N300 Wireless Dual Band
ADSL2+ Modem Router
DGND3300v2
User Manual
350 East Plumeria Drive
San Jose, CA 95134
USA
October 2010
202-10463-04
v1.0
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
©2010 NETGEAR, Inc. All rights reserved.
No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated
into any language in any form or by any means without the written permission of NETGEAR, Inc.
Technical Support
Thank you for choosing NETGEAR. To register your product, get the latest product updates, or get support online,
visit us at http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR
Phone (Other Countries): See Support information card.
Trademarks
NETGEAR, the NETGEAR logo, ReadyNAS, ProSafe, Smart Wizard, and Auto Uplink are trademarks or
registered trademarks of NETGEAR, Inc. Microsoft, Windows, Windows NT, and Vista are registered trademarks
of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their
respective holders.
Statement of Conditions
To improve internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes
to the products described in this document without notice. NETGEAR does not assume any liability that may occur
due to the use, or application of, the product(s) or circuit layout(s) described herein.
2 |
Table of Contents
Chapter 1 Router Internet Setup
Using the Setup Manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Logging In to Your N300 Wireless Modem Router. . . . . . . . . . . . . . . . . . . .8
Using the Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Viewing or Manually Configuring Your ISP Settings. . . . . . . . . . . . . . . . . .10
Configuring ADSL Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Chapter 2 Wireless Settings
Planning Your Wireless Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Wireless Placement and Range Guidelines. . . . . . . . . . . . . . . . . . . . . .16
Wireless Security Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Manually Configuring Your Wireless Settings . . . . . . . . . . . . . . . . . . . . . .18
Configuring WEP Wireless Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Configuring WPA, WPA2, or Mixed WPA2 + WPA Wireless Security . .22
Using Push 'N' Connect (WPS) to Configure Your Wireless Network . . . .24
Using a WPS Button to Add a WPS Client. . . . . . . . . . . . . . . . . . . . . . .24
Using PIN Entry to Add a WPS Client . . . . . . . . . . . . . . . . . . . . . . . . . .25
Configuring Advanced WPS Settings. . . . . . . . . . . . . . . . . . . . . . . . . . .27
Connecting Additional Wireless Client Devices after WPS Setup . . . . . . .27
Adding More WPS Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Adding Both WPS and Non-WPS Clients. . . . . . . . . . . . . . . . . . . . . . . .28
Restricting Access to Your N300 Wireless Modem Router . . . . . . . . . . . .29
Wireless Guest Networks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Live Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Chapter 3 Security Settings
Protecting Access to Your N300 Wireless Modem Router. . . . . . . . . . . . .34
Changing the Built-In Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Restricting Access by MAC Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Blocking Access to Internet Sites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Firewall Rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Port Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Adding a Pre-set Port Forwarding Rule . . . . . . . . . . . . . . . . . . . . . . . . .42
Adding a Custom Port Forwarding Rule. . . . . . . . . . . . . . . . . . . . . . . . .42
Port Triggering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Blocking Access to Internet Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
Scheduling Blocking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
Viewing Logs of Web Access or Attempted Web Access. . . . . . . . . . . . . .46
Configuring Email Alert and Web Access Log Notifications. . . . . . . . . . . .47
Contents | 3
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Setting the Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Chapter 4 Network Maintenance
Upgrading the Firmware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Manually Check for Firmware Upgrades . . . . . . . . . . . . . . . . . . . . . . . .51
Viewing N300 Wireless Modem Router Status Information . . . . . . . . . . . .52
Connection Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
Viewing a List of Attached Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Managing the Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Backing Up and Restoring the Configuration . . . . . . . . . . . . . . . . . . . . .58
Erasing the Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58
Running Diagnostic Utilities and Rebooting the Router . . . . . . . . . . . . . . .58
Enabling Remote Management Access. . . . . . . . . . . . . . . . . . . . . . . . . . .59
Traffic Meter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Chapter 5 USB Storage
USB Drive Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
File Sharing Scenarios. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
Sharing Photos with Friends and Family . . . . . . . . . . . . . . . . . . . . . . . .66
Storing Files in a Central Location for Printing. . . . . . . . . . . . . . . . . . . .66
Sharing Large Files with Colleagues . . . . . . . . . . . . . . . . . . . . . . . . . . .66
USB Storage Basic Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
Editing a Network Folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68
Configuring USB Storage Advanced Settings . . . . . . . . . . . . . . . . . . . . . .69
Creating a Network Folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71
Media Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
Unmounting a USB Drive. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
Specifying Approved USB Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
Connecting to the USB Drive from a Remote Computer . . . . . . . . . . . . . .73
Locating the Internet Port IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . .73
Accessing the Router’s USB Drive Remotely Using FTP. . . . . . . . . . . .74
Connecting to the USB Drive with Microsoft Network Settings . . . . . . . . .74
Enabling File and Printer Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74
Chapter 6 Virtual Private Networking
Overview of VPN Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
Client-to-Gateway VPN Tunnels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Gateway-to-Gateway VPN Tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Planning a VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78
VPN Tunnel Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79
Setting Up a Client-to-Gateway VPN Configuration. . . . . . . . . . . . . . . . . .80
Step 1: Configure the Client-to-Gateway VPN Tunnel . . . . . . . . . . . . . .80
Step 2: Configure the NETGEAR ProSafe VPN Client. . . . . . . . . . . . . .83
Setting Up a Gateway-to-Gateway VPN Configuration . . . . . . . . . . . . . . .90
VPN Tunnel Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94
4 | Contents
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Activating a VPN Tunnel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94
Verifying the Status of a VPN Tunnel. . . . . . . . . . . . . . . . . . . . . . . . . . .97
Deactivating a VPN Tunnel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98
Deleting a VPN Tunnel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100
Setting Up VPN Tunnels in Special Circumstances. . . . . . . . . . . . . . . . .100
Using Auto Policy to Configure VPN Tunnels. . . . . . . . . . . . . . . . . . . .101
Using Manual Policy to Configure VPN Tunnels . . . . . . . . . . . . . . . . .109
Chapter 7 Advanced Settings (Part 1)
Using the LAN Setup Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112
Using the N300 Wireless Modem Router as a DHCP Server. . . . . . . .114
Address Reservation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115
Using a Dynamic DNS Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116
Configuring the WAN Setup Options . . . . . . . . . . . . . . . . . . . . . . . . . . . .117
Setting Up a Default DMZ Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . .119
Setting Up Quality of Service (QoS). . . . . . . . . . . . . . . . . . . . . . . . . . . . .119
Configuring QoS for Internet Access . . . . . . . . . . . . . . . . . . . . . . . . . .120
Editing or Deleting an Existing QoS Policy. . . . . . . . . . . . . . . . . . . . . .123
Configuring Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123
Wireless Repeating (Also Called WDS) . . . . . . . . . . . . . . . . . . . . . . . . . .125
Wireless Repeating Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126
Setting Up the Base Station . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127
Setting Up a Repeater Unit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128
Chapter 8 Advanced Settings (Part 2)
Common Connection Types. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130
Assessing Your Speed Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . .131
Optimizing Your Network Bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . .132
Optimizing Wireless Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Changing the MTU Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134
Universal Plug and Play . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135
Appendix A Troubleshooting
Quick Tips. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137
Troubleshooting with the LEDs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
Cannot Access the N300 Wireless Modem Router Menu . . . . . . . . . . . .140
Cannot Access the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .141
Checking the Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .141
Checking the WAN IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .141
Troubleshooting a Network Using the Ping Utility . . . . . . . . . . . . . . . . . .142
Testing the LAN Path to Your Router. . . . . . . . . . . . . . . . . . . . . . . . . .143
Testing the Path from Your Computer to a Remote Device . . . . . . . . .143
Problems with Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144
Wireless Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145
Viewing Available Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145
Contents | 5
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Appendix B Default Configuration and Technical Specifications
Restoring the Factory Configuration Settings. . . . . . . . . . . . . . . . . . . . . .147
Using the Restore Factory Settings Button . . . . . . . . . . . . . . . . . . . . . 147
Technical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150
Appendix C NETGEAR VPN Configuration
Configuration Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151
Step-by-Step Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152
N300 Wireless Modem Router with FQDN to Gateway B . . . . . . . . . . . .153
Configuration Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153
Step-by-Step Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .155
Configuration Summary (Telecommuter Example) . . . . . . . . . . . . . . . . .157
Setting Up Client-to-Gateway VPN (Telecommuter Example). . . . . . . . .158
Step 1: Configure Gateway A (VPN Router at Main Office). . . . . . . . .159
Step 2: Configure Gateway B (VPN Router at Regional Office). . . . . .160
Monitoring the VPN Tunnel (Telecommuter Example). . . . . . . . . . . . . . .166
Viewing the VPN Router’s VPN Status and Log Information . . . . . . . .167
Appendix D Notification of Compliance
Appendix E Related Documents
Index
6 | Contents
1. Router Internet Setup
Connecting to the network
This chapter describes how to configure your N300 Wireless Modem Router Internet
connection. When you install your N300 wireless modem router using the Resource CD as
described in the N300 Wireless Dual Band ADSL2+ Modem Router Installation Guide, these
settings are configured automatically for you. This chapter provides instructions on how to
log in to the N300 wireless modem router for further configuration.
Note: NETGEAR recommends that Windows users use the Smart
Wizard™ on the Resource CD for initial configuration
Linux OS users should access the
CD.
This chapter includes the following sections:
• Using the Setup Manual on page 7
• Logging In to Your N300 Wireless Modem Router on page 8
Setup Manual on the Resource
. Mac and
1
• Using the Setup Wizard on page 9
• Viewing or Manually Configuring Your ISP Settings on page 10
• Configuring ADSL Settings on page 14
Using the Setup Manual
For first-time installation of your wireless N300 wireless modem router, refer to the Setup
Manual. The Setup Manual explains how to launch the NETGEAR Smart Wizard on the
Resource CD to step you through the procedure to connect your N300 wireless modem
router and computers. The Smart Wizard will assist you in configuring your wireless settings
and enabling wireless security for your network. After initial configuration using the Setup
Manual, you can use the information in this User Manual to configure additional features of
your wireless N300 wireless modem router.
For installation instructions in a language other than English, see the language options on
the Resource CD.
Chapter 1. Router Internet Setup | 7
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Logging In to Your N300 Wireless Modem Router
You can log in to the N300 wireless modem router to view or change its settings. Links to the
Knowledge Base and documentation are also available on the N300 wireless modem router
main menu.
Note: Your computer must be configured for DHCP. For help with
configuring DHCP, see the documentation that came with your
computer, or click the link to the online document Preparing Your
Network in Appendix E.
When you have logged in, if you do not click Logout, the N300 wireless modem router waits
for 5 minutes after no activity before it automatically logs you out.
To log in to the N300 wireless modem router:
1. Type http://www.routerlogin.net, or http://www.routerlogin.com, or the N300 wireless
modem router’s LAN IP address (the default is 192.168.0.1) in the address field of your
browser, and then press Enter. A login window displays:
Figure 1.
2. Enter admin for the N300 wireless modem router user name and your password (or the
default, password
). For information about how to change the password, see Changing the
Built-In Password on page 35.
Note: The N300 wireless modem router user name and password are not
the same as any other user name or password you might use to log
in to your Internet connection.
If the N300 wireless modem router has never been configured, the Smart Wizard screen
displays. After the N300 wireless modem router has been configured, the Firmware
Upgrade assistant will appear. See Using the Setup Wizard on page 9.
• Checking for Firmware Updates screen. After the initial configuration, the Firmware
Update screen displays unless you previously cleared the Check for Updated Firmware
Upon Log-in check box.
8 | Chapter 1. Router Internet Setup
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 2.
Note: If the N300 wireless modem router is not configured (is in its factory
default state) when you log in, the Setup Wizard displays. See Using
the Setup Wizard on page 9.
If the N300 wireless modem router discovers a newer version of the firmware, you are
asked if you want to upgrade to the new firmware (see Upgrading the Firmware on
page 50 for details). If no new firmware is available, the following message displays.
Figure 3.
• Router Status screen. The Router Status screen displays if the N300 wireless modem
router has not been configured yet or has been reset to its factory default settings. See
Viewing N300 Wireless Modem Router Status Information on page 52.
You can use the Setup Wizard to automatically detect your Internet connection as
described in Using the Setup Wizard on page 9, or you can bypass the Setup Wizard and
manually configure your Internet connection as described in Viewing or Manually
Configuring Your ISP Settings on page 10.
Using the Setup Wizard
You can manually configure your Internet connection using the Basic Settings screen, or you
can allow the Setup Wizard to detect your Internet connection. The Setup Wizard searches
your Internet connection for servers and protocols to determine your ISP configuration. This
feature is not the same as the Smart Wizard on the Resource CD that is used for installation.
To use the Setup Wizard:
1. From the top of the main menu, select Setup Wizard.
Chapter 1. Router Internet Setup | 9
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 4.
2. Under Auto-Detect Connection Type, select Yes and then click Next to proceed.
3. Enter your ISP settings, as needed.
4. At the end of the Setup Wizard, click Test to verify your Internet connection. If you have
trouble connecting to the Internet, see Troubleshooting in Appendix A.”
Viewing or Manually Configuring Your ISP Settings
To view or configure the basic settings:
1. Log in to the N300 wireless modem router as described in Logging In to Your N300
Wireless Modem Router on page 8.
2. From the N300 wireless modem router menu, select Basic Settings to display the Basic
Settings screen:
10 | Chapter 1. Router Internet Setup
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 5.
3. Select Yes or No depending on whether your ISP requires a login. This selection changes
the fields available on the Basic Settings screen.
• Yes. If your ISP requires a login, select the encapsulation method. Enter the login
name. If you want to change the login time-out, enter a new value in minutes.
• No. If your ISP does not require a login, enter the account name, if required, and the
domain name, if required.
4. Enter the settings for the IP address and DNS server. If you enter or change a DNS
address, restart the computers on your network so that these settings take effect.
5. If no login is required, you can specify the MAC Address setting.
6. Click Apply to save your settings.
7. Click Test to test your Internet connection. If the NETGEAR website does not appear within
one minute, see Troubleshooting in Appendix A.
When your Internet connection is working, you do not need to launch the ISP’s login program
on your computer to access the Internet. When you start an Internet application, your N300
wireless modem router automatically logs you in.
The fields displayed depend on whether or not your Internet connection requires a login.
Chapter 1. Router Internet Setup | 11
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
ISP does not require login
ISP does require login
Figure 6.
Settings Description
Does Your ISP Require a Login? • Yes
• No
These fields
appear only if
no login is
required.
These fields
appear only if
your ISP
requires a
login.
Account Name
(If required)
Domain Name
(If required)
Login The login name provided by your ISP. This is often an e-mail address.
Password The password that you use to log in to your ISP.
Service Name If your ISP provided a service name, enter it here.
Idle Timeout (In
minutes)
Enter the account name provided by your ISP. This might also be called
the host name.
Enter the domain name provided by your ISP.
If you want to change the Internet login timeout, enter a new value in
minutes. This determines how long the N300 wireless modem router
keeps the Internet connection active after there is no Internet activity from
the LAN. Entering an Idle Timeout value of 0 (zero) means never log out.
12 | Chapter 1. Router Internet Setup
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Settings Description
Internet IP Address • Get Dynamically from ISP. Your ISP uses DHCP to assign your IP
address. Your ISP automatically assigns these addresses.
• Use Static IP Address. Enter the IP address that your ISP assigned.
Also enter the IP subnet mask and the gateway IP address. The
gateway is the N300 Wireless Dual Band ADSL2+ Modem Router
DGND3300v2.
• Use IP Over ATM (PoA). This option is only available if your ISP does
not require a log in.
Domain Name Server (DNS)
Address
The DNS server is used to look up site addresses based on their names.
• Get Automatically from ISP. Your ISP uses DHCP to assign your DNS
servers. Your ISP automatically assigns this address.
• Use These DNS Servers. If you know that your ISP does not
automatically transmit DNS addresses to the N300 wireless modem
router during login, select this option, and enter the IP address of your
ISP’s primary DNS server. If a secondary DNS server address is
available, enter it also.
NAT (Net Address Translation) NAT automatically assigns private IP addresses (10.1.1.x) to
LAN-connected devices.
• Enable. Usually NAT is enabled.
• Disable. This disables NAT, but leaves the firewall active. Disable NAT
only if you are sure that you do not require it. When NAT is disabled,
only standard routing is performed by this router. Classical routing lets
you directly manage the IP addresses that the N300 wireless modem
router uses. Classical routing should be selected only by experienced
a
users
.
• Disable firewall. This disables the firewall in addition to disabling NAT.
With the firewall disabled, the protections usually provided to your
network are disabled.
This field
appears only
if your ISP
does not
require a
login.
Router MAC
Address
Your computer’s local address is its unique address on your network. This
is also referred to as the computer’s MAC (Media Access Control)
address.
• Use Default MAC Address. This is the usual setting.
• Use Computer MAC address. If your ISP requires MAC
authentication, you can use this setting to disguise the N300 wireless
modem router’s MAC address with the computer’s own MAC address.
• Use This MAC Address. If your ISP requires MAC authentication, you
can manually type the MAC address for a different computer. The
format for the MAC address is XX:XX:XX:XX:XX:XX.
a. Disabling NAT reboots the N300 wireless modem router and resets its configuration settings to the factory
defaults. Disable NAT only if you plan to install the N300 wireless modem router in a setting where you will be
manually administering the IP address space on the LAN side of the router.
Chapter 1. Router Internet Setup | 13
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Configuring ADSL Settings
Note: For information about how to install ADSL filters, see the Setup
Manual.
NETGEAR recommends that you use the Setup Wizard to automatically detect and configure
your ADSL settings. This usually works fine. However, if you have technical experience and
are sure of the multiplexing method and virtual circuit number for the virtual path identifier
(VPI) and virtual channel identifier (VCI), you can specify those settings here.
Note: NETGEAR recommends using the Setup Wizard to automatically
configure the ADSL settings.
If your ISP provided you with a multiplexing method or VPI/VCI number, then enter the
setting:
1. From the main menu, select ADSL Settings to display the ADSL Settings screen.
Figure 7.
a. In the Multiplexing Method drop-down list, select LLC-based or VC-based.
b. For the VPI, type a number between 0 and 255. The default is 8.
c. For the VCI, type a number between 32 and 65535. The default is 35.
d. Click Apply.
14 | Chapter 1. Router Internet Setup
2. Wireless Settings
Protecting your network
For a wireless connection, the SSID, also called the wireless network name, and the wireless
security setting must be the same for the N300 wireless modem router and wireless
computers or wireless adapters. NETGEAR strongly recommends that you use wireless
security.
WARNING!
Computers can connect wirelessly at a range of several hundred
feet. This can allow others outside of your immediate area to
access your network.
This chapter includes the following sections:
• Planning Your Wireless Network on page 15
• Manually Configuring Your Wireless Settings on page 18
• Configuring WEP Wireless Security on page 20
• Using Push 'N' Connect (WPS) to Configure Your Wireless Network on page 24
2
• Connecting Additional Wireless Client Devices after WPS Setup on page 27
• Restricting Access to Your N300 Wireless Modem Router on page 29
• Wireless Guest Networks on page 30
• Live Parental Controls on page 32
Planning Your Wireless Network
For compliance and compatibility between similar products in your area, the operating
channel and region must be set correctly.
To configure the wireless network, you can either specify the wireless settings, or you can
use Wi-Fi Protected Setup (WPS) to automatically set the SSID and implement WPA/WPA2
security.
• To manually configure the wireless settings, you must know the following:
Chapter 2. Wireless Settings | 15
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
- SSID. The default 11N SSID for the N300 wireless modem router is
NETGEAR-DualBand-N. The default 11G SSID is NETGEAR-2.4-G.
- The wireless mode (802.11g or 802.11b) that each wireless adapter supports.
- Wireless security option. To successfully implement wireless security, check each
wireless adapter to determine which wireless security option it supports.
See Manually Configuring Your Wireless Settings on page 18.
• Push 'N' Connect (WPS) automatically implements wireless security on the N300 wireless
modem router while, at the same time, allowing you to automatically implement wireless
security on any WPS-enabled devices (such as wireless computers and wireless adapter
cards). You activate WPS by pressing a WPS button on the N300 wireless modem router,
clicking an onscreen WPS button, or entering a PIN number. This generates a new SSID
and implements WPA/WPA2 security.
Note: NETGEAR’s Push 'N' Connect feature is based on the Wi-Fi
Protected Setup (WPS) standard (for more information, see
http://www.wi-fi.org). All other Wi-Fi-certified and WPS-capable
products should be compatible with NETGEAR products that
implement Push 'N' Connect.
To set up your wireless network using the WPS feature:
- Use the N300 wireless modem router dome, which works as a WPS button (there is
also an onscreen WPS button), or enter the PIN of the wireless device.
- Make sure that all wireless computers and wireless adapters on the network are Wi-Fi
certified and WPA or WPA2 capable, and that they support WPS configuration.
See Using Push 'N' Connect (WPS) to Configure Your Wireless Network on page 24.
Wireless Placement and Range Guidelines
The range of your wireless connection can vary significantly based on the physical placement
of the N300 wireless modem router. The latency, data throughput performance, and notebook
power consumption of wireless adapters also vary depending on your configuration choices.
For best results, place your N300 wireless modem router according to the following
guidelines:
• Near the center of the area in which your PCs will operate.
• In an elevated location such as a high shelf where the wirelessly connected PCs have
line-of-sight access (even if through walls).
• Away from sources of interference, such as PCs, microwave ovens, and 2.4 GHz
cordless phones (see Interference Reduction Table on page 169).
• Away from large metal surfaces.
16 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
• Put the antenna in a vertical position to provide the best side-to-side coverage. Put the
antenna in a horizontal position to provide the best up-and-down coverage.
• If you are using multiple access points, it is better if adjacent access points use different
radio frequency channels to reduce interference. The recommended channel spacing
between adjacent access points is 5 channels (for example, use Channels 1 and 6, or 6
and 11).
The time it takes to establish a wireless connection can vary depending on both your security
settings and placement. WEP connections can take slightly longer to establish. Also, WEP
encryption can consume more battery power on a notebook computer.
Wireless Security Options
Indoors, computers can connect over 802.11g wireless networks at a maximum range of up
to 300 feet. Such distances can allow for others outside your immediate area to access your
network.
Unlike wired network data, your wireless data transmissions can extend beyond your walls
and can be received by anyone with a compatible adapter. For this reason, use the security
features of your wireless equipment. The N300 wireless modem router provides highly
effective security features, which are covered in detail in this chapter. Deploy the security
features appropriate to your needs.
There are several ways you can enhance the security of your wireless network:
Wireless data
1) Open system: easy but no security.
2) WEP: security, but some performance impact.
3) WPA-PSK: strong security.
4) WPA2-PSK: very strong security.
Figure 8.
• WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP
Shared Key authentication and WEP data encryption block all but the most determined
eavesdropper. This data encryption mode has been superseded by WPA-PSK and
WPA2-PSK.
• WPA-PSK (TKIP), WPA2-PSK (AES). Wi-Fi Protected Access (WPA) using a pre-shared
key to perform authentication and generate the initial data encryption keys. The very
strong authentication along with dynamic per frame rekeying of WPA makes it virtually
impossible to compromise.
Chapter 2. Wireless Settings | 17
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: NETGEAR recommends WPA2 security because it is the strongest,
and WPA security as the next strongest. WEP security is the
weakest of these alternatives, but you might need to use WEP
security to be able to link with your older wireless devices.
For more information about wireless technology, click the link to the online document in
Wireless Networking Basics in Appendix E.
Manually Configuring Your Wireless Settings
You can view or manually configure the wireless settings for the N300 wireless modem router
in the Wireless Settings screen. If you want to make changes, make sure to note the current
settings first.
Note: If you use a wireless computer to change the wireless network name
(SSID) or wireless security settings, you will be disconnected when
you click Apply. To avoid this, use a computer with a wired
connection to access the N300 wireless modem router.
To view or manually configure the wireless settings:
1. Log in to the N300 wireless modem router at its default LAN address of
http://192.168.0.1 or http://www.routerlogin.net with its default user name of admin,
and default password of password, or using whatever user name, password, and LAN
address you have chosen for the N300 wireless modem router.
2. From the main menu select Wireless Settings to display the Wireless Settings screen:
18 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 9.
The settings for this screen are explained in the following table.
Settings Description
Name (11N SSID)
Name (11G SSID)
Region The location where the N300 Wireless Modem Router is used.
Mode Specify which 802.11 data communications protocol is used. You can select one
This is the wireless network name. Enter a 32-character (maximum) name in this
field. This field is case-sensitive.
In a setting where there is more than one wireless network, different wireless
network names provide a means for separating the traffic. Any device that you
want to participate in a wireless network must use the SSID.
of the following modes:
• Up to 300 Mbps at 2.4 GHz. Performance mode, using channel expansion to
achieve the 270 Mbps data rate. The N300 wireless modem router uses the
channel you selected as the primary channel and expands to the secondary
channel (primary channel +4 or –4) to achieve a 40 MHz frame-by-frame
bandwidth. The N300 wireless modem router detects channel usage and
disables frame-by-frame expansion if the expansion would result in
interference with the data transmission of other access points or clients.
• Up to 300 Mbps at 5 GHz and 54 Mbps at 2.4 GHz. This is the default mode,
which is recommended.
• Up to 145 Mbps at 2.4 GHz. Neighbor friendly mode, for reduced interference
with neighboring wireless networks. Provides two transmission streams with
different data on the same channel at the same time, but also allows 802.11b
and 802.11g wireless devices.
• Up to 145 Mbps at 5 GHz and 54 Mbps at 2.4 GHz. Legacy mode, for
compatibility with the slower 802.11b and 802.11g wireless devices.
Chapter 2. Wireless Settings | 19
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Settings Description
11N Channel
11G Channel
Security Options • Disable. You can use this setting to establish wireless connectivity before
The wireless channel fields determine the operating frequency used for the 11N
or 11G wireless networks. Do not change the wireless channel unless you
experience interference (shown by lost connections or slow data transfers). If
this happens, you might need to experiment with different channels to see which
is the best.
implementing wireless security. NETGEAR strongly recommends that you
implement wireless security.
• WEP (Wired Equivalent Privacy). Use encryption keys and data encryption for
data security. Select 64-bit or 128-bit encryption. See
Configuring WEP
Wireless Security on page 20.
• WPA-PSK (Wi-Fi Protected Access Pre-Shared Key). Allow only computers
configured with WPA to connect to the N300 wireless modem router.
• WPA2-PSK (Wi-Fi Protected Access with 2 Pre-Shared Keys). Allow only
computers configured with WPA2 to connect to the N300 wireless modem
router.
• Mixed WPA-PSK + WPA2-PSK. Allow computers configured with either
WPA-PSK or WPA2-PSK security to connect to the N300 wireless modem
router.
• WPA-802.1x.
For information about WPA or WPA2 configuration, see
Configuring WPA,
WPA2, or Mixed WPA2 + WPA Wireless Security on page 22.
WPA2-PSK Security
Encryption
Network Key (8–63 characters).
3. Select the region in which the N300 wireless modem router will operate.
4. For initial configuration and test, leave the other settings unchanged.
5. To save your changes, click Apply.
6. Configure and test your computers for wireless connectivity.
Program the wireless adapter of your computers to have the same SSID and wireless
security settings as your N300 wireless modem router. Check that they have a wireless
link and are able to obtain an IP address by DHCP from the N300 wireless modem router.
If there is interference, adjust the channel.
Configuring WEP Wireless Security
Note: If you use a wireless computer to configure wireless security
settings, you will be disconnected when you click Apply.
Reconfigure your wireless computer to match the new settings, or
access the N300 wireless modem router from a wired computer to
make further changes.
20 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: NETGEAR recommends WPA2 security because it is the strongest,
and WPA security as the next strongest. WEP security is the
weakest of these alternatives, but you might need to use WEP
security to be able to link with your older wireless devices.
To configure WEP data encryption:
1. Log in to the N300 wireless modem router at its default LAN address of
http://192.168.0.1 or http://www.routerlogin.com with its default user name of admin,
and default password of password, or using whatever user name, password, and LAN
address you have chosen for the N300 wireless modem router.
2. From the main menu, select Wireless Settings to display the Wireless Settings screen.
3. In the Security Options section, select the WEP radio button:
Figure 10.
4. In the Authentication Type list, select Automatic, Open System, or Shared Key. The
default is Open System.
Note: The authentication scheme is separate from the data encryption.
You can select an authentication scheme that requires a shared key
but still leaves the data transmissions unencrypted. If you require
strong security, use both the Shared Key and WEP encryption
settings.
5. Select the Encryption Strength setting:
• WEP 64 bit. Enter 10 hexadecimal digits (any combination of 0–9, a–f, or
A–F).
• WEP 128 bit. Enter 26 hexadecimal digits (any combination of 0–9, a–f, or A–F).
Chapter 2. Wireless Settings | 21
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
6. Enter the encryption keys. You can manually or automatically program the four data
encryption keys. These values must be identical on all computers and access points in your
network:
• Passphrase. To use a passphrase to generate the keys, enter a passphrase, and
click Generate. This automatically creates the keys. Wireless stations must use the
passphrase or keys to access the N300 wireless modem router.
Note: Not all wireless adapters support passphrase key generation.
• Key 1–Key4. These values are not case-sensitive. You can manually enter the four
data encryption keys. These values must be identical on all computers and access
points in your network. Enter 10 hexadecimal digits (any combination of 0
–F).
A
7. Select which of the four keys will be the default.
Data transmissions are always encrypted using the default key. The other keys can be
used only to decrypt received data. The four entries are disabled if WPA-PSK or WPA
authentication is selected.
–9, a–f, or
8. Click Apply to save your settings.
Configuring WPA, WPA2, or Mixed WPA2 + WPA Wireless
Security
To set up wireless security, either you can manually configure it in the Wireless Settings
screen, or you can use Wi-Fi Protected Setup (WPS) to automatically set the SSID and
implement WPA/WPA2 security (see Using Push 'N' Connect (WPS) to Configure Your
Wireless Network on page 24). WPA2 is the strongest security setting and is recommended if
the client supports it.
Both WPA and WPA2 provide strong data security. WPA with TKIP is a software
implementation that can be used on Windows systems with Service Pack 2 or later; WPA2
with AES is a hardware implementation; see your device documentation before implementing
it. Consult the product documentation for your wireless adapter for instructions for configuring
WPA settings.
Note: If you use a wireless computer to configure wireless security
settings, you will be disconnected when you click Apply. If this
happens, reconfigure your wireless computer to match the new
settings, or access the N300 wireless modem router from a wired
computer to make further changes.
22 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
To configure WPA or WPA2 in the N300 wireless modem router:
1. Log in to the N300 wireless modem router at its default LAN address of
http://192.168.0.1 or http://www.routerlogin.net with its default user name of admin
and default password of password, or using whatever user name, password, and LAN
address you have chosen for the N300 wireless modem router.
2. From the main menu select Wireless Settings.
3. On the Wireless Setting screen, select the radio button for the WPA or WPA2 option of your
choice.
Figure 11.
4. The settings displayed on the screen depend on which security option you select.
5. For WPA-PSK or WPA2-PSK, enter the passphrase.
6. If prompted, enter the settings for the RADIUS server. For WPA-802.1x or WPA2-802.1x,
these settings are required for communication with the primary RADIUS server.
Note: RADIUS server applies only to WPA-802.1x, and not to Mixed WPA
+ WPA2.
• Primary Radius Server IP Address. The IP address of the RADIUS server. The
default is 0.0.0.0.
• Radius Port. Port number of the RADIUS server. The default is 1812.
• Shared Key. This is shared between the wireless access point and the RADIUS
server during authentication.
7. To save your settings, click Apply.
Chapter 2. Wireless Settings | 23
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Using Push 'N' Connect (WPS) to Configure Your Wireless
Network
If your wireless clients support Wi-Fi Protected Setup (WPS), you can use this feature to
configure the N300 wireless modem router’s SSID and security settings and, at the same
time, connect the wireless client securely and easily to the N300 wireless modem router.
Look for the symbol on your client device (computers that will connect wirelessly to the
N300 wireless modem router are clients). WPS automatically configures the network name
(SSID) and wireless security settings for the N300 wireless modem router (if the N300
wireless modem router is in its default state) and broadcasts these settings to the wireless
client.
Note: NETGEAR’s Push 'N' Connect feature is based on the Wi-Fi
Protected Setup (WPS) standard (for more information, see
http://www.wi-fi.org). All other Wi-Fi-certified and WPS-capable
products should be compatible with NETGEAR products that
implement Push 'N' Connect.
Some considerations regarding WPS are:
• WPS supports only WPA-PSK and WPA2-PSK wireless security. WEP security is not
supported by WPS.
• If your wireless network will include a combination of WPS-capable devices and
non-WPS-capable devices, NETGEAR suggests that you set up your wireless network
and security settings manually first, and use WPS only for adding additional
WPS-capable devices. See Adding Both WPS and Non-WPS Clients on page 28.
You can add a WPS client using the Push Button method or the PIN method.
• Using the Push Button. This is the preferred method. See the following section, Using a
WPS Button to Add a WPS Client .
• Entering a PIN. For information about using the PIN method, see Using PIN Entry to Add
a WPS Client on page 25.
Using a WPS Button to Add a WPS Client
Any wireless computer or wireless adapter that will connect to the N300 wireless modem
router wirelessly is a client. The client must support a WPS button, and must have a WPS
configuration utility, such as the NETGEAR Smart Wizard or Atheros Jumpstart.
To use the N300 wireless modem router WPS button to add a WPS client:
1. Log in to the N300 wireless modem router at its default LAN address of
http://192.168.0.1 or http://www.routerlogin.net with its default user name of admin
24 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
and default password of password, or using whatever LAN address and password you
have set up.
2. On the N300 wireless modem router main menu, select Add WPS Client, and then click
Next. The following screen displays:
WPS button
Figure 12.
By default, the Push Button (recommended) radio button is selected.
3. Either press the N300 wireless modem router dome for a few seconds, which works as a
WPS button, or click the onscreen button.
The N300 wireless modem router tries to communicate with the client for 2 minutes.
4. Go to the client wireless computer, and run a WPS configuration utility. Follow the utility’s
instructions to click a WPS button.
5. Go back to the N300 wireless modem router screen to check for a message.
The N300 wireless modem router WPS screen displays a message confirming that the
client was added to the wireless network. The N300 wireless modem router generates an
SSID and implements WPA/WPA2 wireless security. The N300 wireless modem router
will keep these wireless settings unless you change them or you clear the Keep Existing
Wireless Settings check box in the Advanced Wireless Settings screen. See Restricting
Access to Your N300 Wireless Modem Router on page 29.
6. Note the new SSID and WPA/WPA2 password for the wireless network. You can view these
settings in the Wireless Settings screen. See Manually Configuring Your Wireless Settings
on page 18.
To access the Internet from any computer connected to your N300 wireless modem router,
launch a browser such as Microsoft Internet Explorer or Mozilla Firefox. You should see the
N300 wireless modem router’s Internet LED blink, indicating communication to the ISP.
Note: If no WPS-capable client devices are located during the 2-minute
time frame, the SSID will not be changed, and no security will be
implemented on the N300 wireless modem router.
Using PIN Entry to Add a WPS Client
Any wireless computer or wireless adapter that will connect to the N300 wireless modem
router wirelessly is a client. The client must support a WPS PIN, and must have a WPS
configuration utility, such as the NETGEAR Smart Wizard or Atheros Jumpstart.
Chapter 2. Wireless Settings | 25
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
The first time you add a WPS client, make sure that the Keep Existing Wireless Settings
check box on the WPS Settings screen is cleared. This is the default setting for the N300
wireless modem router, and allows it to generate the SSID and WPA/WPA2 security settings
when it implements WPS. After WPS is implemented, the N300 wireless modem router
automatically selects this check box so that your SSID and wireless security settings remain
the same if other WPS-enabled devices are added later.
To use a PIN to add a WPS client:
1. Log in to the N300 wireless modem router at its default LAN address of
http://192.168.0.1 or http://www.routerlogin.net with its default user name of admin
and default password of password, or using whatever LAN address and password you
have set up.
2. On the N300 wireless modem router main menu, select Add WPS Client (computers that
will connect wirelessly to the N300 wireless modem router are clients), and then click Next.
The Add WPS Client screen displays:
Figure 13.
3. Select the PIN Number radio button.
4. Go to the client wireless computer. Run a WPS configuration utility. Follow the utility’s
instructions to generate a PIN. Take note of the client PIN.
5. From the N300 wireless modem router Add WPS Client screen, enter the client PIN number,
and then click Next.
• The N300 wireless modem router tries to communicate with the client for 2 minutes.
• The N300 wireless modem router WPS screen displays a message confirming that
the client was added to the wireless network. The N300 wireless modem router
generates an SSID, and implements WPA/WPA2 wireless security.
6. Note the new SSID and WPA/WPA2 password for the wireless network. You can view these
settings in the Wireless Settings screen. See Manually Configuring Your Wireless Settings
on page 18.
To access the Internet from any computer connected to your N300 wireless modem router,
launch a browser such as Microsoft Internet Explorer or Mozilla Firefox. You should see the
N300 wireless modem router’s Internet LED blink, indicating communication to the ISP.
Note: If no WPS-capable client devices are located during the 2-minute
time frame, the SSID will not be changed and no security will be
implemented on the N300 wireless modem router.
26 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Configuring Advanced WPS Settings
From the main menu, select Advanced > Wireless Settings to display the following screen:
Figure 14.
The WPS settings show the N300 wireless modem router PIN and the Disable Router’s PIN
and Keep Existing Wireless Settings check boxes.
By default, the Keep Existing Wireless Settings check box is cleared. This allows the N300
wireless modem router to automatically generate the SSID and WPA/WPA2 security settings
when it implements WPS. After WPS is implemented, the N300 wireless modem router
automatically selects this check box so that your SSID and wireless security settings remain
the same if you add WPS-enabled devices or if you manually add non-WPS-capable devices
later.
Note: If you clear the Keep Existing Wireless Settings check box, all
wireless settings and connections will be lost if a WPS client is
added.
Connecting Additional Wireless Client Devices after WPS
Setup
You can add more WPS clients to your wireless network, or you can add a combination of
WPS-enabled clients and clients without WPS.
Chapter 2. Wireless Settings | 27
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Adding More WPS Clients
Note: Your wireless settings remain the same when you add another
WPS-enabled client, as long as the Keep Existing Wireless Settings
check box is selected in the Advanced Wireless Settings screen
(select Wireless Settings under Advanced in the N300 wireless
modem router main menu). If you clear this check box, when you
add the client, a new SSID and passphrase will be generated, and
all existing connected wireless clients will be disassociated and
disconnected from the N300 wireless modem router.
To add a wireless client device that is WPS enabled:
1. Follow the procedures in Using a WPS Button to Add a WPS Client on page 24 or Using
PIN Entry to Add a WPS Client on page 25.
2. For information about how to view a list of all devices connected to your N300 wireless
modem router (including wireless and Ethernet connected), see Viewing a List of Attached
Devices on page 57.
Adding Both WPS and Non-WPS Clients
For non-WPS clients, you cannot use the WPS setup procedures to add them to the wireless
network. You must record, and then manually enter your security settings (see Manually
Configuring Your Wireless Settings on page 18).
To connect a combination of non-WPS-enabled and WPS-enabled clients to the N300
wireless modem router:
1. Configure the network names (SSIDs), select the WPA/PSK + WPA2/PSK radio button
on the Wireless Settings screen (see Manually Configuring Your Wireless Settings on
page 18), and click Apply.
2. On the WPA/PSK + WPA2/PSK screen, select a passphrase and click Apply. Record this
information to use when you add additional clients.
3. For the non-WPS devices that you want to connect, open the networking utility and follow
the utility’s instructions to enter the SSID, WPA/PSK + WPA2/PSK security method, and
passphrase.
4. For the WPS devices that you want to connect, follow the procedure in Using a WPS
Button to Add a WPS Client on page 24 or Using PIN Entry to Add a WPS Client on
page 25.
28 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: To make sure that your new wireless settings remain in effect, verify
that the Keep Existing Wireless Settings check box is selected in the
WPS Settings screen.
5. For information about how to view a list of all devices connected to your N300 wireless
modem router (including wireless and Ethernet connected), see Viewing a List of Attached
Devices on page 57.
Restricting Access to Your N300 Wireless Modem Router
You can use the Advanced Wireless Settings screen to enable or disable the wireless router
radio and the SSID broadcast. From the main menu, select Advanced > Wireless Settings to
display the following screen:
Figure 15.
• Enable Wireless Access Point. You can completely turn off the wireless portion of the
N300 wireless modem router. For example, if you use your notebook computer to
wirelessly connect to your N300 wireless modem router, and you take a business trip,
you can turn off the wireless portion of the N300 wireless modem router while you are
traveling. Other members of your household who use computers connected to the N300
wireless modem router through Ethernet cables can still use the N300 wireless modem
router. To do this, clear the Enable Wireless Access Point check box on the Advanced
Wireless Settings screen, and then click Apply.
• Allow Broadcast of Name (SSID). Clear this check box to disable broadcast of the
SSID, so that only devices that know the correct SSID can connect. Disabling SSID
broadcast nullifies the wireless network discovery feature of some products such as
Windows XP.
Chapter 2. Wireless Settings | 29
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: The SSID of any wireless access adapters must match the SSID
you configure in the N300 wireless modem router. If they do not
match, you will not get a wireless connection to the N300 wireless
modem router.
The Fragmentation Threshold, CTS/RTS Threshold, and Preamble Mode options are
reserved for wireless testing and advanced configuration only. Do not change these
settings.
• WPS Settings. These are Push 'N' connect settings used by the N300 wireless modem
router when WPS clients are added.
- Router’s PIN. The number that the N300 wireless modem router broadcasts when
you add a WPS client with the PIN method.
- Disable Router PIN. Selecting this check box disables the N300 wireless modem
router’s PIN.
- Keep Existing Wireless Settings. This check box is cleared by default so that the
N300 wireless modem router network name (SSID) and security can be set
automatically if Push 'N' Connect (WPS) is used to set up the network. When the first
WPS client is added, this check box is automatically selected so that the SSID and
security remain the same when additional clients are added.
For information about adding WPS clients, see Using Push 'N' Connect (WPS) to
Configure Your Wireless Network on page 24.
• Restricting access by MAC address. You can use the Wireless Card Access List to
restrict access. See Restricting Access by MAC Address on page 35.
Wireless Guest Networks
A wireless guest network allows you to provide guests access to your wireless network
without prior authorization of each individual guest. You can configure wireless guest
networks and specify the security options for each wireless guest network.
The Guest Network Settings screen that you see depends on the setting in the Wireless
Mode field on the Wireless Settings screen and on which selection you make from the main
menu. The Guest Network selection is grayed out if it is not available. The following table
shows wireless modes, menu selections, and guest networks.
Mode in Wireless Settings
Screen
Up to 300 Mbps at 5 GHz & 54
Mbps at 2.4 GHz
(factory default setting)
30 | Chapter 2. Wireless Settings
Menu Selection Guest Network Default SSID Wireless
Compatibility
Guest Network a/n NETGEAR-5G_a_n_Guest1 • 5GHz 802.11a
• 5GHz 802.11n
Guest Network b/g NETGEAR-2.4G_g_Guest1 • 2.4GHz 802.11g
• 2.4GHz 802.11b
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Mode in Wireless Settings
Screen
Up to 270 Mpbs Guest Network b/g/n NETGEAR-2.4G_n_Guest1 • 2.4GHz 802.11n
Up to 145 Mbps at 5 GHz & 54
Mbps at 2.4 GHz
Up to 145 Mbps at 2.4 GHz Guest Network a/n NETGEAR-2.4G_n_Guest1 • 2.4GHz 802.11n
Menu Selection Guest Network Default SSID Wireless
Compatibility
• 2.4GHz 802.11g
• 2.4GHz 802.11b
Guest Network a/n NETGEAR-2.4G_n_Guest1 • 5GHz 802.11a
• 5GHz 802.11n
Guest Network b/g NETGEAR-2.4G_g_Guest1 • 2.4GHz 802.11g
• 2.4GHz 802.11b
• 2.4GHz 802.11g
• 2.4GHz 802.11b
To configure a wireless guest network:
1. In the main menu, under Setup, select either Wireless Guest Network g/b or Wireless
Guest Network a, n. A Wireless Guest Network Settings screen similar to the following
figure displays:
Figure 16.
2. Make sure that the Enable Guest Network check box is selected.
3. You can specify whether the SSID broadcast is enabled, and whether you want to allow
guests to access your local network.
4. You can also change the guest name in the Guest Wireless Network Name (SSID) field.
Note: NETGEAR strongly recommends that you change the default guest
network name (SSID) from the default name to a different name.
Note that the name is case-sensitive. For example, GuestNetwork is
not the same as Guestnetwork.
Chapter 2. Wireless Settings | 31
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Enter a value of up to 32 alphanumeric characters. For the selected guest network, the
same name must be assigned to all wireless devices in your network.
Note: Wireless security is disabled by default. NETGEAR strongly
recommends that you implement wireless security for the guest
network.
5. To configure wireless security for the guest network, enter the security options. This process
is very similar to configuring wireless security for the N300 wireless modem router. For more
information, see Configuring WEP Wireless Security on page 20 and Using Push 'N'
Connect (WPS) to Configure Your Wireless Network on page 24.
6. When you have finished making changes, click Apply.
Live Parental Controls
NETGEAR Live Parental Controls, powered by OpenDNS, is a router-based Web filtering
solution available on NETGEAR Wireless-N router and gateway products. Designed to
protect you from identity theft and scams, Live Parental Control blocks up to 50 categories of
Internet content.
Live Parental Controls is an excellent solution for keeping your family safe online, but like all
Web filtering tools, it is not perfect. NETGEAR reminds you there is no substitute for keeping
the family computer in a common area and in plain sight where you can monitor the websites
your kids are visiting, and taking caution when visiting websites requesting personal or
financial information.
Download Live Parental Controls from this website: http://www.netgear.com/lpc.
Web-Based Interface
Live Parental Controls is the first to allow parents or network administrators to manage
settings while away from home or office. This is particularly convenient when access
exceptions need to be made. And since settings are stored on the Web, using a browser
interface to manage them is not difficult.
Total Home Protection
Live Parental Controls protects all Internet-connected devices through the router. It protects
not only computers, but also set-top boxes, iPhones, iPods, and gaming consoles that are
attached to your network. You no longer need to worry about phones and gaming consoles
not being protected when kids use them in their own rooms. Even guest computers
accessing the Internet through your network are protected.
32 | Chapter 2. Wireless Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Flexible Settings
You might have your own computer or you might be sharing a computer with other members
in the family. Default and per-user settings allow you to customize configurations for different
computing arrangements and personalize the settings for each person. Per-time setting
allows Internet access during scheduled time slots to help manage the balance between
work and play.
Minimal Software Installation
This capability requires a one-time installation of the management utility. Once Live Parental
Controls is set up, the software runs in the background and does not interfere with normal
Internet usage.
Chapter 2. Wireless Settings | 33
3. Security Settings
Keeping unwanted content out of your network
This chapter describes how to use the content filtering and reporting features of the N300
wireless modem router to protect your network.
This chapter includes the following sections:
• Restricting Access by MAC Address on page 35
• Blocking Access to Internet Sites on page 37
• Firewall Rules on page 38
• Port Forwarding on page 41
• Port Triggering on page 43
• Blocking Access to Internet Services on page 44
• Scheduling Blocking on page 45
• Viewing Logs of Web Access or Attempted Web Access on page 46
• Configuring Email Alert and Web Access Log Notifications on page 47
• Setting the Time on page 49
3
Note: For information about restricting access to USB storage devices,
see Configuring USB Storage Advanced Settings on page 69.
Protecting Access to Your N300 Wireless Modem Router
For security reasons, the N300 wireless modem router has its own user name and password.
Also, after a period of inactivity for a set length of time, the administrator login automatically
disconnects. When prompted, enter admin for the user name and password for the
password. You can use procedures in the following sections to change the password and the
amount of time for the administrator’s login time-out.
Note: The user name and password are not the same as a user name or
password you might use to log in to your Internet connection.
Chapter 3. Security Settings | 34
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
NETGEAR recommends that you change this password to a more secure password. The
ideal password should contain no dictionary words from any language, and should be a
mixture of both uppercase and lowercase letters, numbers, and symbols. Your password can
be up to 30 characters.
Changing the Built-In Password
1. Log in to the N300 wireless modem router at its default LAN address of
http://192.168.0.1 or http://www.routerlogin.net with its default user name of admin,
default password of password, or using whatever password and LAN address you have
chosen for the N300 wireless modem router.
2. From the main menu, select Maintenance > Set Password to display the Set Password
screen.
3. To change the password, first enter the old password, and then enter the new password
twice.
4. Click Apply to save your changes.
Note: After changing the password, you must log in again to continue the
configuration. If you have backed up the N300 wireless modem
router settings previously, you should do a new backup so that the
saved settings file includes the new password.
Restricting Access by MAC Address
By default, any wireless PC that is configured with the correct SSID will be allowed access to
your wireless network. For increased security, you can restrict access to the wireless network
to allow only specific PCs based on their MAC addresses.
To restrict access based on MAC addresses:
1. Log in to the N300 wireless modem router at its default LAN address of
http://192.168.0.1 or http://www.routerlogin.net with its default user name of admin,
and default password of password, or using whatever user name, password, and LAN
address you have chosen for the N300 wireless modem router.
Note: If you configure the N300 wireless modem router from a wireless
computer, add your computer’s MAC address to the access list.
Otherwise you will lose your wireless connection when you click
Apply. You must then access the N300 wireless modem router from
a wired computer, or from a wireless computer that is on the access
control list, to make any further changes.
Chapter 3. Security Settings | 35
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
2. From the main menu, under Advanced > Wireless Settings, and then click Setup Access
List to display the Wireless Card Access List screen.
Figure 17.
The Wireless Station Access List screen displays a list of wireless PCs that are allowed to
connect to the N300 wireless modem router based on their MAC addresses. These
wireless PCs must also have the correct SSID and wireless security settings to access
the wireless network.
3. Select the Turn Access Control On check box.
Figure 18.
Note: If the Turn Access Control On check box is selected and the
Trusted Wireless Stations list is blank, then no wireless PCs will be
able to connect to your wireless network.
4. You can select a wireless station from the Available Wireless Stations list, or you can enter
its MAC address manually:
36 | Chapter 3. Security Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
- If the wireless station is shown in the Available Wireless Stations list, click its radio
button to select it, and then click Add.
- To manually specify the wireless station, in the Add New Station Manually section,
enter the name of the wireless station and its MAC address.The MAC address is 12
hexadecimal digits and can usually be found on the bottom of the wireless device.
Click Add.
The wireless station appears in the Trusted Wireless Stations list.
Note: You can use the Delete button to remove access by a wireless
station.
5. When you are finished, click Apply to save your changes. Now, only devices on the Trusted
Devices list will be allowed to wirelessly connect to the N300 wireless modem router.
Blocking Access to Internet Sites
The N300 wireless modem router allows you to restrict access based on Web addresses and
Web address keywords. Up to 255 entries are supported in the Keyword list.
Keyword application examples:
• If the keyword XXX is specified, the URL www.zzzyyqq.com/xxx.html is blocked.
• If the keyword .com is specified, only websites with other domain suffixes (such as .edu,
.org, or .gov) can be viewed.
To block access to Internet sites:
1. Select Security > Block Sites in the main menu. The Block Sites screen displays.
Figure 19.
2. Enable keyword blocking by selecting either Per Schedule or Always.
Chapter 3. Security Settings | 37
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
To block by schedule, be sure to specify a time period in the Schedule screen. For
information about scheduling, see Scheduling Blocking on page 45.
Block all access to Internet browsing during a scheduled period by entering a dot (.) as
the keyword, and then set a schedule in the Schedule screen.
3. Add a keyword or domain by entering it in the keyword field and clicking Add Keyword. The
keyword or domain name then appears in the Block sites containing these keywords or
domain names list.
Delete a keyword or domain name by selecting it from the list and clicking Delete
Keyword.
4. You can specify one trusted user, which is a computer that is exempt from blocking and
logging. Specify a trusted user by entering that computer’s IP address in the Trusted IP
Address fields.
Since the trusted user is identified by IP address, you should configure that computer with
a fixed IP address.
5. Click Apply to save all your settings in the Block Sites screen.
Firewall Rules
You can use this screen to create firewall rules to block or allow specific traffic.
Note: The firewall rules feature is for advanced administrators only!
Incorrect configuration will cause serious problems.
The Firewall Rules screen lists all existing rules for outbound traffic and inbound traffic. If you
have not defined any rules, only the default rules are listed. You can add or edit rules. You
can also use the Move and Delete buttons to move the selected rule to a new position in the
table, or to delete the selected rule.
From the main menu, select Security > Firewall Rules to display the following screen:
38 | Chapter 3. Security Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 20.
• Outbound Services. This lists all existing rules for outbound traffic. If you have not
defined any rules, only the default rule is listed. The default rule allows all outgoing traffic.
• Inbound Services. This lists all existing rules for inbound traffic. If you have not defined
any rules, only the default rule is listed. The default rule blocks all inbound traffic.
• Ports to enable MSN and AOL Instant Messaging are open by default. To close these
ports, select the Close IM Ports radio button, and then click Apply so that your changes
take effect. When these ports are closed, Instant Messaging does not function.
To add or edit a rule from the Firewall Rules screen:
1. To edit a rule, select its radio button. To add a rule, click Add (it does not matter which
radio button is selected).
Depending on your selection, either the Outbound Services screen or Inbound Services
screen is displayed.
Chapter 3. Security Settings | 39
Figure 21.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
2. From the Service list, select the service that you want to add or edit.
3. Enter the settings to specify the service as explained in the following table.
Field Outbound Rules Inbound Rules
Action • For outbound rules, ALLOW rules are
useful only if the traffic is already covered
by a BLOCK rule (that is, you want to
allow a subset of traffic that is currently
blocked by another rule).
• To define the schedule used in these
selections, use the Schedule screen (see
Scheduling Blocking on page 45).
LAN users
(outbound
services only)
Send to LAN
Server (inbound
services only)
These settings determine which computers
on your network are affected by this rule,
based on their source (LAN) IP address.
Select the option you want:
• Any. All local IP addresses are covered
by this rule.
• Address range. If this option is selected,
you must fill in the Start and Finish fields.
• Single address. Enter the required
address in the Start fields.
— Enter the IP address of the PC or server on
• For inbound rules, BLOCK rules are
useful only if the traffic is already covered
by an ALLOW rule (that is, you want to
block a subset of traffic that is currently
allowed by another rule).
• To define the schedule used in these
selections, use the Schedule screen (see
Scheduling Blocking on page 45).
—
your LAN that will receive the inbound traffic
covered by this rule.
40 | Chapter 3. Security Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Field Outbound Rules Inbound Rules
WAN Servers These settings determine which Internet locations are covered by the rule, based on their
destination (WAN) IP address. Select the option you want:
• Any. All local IP addresses are covered by this rule.
• Address range. If this option is selected, you must fill in the Start and Finish fields.
• Single address. Enter the required address in the Start fields.
Log This determines whether packets covered by this rule are logged. Select the action you
want:
• Always. Always log traffic considered by this rule, whether it matches or not. This is
useful when debugging your rules.
• Never. Never log traffic considered by this rule, whether it matches or not.
• Match. Log traffic only if matches this rule. (The action is determined by this rule.)
• Not Match. Log traffic that is considered by this rule, but does not match. (The action is
not determined by this rule.)
4. Click Apply to have your changes take effect.
The new rule will be listed in the table when you return to the Firewall Rules screen.
Port Forwarding
Using the port forwarding feature, you can allow certain types of incoming traffic to reach
servers on your local network. For example, you might make a local Web server, FTP server,
or game server visible and available to the Internet.
Use the Port Forwarding screen to configure the N300 wireless modem router to forward
specific incoming protocols to computers on your local network. In addition to servers for
specific applications, you can also specify a default DMZ server to which all other incoming
protocols are forwarded. The DMZ server is configured in the WAN Setup screen, as
discussed in Configuring the WAN Setup Options on page 117.”
Before starting, you need to determine which type of service, application, or game you will
provide, and the local IP address of the computer that will provide the service. Be sure the
computer’s IP address never changes.
Select Security > Port Forwarding in the main menu. The Port Forwarding screen displays:
Figure 22.
Chapter 3. Security Settings | 41
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
You can add a pre-set port forwarding rule or a custom rule.
Adding a Pre-set Port Forwarding Rule
1. From the Port Forwarding screen, click Add to display the following screen:
Figure 23.
2. In the Service Name list, select the rule.
3. Fill in the Server IP Address field, and then click Apply.
Adding a Custom Port Forwarding Rule
1. From the Port Forwarding screen, click Add.
2. Select the Custom Rule radio button, and the screen changes:
Figure 24.
3. In the Service Name field, enter a name.
4. In the Service Type list, select the protocol. If you are unsure, select TCP/UDP.
5. Fill in the Starting Port and Ending Port fields.
6. In the Server IP Address field, enter the IP address of your local computer that will provide
this service.
42 | Chapter 3. Security Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
7. Click Apply. The service appears in the list.
Port Triggering
Port triggering is an advanced feature that can be used to easily enable gaming and other
Internet applications that would otherwise be blocked by the firewall. Using this feature
requires that you know the port numbers that are used by the application.
Note: For information about port forwarding and port blocking, see
Firewall Rules on page 38.
Once configured, port triggering operates as follows:
1. A PC makes an outgoing connection using a port number defined in the Port Triggering
table.
2. The N300 wireless modem router records this connection, opens the incoming port or ports
associated with this entry in the Port Triggering List, and associates them with the PC.
3. The remote system receives the PC’s request, and responds using a different port number.
4. The N300 wireless modem router matches the response to the previous request, and
forwards the response to the PC. (Without port triggering, this response would be treated as
a new connection request rather than a response. As such, it would be handled in
accordance with the port forwarding rules.)
Note: Only one PC can use a port triggering application at any time. After
a PC has finished using a port triggering application, there is a short
time-out period before the application can be used by another PC.
To configure port triggering:
1. In the main menu, select Security > Port Triggering. The Port Triggering screen
displays.
Chapter 3. Security Settings | 43
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 25.
2. Specify the information for port triggering:
• Service Name. Enter a name for the rule, up to 30 characters.
• Service User. The PC on the LAN that can use the port triggering rule to create a
dynamic inbound mapping to it. There are 2 options:
- The port triggering rule is applied to all PCs on the LAN. That is, any PC on the
LAN can use the rule and make the router to open a dynamic mapping to it.
- The port triggering rule is applied only to the user-specified PC on the LAN.
• Service Type. Defines whether the traffic is TCP or UDP.
• Triggering Port. The destination port number of the traffic. That is, when there is a
packet from a LAN PC that the rule is applied to, with the specified service type and
destined to the specified triggering port, the router creates a rule for dynamic mapping
to the LAN PC.
• Required Inbound Connection. This defines what the dynamic mapping is. The
connection type defines whether the dynamic mapping is for TCP traffic, UDP traffic,
or TCP and UDP traffic. The open port range is specified by the starting port and the
ending port, and this defines the port that the dynamic mapping is applied to.
3. Click Apply to save your settings and activate the port triggers that you have enabled.
Blocking Access to Internet Services
The N300 wireless modem router allows you to block the use of certain Internet services by
computers on your network. This is called service blocking or port filtering. Services are
functions performed by server computers at the request of client computers. For example,
Web servers serve Web pages, time servers serve time and date information, and game
hosts serve data about other players’ moves. When a computer on your network sends a
request for service to a server computer on the Internet, the requested service is identified by
a service or port number. This number appears as the destination port number in the
transmitted IP packets. For example, a packet that is sent with destination port number 80 is
an HTTP (Web server) request.
44 | Chapter 3. Security Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
To block access to Internet services:
1. From the main menu, select Security > Services. The Services screen displays.
Figure 26.
2. To add a service, click Add Custom Service. The following screen displays.
Figure 27.
3. Enter a name for the service.
4. From the Service Type drop-down list, select the application or service to be allowed or
blocked. If you know that the application uses either TCP or UDP, select the appropriate
protocol. If you are not sure, select Both.
5. You can block the specified service for a single computer, a range of computers with
consecutive IP addresses, or all computers on your network. Enter the starting port and
ending port numbers. If the application uses a single port number, enter that number in both
fields.
You must determine which port number or range of numbers is used by the application.
The service port numbers for many common protocols are defined by the Internet
Engineering Task Force (IETF) and published in RFC1700, “Assigned Numbers.” Service
numbers for other applications are typically chosen from the range 1024 to 65535 by the
authors of the application. You can often determine port number information by contacting
the publisher of the application, by asking user groups or newsgroups, or by searching.
6. Click Apply so that your changes take effect.
Scheduling Blocking
To schedule blocking:
1. From the main menu, select Security > Schedule. The Schedule screen displays.
Chapter 3. Security Settings | 45
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 28.
2. Configure the schedule for blocking keywords and services.
a. Days. Select days on which you want to apply blocking by selecting the appropriate
check boxes. Select Every Day to select the check boxes for all days. Click Apply.
b. Time of Day. Select a start and end time in 24-hour format. Select All Day for
24-hour blocking. Click Apply.
Be sure to select your time zone in the E-mail screen as described in Setting the Time on
page 49.
3. Click Apply to save your settings.
Note: For information about setting the time, see Setting the Time on
page 49.
Viewing Logs of Web Access or Attempted Web Access
The log is a detailed record of the websites you have accessed or attempted to access. Up to
128 entries are stored in the log. Log entries appear only when keyword blocking is enabled
and no log entries are made for the trusted user.
From the main menu, select Security > Logs. The Logs screen displays.
• To refresh the log screen, click the Refresh button.
• To clear the log entries, click the Clear Log button.
• To e-mail the log immediately, click the Send Log button.
46 | Chapter 3. Security Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 29.
The following information is provided in the logs:
Field Description
Date and time The date and time the log entry was recorded.
Source IP The IP address of the initiating device for this log entry.
Target address The name or IP address of the website or newsgroup visited, or to which access was
attempted.
Action Whether the access was blocked or allowed.
Configuring Email Alert and Web Access Log Notifications
To receive logs and alerts by e-mail, you must provide your e-mail account information.
1. From the main menu, select Security > E-mail. The E-mail screen displays.
Chapter 3. Security Settings | 47
Figure 30.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
2. To receive email logs and alerts from the N300 wireless modem router, select the Turn
E-mail Notification On check box.
a. In the Your Outgoing Mail Server field, enter the name of your ISP’s outgoing (SMTP)
mail server (such as mail.myISP.com). You might be able to find this information in
the configuration screen of your e-mail program. If you leave this field blank, log and
alert messages will not be sent by e-mail.
b. In the Send To This E-mail Address field, enter the email address to which logs and
alerts are sent. This email address will also be used as the From address. If you
leave this field blank, log and alert messages will not be sent by email.
3. If your outgoing e-mail server requires authentication, select the My Mail Server requires
authentication check box.
a. In the User Name field, enter your user name for the outgoing email server.
b. In the Password field, enter your password for the outgoing email server.
4. You can specify that logs are automatically sent by email with these options:
• Send alert immediately. Select this check box for immediate notification of attempted
access to a blocked site or service.
• Send Logs According to this Schedule. Specifies how often to send the logs: Hourly,
Daily, Weekly, or When Full.
- Day. Specifies which day of the week to send the log. Relevant when the log is
sent weekly or daily.
- Time. Specifies the time of day to send the log. Relevant when the log is sent daily
or weekly.
If you select the Weekly, Daily, or Hourly option and the log fills up before the specified
period, the log is automatically emailed to the specified email address. After the log is
sent, the log is cleared from the N300 wireless modem router’s memory. If the N300
wireless modem router cannot e-mail the log file, the log buffer might fill up. In this case,
the N300 wireless modem router overwrites the log and discards its contents.
48 | Chapter 3. Security Settings
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
5. Click Apply to save your settings.
So that the log entries are correctly time-stamped and sent at the correct time, be sure to set
the time as described in the next section.
Setting the Time
The N300 wireless modem router uses the Network Time Protocol (NTP) to obtain the
current time and date from one of several network time servers on the Internet. To localize
the time for your log entries, you must specify your time zone:
• Time Zone. Select your local time zone. This setting is used for the blocking schedule
and for time-stamping log entries.
• Adjust for Daylight Savings Time. Select this check box when daylight savings time is
in effect to adjust the time for your N300 wireless modem router.
Chapter 3. Security Settings | 49
4. Network Maintenance
Administering your network
This chapter describes features to help you manage your N300 wireless modem router. This
chapter includes the following sections:
• Upgrading the Firmware on page 50
• Viewing N300 Wireless Modem Router Status Information on page 52
• Viewing a List of Attached Devices on page 57
• Managing the Configuration File on page 57
• Running Diagnostic Utilities and Rebooting the Router on page 58
• Enabling Remote Management Access on page 59
• Traffic Meter on page 61
Upgrading the Firmware
The N300 wireless modem router’s firmware (routing software) is stored in flash memory. By
default, when you log in to your N300 wireless modem router, it automatically checks the
NETGEAR website for new firmware and alerts you if there is a newer version.
4
Figure 31.
Chapter 4. Network Maintenance | 50
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: To turn off the automatic firmware check at login, clear the Check for
Updated Firmware Upon Log-in check box on the Router Upgrade
screen.
If the N300 wireless modem router discovers a newer version of firmware, the message on
the left displays. If no new firmware is available, the message on the right displays.
Figure 32.
To upgrade, click Yes to allow the N300 wireless modem router to download and install the
new firmware.
WARNING!
When uploading firmware to the N300 wireless modem router, do
not interrupt the Web browser by closing the window, clicking a
link, or loading a new page. If the browser is interrupted, it could
corrupt the firmware.
When the upload is complete, your N300 wireless modem router automatically restarts. The
upgrade process could take a few minutes. Read the new firmware release notes to
determine whether you must reconfigure the N300 wireless modem router after upgrading.
Manually Check for Firmware Upgrades
You can use the Router Upgrade screen to manually check the NETGEAR website for newer
versions of firmware for your product.
To manually check for new firmware and install it on your N300 wireless modem router:
1. From the main menu, select Maintenance > Router Status. Note the version number of
your N300 wireless modem router firmware.
2. Go to the DGND3300v2 support page on the NETGEAR website at
http://www.netgear.com/support.
Chapter 4. Network Maintenance | 51
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
3. If the firmware version on the NETGEAR website is newer than the firmware on your N300
wireless modem router, download the file to your computer.
4. From the main menu, select Maintenance > Router Upgrade to display the following
screen:
Figure 33.
5. Click Browse, and locate the firmware you downloaded (the file ends in .img or .chk).
6. Click Upload to send the firmware to the N300 wireless modem router.
WARNING!
When uploading firmware to the N300 wireless modem router, do
not interrupt the Web browser by closing the window, clicking a
link, or loading a new page. If the browser is interrupted, it could
corrupt the firmware.
When the upload is complete, your N300 wireless modem router automatically restarts.
The upgrade process typically takes about one minute. Read the new firmware release
notes to determine whether you must reconfigure the N300 wireless modem router after
upgrading.
Viewing N300 Wireless Modem Router Status Information
To view N300 wireless modem router status and usage information, from the main menu,
select Maintenance > Router Status. The Router Status screen displays.
52 | Chapter 4. Network Maintenance
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 34.
You can use the Show Statics and Connection Status buttons to view additional status
information, as described in Connection Status on page 55 and Statistics on page 56. The
following table explains Router Status screen fields.
Field Description
Account Name The host name assigned to the N300 wireless modem router.
Firmware Version The version of the N300 wireless modem router firmware. It changes if you
upgrade the N300 wireless modem router.
Chapter 4. Network Maintenance | 53
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Field Description
Internet Port MAC Address The Media Access Control address. This is the unique physical address being
used by the Internet (WAN) port of the N300 wireless modem router.
IP Address The IP address being used by the Internet (WAN) port of the N300 wireless
modem router. If no address is shown, or is 0.0.0.0, the N300 wireless modem
router cannot connect to the Internet.
DHCP • None. The N300 wireless modem router uses a fixed IP address on the
WAN.
• DHCP Client. The N300 wireless modem router obtains an IP address
dynamically from the ISP.
IP Subnet Mask The IP subnet mask being used by the Internet (WAN) port of the N300
wireless modem router. For an explanation of subnet masks and subnet
addressing, click the link to the online document TCP/IP Networking Basics in
Appendix E.
Domain Name
Server
LAN Port MAC Address The Media Access Control address. This is the unique physical address being
IP Address The IP address being used by the Ethernet (LAN) port of the N300 wireless
DHCP Identifies whether the firmware’s built-in DHCP server is active for the
IP Subnet Mask The IP subnet mask being used by the Ethernet (LAN) port of the N300
Wireless
Port
Name (11N
SSID)
Name (11G
SSID)
Region The geographic region where the N300 wireless modem router is being used.
11N Channel Identifies the 11N channel of the wireless port being used. Click the link to the
The Domain Name Server addresses being used by the N300 wireless modem
router. A Domain Name Server translates human-language URLs such as
www.netgear.com into IP addresses.
used by the Ethernet (LAN) port of the N300 wireless modem router.
modem router. The default is 192.168.0.1 (http://www.routerlogin.net).
LAN-attached devices.
wireless modem router. The default is 255.255.255.0.
The 11N wireless network name (SSID) being used by the wireless port of the
N300 wireless modem router. The default is NETGEAR-DualBand-N.
The 11G wireless network name (SSID) being used by the wireless port of the
N300 wireless modem router. The default is NETGEAR-2.4-G.
It might be illegal to use the wireless features of the N300 wireless modem
router in some parts of the world.
online document Wireless Networking Basics in Appendix E for the
frequencies used on each channel. In Up to 300 Mbps at 5 GHz and 54 Mbps
at 2.4 GHz mode, there are two channels: a primary channel (P) and a
secondary channel (S).
54 | Chapter 4. Network Maintenance
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Field Description
Wireless
Port
(continued)
11G Channel Identifies the 11G channel of the wireless port being used. Click the link to the
online document Wireless Networking Basics in Appendix E for the
frequencies used on each channel. In Up to 300 Mbps at 2.4 GHz mode and
Up to 145 Mbps at 2.4 GHz mode, the 11G channel is not active.
Mode Indicates the wireless communication mode:
• Up to 300 Mbps at 2.4 GHz
• Up to 300 Mbps at 5 GHz and 54 Mbps at 2.4 GHz (default)
• Up to 145 Mbps at 2.4 GHz
• Up to 145 Mbps at 5 GHz and 54 Mbps at 2.4 GHz
Wireless AP Indicates whether the radio feature of the N300 wireless modem router is
enabled. If this feature is not enabled, the Wireless light on the front panel is
off.
Broadcast Name Indicates whether the N300 wireless modem router is broadcasting its SSID.
Connection Status
To view the connection status, on the Router Status screen, click Connection Status.
Figure 35.
• Click the Connect button, and the N300 wireless modem router attempts to connect to
the Internet.
• Click the Disconnect button to disconnect the N300 wireless modem router Internet
connection.
• Click the Close Window button to close the Connection Status screen.
The following table describes the connection status settings.
Item Description
Connection Time The time elapsed since the last connection to the Internet through the ADSL port.
Connecting to sender The connection status.
Chapter 4. Network Maintenance | 55
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Item Description
Negotiation Success or Failed.
Authentication Success or Failed.
Obtaining IP Address The IP address assigned to the WAN port by the ADSL Internet Service Provider.
Obtaining Network
Mask
The network mask assigned to the WAN port by the ADSL Internet Service Provider.
Statistics
To view statistics, on the Router Status screen, click Show Statistics.
Figure 36.
The following table describes the N300 wireless modem router statistics.
Item Description
System Up Time The time elapsed since the N300 wireless modem router was last restarted.
Port The statistics for the WAN (Internet) and LAN (Ethernet) ports. For each port, the screen
displays:
Status The link status of the port.
TxPkts The number of packets transmitted on this port since reset or manual clear.
RxPkts The number of packets received on this port since reset or manual clear.
Collisions The number of collisions on this port since reset or manual clear.
Tx B/s The current transmission (outbound) bandwidth used on the WAN and LAN ports.
Rx B/s The current reception (inbound) bandwidth used on the WAN and LAN ports.
Up Time The time elapsed since this port acquired the link.
Poll Interval The intervals at which the statistics are updated in this screen.
• To change the polling frequency, enter a time in seconds in the Poll Interval field, and click
Set Interval.
• To stop the polling, click Stop.
56 | Chapter 4. Network Maintenance
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Viewing a List of Attached Devices
The Attached Devices table lists all IP devices that the N300 wireless modem router has
discovered on the local network. From the main menu, under Maintenance, select Attached
Devices to view the table.
Figure 37.
For each device, the table shows the IP address, NetBIOS host name or device name (if
available), and the Ethernet MAC address. To force the N300 wireless modem router to look
for attached devices, click Refresh.
Note: If the N300 Wireless Modem Router is rebooted, the table data is
lost until the N300 wireless modem router rediscovers the devices.
Managing the Configuration File
The configuration settings of the N300 wireless modem router are stored within the unit in a
configuration file. You can back up (save) this file to your computer, restore it, or reset it to the
factory default settings. From the main menu, select Maintenance > Backup Settings.
Figure 38.
The following sections describe the available options.
Chapter 4. Network Maintenance | 57
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Backing Up and Restoring the Configuration
The Restore and Backup options in the Backup Settings screen let you save and retrieve a
file containing your N300 wireless modem router’s configuration settings.
To save your settings, click Backup. Your browser extracts the configuration file from the
N300 wireless modem router and prompts you for a location on your computer to store the
file. You can give the file a meaningful name at this time, such as comcast.cfg.
Tip: Before saving your configuration file, change the administrator password
to the default, password. Then change it again after you have saved the
configuration file. If you forget the password, you will need to reset the
configuration to factory defaults.
To restore your settings from a saved configuration file, enter the full path to the file on your
computer, or click Browse to browse to the file. When you have located it, click Restore to
send the file to the N300 wireless modem router. The N300 wireless modem router then
reboots automatically.
WARNING!
Do not interrupt the reboot process.
Erasing the Configuration
Under some circumstances (for example, if you move the N300 wireless modem router to a
different network or if you have forgotten the password), you might want to erase the
configuration and restore the factory default settings. After an erase, the N300 wireless
modem router’s user name is admin, the password is password, the LAN IP address is
192.168.0.1, and its DHCP server is enabled.
• To erase the configuration, click the Erase button in the Backup Settings screen.
• To restore the factory default configuration settings when you do not know the login
password or IP address, you must use the Restore Factory Settings button on the rear
panel of the N300 wireless modem router (see Restoring the Factory Configuration
Settings on page 147).
Running Diagnostic Utilities and Rebooting the Router
The N300 wireless modem router has a diagnostics feature. In the main menu, select
Maintenance > Diagnostics to display the following screen:
58 | Chapter 4. Network Maintenance
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 39.
You can use the Diagnostics screen to perform the following functions from the N300
wireless modem router:
• Ping an IP address to test connectivity to see if you can reach a remote host.
• Perform a DNS lookup to test if an Internet name resolves to an IP address to verify that
the DNS server configuration is working.
• Display the Routing table to identify what other N300 wireless modem routers the N300
wireless modem router is communicating with.
• Reboot the N300 wireless modem router to enable new network configurations to take
effect or to clear problems with the N300 wireless modem router’s network connection.
Enabling Remote Management Access
The remote management feature allows you to upgrade or check the status of your N300
wireless modem router through the Internet. From the main menu, select Advanced >
Remote Management.
Chapter 4. Network Maintenance | 59
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 40.
Note: Be sure to change the N300 wireless modem router’s default
configuration password to a very secure password. The ideal
password should contain no dictionary words from any language,
and should be a mixture of letters (both uppercase and lowercase),
numbers, and symbols. Your password can be up to 30 characters.
To configure your N300 wireless modem router for remote management:
1. Select the Turn Remote Management On check box.
2. Under Allow Remote Access By, specify what external IP addresses will be allowed to
access the N300 wireless modem router’s remote management.
Note: For enhanced security, restrict access to as few external IP
addresses as practical.
• To allow access from any IP address on the Internet, select Everyone.
• To allow access from a range of IP addresses on the Internet, select IP Address
Range.
Enter a beginning and ending IP address to define the allowed range.
60 | Chapter 4. Network Maintenance
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
• To allow access from a single IP address on the Internet, select Only This Computer.
Enter the IP address that will be allowed access.
3. Specify the port number for accessing the management interface.
Normal Web browser access uses the standard HTTP service port 80. For greater
security, enter a custom port number for the remote management Web interface. Choose
a number between 1024 and 65535, but do not use the number of any common service
port. The default is 8080, which is a common alternate for HTTP.
4. Click Apply to have your changes take effect.
Note: When accessing your N300 wireless modem router from the
Internet, type your N300 wireless modem router’s WAN IP address
into your browser’s address or location field, followed by a colon (:)
and the custom port number. For example, if your external address
is 134.177.0.123 and you use port number 8080, then enter
http://134.177.0.123:8080 in your browser.
Traffic Meter
Traffic metering allows you to monitor the volume of Internet traffic passing through your
router’s Internet port. With the traffic meter utility, you can set limits for traffic volume, set a
monthly limit, and get a live update of traffic usage.
To monitor traffic on your router:
1. From the main menu, click Advanced > Traffic Meter.
Chapter 4. Network Maintenance | 61
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 41.
a. To enable the traffic meter, select the Enable Traffic Meter check box.
2. If you would like to record and restrict the volume of Internet traffic, select the Traffic
volume control by radio button. You can select one of the following options for controlling
the traffic volume:
• No Limit. No restriction is applied when the traffic limit is reached.
• Download only. The restriction is applied to incoming traffic only.
• Both Directions. The restriction is applied to both incoming and outgoing traffic.
3. You can limit the amount of data traffic allowed per month:
• By specifying how many Mbytes per month are allowed.
• By specifying how many hours of traffic are allowed.
4. Under Traffic Counter, specify a specific time and date to restart the traffic counter.
5. Under Traffic Control, specify when to issue a warning message before the monthly limit of
Mbytes or hours is reached. You can select one of the following to occur when the limit is
attained:
• The Internet LED flashes green.
62 | Chapter 4. Network Maintenance
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
• The Internet connection is disconnected and disabled.
6. Under Internet Traffic Statistics, set up monitoring the data traffic.
7. Click the Traffic Status button if you want a live update on Internet traffic status on your
router.
8. Click Apply to save your settings.
Chapter 4. Network Maintenance | 63
5. USB Storage
Network storage for sharing files and backing
up data
This chapter describes how to access and configure a USB storage drive attached to your
N300 wireless modem router.
USB port
Figure 42.
Note: The USB port on the N300 wireless modem router can be used only
to connect USB storage devices like flash drives or hard drives. Do
not connect computers, USB modems, printers, CD drives, or DVD
drives to the N300 wireless modem router USB port.
5
This chapter includes the following sections:
• USB Drive Requirements on page 65
• File Sharing Scenarios on page 65
• USB Storage Basic Settings on page 67
• Configuring USB Storage Advanced Settings on page 69
• Media Server Settings on page 72
• Unmounting a USB Drive on page 72
• Specifying Approved USB Devices on page 72
• Connecting to the USB Drive from a Remote Computer on page 73
• Connecting to the USB Drive with Microsoft Network Settings on page 74
Chapter 5. USB Storage | 64
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
USB Drive Requirements
The N300 wireless modem router works with 1.0 and 1.1 (USB Full Speed) and 2.0 (USB
High Speed) standards. The approximate USB bus speeds are shown in the following table.
Bus Speed/Second
USB 1.1 12 Mbits
USB 2.0 480 Mbits
Actual bus speeds can vary, depending on the CPU speed, memory, speed of the network,
and other variables.
The N300 wireless modem router should work with USB 2.0 or 1.1-compliant external flash
and hard drives. For the most up-to-date list of USB drives supported by the N300 wireless
modem router, go to:
http://kbserver.netgear.com/kb_web_files/n101300.asp
When selecting a USB device, bear in mind the following:
• The USB port on the N300 wireless modem router can be used with one USB hard drive
at a time. Do not attempt to use a USB hub attached to the USB port.
• According to the USB 2.0 specification, the maximum available power is 5V @ 0.5A.
Some USB devices might exceed this requirement, in which case the device might not
function or might function erratically. Check the documentation for your USB device to be
sure.
• The N300 wireless modem router supports FAT, FAT32, and NTFS (read only) file
systems.
• If your USB HD devices have an external power supply, be sure to use it.
File Sharing Scenarios
You can share files on the USB drive for a wide variety of business and recreational
purposes. The files can be any PC, Mac, or Linux file type including text files, Word,
PowerPoint, Excel, MP3, pictures, and multimedia. USB drive applications include:
• Sharing multimedia with friends and family—sharing MP3 files, pictures, and other
multimedia with local and remote users.
• Sharing resources on your network—storing files in a central location so that you do not
have to power up a computer to perform local sharing. In addition, you can share files
between Macintosh, Linux, and PC computers by using the USB drive as a go-between
the systems.
• Sharing files with offsite coworkers—sharing files such as Word documents, PowerPoint
presentations, and text files with remote users. A few common uses are described in the
following sections.
Chapter 5. USB Storage | 65
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Sharing Photos with Friends and Family
You can create your own central storage location for photos and multimedia. This eliminates
the need to log in to (and pay for) an external photo sharing site.
To share files with your friends and family:
1. Insert the USB drive into the N300 wireless modem router USB port either directly or
with a USB cable.
Computers on your local area network (LAN) can automatically access this USB drive
using a Web browser or Microsoft Networking.
2. If you want to specify read only access, or to allow access from the Internet, see Configuring
USB Storage Advanced Settings on page 69 for information.
Storing Files in a Central Location for Printing
This scenario is for a family that has one high-quality color printer directly attached to a PC,
but not shared on the local area network (LAN). This family does not have a print server:
• The daughter has some photos on her Macintosh computer that she wants to print.
• The mother has a photo-capable color printer directly attached to her PC, but not shared
on the network.
• The mother’s and daughter’s computers are not visible to each other on the network.
How can the daughter print her photos on the color printer attached to her mother’s PC? This
is where the USB drive on the N300 wireless modem router can save you time and effort.
1. The daughter accesses the USB drive by typing \\readyshare in the address field of her
Web browser. Then she copies the photos to the USB drive.
2. The mother uses a her Web browser or Microsoft Networking to transfer the files from the
USB drive to the PC. Then she prints the files.
Sharing Large Files with Colleagues
Sending files that are larger than 5 MB can pose a problem for many email systems. The
N300 wireless modem router allows you to share very large files such as PowerPoint
presentations or .zip files with colleagues at another site. Rather than tying up their mail
systems with large files, your colleagues can use FTP to easily download shared files from
the N300 wireless modem router.
Sharing files with a remote colleague involves the following steps:
1. To protect your network, set up appropriate security. Create a user name and password
for the colleague with appropriate access.
2. If you want to limit USB drive access to read only access, from the N300 wireless modem
router USB Storage (Basic Settings) screen, click Edit a Network folder. In the Write
Access field, select Edit, and then click Apply.
66 | Chapter 5. USB Storage
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
\
Note: The password for admin is the same one that you use to access the
N300 wireless modem router. By default it is password.
3. Enable FTP through the Internet in the USB Storage (Advanced Settings) screen. See
Configuring USB Storage Advanced Settings on page 69.
USB Storage Basic Settings
You can view or edit basic settings for the USB storage device attached to your N300
wireless modem router. On the N300 wireless modem router main menu, select USB
Storage > Basic Settings. The following screen displays:
Figure 43.
By default, the USB storage device is available to all computers on your local area network
(LAN). To access your USB device from this screen, you can click the network/device name or
the share name.
Network/Device Name:
\readyshare
Share Name:
\\readyshare\USB_Storage
Figure 44.
You can also type \\readyshare in the address field of your Web browser.
Chapter 5. USB Storage | 67
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: If you logged in to the N300 wireless modem router before you
connected your USB device, you might not see your USB device in
the N300 wireless modem router screens until you log out and then
log back in again.
The following table explains the fields and buttons in this screen.
Fields and Buttons Description
Network Device Name The default is \\readyshare. This is the name used to access
the USB device connected to the N300 wireless modem
router.
Available Network
Folders
Edit button You can click the Edit button to edit the Available Network
Safely Remove USB Device button Click to safely remove the USB device attached to your
Folder Name Full path of the used by the network folder.
Volume Name Volume name from the storage device (either USB drive or
HDD).
Total/Free Space Shows the current utilization of the storage device.
Share Name • You can click the name shown, or you can type it in the
address field of your Web browser.
• If Not Shared is shown, then the default share has been
deleted and no other share for the root folder exists. Click
the link to change this setting.
Read/Write Access • Shows the permissions and access controls on the
network folder:
• All - no password allows all users to access the network
folder.
• admin uses the same password that you use to log in to
the N300 wireless modem router main menu.
Folders settings. See Editing a Network Folder on page 68.
N300 wireless modem router. See Unmounting a USB Drive
on page 72.
Editing a Network Folder
This process is the same from either the USB Storage (Basic Settings) screen or the USB
Storage (Advanced Settings) screen. Click the Edit button to open the Edit Network Folder
screen:
68 | Chapter 5. USB Storage
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 45.
You can use this screen to select a folder, to change the share name, or to change the read
access or write access from All - no password to admin. The password for admin is the same
one that is used to log in to the N300 wireless modem router main menu. By default it is
password.
Note: You must click Apply in order for your changes to take effect.
Configuring USB Storage Advanced Settings
To configure advanced USB settings, from the main menu, select USB > Advanced
Settings. The USB Storage (Advanced Settings) screen displays:
Chapter 5. USB Storage | 69
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Figure 46.
You can use this screen to specify access to the USB storage device. The following table
explains the fields and buttons in the USB Storage (Advanced Settings) screen.
Fields Description
Network Device Name The default is readyshare. This is the name used to access the
USB device connected to the N300 wireless modem router from
your computer.
Workgroup If you are using a Windows Workgroup rather than a domain, the
workgroup name is displayed here.
Access Method Network Connection Enabled by default, this allows all users on the LAN to have
access to the USB drive.
HTTP Disabled by default. If you enable this setting, you can type
http://readyshare to access the USB drive.
HTTP (via Internet) Disabled by default. If you enable this settings, remote users can
type http://readyshare to access the USB drive over the
Internet.
FTP Disabled by default.
FTP (via Internet) Disabled by default. If you enable this settings, remote users can
access the USB drive through FTP over the Internet.
70 | Chapter 5. USB Storage
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Fields Description
Available
Network Folders
Folder Name Full path of the used by the network folder.
Volume name Volume name from the storage device (either USB drive or
HDD).
Total/Free Space The current utilization of the storage device.
Share Name • You can click the name shown, or you can type it into the
address field of your Web browser.
• If Not Shared is shown, then the default share has been
deleted and no other share for the root folder exists. Click the
link to change this setting.
Read/Write Access • Shows the permissions and access controls on the network
folder:
• All - no password allows all users to access the network folder.
• admin prompts you to enter the same password that you use
to log in to the N300 wireless modem router main menu.
Creating a Network Folder
From the USB Storage (Advanced Settings) screen, click the Create a Network Folder button
to open the Create Network Folder screen:
Figure 47.
You can use this screen to create a folder and to specify its share name, read access, and
write access from All - no password to admin. The password for admin is the same one that is
used to log in to the N300 wireless modem router main menu. By default it is password.
Note: You must click Apply in order for your changes to take effect.
Chapter 5. USB Storage | 71
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Media Server Settings
You can set this modem router as a ReadyDLNA media server to enable the playback of
videos, movies, and pictures on DLNA/UPnP AV-compliant media players such as the
Xbox360, Playstation, and NETGEAR’s Digital Entertainer Live. ReadyDLNA means that this
device serves media in DLNA-compatible form to DLNA/UPnP AV-compliant media players.
1. From the main menu, select USB Storage > Media Server. The Media Server (Settings)
screen displays.
2. Select the Enable Media Server check box to enable this device to act as a media server.
The name in the Media Server Name field is the name that shows up on media players.
3. Under Content Scan, select Automatic for media files whenever new files are added to the
ReadyShare USB storage. You can also schedule scans to run periodically, or click Scan
Now to scan for new media immediately.
Unmounting a USB Drive
WARNING!
Unmount the USB drive first before physically unplugging it from
the N300 wireless modem router. If the USB disk is removed or a
cable is pulled while data is being written to the disk, it could
result in file or disk corruption.
To unmount a USB disk drive so that no users can access it, from the USB Settings screen,
click the Safely Remove USB Device button. This takes the drive offline.
Specifying Approved USB Devices
You can specify which USB devices are approved for use when connected to the N300
wireless modem router.
72 | Chapter 5. USB Storage
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
1. From the main menu, select Advanced > USB Settings, and then click Approved
Devices. The USB Drive Approved Settings screen displays:
Figure 48.
2. Select the USB device from the Available USB Devices list.
3. Click Add.
4. Select the Allow only approved devices check box.
5. Click Apply so that your change goes into effect.
If you want to approve another USB device, you must first use the Safely Remove USB
Device button to unmount the currently connected USB device. Connect the other USB
device, and then repeat this process.
Connecting to the USB Drive from a Remote Computer
To connect to the USB drive from remote computers using a Web browser, you must use the
router’s Internet port IP address.
Locating the Internet Port IP Address
The Router Status screen shows the Internet port IP address:
1. Log in to the N300 wireless modem router.
2. From the main menu, select Maintenance > Router Status.
Chapter 5. USB Storage | 73
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
3. Record the IP address that is listed for the Internet port. This is the IP address you can use
to connect to the router remotely.
Accessing the Router’s USB Drive Remotely Using FTP
You can connect to the router’s USB drive using a Web browser:
1. Connect to the router by typing ftp:// and the Internet port IP address in the address
field of Internet Explorer or Netscape® Navigator, for example:
ftp://10.1.65.4
If you are using Dynamic DNS, you can type the DNS name rather than the IP address.
2. Type the account name and password that has access rights to the USB drive.
3. The directories of the USB drive that your account has access to display, for example,
share/partition1/directory1. You can now read and copy files from the USB directory.
Connecting to the USB Drive with Microsoft Network
Settings
You can access the USB drive from local computers on your home or office network using
Microsoft Network settings. You must be running Microsoft Windows 2000, XP, or older
versions of Windows with Microsoft networking enabled. You can use normal Explorer
operations such as drag and drop, file open, or cut and paste files from:
• Microsoft Windows Start menu, Run option
• Windows Explorer
• Network Neighborhood or My Network Places
Enabling File and Printer Sharing
Each computer’s network properties must be set to enable network communication with the
USB drive. File and Printer Sharing for Microsoft Networks must be enabled, as described in
the following sections.
Note: In Windows 2000 and Windows XP, File and Printer Sharing is
enabled by default.
Configuring Windows 98SE and Windows ME
The easiest way to get to your network properties is to go to your desktop, right-click
Network Neighborhood and then click from the main menu,. File and Printer Sharing for
Microsoft Network should be listed. If it is not, click Add and follow the installation prompts.
74 | Chapter 5. USB Storage
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: If you have any questions about File and Printer Sharing, contact
Microsoft for assistance.
Configuring Windows 2000 and Windows XP
Right-click the network connection for your local area network. File and Printer Sharing for
Microsoft Networks should be listed. If it is not, click Install and follow the installation
prompts.
Chapter 5. USB Storage | 75
6. Virtual Private Networking
Setting up secure encrypted communications
This chapter describes how to use the virtual private networking (VPN) features of the N300
wireless modem router. VPN communications paths are called tunnels. VPN tunnels provide
secure, encrypted communications between your local network and a remote network or
computer. See Appendix C, NETGEAR VPN Configuration, and click the link to Virtual Private
Networking Basics on page 172 to learn more about VPNs.
This chapter is organized as follows:
• Overview of VPN Configuration on page 76
• Planning a VPN on page 78
• VPN Tunnel Configuration on page 79
• Setting Up a Client-to-Gateway VPN Configuration on page 80
• Setting Up a Gateway-to-Gateway VPN Configuration on page 90
• VPN Tunnel Control on page 94
• Setting Up VPN Tunnels in Special Circumstances on page 100
6
Overview of VPN Configuration
Two common scenarios for VPN tunnels are between a remote PC and a network gateway,
and between two or more network gateways. The N300 Wireless Dual Band ADSL2+
Modem Router DGND3300v2 supports both types. The N300 Wireless Dual Band ADSL2+
Modem Router DGND3300v2 supports up to five concurrent tunnels.
Chapter 6. Virtual Private Networking | 76
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Client-to-Gateway VPN Tunnels
Client-to-gateway VPN tunnels provide secure access from a remote PC, such as a
telecommuter connecting to an office network.
N300 Wireless Modem Router
DGND3300v2
Figure 49. Telecommuter VPN Tunnel
VPN Tunnel
Internet
PC running NETGEAR
ProSafe VPN client
A VPN client access allows a remote PC to connect to your network from any location on the
Internet. The remote PC is one tunnel endpoint, running the VPN client software. The N300
wireless modem router on your network is the other tunnel endpoint. See Setting Up a
Client-to-Gateway VPN Configuration on page 80 for information about how to set up this
configuration.
Gateway-to-Gateway VPN Tunnels
Gateway-to-gateway VPN tunnels provide secure access between networks, such as a
branch or home office and a main office.
N300 Wireless Modem Router
DGND3300v2
Gateway A (Home)
Figure 50. VPN Tunnel between Networks
VPN Tunnel
Internet
Gateway B
(Office)
A VPN between two or more NETGEAR VPN-enabled routers is a good way to connect
branch or home offices and business partners over the Internet. VPN tunnels also enable
access to network resources across the Internet. In this case, use gateways on each end of
the tunnel to form the VPN tunnel end points. See Setting Up a Gateway-to-Gateway VPN
Configuration on page 90 for information about how to set up this configuration.
Chapter 6. Virtual Private Networking | 77
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Planning a VPN
When you set up a VPN, it is helpful to plan the network configuration and record the
configuration parameters on a worksheet:
Table 1. VPN Tunnel Configuration Worksheet
Parameter Value to Be Entered Field Selection
Connection Name N/A
Pre-Shared Key N/A
Secure Association N/A Main Mode Manual Keys
Perfect Forward Secrecy N/A Enabled Disabled
Encryption Protocol N/A DES 3DES
Authentication Protocol N/A MD5 SHA-1
Diffie-Hellman (DH) Group N/A Group 1 Group 2
Key Life in seconds N/A
IKE Life Time in seconds N/A
VPN Endpoint Local IPSecID LAN IP Address Subnet Mask FQDN or Gateway
IP (WAN IP Address
To set up a VPN connection, you must configure each endpoint with specific identification and
connection information describing the other endpoint. You must configure the outbound VPN
settings on one end to match the inbound VPN settings on other end, and vice versa.
This set of configuration information defines a security association (SA) between the two
VPN endpoints. When planning your VPN, you must make a few choices first:
• Will the local end be any device on the LAN, a portion of the local network (as defined by
a subnet or by a range of IP addresses), or a single PC?
• Will the remote end be any device on the remote LAN, a portion of the remote network (as
defined by a subnet or by a range of IP addresses), or a single PC?
• Will either endpoint use fully qualified domain names (FQDNs)? FQDNs supplied by
Dynamic DNS providers (see Using a Fully Qualified Domain Name (FQDN) on
page 154) can allow a VPN endpoint with a dynamic IP address to initiate or respond to a
tunnel request. Otherwise, the side using a dynamic IP address must always be the
initiator.
• Which method will you use to configure your VPN tunnels?
- The VPN Wizard using VPNC defaults (see Table 2)
78 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
- The typical automated Internet Key Exchange (IKE) setup (see Using Auto Policy to
Configure VPN Tunnels on page 101)
- A manual keying setup in which you must specify each phase of the connection (see
Using Manual Policy to Configure VPN Tunnels on page 109)
Table 2. Parameters Recommended by the VPNC and Used in the VPN Wizard
Parameter Factory Default Setting
Secure Association Main Mode
Authentication Method Pre-Shared Key
Encryption Method 3DES
Authentication Protocol SHA-1
Diffie-Hellman (DH) Group Group 2 (1024 bit)
Key Life 8 hours
IKE Life Time 1 hour
• What level of IPSec VPN encryption will you use?
- DES. The Data Encryption Standard (DES) processes input data that is 64 bits wide,
encrypting these values using a 56-bit key. Faster but less secure than 3DES.
- 3DES. Triple DES achieves a higher level of security by encrypting the data three
times using DES with three different, unrelated keys.
• What level of authentication will you use?
- MDS. 128 bits, faster but less secure.
- SHA-1. 160 bits, slower but more secure.
VPN Tunnel Configuration
There are two tunnel configurations and three ways to configure them:
• Use the VPN Wizard to configure a VPN tunnel (recommended for most situations):
- See Setting Up a Client-to-Gateway VPN Configuration on page 80.
- See Setting Up a Gateway-to-Gateway VPN Configuration on page 90.
• See Using Auto Policy to Configure VPN Tunnels on page 101 when the VPN Wizard and
its VPNC defaults (see Table 2 on page 79) are not appropriate for your special
circumstances, but you want to automate the Internet Key Exchange (IKE) setup.
• See Using Manual Policy to Configure VPN Tunnels on page 109 when the VPN Wizard
and its VPNC defaults (see Table 2 on page 79) are not appropriate for your special
circumstances and you must specify each phase of the connection. You manually enter
all the authentication and key parameters. You have more control over the process;
however, the process is more complex, and there are more opportunities for errors or
Chapter 6. Virtual Private Networking | 79
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
configuration mismatches between your N300 Wireless Dual Band ADSL2+ Modem
Router DGND3300v2 and the corresponding VPN endpoint gateway or client workstation.
Setting Up a Client-to-Gateway VPN Configuration
Setting up a VPN between a remote PC running the NETGEAR ProSafe VPN client and a
network gateway involves two steps, described in the following sections:
• Step 1: Configure the Client-to-Gateway VPN Tunnel on page 80 describes how to use
the VPN Wizard to configure the VPN tunnel between the remote PC and network
gateway.
• Step 2: Configure the NETGEAR ProSafe VPN Client on page 83 shows how to configure
the NETGEAR ProSafe VPN client endpoint.
IP: 192.168.3.1
22.23.24.25
Figure 51. N300 Wireless Modem Router DGND3300v2 Client-to-Gateway VPN Tunnel
VPN tunnel
Internet
0.0.0.0
PC running NETGEAR
ProSafe VPN client
Step 1: Configure the Client-to-Gateway VPN Tunnel
This section describes using the VPN Wizard to set up the VPN tunnel using the VPNC
default parameters listed in Table 2 on page 79. If you have special requirements not covered
by these VPNC-recommended parameters, see Setting Up VPN Tunnels in Special
Circumstances on page 100 for information about how to set up the VPN tunnel.
The following worksheet identifies the parameters used in this procedure. For a blank
worksheet, see Planning a VPN on page 78.
Table 3. VPN Tunnel Configuration Worksheet
Parameter Value to Be Entered Field Selection
Connection Name RoadWarrior N/A
Pre-Shared Key 12345678 N/A
Secure Association N/A Main Mode Manual Keys
Perfect Forward secrecy N/A Enabled Disabled
Encryption Protocol N/A DES 3DES
80 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Table 3. VPN Tunnel Configuration Worksheet
Parameter Value to Be Entered Field Selection
Authentication Protocol N/A MD5 SHA-1
Diffie-Hellman (DH) Group N/A Group 1 Group 2
Key Life in seconds 28800 (8 hours) N/A
IKE Life Time in seconds 3600 (1 hour) N/A
VPN Endpoint Local IPSecID LAN IP Address Subnet Mask FQDN or Gateway
IP (WAN IP
Address)
Client toGateway N/A N/A Dynamic
Gateway toClient 192.168.3.1 255.255.255.0 22.23.24.25
To configure a client-to-gateway VPN tunnel using the VPN Wizard:
1. Log in to the N300 wireless modem router. On the main menu under Advanced - VPN,
select VPN Wizard.
2. Click Next to proceed.
3. Fill in the Connection Name and pre-shared key fields.
The connection name is for convenience and does not affect how the VPN tunnel
functions.
Chapter 6. Virtual Private Networking | 81
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
4. Select the radio button for the type of target end point, and click Next.
5. Enter the remote IP address, and click Next.
The Summary screen displays:
Note: To view the VPNC-recommended authentication and encryption
settings used by the VPN Wizard, click the here link.
82 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
6. Click Done on the Summary screen. The VPN Policies screen displays, showing that the
new tunnel is enabled:
To view or modify the tunnel settings, select its radio button and click Edit.
Note: See Using Auto Policy to Configure VPN Tunnels on page 101 for
information about how to enable the IKE keep-alive capability on an existing
VPN tunnel.
Step 2: Configure the NETGEAR ProSafe VPN Client
This section describes how to configure the NETGEAR ProSafe VPN client on a remote PC.
These instructions assume that the PC running the client has a dynamically assigned IP
address.
The PC must have the NETGEAR ProSafe VPN Client program installed that supports
IPSec. Go to the NETGEAR website (http://www.netgear.com) for information about how to
purchase the NETGEAR ProSafe VPN Client.
Note: Before installing the NETGEAR ProSafe VPN Client software, be
sure to turn off any virus protection or firewall software you might be
running on your PC. You might need to insert your Windows CD to
complete the installation.
1. Install the NETGEAR ProSafe VPN client on the remote PC, and then reboot.
a. Install the IPSec component. You might have the option to install either the VPN
adapter or the IPSec component or both. The VPN adapter is not necessary.
If you do not have a modem or dial-up adapter installed in your PC, you might see the
warning message stating “The NETGEAR ProSafe VPN Component requires at least
one dial-up adapter be installed.” You can disregard this message.
b. Reboot the remote PC.
The ProSafe icon ( ) is in the system tray.
c. Double-click the ProSafe icon to open the Security Policy Editor.
2. Add a new connection.
Chapter 6. Virtual Private Networking | 83
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
a. Run the NETGEAR ProSafe Security Policy Editor program, and, using the Table 3 on
page 80, create a VPN connection.
b. From the Edit menu of the Security Policy Editor, select Add, and then click
Connection.
A New Connection listing appears in the list of policies.
c. Rename the new connection so that it matches the Connection Name field in the
VPN Settings screen of the N300 wireless modem router on LAN A. Choose
connection names that make sense to the people using and administering the VPN.
Note: In this example, the connection name used on the client side of the
VPN tunnel is togw_a, and it does not have to match the
RoadWarrior connection name used on the gateway side of the VPN
tunnel because connection names are irrelevant to how the VPN
tunnel functions.
d. Enter the following settings:
• Connection Security. Select Secure.
• ID Type. Select IP Subnet.
• Subnet. In this example, type 192.168.3.1 as the network address of the N300
wireless modem router.
• Mask. Enter 255.255.255.0 as the LAN subnet mask of the N300 wireless modem
router.
• Protocol. Select All to allow all traffic through the VPN tunnel.
e. Select the Connect using Secure Gateway Tunnel check box.
f. In the ID Type drop-down list, select IP Address.
84 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
g. Enter the public WAN IP address of the N300 wireless modem router in the field
directly below the ID Type drop-down list. In this example, 22.23.24.25 is used.
The resulting connection settings are shown in Figure 52 on page 85.
3. Configure the security policy in the NETGEAR ProSafe VPN Client software:
a. In the Network Security Policy list, expand the new connection by double-clicking its
name or clicking the + symbol. My Identity and Security Policy subheadings appear
below the connection name.
b. Click the Security Policy subheading to view the Security Policy settings.
Figure 52. Security Policy settings, Client-to-Gateway A
c. In the Select Phase 1 Negotiation Mode section of the screen, select the Main Mode
radio button.
4. Configure the VPN client identity.
In this step, you provide information about the remote VPN client PC. You must provide
the pre-shared key that you configured in the N300 wireless modem router and either a
fixed IP address or a fixed virtual IP address of the VPN client PC.
Chapter 6. Virtual Private Networking | 85
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
a. In the Network Security Policy list on the left side of the Security Policy Editor window,
click My Identity.
b. In the Select Certificate drop-down list, select None.
c. In the ID Type drop-down list, select IP Address. If you are using a virtual fixed IP
address, enter this address in the Internal Network IP Address field. Otherwise,
leave this field empty.
d. In the Internet Interface section of the screen, select the adapter that you use to
access the Internet. If you have a dial-up Internet account, select PPP Adapter in
the Name list. If you have a dedicated cable or DSL line, select your Ethernet
adapter. If you will be switching between adapters or if you have only one adapter,
select Any.
e. In the My Identity section of the screen, click the Pre-Shared Key button. The
Pre-Shared Key screen displays:
f. Click Enter Key. Enter the N300 wireless modem router pre-shared key, and then
click OK. In this example, 12345678 is entered, though asterisks are displayed in the
field. This field is case-sensitive.
5. Configure the VPN client authentication proposal.
In this step, you provide the type of encryption (DES or 3DES) to be used for this
connection. This selection must match your selection in the N300 wireless modem router
configuration.
86 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
a. In the Network Security Policy list on the left side of the Security Policy Editor window,
expand the Security Policy heading by double-clicking its name or clicking the +
symbol.
b. Expand the Authentication subheading by double-clicking its name or clicking the +
symbol. Then select Proposal 1 below Authentication.
c. In the Authentication Method drop-down list, select Pre-Shared key.
d. In the Encrypt Alg drop-down list, select the type of encryption that is configured for
the encryption protocol in the N300 wireless modem router, as listed in Table 1 on
page 78. This example uses Triple DES.
e. In the Hash Alg drop-down list, select SHA-1.
f. In the SA Life drop-down list, select Unspecified.
g. In the Key Group drop-down list, select Diffie-Hellman Group 2.
6. Configure the VPN client key exchange proposal.
In this step, you provide the type of encryption (DES or 3DES) to be used for this
connection. This selection must match your selection in the N300 wireless modem router
configuration.
Chapter 6. Virtual Private Networking | 87
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
a. Expand the Key Exchange subheading by double-clicking its name or clicking the +
symbol. Then select Proposal 1 below Key Exchange.
b. In the SA Life drop-down list, select Unspecified.
c. In the Compression drop-down list, select None.
d. Select the Encapsulation Protocol (ESP) check box.
e. In the Encrypt Alg drop-down list, select the type of encryption that is configured for
the encryption protocol in the N300 wireless modem router, as listed in Table 1 on
page 78. This example uses Triple DES.
f. In the Hash Alg drop-down list, select SHA-1.
g. In the Encapsulation drop-down list, select Tunnel.
h. Leave the Authentication Protocol (AH) check box cleared.
7. Save the VPN client settings.
In the Security Policy Editor window, select File > Save.
After you have configured and saved the VPN client information, your PC automatically
opens the VPN connection when you attempt to access any IP addresses in the range of
the remote VPN router’s LAN.
8. Check the VPN connection.
To check the VPN connection, you can initiate a request from the remote PC to the N300
wireless modem router’s network by using the Connect option in the NETGEAR ProSafe
menu bar. The NETGEAR ProSafe client reports the results of the attempt to connect.
Since the remote PC has a dynamically assigned WAN IP address, it must initiate the
request.
To perform a ping test using our example, start from the remote PC:
a. Establish an Internet connection from the PC.
b. On the Windows taskbar, click the Start button, and then select Run.
88 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
c. Type ping -t 192.168.3.1, and then click OK.
This causes a continuous ping to be sent to the first N300 wireless modem router.
After between several seconds and 2 minutes, the ping response should change from
timed out to reply.
Once the connection is established, you can open a browser on the PC and enter the
LAN IP address of the remote gateway. After a short wait, you should see the login
screen of the N300 wireless modem router (unless another PC is already logged in to the
N300 wireless modem router).
You can view information about the progress and status of the VPN client connection by
opening the NETGEAR ProSafe Log Viewer.
To launch this function, click the Windows Start button, then select Programs >
NETGEAR ProSafe VPN Client > Log Viewer. The Log Viewer screen for a successful
connection is shown in the following figure:
Chapter 6. Virtual Private Networking | 89
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: Use the active VPN tunnel information and pings to determine
whether a failed connection is due to the VPN tunnel or some reason
outside the VPN tunnel.
9. The Connection Monitor screen for this connection is shown in the following figure:
In this example you can see these settings:
• The N300 wireless modem router has a GW address (public IP WAN address) of
22.23.24.25.
• The N300 wireless modem router has a remote address (LAN IP address) of 192.168.3.1.
• The VPN client PC has a local address (dynamically assigned address) of 192.168.2.2.
While the connection is being established, the Connection Name field in this screen displays
SA before the name of the connection. When the connection is successful, the SA changes
to the yellow key symbol shown in the previous figure.
Note: While your PC is connected to a remote LAN through a VPN, you
might not have normal Internet access. If this is the case, you must
close the VPN connection to have normal Internet access.
Setting Up a Gateway-to-Gateway VPN Configuration
Note: This section describes how to use the VPN Wizard to set up the
VPN tunnel using the VPNC default parameters listed in Table 2 on
page 79. If you have special requirements not covered by these
VPNC-recommended parameters, see Setting Up VPN Tunnels in
Special Circumstances on page 100 for information about how to set
up the VPN tunnel.
90 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Follow this procedure to configure a gateway-to-gateway VPN tunnel using the VPN Wizard.
IP: 192.168.0.1
14.15.16.17
Gateway A
VPN tunnel
Internet
IP:192.168.3.1
22.23.24.25
Gateway B
Figure 53. Gateway-to-Gateway VPN Tunnel
Set the LAN IPs on each N300 wireless modem router to different subnets and configure
each correctly for the Internet. The subsequent examples assume the settings shown in the
following table.
Table 4. Gateway-to-Gateway VPN Tunnel Configuration Worksheet
Parameter Value to Be Entered Field Selection
Connection Name GtoGr N/A
Pre-Shared Key 12345678 N/A
Secure Association N/A Main Mode Manual Keys
Perfect Forward Secrecy N/A Enabled Disabled
Encryption Protocol N/A DES 3DES
Authentication Protocol N/A MD5 SHA-1
Diffie-Hellman (DH) Group N/A Group 1 Group 2
Key Life in seconds 28800 (8 hours) N/A
IKE Life Time in seconds 3600 (1 hour) N/A
VPN Endpoint Local IPSecID LAN IP Address Subnet Mask FQDN or Gateway
IP (WAN IP
Address)
Gateway_A GW_A 192.168.0.1 255.255.255.0 14.15.16.17
Gateway_B GW_B 192.168.3.1 255.255.255.0 22.23.24.25
Note: The LAN IP address ranges of each VPN endpoint must be
different. The connection will fail if both are using the NETGEAR
default address range of 192.168.0.x.
Chapter 6. Virtual Private Networking | 91
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
To configure a gateway-to-gateway VPN tunnel using the VPN Wizard:
1. Log in to Gateway A on LAN A. From the main menu, select VPN Wizard. Click Next,
and the Step 1 of 3 screen displays.
2. Fill in the Connection Name and pre-shared key fields. Select the radio button for the type of
target end point, and click Next, and the Step 2 of 3 screen displays.
3. Fill in the IP address or FQDN for the target VPN endpoint WAN connection, and click Next.
and the Step 3 of 3 screen displays.
4. Fill in the IP Address and Subnet Mask fields for the target endpoint that can use this tunnel,
and click Next.
92 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
The VPN Wizard Summary screen displays:
To view the VPNC-recommended authentication and encryption settings used by the
VPN Wizard, click the here link.
5. Click Done on the Summary screen.
The VPN Policies screen displays, showing that the new tunnel is enabled.
Note: See Using Auto Policy to Configure VPN Tunnels on page 101 for
information about how to enable the IKE keep-alive capability on an
existing VPN tunnel.
6. Repeat these steps for the gateway on LAN B, and pay special attention to the following
network settings:
• WAN IP of the remote VPN gateway (for example, 14.15.16.17)
• LAN IP settings of the remote VPN gateway:
- IP address (for example, 192.168.0.1)
- Subnet mask (for example, 255.255.255.0)
- Pre-shared key (for example, 12345678)
7. Use the VPN Status screen to activate the VPN tunnel by performing the following steps:
Chapter 6. Virtual Private Networking | 93
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Note: The VPN Status screen is only one of three ways to active a VPN
tunnel. See Activating a VPN Tunnel on page 94 for information
about the other ways.
a. On the N300 wireless modem router menu, select VPN Status. The VPN Status/Log
screen displays:
b. Click the VPN Status button to display the Current VPN Tunnels (SAs) screen:
c. Click Connect for the VPN tunnel you want to activate. View the VPN Status/Log
screen to verify that the tunnel is connected.
VPN Tunnel Control
Activating a VPN Tunnel
There are three ways to activate a VPN tunnel:
94 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
• Use the VPN Status screen.
• Activate the VPN tunnel by pinging the remote endpoint.
• Start using the VPN tunnel.
Note: See Using Auto Policy to Configure VPN Tunnels on page 101 for
information about how to enable the IKE keep-alive capability on an
existing VPN tunnel.
Using the VPN Status Screen to Activate a VPN Tunnel
To use the VPN Status screen to activate a VPN tunnel:
1. Log in to the N300 wireless modem router.
2. On the main menu, select VPN Status. The VPN Status/Log screen displays:
3. Click VPN Status to display the Current VPN Tunnels (SAs) screen:
Chapter 6. Virtual Private Networking | 95
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
4. Click Connect for the VPN tunnel that you want to activate.
Activating the VPN Tunnel by Pinging the Remote Endpoint
Note: This section uses 192.168.3.1 for a sample remote endpoint LAN IP
address.
To activate the VPN tunnel by pinging the remote endpoint (for example, 192.168.3.1),
perform the following steps depending on whether your configuration is client-to-gateway or
gateway-to-gateway:
• Client-to-gateway configuration. To check the VPN connection, you can initiate a
request from the remote PC to the N300 Wireless Dual Band ADSL2+ Modem Router
DGND3300v2’s network by using the Connect option in the NETGEAR ProSafe menu
bar. The NETGEAR ProSafe client reports the results of the attempt to connect. Since the
remote PC has a dynamically assigned WAN IP address, it must initiate the request.
To perform a ping test using our example, start from the remote PC:
a. Establish an Internet connection from the PC.
b. On the Windows taskbar, click the Start button, and then select Run.
c. Type ping -t 192.168.3.1, and then click OK.
Running a ping test
to the LAN from the PC
This causes a continuous ping to be sent to the first N300 Wireless Dual Band
ADSL2+ Modem Router DGND3300v2. Within 2 minutes, the ping response should
change from timed out to reply.
Note: You can use Ctrl-C to stop the pinging.
96 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Once the connection is established, you can open a browser on the PC and enter the
LAN IP address of the remote N300 Wireless Dual Band ADSL2+ Modem Router
DGND3300v2. After a short wait, you should see the login screen of the N300 wireless
modem router (unless another PC already has the N300 Wireless Dual Band ADSL2+
Modem Router DGND3300v2 management interface open).
• Gateway-to-gateway configuration. Test the VPN tunnel by pinging the remote network
from a PC attached to Gateway A (the N300 wireless modem router).
a. Open a command prompt (for example, Start > Run > cmd).
b. Type ping 192.168.3.1.
Note: The pings might fail the first time. If they do, then try the pings a
second time.
Start Using a VPN Tunnel to Activate It
To use a VPN tunnel, use a Web browser to go to a URL whose IP address or range is
covered by the policy for that VPN tunnel.
Verifying the Status of a VPN Tunnel
To use the VPN Status screen to determine the status of a VPN tunnel:
1. Log in to the N300 wireless modem router.
2. On the main menu, select VPN Status to display the VPN Status/Log screen.
Chapter 6. Virtual Private Networking | 97
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
This log shows the details of recent VPN activity, including the building of the VPN tunnel.
If there is a problem with the VPN tunnel, refer to the log for information about what might
be the cause of the problem.
• Click Refresh to see the most recent entries.
• Click Clear Log to delete all log entries.
3. On the VPN Status/Log screen, click VPN Status to display the Current VPN Tunnels (SAs)
screen.
This table lists the following data for each active VPN tunnel.
• SPI. Each SA has a unique SPI (Security Parameter Index) for traffic in each
direction. For manual key exchange, the SPI is specified in the policy definition. For
automatic key exchange, the SPI is generated by the IKE protocol.
• Policy Name. The VPN policy associated with this SA.
• Remote Endpoint. The IP address on the remote VPN endpoint.
• Action. Either a Drop or a Connect button.
• SLifeTime (Secs). The remaining soft lifetime for this SA in seconds. When the soft
lifetime becomes 0 (zero), the SA (security association) is renegotiated.
• HLifeTime (Secs). The remaining hard lifetime for this SA in seconds. When the hard
lifetime becomes 0 (zero), the SA (security association) is terminated. (It is
reestablished if required.)
Deactivating a VPN Tunnel
Sometimes a VPN tunnel must be deactivated for testing purposes. You can deactivate a
VPN tunnel from two places:
• Policy table on VPN Policies screen
• VPN Status screen
98 | Chapter 6. Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Using the Policy Table on the VPN Policies Screen to Deactivate a VPN Tunnel
To use the VPN Policies screen to deactivate a VPN tunnel:
1. Log in to the N300 wireless modem router.
2. On the main menu, select VPN Policies to display the VPN Policies screen.
3. In the Policy Table, clear the Enable check box for the VPN tunnel that you want to
deactivate, and then click Apply. (To reactivate the tunnel, select the Enable check box, and
then click Apply.)
Using the VPN Status Screen to Deactivate a VPN Tunnel
To use the VPN Status screen to deactivate a VPN tunnel:
1. Log in to the N300 wireless modem router.
2. On the main menu, select VPN Policies to display the VPN Policies screen.
Chapter 6. Virtual Private Networking | 99
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
3. Click VPN Status. The Current VPN Tunnels (SAs) screen displays:
4. Click Drop for the VPN tunnel that you want to deactivate.
Deleting a VPN Tunnel
To delete a VPN tunnel:
1. Log in to the N300 wireless modem router.
2. On the main menu, select VPN Policies to display the VPN Policies screen. In the Policy
Table, select the radio button for the VPN tunnel to be deleted, and then click Delete.
Setting Up VPN Tunnels in Special Circumstances
When the VPN Wizard and its VPNC defaults (see Table 2 on page 79) are not appropriate
for your circumstances, use one of these alternatives:
• Auto Policy. For a typical automated Internet Key Exchange (IKE) setup, see Using Auto
Policy to Configure VPN Tunnels on page 101. Auto Policy uses the IKE protocol to
define the authentication scheme and automatically generate the encryption keys.
100 | Chapter 6. Virtual Private Networking
Loading...