canada This device complies with RSS 210 of the Industry Canada Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation IMPORTANT NOTE Radiation Exposure Statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20cm between the radiator amp your body Caution Ce dispositif est conforme la norme CNR 210 d Industrie Canada applicable aux appareils radio exempts de licence Son fonctionnement est sujet aux deux conditions suivantes 1 le dispositif ne doit pas produire de brouillage Notification of Compliance 132 N300 Wireless ADSL2 Modem Router DGN2200v4 pr judiciable et 2 ce dispositif doit accepter tout brouillage regu y compris un brouillage susceptible de provoquer un fonctionnement ind sirable
99. o Were your 2e4umenta sed ectares 4 Select the drive letter to map to the network folder 5 Optional If you want to connect to the USB drive as a different user select the Connect using different credentials check box a Type the user name and password that you want to use b Click OK 6 Click Finish The USB drive is mapped to the drive letter that you specified gt To access the USB drive from a remote computer 1 Launch a web browser 2 Connect using the modem router s Internet port IP address If you are using Dynamic DNS you can type the DNS name rather than the IP address You can view the modem router s Internet IP address on the Basic Home screen see Dashboard Basic Home Screen on page 16 gt To access the USB drive with FTP from a remote computer 1 Make sure that the FTP check box is selected in the Access Method section of the USB Storage Advanced Settings screen see USB Storage Device Network and Access Settings on page 54 2 Launch a web browser 3 Type ftp and the Internet port IP address in the address field of the browser For example type ftp 10 1 65 4 If you are using Dynamic DNS you can type the DNS name rather than the IP address 4 Type the account name and password for the account that has access rights to the USB drive The user name account name for All no password is guest The folders on the USB drive that your account has access to display For example you
100. o edit or delete Do one of the following e Click the Edit button The Static Routes screen adjusts a Edit the route information b Click the Apply button e Click the Delete button The route is removed from the table Advanced Settings 89 N300 Wireless ADSL2 Modem Router DGN2200v4 Remote Management The remote management feature lets you upgrade or check the status of your modem router over the Internet Note Be sure to change the modem router default login password to a secure password The ideal password contains no dictionary words from any language and contains uppercase and lowercase letters numbers and symbols It can be up to 30 characters gt To set up remote management 1 Select Advanced gt Advanced Setup gt Remote Management CO Tum Remote Management On Mamageinest Add ess Nips 900008443 Aow Remote Access By O Oniy This Computer O P Address Range CJ IP Address List 9 E ide Help Center 2 Select the Turn Remote Management On check box 3 Under Allow Remote Access By specify the external IP addresses to be allowed to access the modem router s remote management For enhanced security restrict access to as few external IP addresses as practical e To allow access from a single IP address on the Internet select Only This Computer Enter the IP address that will be allowed access e To allow access from a range of IP addresses on the Internet select IP Address Ra
101. o local IP address 192 168 0 123 Therefore your modem router modifies the destination information in the request message The destination address is replaced with 192 168 0 123 Your modem router then sends this request message to your local network Your web server at 192 168 0 123 receives the request and composes a return message with the requested web page data Your web server then sends this reply message to your modem router Your modem router performs Network Address Translation NAT on the source IP address and sends this request message through the Internet to the remote computer which displays the web page from www example com To configure port forwarding you need to know which inbound ports the application needs You usually can determine this information by contacting the publisher of the application or the relevant user groups or news groups Security 62 N300 Wireless ADSL2 Modem Router DGN2200v4 How Port Forwarding Differs from Port Triggering The following points summarize the differences between port forwarding and port triggering e Port triggering can be used by any computer on your network although only one computer can use it at a time e Port forwarding is configured for a single computer on your network e With port triggering the modem router does not need to know the computer s IP address in advance The IP address is captured automatically e Port forwarding requires that you specify the compu
102. odem router If you do not find the solution here check the NETGEAR support site at http support netgear com for product and contact information This chapter contains the following sections Troubleshoot with the LEDs Cannot Log In to the Modem Router Troubleshoot the Internet Connection TCP IP Network Not Responding Changes Not Saved Incorrect Date or Time 119 N300 Wireless ADSL2 Modem Router DGN2200v4 Troubleshoot with the LEDs When you turn on the power the power LAN and DSL LEDs should light as described here If they do not refer to the sections that follow for help 1 When power is first applied the Power LED lights 2 After approximately 10 seconds the LAN and DSL LEDs light as follows a The LAN port LEDs light for any local ports that are connected b The DSL link LED lights green to indicate that a DSL link is established c If a LAN port is connected to a 100 Mbps device verify that the LAN port s LED is green If the LAN port is 10 Mbps the LED is amber Power LED Is Off If the Power and other LEDs are off when your modem router is turned on e Check that the power cord is correctly connected to your modem router and the power supply adapter is correctly connected to a functioning power outlet e Check that you are using the 12 V DC power adapter supplied by NETGEAR for this product If the error persists you could have a hardware problem and should contact NETGEAR technical support Pow
103. oes to http www routerlogin net and the NETGEAR genie screen displays NETGEAR genie Dos e f you already used the NETGEAR genie type http www routerlogin net in the address field for your browser to display the NETGEAR genie screen See Use NETGEAR genie after Installation on page 18 Follow the onscreen instructions to complete NETGEAR genie setup NETGEAR genie guides you through connecting the modem router to the Internet If the browser cannot display the web page Make sure that the computer is connected to one of the four LAN Ethernet ports or wirelessly to the modem router Make sure that the modem router has full power and that its WiFi LED is lit To make sure that the browser does not cache the previous page close and reopen the browser Browse to http www routerlogin net If the computer is set to a static or fixed IP address this is uncommon change it to obtain an IP address automatically from the modem router Access the Modem Router 17 N300 Wireless ADSL2 Modem Router DGN2200v4 If the modem router does not connect to the Internet 1 Review your settings to be sure that you have selected the correct options and typed everything correctly 2 Contact your ISP to verify that you have the correct configuration information 3 Read Chapter 10 Troubleshooting If problems persist register your NETGEAR product and contact NETGEAR technical support Use NETGEAR genie after Installation
104. of HTTP traffic from accessing your network The blocking can be always or according to a schedule gt To set up keyword blocking 1 Select Advanced gt Security gt Block Sites LI D warm rone abend edem e Orbe Vlweedq ard bernard bes bing Valer Bien PETEAR peee qom c none SEE aer Poi Schede Mmm Vitpe bonum do denm oem mn LIU E Mine tuted abt ens te ted bachog ndn 2 Select one of the keyword blocking options e Per Schedule Turn on keyword blocking according to the Schedule screen settings Always Turn on keyword blocking all the time independent of the Schedule screen 3 In the Keyword field enter a keyword or domain click Add Keyword and click Apply The Keyword list supports up to 32 entries Here are some sample entries e Specify XXX to block http www badstuff com xxx html e Specify com if you want to allow only sites with domain suffixes such as edu or gov e Enter a period to block all Internet browsing access Todelete a keyword or domain 1 Select the keyword you want to delete from the list 2 Click Delete Keyword 3 Click Apply Your changes are saved gt To specify a trusted computer You can exempt one trusted computer from blocking and logging The computer you exempt has to have a fixed IP address 1 In the Trusted IP Address field enter the IP address 2 Click Apply Your changes are saved Security 59 N300 Wireless ADSL2 Modem Router DGN22
105. oft Networking 2 f you want to specify read only access or to allow access from the Internet see USB Storage Device Network and Access Settings on page 54 Store Files in a Central Location for Printing This scenario is for a family that has one high quality color printer directly attached to a computer but not shared on the local area network LAN This family does not have a print server One family member has photos on a Macintosh computer that she wants to print e The photo capable color printer is directly attached to a PC but not shared on the network e The Mac and PC are not visible to each other on the network To print photos from a Mac on the printer attached to a PC 1 On the Mac access the USB drive by typing Weadyshare in the address field of a web browser Then copy the photos to the USB drive 2 Onthe PC use a web browser or Microsoft Networking to copy the files from the USB drive to the PC Then print the files USB Storage 52 N300 Wireless ADSL2 Modem Router DGN2200v4 Share Large Files over the Internet Sending files that are larger than 5 MB can pose a problem for many email systems The modem router allows you to share large files such as PowerPoint presentations or zip files over the Internet FTP can be used to download shared files from the modem router Sharing files with a remote colleague involves the following considerations e There are two user accounts admin and guest The
106. omputers e Inn elevated location such as a high shelf keeping the number of walls and ceilings between the modem router and your other devices to a minimum Away from electrical devices that are potential sources of interference such as ceiling fans home security systems microwaves computers or a 2 4 GHz cordless phone and its base Away from any large metal surfaces such as a solid metal door or aluminum studs Large expanses of other materials such as glass insulated walls fish tanks mirrors brick and concrete can also affect your wireless signal ADSL Microfilters If this is the first time you have cabled a modem router between a DSL phone line and your computer or laptop you might not be familiar with ADSL microfilters If you are you can skip this section and proceed to Cable Your Modem Router on page 14 An ADSL microfilter is a small inline device that filters DSL interference out of standard phone equipment that shares the same line with your DSL service Every telephone device that connects to a telephone line that provides DSL service needs an ADSL microfilter to filter out the DSL interference Examples of devices are telephones fax machines answering machines and caller ID displays Not every phone line in your home necessarily carries DSL service That depends on the DSL service setup in your home Note Often the ADSL microfilter is in the box with the modem router If you purchased the modem router in a co
107. on WPS button Pressing this button lets you use Wi Fi Protected Setup WPS to join the network see Wi Fi Protected Setup WPS Method on page 20 Y Solid green Wireless security has been enabled Blinking green A WPS capable device is connecting to the device e Off WPS is not enabled WiFi On Off button Pressing this button turns on and off the wireless radio in the modem router By default WiFi is on Solid green There is WiFi connectivity Blinking green Data is being transmitted or received over the WiFi link e Off There is no WiFi connectivity You can still plug an Ethernet cable into one of the LAN ports to get wired connectivity For more information about the use of this button see Advanced Wireless Settings on page 80 Hardware Setup 9 N300 Wireless ADSL2 Modem Router DGN2200v4 Table 1 Front panel icons for buttons and LEDs continued Icon Description Internet Solid green You have an Internet connection If the connection timed out based on the setting you entered in the Internet Setup screen but the DSL connection is still present the LED stays green If the Internet connection is dropped for any other reason the LED turns off Solid red The Internet IP connection failed For troubleshooting information see Troubleshoot the Internet Connection on page 122 Blinking green Data is being transmitted over the DSL port Off No Internet connection is
108. on the remote VPN endpoint Where settings have to match this requirement is indicated gt To add an Auto policy 1 Set the LAN IPs on each gateway to different subnets and configure each correctly for the Internet 2 Select Advanced gt Advanced VPN gt VPN Policies and click the Add Auto Policy button Remote Endpoint C IKE Keep Alive Loca LAN IP Address Remote LAN IP Address Address Type Address Data Ping IP Address Subnet oddress Single Start IP Address Finish Address Subset Mask Subset eddrese Segia IP Address Finish IP Address Subset Maik 3 Specify the general settings e n the Policy Name field enter a unique name Fred IP Address This name is not supplied to the remote VPN endpoint It is used only to help you manage the policies From the Address Type list select Fully Qualified Domain Name Dynamic IP Address or Fixed IP Address You can set up multiple remote dynamic IP policies but only one policy can be enabled at a time If you want to ensure that a connection is kept open or if that is not possible it is quickly reestablished when disconnected select the IKE Keep Alive check box and fill in the Ping IP Address field Fill in the Ping IP Address field The ping IP address has to be associated with the remote endpoint Either the WAN or a LAN address can be used a LAN address is preferable This IP address is pinged to generate some traffic for the VPN
109. onnection description a d 2003 01 01 00 03 07 adding interface ipeecO eth3 121 111 10 1003 01 01 00 03 08 a Imitiating Bain Mode ed 2003 01 01 00 03 09 responding to Main Bode 2003 03 08 00 03 09 ISAKMP 3A estabiished 2007 03 08 00 02 09 Dead Peer Detection PFC 3704 ana d 2003 01 01 00103109 sent N93 ISAKNP SA established 1003 01 01 00 03 09 Dead Peer Detection RFC 3706 ena ed 2003 01 01 00 02 09 Dead Peer Detection RFC 3706 ema 2003 01 01 00 03 09 sent QI2 IPsec SA established 4002 01 01 00 02 09 tesponding to Quick Mode magidibco 2003 01 01 00 03 09 Dead Peer Detection PFC 704 ema d 2003 01 01 00 03 09 IPsec SA established This log shows the details of recent VPN activity including the building of the VPN tunnel If there is a problem with the VPN tunnel refer to the log for information about what might be the cause of the problem 2 Optional Click Refresh to see the most recent entries 3 Optional Click Clear Log to delete all log entries 4 Click the VPN Status button The Current VPN Tunnels SAs screen displays Current VPN Tunnels SAS 7 SPi in SPI Our Policy Name Remote Endpoint Action SLiteTime HLifeTime cl 2 I a v This screen lists the following data for each active VPN tunnel e SPI Each SA has a unique security parameter index SPI for traffic in each direction For manual key exchange the SPI is specified in the policy definition
110. onnection time control feature to do this e Select the Traffic volume control by radio button and then select one of the following options No Limit No restriction is applied when the traffic limit is reached Download only The restriction is applied to incoming traffic only Both Directions The restriction is applied to both incoming and outgoing traffic e Select the Connection time control radio button and enter the allowed hours in the Monthly limit field Optional If your ISP charges an amount of extra data volume when you make a new connection enter the extra data volume in MB in the Round up data volume for each connection by field In the Traffic Counter section set the traffic counter to begin at a specific time and date If you want the traffic counter to start immediately click the Restart Counter Now button In the Traffic Control section specify whether the modem router should issue a warning message before the monthly limit of Mbytes or hours is reached By default the value is 0 and no warning message is issued You can select one of the following to occur when the limit is attained Advanced Settings 102 N300 Wireless ADSL2 Modem Router DGN2200v4 e The Internet LED flashes green or amber e The Internet connection is disconnected and disabled 7 Click the Apply button The Internet Traffic Statistics section helps you to monitor the data traffic Click the Refresh button to update the Traffic Sta
111. ooting 126 Supplemental Information This appendix includes the factory default settings and technical specifications for the modem router and instructions for wall mounting the unit This appendix contains the following sections e Factory Settings e Specifications 127 N300 Wireless ADSL2 Modem Router DGN2200v4 Factory Settings You can return the modem router to its factory settings On the back of the modem router use the end of a paper clip or some other similar object to press and hold the Reset button for at least 7 seconds The modem router returns to the factory settings shown in the following table Table 4 Factory default settings Feature Default Behavior Router Login Internet connection Local network LAN User login URL www routerlogin com or www routerlogin net User name case sensitive admin Login password case sensitive password WAN MAC address Use default address WAN MTU size 1492 Port speed AutoSensing LAN IP 192 168 0 1 Subnet mask 255 255 255 0 RIP direction None Disabled RIP authentication None DHCP server Enabled DHCP starting IP address 192 168 0 2 DHCP ending IP address 192 168 0 254 DMZ Enabled or disabled GMT for WW except GR GMT 1 for GR GMT 8 for NA Time zone adjusted for daylight Disabled savings time SNMP Disabled Firewall Inbound communications coming Disabled except traffic on port 80 th
112. or delete a rule e To add an outbound rule click Add under Outbound Services To edit or delete a rule select its button on the left side and click Edit or Delete 3 Optional Change the order of precedence a Select the button on the left side of the rule and click Move b At the prompt enter the number of the new position and click OK 4 Optional To open or close instant messaging select one of the following radio buttons e Close IM Ports Disables instant messaging traffic Open IM Ports Enables instant messaging traffic IM ports are open by default 5 Click Apply Your changes are saved Security 60 N300 Wireless ADSL2 Modem Router DGN2200v4 Port Triggering to Open Incoming Ports Some application servers such as FTP and IRC servers send replies to multiple port numbers Using the port triggering function of your modem router you can tell the modem router to open more incoming ports when a particular outgoing port originates a session An example is Internet Relay Chat IRC Your computer connects to an IRC server at destination port 6667 The IRC server not only responds to your originating source port but also sends an identify message to your computer on port 113 Using port triggering you can tell the modem router When you initiate a session with destination port 6667 you have to also allow incoming traffic on port 113 to reach the originating computer Using steps similar to the preceding e
113. orks because the ISDN modem router is on the LAN e Private is selected only as a precautionary security measure in case RIP is activated gt To set up a static route 1 Select Advanced gt Advanced Setup gt Static Routes Advanced Settings 88 10 N300 Wireless ADSL2 Modem Router DGN2200v4 Click Add Route Name 3 Private 9 Active Destnaton IP Adaress IP Xubnet Mack Gateway IP Address Metric In the Route Name field type a name for this static route for identification purposes only Select the Private check box if you want to limit access to the LAN only If Private is selected the static route is not reported in RIP Select the Active check box to make this route effective Type the destination IP address of the final destination Type the IP subnet mask for this destination If the destination is a single host type 255 255 255 255 Type the gateway IP address which has to be on the same LAN segment as the modem router Type a number from 1 through 15 as the metric value This value represents the number of modem routers between your network and the destination Usually a setting of 2 or 3 works but if this is a direct connection set it to 1 Click Apply The static route is added To edit or delete a static route 1 Select Advanced gt Advanced Setup gt Static Routes The Static Routes screen displays In the table select the radio button next to the route that you want t
114. ort internal Staring Porn internat Ending Port internal IP a diecs ive iw 0 Or select from currenmy snathad devices 4 In the Name field enter a descriptive name 5 In the Service Type list select the protocol If you are unsure select TCP UDP 6 In the External and Internal Starting Port fields enter the beginning port number e Ifthe service uses only one port enter the port number in the Ending Port field e If the service uses a range of ports enter the end port number in the Ending Port field 7T Inthe Internal IP Address field enter the IP address of your local computer that will provide this service 8 Click Apply The service appears in the list in the Port Forwarding Port Triggering screen Security 64 N300 Wireless ADSL2 Modem Router DGN2200v4 Edit or Delete a Port Forwarding Entry gt To edit or delete a port forwarding entry 1 In the table select the radio button next to the service name 2 Click Edit Service or Delete Service Application Example Make a Local Web Server Public If you host a web server on your local network you can use port forwarding to allow web requests from anyone on the Internet to reach your web server To make a local web server public 1 Assign your web server either a fixed IP address or a dynamic IP address using DHCP address reservation In this example your modem router always gives your web server an IP address of 192 168 0 33 2 Inthe Port Forwa
115. os Mo Saeent Mana 255 265 265 255 SUSE Storage MAC Aahesa WEES 2A2K009 Domain Mame Served gt s This screen IS IP Address 192 1680 6508 435 Secuity once oe also displayed Ademir ation through the Adenced VPN Administration P Avon ed Setup s Cuest Network 2 4 GHz menu Name PE NETOEAR1 Name SD NETOEAR O est Regen uro Wireless AP oq Chatel uto 11 Va oder aet Now Mese Wa ehe ss rechten oT Wiretess AP On Allow quest te access Broadcast Name On My Local Network Ws eben notsion ot VAR Protected Setup Configured os Setup Wizard You can use the Setup Wizard to detect your Internet settings and automatically set up your modem router The Setup Wizard is not the same as the genie screens that display the first time you connect to your modem router to set it up Touse the Setup Wizard 1 Select Advanced gt Setup Wizard The Smart Sotup Wiza d can detect the type of Internet connection that you hase Do you want the Smart Setup Wizard to fy and detect me connection type new Ows O Ne iwant to configure the router myself 2 Select either Yes or No I want to configure the router myself If you select No you are taken to the Internet Setup screen see nternet Setup on page 23 3 Select Yes and select your location 4 Click Next NETGEAR genie Advanced Home 34 N300 Wireless ADSL2 Modem Router DGN2200v4 The Setup Wizard searches your Internet connection for servers and protoco
116. ot function well In some cases one local computer can run the application correctly if that computer s IP address is entered as the default DMZ server A WARNING DMZ servers pose a security risk A computer designated as the default DMZ server loses much of the protection of the firewall and is exposed to exploits from the Internet If compromised the DMZ server computer can be used to attack other computers on your network The modem router discards traffic from the Internet that is not a response to one of your computers or a service that you have set up in the Port Forwarding Port Triggering screen Instead of discarding this traffic you can have the modem router forward the traffic to one computer on your network This computer is called the default DMZ server To set up a default DMZ server 1 Select Advanced gt Setup gt WAN Setup screen 2 Select the Default DMZ Server check box 3 Type the IP address 4 Click Apply Your changes are saved Change the MTU Size The maximum transmission unit MTU is the largest data packet a network device transmits When one network device communicates across the Internet with another the data packets travel through many devices along the way If a device in the data path has a lower MTU setting than the other devices the data packets are split or fragmented to accommodate the device with the smallest MTU The best MTU setting for NETGEAR equipment is often just the default
117. our preset security settings If you change your preset security settings make a note of the new settings and store it in a safe place where you can easily find it If you use a wireless computer to change the wireless network name SSID or other wireless security settings you are disconnected when you click Apply To avoid this problem use a computer with a wired connection to access the modem router gt To view or change basic wireless settings 1 Select Basic Wireless Wir elett Network v gnabie SSO Broadcast C Enable Vreless isolation Name S8ID NHETGEAR14 Region Europe Channet Auto cv Mode Upto 145 Mbps Security Options O None O WPA2 PSK PES S WPAPEXK TKIP WPA2 PSK AES Passphrase noyAup226 8 63 characters or 64 hex digito The screen sections settings and procedures are explained in the following sections 2 Make any changes that are needed 3 Click Appl Your settings are saved If you were connected wirelessly to the modem router and you changed the SSID or wireless security you are disconnected from the network 4 Setup and test your wireless devices and computers to make sure that they can connect wirelessly If they do not check the following e Is your wireless device or computer connected to your network or another wireless network in your area Some wireless devices automatically connect to the first open network without wireless security that they discover e Does y
118. our wireless device or computer show up on the Attached Devices screen If it does it is connected to the network e Ifyou are not sure what the network name SSID or password is look on the label on the bottom of your modem router NETGEAR genie Basic Settings 28 N300 Wireless ADSL2 Modem Router DGN2200v4 Wireless Settings Screen Fields You can use this screen to view or change the wireless network settings and the security option Wireless Network Enable SSID Broadcast This setting allows the modem router to broadcast its SSID so wireless stations can see this wireless name SSID in their scanned network lists This check box is selected by default To turn off the SSID broadcast clear this check box and click Apply Enable Wireless Isolation If this check box is selected computers or wireless devices that join the network can use the Internet but cannot access each other or access Ethernet devices on the network Name SSID The SSID is also known as the wireless network name Enter a 32 character maximum name in this field This field is case sensitive The default SSID is randomly generated and NETGEAR strongly recommends that you do not change this setting Region The location where the modem router is used Select from the countries in the list In the United States the region is fixed to United States and is not changeable Channel This setting is the wireless channel the gateway uses Enter a value fro
119. pa Cins GOP Serva auto Gong Clues Tht Mei ec ED The modem router automatically detects the information in the following fields Router s IPv6 Address on WAN This field shows the IPv6 address that is acquired for the modem router s WAN or Internet interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquired the field displays Not Available e Router s IPv6 Address on LAN This field shows the IPv6 address that is acquired for the modem router s LAN interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquired the field displays Not Available Optional In the DHCP User Class If Required field enter a host name Most people do not need to fill in this field but if your ISP has given you a specific host name enter it here Optional In the Domain Name If Required field enter a domain name You can type the domain name of your IPv6 ISP Do not enter the domain name for the IPv4 ISP here For example if your ISP s mail server is mail xxx yyy zzz you would type XXX yyy zzz as the domain name If your ISP provided a domain name type it in this field For example Earthlink Cable might require a host name of home and Comcast sometimes supplies a domain name Specify how the modem router assigns IPv6 addresse
120. provide secure access between networks such as a branch or home office and a main office VPN tunnel Gateway B Home Office Figure 14 VPN tunnel between networks A VPN tunnel between gateways is a good way to connect branch or home offices and business partners over the Internet Virtual Private Networking 105 N300 Wireless ADSL2 Modem Router DGN2200v4 Set Up a Client to Gateway VPN This section describes using the VPN Wizard to set up the VPN tunnel If you want to manually specify the settings see Auto Policy Example on page 112 gt To configure a client to gateway VPN tunnel 1 Select Advanced gt Advanced VPN gt VPN Wizard The Wizard sets most parameters to defaults as proposed by Pe VPN Consou VPNC sed assumes pre thared key which gre ay Cimpartes setup Afiet creates the policies Though Te VPN Vizard you can Mwayt update me parameters trough f VPN te amp n9g links on fe fl menu aca 2 Click Next Step 1 of Y Connection Name aed Remote IP Type Val is the new Connection Name What is the pre shared key This VPN tunnel will connect to A remote VPN Gateway O A remote VPN chent singe PC 3 Fill in the Connection Name and pre shared key fields The connection name is for convenience and does not affect how the VPN tunnel functions 4 Select A remote VPN client single computer radio button and click Next The Summary screen displays Samay Please v
121. rder in which the device joined the network IP Address The IP address that the modem router assigned to this device when it joined the network This number can change if a device is disconnected and rejoins the network Device Name If the device name is known it is shown here MAC Address The unique MAC address for each device does not change The MAC address is typically shown on the product label Click Refresh to update this screen NETGEAR genie Basic Settings 32 NETGEAR genie Advanced Home This chapter contains the following sections NETGEAR genie Advanced Home Screen Setup Wizard WPS Wizard WAN Setup LAN Setup Quality of Service QoS Setup Some selections on the Advanced Home screen are described in separate chapters USB Storage See Chapter 5 USB Storage Security See Chapter 6 Security Administration See Chapter 7 Administration Advanced Setup See Chapter 8 Advanced Settings Advanced VPN See Chapter 9 Virtual Private Networking 33 N300 Wireless ADSL2 Modem Router DGN2200v4 NETGEAR genie Advanced Home Screen The genie Advanced Home dashboard presents status information The content is the same as what is on the Router Status screen available from the Administration menu The genie Advanced Home screen is shown in the following figure Mat deas e Vet thom DON 20004 MAC Abt ose 7 Fazmo Vier ston 10 05 502 P Adwess GU Langage Vesien 10012 21175 Connection Sety AN P
122. rding Port Triggering screen configure the modem router to forward the HTTP service to the local address of your web server at 192 168 0 33 HTTP port 80 is the standard protocol for web servers 3 Optional Register a host name with a Dynamic DNS service and configure your modem router to use the name To access your web server from the Internet a remote user has to know the IP address that your ISP assigned However if you use a Dynamic DNS service the remote user can reach your server by a user friendly Internet name such as mynetgear dyndns org Set Up Port Triggering Port triggering is a dynamic extension of port forwarding that is useful in these cases e More than one local computer needs port forwarding for the same application but not simultaneously e An application needs to open incoming ports that are different from the outgoing port When port triggering is enabled the modem router monitors outbound traffic looking for a specified outbound trigger port When the modem router detects outbound traffic on that port it remembers the IP address of the local computer that sent the data The modem router then temporarily opens the specified incoming port or ports and forwards incoming traffic on the triggered ports to the triggering computer Port forwarding creates a static mapping of a port number or range to a single local computer Port triggering can dynamically open ports to any computer that needs them and can
123. rena M End YE DOecon Pecan ante amen Eos Ci pekt Dor Sunim Via Sram Thuridim Use the menus radio buttons and check boxes to set up a period during which you want the wireless signal to be turned off Click the Apply button The Advanced Wireless Settings screen displays Select the Turn off wireless signal by schedule check box to activate the schedule Click the Apply button View or Change WPS Settings gt To specify WPS Settings 1 Select Advanced gt Advanced Setup gt Wireless Settings The Router s PIN field displays the PIN that you use on a registrar for example from the Network Explorer on a Vista Windows computer to configure the modem router s wireless settings through WPS Optional Select or clear the Disable Router s PIN check box The PIN function might temporarily be disabled when the modem router detects suspicious attempts to break into the modem router s wireless settings by using the Advanced Settings 81 N300 Wireless ADSL2 Modem Router DGN2200v4 modem router s PIN through WPS You can manually enable the PIN function by clearing the Disable Router s PIN check box 3 Optional Select or clear the Keep Existing Wireless Settings check box By default the Keep Existing Wireless Settings check box is selected NETGEAR recommends that you leave this check box selected If you clear this check box the next time a new wireless client uses WPS to connect to the modem router
124. resses are on the same subnet Test the Path from Your Computer to a Remote Device After you verify that the LAN path works correctly test the path from your computer to a remote device In the Windows Run screen type ping n 10 IP address where P address is the IP address of a remote device such as your ISP s DNS server If the path is functioning correctly replies as described in Test the LAN Path to Your Modem Router on page 124 display If you do not receive replies Check that your computer has the IP address of your modem router listed as the default modem router If the IP configuration of your computer is assigned by DHCP this information is not visible in your computer s Network Control Panel Verify that the IP address of the modem router is listed as the default router Check that the network address of your computer the portion of the IP address specified by the netmask is different from the network address of the remote device Check that your cable or DSL modem is connected and functioning If your ISP assigned a host name to your computer enter that host name as the account name in the Internet Setup screen Your ISP could be rejecting the Ethernet MAC addresses of all but one of your computers Many broadband ISPs restrict access by allowing traffic only from the MAC address of your modem but some additionally restrict access to the MAC address of a single computer connected to that modem In this case conf
125. revious section Make sure that your computer s IP address is on the same subnet as the modem router If you are using the recommended addressing scheme your computer s address should be in the range of 192 168 0 2 to 192 168 0 254 If your computer s IP address is shown as 169 254 x x recent versions of Windows and Mac OS generate and assign an IP address if the computer cannot reach a DHCP server These autogenerated addresses are in the range of 169 254 x x If your IP address is in this range check the connection from the computer to the modem router and reboot your computer If your modem router s IP address was changed and you do not know the current IP address clear the modem router s configuration to factory defaults This sets the modem router s IP address to 192 168 0 1 This procedure is explained in Factory Settings on page 128 Make sure that your browser has Java JavaScript or ActiveX enabled If you are using Internet Explorer click Refresh to be sure that the Java applet is loaded Try quitting the browser and launching it again Make sure that you are using the correct login information The factory default login name is admin and the password is password Make sure that Caps Lock is off when you enter this information Troubleshooting 121 N300 Wireless ADSL2 Modem Router DGN2200v4 Troubleshoot the Internet Connection If your modem router is unable to access the Internet check the ADSL connection then
126. rvation When you specify a reserved IP address for a computer on the LAN that computer receives the same IP address each time it accesses the modem router s DHCP server Assign reserved IP addresses to servers that require permanent IP settings See Address Heservation on page 42 NETGEAR genie Advanced Home 41 N300 Wireless ADSL2 Modem Router DGN2200v4 Specify DHCP Server Settings By default the modem router is set up as a DHCP server You can specify the range of addresses that the modem router assigns You can also use another device on your network as the DHCP server or specify the network settings of all of your computers To specify the pool of IP addresses that the modem router assigns 1 Select Advanced LAN Setup 2 Make sure that the Use Router as a DHCP Server check box is selected 3 Specify the range of IP addresses For example using the default addressing scheme define a range between 192 168 0 2 and 192 168 0 254 although you might want to save part of the range for devices with fixed addresses e Inthe Starting IP Address field specify the start of the range for the pool of IP addresses in the same subnet as the modem router e Inthe Ending IP Address field specify the end of the range for the pool of IP addresses in the same subnet as the modem router 4 Click Apply Your changes are saved To disable the DHCP Server feature in the modem router 1 Select Advanced LAN Setup Clear the Use
127. s to the devices on your home network the LAN by selecting one of the following radio buttons Advanced Settings 99 6 7 N300 Wireless ADSL2 Modem Router DGN2200v4 e Use DHCP Server This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function e Auto Config This is the default setting Optional Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the modem router s LAN interface If you do not specify an ID here the modem router generates one automatically from its MAC address Click the Apply button IPv6 PPPoE gt To set up a PPPoE IPv6 Internet connection 1 Select Advanced gt Advanced Setup gt IPv6 The IPv6 screen displays In the Internet Connection Type list select PPPoE The screen adjusts hel Crepe Du ar Lo Passed Senor o hame T epee Y italie isis a Heni a Ft Rar aniio Doe CAI PHE Asih phit LAH Zip Hen a P kirasi Dem LEH T OR Mol alh P babes biian ahis Bath Basi CS Aula Config Juni This o Race D The modem router automatically detects the information in the following fields Router s IPv6 Address on WAN This field shows the IPv6 address that is acquired for the modem router s WAN or Internet interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If
128. ses on the LAN For most applications the default DHCP and TCP IP settings of the modem router are satisfactory The modem router delivers the following parameters to any LAN device that requests DHCP e IP address e Subnet mask e Gateway IP address the modem router s LAN IP address e Primary DNS server if specified in the Internet Setup screen otherwise the modem router s LAN IP address e Secondary DNS server if you entered this in the Internet Setup screen If you change the LAN IP address of the modem router while connected through the browser you are disconnected from the network gt To change the LAN settings 1 Select Advanced Setup LAN Setup Device Mame LAN TCP Setup P Assess P Subret Mask RIP Dwecton Bot RIP Version Disabled v LA Use Roster as DHCP Server Starting IP Address len Ending P Adfrect 2 168 Address Reservation NETGEAR genie Advanced Home 40 N300 Wireless ADSL2 Modem Router DGN2200v4 2 Specify the settings that you want to customize see LAN Setup Screen Settings 3 Click Apply Your changes are saved LAN Setup Screen Settings The following settings are available Device Name By default this is DGN2200v4 the modem router model You can change it to another name if you prefer LAN TCP IP Setup IP Address The LAN IP address of the modem router e P Subnet Mask The LAN subnet mask of the modem router Combined with the IP address the IP
129. st NelblwoIK inne ttr RR RC penn RR RR e 31 View Attached Devices ees 32 N300 Wireless ADSL2 Modem Router DGN2200v4 Chapter 4 NETGEAR genie Advanced Home NETGEAR genie Advanced Home Screen 000000 ee eee 34 SUP WIZAIG masna eine tav ard iieSEESeDRIA M ERG REPE d 34 WPS WIiZaltl s vu ocurre co RE RESQUE EIS ERO ENS 35 WAN SOIUD aad dio REOS GaU P ERG Dea S RGB RR RA GE E 36 WAN Setup Screen Fields lllllllellellllee lees 37 Default DMZ SOtVSl zz uius coop sexe deumque iy Ede tek oed dts 38 Change the MTU Size ulslilsslseelsllellslee 38 EAN SEUD o eere ongia M p EE 40 LAN Setup Screen Settings eese memes nm mme 41 Specify DHCP Server SettingS 0 000 cece e eee eee 42 Address Reservation 0000 000 eee eee 42 Quality of Service QoS Setup 00 00 e eee eee 43 WMM QoS for Wireless Multimedia Applications 43 Set Up QoS for Internet Access liliis 44 Chapter 5 USB Storage USB Drive Requirements 0 0 00 cece eee eee 49 Connect a USB Storage Device to the Modem Router 49 Safely Remove a USB Drive 00 0c cece eee 50 Access the USB Storage Device liliis 50 File Sharing Scenarios once meme d mmm oma a RR Rm raa 52 View a USB Device Attached to the Modem Router 53 USB Storage Device Network and Access Settings 54 Available Network Folders 0 000 ccc
130. t Password Qui Password Set Password Repeat New Password 3 Enable Password Recovery 2 On the Set Password screen type the old password and type the new password twice 3 If you want to be able to recover the password select the Enable Password Recovery check box 4 Click Apply Your changes take effect Password Recovery NETGEAR recommends that you enable password recovery if you change the password for the user name admin Then you can recover the password if it is forgotten This recovery is supported in Internet Explorer Firefox and Chrome browsers but not in the Safari browser Tosetup password recovery 1 Select the Enable Password Recovery check box 2 Select two security questions and provide answers to them 3 Click Apply Your changes are saved Administration 7T N300 Wireless ADSL2 Modem Router DGN2200v4 Torecover your password 1 In the address field of your browser type www routerlogin net A login window displays 2 Click Cancel If password recovery is enabled you are prompted to answer two security questions 3 Enter the saved answers to the security questions Administration 78 Advanced Settings This chapter describes the advanced features of your modem router Networking knowledge is needed to implement some of these features Note The Port Forwarding Port Triggering screen can be accessed both through the Advanced Setup menu and through the Firewal
131. t to the Dynamic DNS service provided by DynDNS org First visit their website at http www dyndns org and obtain an account and host name that you configure in the modem router Then whenever your ISP assigned IP address changes your modem router automatically contacts the Dynamic DNS service provider logs in to your account and registers your new IP address If your host name is hostname for example you can reach your modem router at http nostname dyndns org Tosetup Dynamic DNS 1 Select Advanced gt Advanced Setup gt Dynamic DNS CI Use a Dynamic DNS Service Service Provider www DynDNS ong w Host Name User Name Password 2 Register for an account with one of the Dynamic DNS service providers whose URLs are in the Service Provider list For example for DynDNS org select www dyndns org 3 Select the Use a Dynamic DNS Service check box Advanced Settings 87 N300 Wireless ADSL2 Modem Router DGN2200v4 4 Select the URL of your Dynamic DNS service provider 5 Type the host name or domain name that your Dynamic DNS service provider gave you 6 Type the user name for your Dynamic DNS account This is the name that you use to log in to your account not your host name 7 Type the password or key for your Dynamic DNS account 8 Click Apply Your changes are saved Static Routes Static routes provide more routing information to your modem router Typically you do not need to add static routes
132. ter but less secure than 3DES 3DES Triple DES achieves a higher level of security by encrypting the data three times using DES with three different unrelated keys Select the authentication algorithm This is the authentication algorithm used for both IKE and IPSec This setting has to match the setting used on the remote VPN gateway Auto MD5 and SHA 1 are supported Auto negotiates with the remote VPN endpoint and is not available in responder only mode MD5 128 bits faster but less secure SHA 1 160 bits slower but more secure This is the default Enter the pre shared key The key has to be entered both here and on the remote VPN gateway Enter the SA life time value This value is the time interval before the SA security association expires It is automatically reestablished as required While using a short time period or data amount increases security it also degrades performance It is common to use periods over an hour 3600 seconds for the SA life time This setting applies to both IKE and IPSec SAs If you want enhanced security select the Enable IPSec PFS Perfect Forward Secrecy check box If this check box is selected security is enhanced by ensuring that the key is changed at regular intervals Also even if one key is broken subsequent keys are no easier to break Each key has no relationship to the previous key This setting applies to both IKE and IPSec SAs When configuring the remote e
133. ter s IP address during configuration and the IP address can never change e Port triggering requires specific outbound traffic to open the inbound ports and the triggered ports are closed after a period of no activity e Port forwarding is always active and does not need to be triggered Set Up Port Forwarding to Local Servers The port forwarding feature lets you allow certain types of incoming traffic to reach servers on your local network For example you might want to make a local web server FTP server or game server visible and available to the Internet Use the Port Forwarding Port Triggering screen to configure the modem router to forward specific incoming protocols to computers on your local network In addition to servers for specific applications you can also specify a default DMZ server to which all other incoming protocols are forwarded Before you start determine which type of service application or game you want to provide and the local IP address of the computer that will provide the service The server computer has to always have the same IP address To ensure that your server computer always has the same IP address use the reserved IP address feature of your product See Adaress Heservation on page 42 gt To forward specific incoming protocols 1 Select Advanced Advanced Setup Port Forwarding Port Triggering Port Forwarding Part Triggering Please select the service type Port Forwarding
134. the WAN TCP IP connection ADSL Link If your modem router is unable to access the Internet first determine whether you have an ADSL link with the service provider The state of this connection is indicated with the Internet LED ADSL Link LED Is Green If your ADSL link LED is green you have a good ADSL connection You can be confident that the service provider has connected your line correctly and that your wiring is correct ADSL Link LED Is Blinking Green If your ADSL link LED is blinking green your modem router is attempting to make an ADSL connection with the service provider The LED should turn green within several minutes If the ADSL link LED does not turn green disconnect all telephones on the line If this solves the problem reconnect the telephones one at a time being sure to use a microfilter on each telephone If the microfilters are connected correctly you should be able to connect all your telephones If disconnecting telephones does not result in a green ADSL link LED there might be a problem with your wiring If the telephone company has tested the ADSL signal at your network interface device NID then you might have poor quality wiring in your house ADSL Link LED Is Off If the ADSL link LED is off disconnect all telephones on the line If this solves the problem reconnect the telephones one at a time being sure to use a microfilter on each telephone If the microfilters are connected correctly you shou
135. the Internet You can specify the days and time that you want to block Internet access To schedule blocking 1 Select Advanced gt Security gt Schedule Days to Blocks Mew ow Sunday Monday Tuesday Wednesday Thursday Free Saturday Time of day to blockc use 24 hou clock 7 A Oay Start Blocking How Minute End Blocking 24 Howo Minute Time Zone GMT Greenwich Mean Time Dublin Edinburgh Lisbon London Q Help Center ShowHide Help Center er HE M 2 Setup the schedule for blocking keywords and services e Days to Block Select days on which you want to apply blocking by selecting the appropriate check boxes or select Every Day to select the check boxes for all days e Time of Day to Block Select a start and end time in 24 hour format or select All Day for 24 hour blocking 3 Select your time zone from the list If you use daylight savings time select the Automatically adjust for daylight savings time check box 4 Click Apply Your settings are saved Security 68 N300 Wireless ADSL2 Modem Router DGN2200v4 Security Event Email Notifications To receive logs and alerts by email provide your email information in the E mail screen and specify which alerts you want to receive and how often Tosetup email notifications 1 Select Advanced gt Security gt E mail Li Tuin E mali Notification On Send abis and boys Me octyl e iod ur Outgoing
136. tistics section Click the Traffic Status button to display more information about the data traffic on your modem router and to change the poll interval Advanced Settings 103 Virtual Private Networking This chapter describes how to use the virtual private networking VPN features of the modem router VPN communications paths are called tunnels VPN tunnels provide secure encrypted communications between your local network and a remote network or computer This chapter contains the following sections Overview of VPN Configuration Set Up a Client to Gateway VPN Add a Gateway to Gateway VPN Tunnel Activate a VPN Tunnel View or Change the Status of a VPN Tunnel Auto Policy Example Add or Edit a VPN Auto Policy Add or Edit a Manual VPN Policy 104 N300 Wireless ADSL2 Modem Router DGN2200v4 Overview of VPN Configuration The modem router supports both client to gateway and gateway to gateway VPN tunnels The modem router supports up to five concurrent tunnels Client to Gateway VPN Tunnels Client to gateway VPN tunnels provide secure access from a remote computer such as a telecommuter connecting to an office network VPN tunnel Modem router a PC running NETGEAR ProSafe VPN Client Figure 13 Telecommuter VPN tunnel A VPN client access allows a remote computer to connect to your network from any location on the Internet Gateway to Gateway VPN Tunnels Gateway to gateway VPN tunnels
137. ts file uploading only FTP Disabled by default FTP via Internet Disabled by default If you select this feature remote users can access the USB drive through FTP over the Internet This setting supports both downloading and uploading of files 3 If you changed the settings click Apply Your changes are saved USB Storage 54 N300 Wireless ADSL2 Modem Router DGN2200v4 Available Network Folders You can view or change the network folders on the USB storage device gt To view network folders 1 Select Advanced gt USB Storage gt Advanced Settings USH Ster age Advanced Settings lemante Access mnes 0 tn a LLLI o freer meme n re FTP v internet Ap 0 0 0 Oenares 2 Scroll down to the Available Networks Folder section of the screen Share Name If only one device is connected the default share name is USB Storage Some router models have more than one USB port You can click the name or you can type it in the address field of your web browser If Not Shared is shown the default share has been deleted and no other share for the root folder exists Click the link to change this setting Read Access and Write Access Shows the permissions and access controls on the network folder All no password the default allows all users to access the network folder The password for admin is the same one that you use to log in to the modem router Folder Name Full path of th
138. ttings e Set Up a Guest Network e View Attached Devices For information about ReadySHARE USB storage see Chapter 5 USB Storage 22 N300 Wireless ADSL2 Modem Router DGN2200v4 Internet Setup The Internet Setup screen is where you view or change basic ISP information Note You can use the Setup Wizard to detect the Internet connection and automatically set up the modem router See Setup Wizard on page 34 gt To view or change the basic Internet setup 1 From the Home screen select Internet pa Does your Interner conmection require a login ws O No Internet Service Provider Login Scroll to Password view more Sendce Name f Required settings Comectien Mode kile Tuneout Minutes kornet iP Adress Get mami aly tom ISP O Use Static IP Address Showlhide Helo Center The fields that display in the Internet Setup screen depend on whether your Internet connection requires a login e Yes Select the encapsulation method and enter the login name If you want to change the login time out enter a new value in minutes e No Enter the account and domain names only if needed 2 Enter the settings for the IP address and DNS server The default settings usually work fine If you have problems with your connection check the ISP settings 3 Click Apply to save your settings 4 Click Test to test your Internet connection If the NETGEAR website does not display within 1 minute see Chapter 10
139. tunnel Virtual Private Networking 113 N300 Wireless ADSL2 Modem Router DGN2200v4 Specify the Local LAN settings From the IP Address list select Subnet address Single address or Range address Fill in the Single Start IP Address field If you are specifying a range fill in the Finish IP Address field This range must be an address range used on your LAN For a single IP address do not fill in the Finish IP Address field The remote VPN endpoint must have these IP addresses entered as its remote addresses Specify the Remote LAN settings From the IP Address list select Single PC no Subnet Single address Range address or Subnet address If there is no LAN only a single computer at the remote endpoint select the Single PC no Subnet option The Single address option is typically used to access a server on the remote LAN If you want to specify a range fill in the Finish IP Address field This range must be an address range used on the remote LAN Fill in the Subnet Mask field The remote VPN endpoint must have these IP addresses entered as its local addresses Specify the IKE settings From the Direction list select either Responder only or Initiator and Responder The modem router uses this setting to determine if the IKE policy matches the current traffic With the Responder only setting incoming connections are allowed and outgoing connections are blocked With the Initiator and Responder setting
140. u backed up 1 Click the Browse button to find the cfg file 2 Click the Restore button The files is uploaded to the modem router The modem router reboots WARNING Do not interrupt the reboot process Erase the Current Configuration Settings You can use the Erase button erase the configuration and restore the factory default settings You might want to do this if you move the modem router to a different network or if you changed the password and have forgotten what it is The default passwords are on the product label Administration 76 N300 Wireless ADSL2 Modem Router DGN2200v4 You can also use the Restore Factory Settings button on the back of the modem router to erase the configuration and restore the factory settings See Factory Settings on page 128 gt To erase the configuration settings Click the Erase button The factory default settings are restored The user name is admin the password to password and the LAN IP address is 192 168 0 1 DHCP is enabled Change the Password This feature let you change the default password that is used to log in to the modem router with the user name admin This is not the same as changing the password for wireless access The label on the bottom of your modem router shows your unique wireless network name SSID and password for wireless access see Label on page 11 Tosetthe password for the user name admin 1 Select Advanced gt Administration gt Se
141. uctions that came with your product Change WPA Security Option and Passphrase You can change the security settings for your modem router If you do so then write down the new settings and store them in a secure place for future reference gt To change the WPA settings 1 Select Basic gt Wireless Settings 2 Under Security Options select the WPA option you want Sec ini Options none WEAPRE JABS Cys Bre TRIE WR E B 3 Inthe Passphrase field that displays when you select a WPA security option enter the network key password that you want to use It is a text string from 8 to 63 characters NETGEAR genie Basic Settings 30 N300 Wireless ADSL2 Modem Router DGN2200v4 Set Up a Guest Network Adding a guest network allows visitors at your home to use the Internet without giving them your wireless security key Tosetup a guest network 1 Select Basic Guest Network Wireless Settings Profile 1 DlEnabie Guest Network Mi Enable 550 Broadcast LJ Afow guest to acceso My Local Network C Enable Wireless Isolation Guest Wireless Network Name S810 NETGEAR Guest Security Options Profile 1 9 None OO WPA2 PSK ARS OWPAPSK MOP PAD PSX ES 2 Select any of the following wireless settings Enable Guest Network When this check box is selected the guest network is enabled and guests can connect to your network using the SSID of this profile Enable SSID Broadcast If this chec
142. untry where a microfilter is not included you have to acquire the ADSL microfilter separately One Line ADSL Microfilter Plug the ADSL microfilter into the wall outlet and plug your phone equipment into the jack labeled Phone The modem router plugs directly into a separate DSL line Plugging the modem router into the phone jack blocks the Internet connection If you do not have a Hardware Setup 12 N300 Wireless ADSL2 Modem Router DGN2200v4 separate DSL line for the modem router the best thing to do is to use an ADSL microfilter with a built in splitter see Two Line ADSL Microfilter on page 13 Plugs into DSL line Figure 5 One line ADSL microfilter If you do not have a separate DSL line for the modem router the second best solution is to get a separate splitter To use a one line filter with a separate splitter insert the splitter into the phone outlet connect the one line filter to the splitter and connect the phone to the filter Two Line ADSL Microfilter Use an ADSL microfilter with a built in splitter if you have a single wall outlet that provides connectivity for both the modem router and your telephone equipment Plug the ADSL microfilter into the wall outlet plug your phone equipment into the jack labeled Phone and plug the modem router into the jack labeled ADSL As Plugs into the DSL line Figure 6 Two line ADSL microfilter with built in splitter Summary e One line ADSL microfilter Use with a phone
143. value In some situations changing the value fixes one problem but causes another Leave the MTU unchanged unless one of these situations occurs e You have problems connecting to your ISP or other Internet service and the technical support of either the ISP or NETGEAR recommends changing the MTU setting These web based applications might require an MTU change A secure website that does not open or displays only part of a web page NETGEAR genie Advanced Home 38 N300 Wireless ADSL2 Modem Router DGN2200v4 Yahoo email MSN portal America Online s DSL service e You use VPN and have severe performance problems e You used a program to optimize MTU for performance reasons and now you have connectivity or performance problems Note An incorrect MTU setting can cause Internet communication problems For example you might not be able to access certain websites frames within websites secure login pages or FTP or POP servers If you suspect an MTU problem a common solution is to change the MTU to 1400 If you are willing to experiment you can gradually reduce the MTU from the maximum value of 1500 until the problem goes away The following table describes common MTU sizes and applications Table 2 Common MTU sizes MTU Application 1500 The largest Ethernet packet size This setting is typical for connections that do not use PPPoE or VPN and is the default value for NETGEAR modem routers adapters
144. with the base station and allowing LAN client associations only You can leave the check box cleared if you prefer wireless clients to be able to associate with the base stations In the Repeater MAC Address 1 through 4 fields enter the MAC addresses for the access points that should function as repeaters If your modem router is the base station it can function as the parent for up to four other access points Click the Apply button Your changes are saved Set Up a Repeater Use a wired Ethernet connection to set up the repeater unit to avoid conflicts with the wireless connection to the base station If you are using the modem router as the base station with a non NETGEAR router as the repeater you might need to change more configuration settings In particular you should disable the DHCP server function on the access point that is the repeater To configure the modem router as a repeater 3 2 Log in to the modem router that will be the repeater Select Basic Wireless Settings and verify that the wireless settings match the base unit exactly The wireless security option has to be set to WEP or None Select Advanced Wireless Repeating Function Select the Enable Wireless Repeating Function check box Select the Wireless Repeater radio button En EIILN 7 Enable Wireless Repeat Function V relett MAC of his router 2085 2A248C 809 O Wirelect Repeater Repester IP Address 192 C Desatte Wireless Ch
145. xample the following sequence shows the effects of the port triggering rule you have defined 1 You open an IRC client program to start a chat session on your computer 2 Your IRC client composes a request message to an IRC server using a destination port number of 6667 the standard port number for an IRC server process Your computer then sends this request message to your modem router 3 Your modem router creates an entry in its internal session table describing this communication session between your computer and the IRC server Your modem router stores the original information performs Network Address Translation NAT on the source address and port and sends this request message through the Internet to the IRC server 4 Noting your port triggering rule and having observed the destination port number of 6667 your modem router creates an additional session entry to send any incoming port 113 traffic to your computer 5 The IRC server sends a return message to your modem router using the NAT assigned source port for example port 33333 as the destination port The IRC server also sends an identify message to your modem router with destination port 113 6 Upon receiving the incoming message to destination port 33333 your modem router checks its session table to determine whether there is an active session for port number 33333 Finding an active session the modem router restores the original address information replaced by NAT
146. your home network the LAN by selecting one of the following radio buttons Use DHCP Server This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function e Auto Config This is the default setting Optional Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the modem router s LAN interface If you do not specify an ID here the modem router generates one automatically from its MAC address Click the Apply button Advanced Settings 101 N300 Wireless ADSL2 Modem Router DGN2200v4 Traffic Meter Traffic metering allows you to monitor the volume of Internet traffic that passes through the modem router Internet port You can set limits for traffic volume To monitor Internet traffic 1 Click Advanced gt Advanced Setup gt Traffic Meter itetnet Teatfe Meter O nabia Trafic Matar Trafic volume control by Monty ima Mofes Round up data volume for each cennecbon by Moyes z Conmacton time convoi Scroll to view auala mm more settings Traffic Counter Restan batic counter 00 00 gt Gay of each morth Traffic Contiot Pop op s wamieg mentage MiyteMinotes betfoee me morti herd 16 AKASO When fe montriy limit is reached Select the Enable Traffic Meter check box Optional Control the volume of Internet traffic You can use either the traffic volume control feature or the c
147. your modem router with the NETGEAR genie automatically or you can use the genie menus and screens to set up your modem router manually Before you start the setup process get your ISP information and make sure the computers and devices in the network have the settings described here Use Standard TCP IP Properties for DHCP If you set up your computer to use a static IP address you need to change the settings so that it uses Dynamic Host Configuration Protocol DHCP Gather ISP Information If you have DSL broadband service you might need the following information to set up your modem router and to check that your Internet configuration is correct Your Internet service provider ISP should have provided you with all of the information needed to connect to the Internet If you cannot locate this information ask your ISP to provide it When your Internet connection is working you no longer need to launch the ISP s login program on your computer to access the Internet When you start an Internet application your modem router automatically logs you in Make sure that you have the following information e The ISP configuration information for your DSL account e ISP login name and password e Fixed or static IP address settings special deployment by ISP this is rare Wireless Devices and Security Settings Make sure that the wireless device or computer that you are using supports WPA or WPA2 wireless security which is the wireless security

N300 Wireless ADSL2+ Modem Router DGN2200v4

Contents

Download Pdf Manuals

Related Search

Related Contents