Netgear JNDR3000 Owner's Manual

N600 Wireless Dual Band Router JNDR3000

User Manual

June 2013
202-11233-01

350 East Plumeria Drive
San Jose, CA 95134
USA

N600 Wireless Dual Band Router JNDR3000

Support

Thank you for selecting NETGEAR products.
After installing your device, locate the serial number on the label of your product and use it to register your product

at

https://my.netgear.com. You must register your product before you can use NETGEAR telephone support.

NETGEAR recommends registering your product through the NETGEAR website. For product updates and web
support, visit

Phone (US & Canada only): 1-888-NETGEAR.
Phone (Other Countries): Check the list of phone numbers at

http://support.netgear.com/general/contact/default.aspx.

http://support.netgear.com.

Trademarks

NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of
NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change
without notice. © NETGEAR, Inc. All rights reserved.

2

Contents

Chapter 1 Hardware Setup

Chapter 2 Getting Started with NETGEAR genie

Unpack Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8

Prepare the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Hardware Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Front and Top Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Label. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Position Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Cable Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Router Setup Preparation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Use Standard TCP/IP Properties for DHCP . . . . . . . . . . . . . . . . . . . . . .17

Gather ISP Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Wireless Devices and Security Settings . . . . . . . . . . . . . . . . . . . . . . . . . 17

Types of Logins and Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

NETGEAR genie Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

Use NETGEAR genie after Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . .19

Upgrade Router Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Router Dashboard (BASIC Home Screen). . . . . . . . . . . . . . . . . . . . . . . . .20

Join Your Wireless Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

Manual Method. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

Wi-Fi Protected Setup Method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

NETGEAR genie App and Mobile genie App . . . . . . . . . . . . . . . . . . . . . . . 22

Chapter 3 NETGEAR genie Basic Settings

Internet Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25

Internet Setup If Your ISP Requires a Login . . . . . . . . . . . . . . . . . . . . .26

Internet Setup If Your ISP Does Not Require a Login . . . . . . . . . . . . . .28

Basic Wireless Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

Wireless Setup Screen Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Change the WEP Security Option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Change WPA Security Option and Password . . . . . . . . . . . . . . . . . . . .33

View Attached Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

ReadySHARE USB Storage. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Set Up a Guest Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

3

N600 Wireless Dual Band Router JNDR3000

Chapter 4 NETGEAR genie ADVANCED Home

NETGEAR genie ADVANCED Home Screen . . . . . . . . . . . . . . . . . . . . . . 42

Internet Connection Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

WPS Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

WAN Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

Default DMZ Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46

Change the MTU Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

LAN Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

LAN Setup Screen Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

Use the Router as a DHCP Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

Set Up Address Reservation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Quality of Service (QoS) Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Chapter 5 USB Storage

USB Drive Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

ReadySHARE Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

File-Sharing Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Share Photos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Store Files in a Central Location for Printing . . . . . . . . . . . . . . . . . . . . . 60

Share Large Files over the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Access the USB Storage Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61

USB Storage Device Network and Access Settings. . . . . . . . . . . . . . . . . . 62

Available Network Folders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Specify Approved USB Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Connect to the USB Drive from a Remote Computer. . . . . . . . . . . . . . . . . 67

Safely Remove a USB Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Chapter 6 Security

Keyword Blocking of HTTP Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70

Block Services (Port Filtering) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Schedule Blocking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73

Security Event Email Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Chapter 7 Administration

Upgrade the Router Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

View Router Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Router Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Internet Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Wireless Settings (2.4 GHz and 5 GHz). . . . . . . . . . . . . . . . . . . . . . . . . 81

Guest Network (2.4 GHz and 5 GHz). . . . . . . . . . . . . . . . . . . . . . . . . . . 82

View Logs of Web Access or Attempted Web Access . . . . . . . . . . . . . . . .82

Manage the Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Back Up Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Restore Configuration Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Erase the Current Configuration Settings. . . . . . . . . . . . . . . . . . . . . . . .85

4

N600 Wireless Dual Band Router JNDR3000

Change the Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .85

Password Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

Chapter 8 Advanced Settings

Advanced Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Control the Wireless Radio. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Set Up a Wireless Schedule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90

View or Change WPS Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91

Set Up a Wireless Access List by MAC Address . . . . . . . . . . . . . . . . . .92

Wireless Repeating Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

Wireless Repeating Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

Set Up the Base Station . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Set Up a Repeater Unit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97

Port Forwarding and Port Triggering . . . . . . . . . . . . . . . . . . . . . . . . . . . . .99

Remote Computer Access Basics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99

Port Triggering to Open Incoming Ports . . . . . . . . . . . . . . . . . . . . . . . . 101

Port Forwarding to Permit External Host Communications . . . . . . . . .102

How Port Forwarding Differs from Port Triggering . . . . . . . . . . . . . . . .103

Set Up Port Forwarding to Local Servers . . . . . . . . . . . . . . . . . . . . . . . . .103

Add a Custom Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104

Edit or Delete a Port Forwarding Entry. . . . . . . . . . . . . . . . . . . . . . . . .105

Application Example: Making a Local Web Server Public . . . . . . . . . . 106

Set Up Port Triggering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106

Dynamic DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108

Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109

Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

Universal Plug and Play . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113

Traffic Meter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

Chapter 9 Troubleshooting

Quick Tips. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

Sequence to Restart Your Network . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

Check Ethernet Cable Connections . . . . . . . . . . . . . . . . . . . . . . . . . . .118

Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118

Network Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118

Troubleshoot with the LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

Power/Test LED Is Off or Blinking . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Power/Test LED Stays Amber . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

LEDs Never Turn Off . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Internet or Ethernet Port LEDs Are Off. . . . . . . . . . . . . . . . . . . . . . . . .120

Wireless LEDs Are Off . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Push 'N' Connect (WPS) Button Blinks Green . . . . . . . . . . . . . . . . . . .120

Cannot Log In to the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Cannot Access the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121

Troubleshoot PPPoE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

Troubleshoot Internet Browsing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

Changes Not Saved . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

5

N600 Wireless Dual Band Router JNDR3000

Incorrect Date or Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

Wireless Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

Wireless Signal Strength . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

Restore the Factory Settings and Password . . . . . . . . . . . . . . . . . . . . . . 125

Troubleshoot Your Network Using the Ping Utility . . . . . . . . . . . . . . . . . .125

Test the LAN Path to Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . .125

Test the Path from Your Computer to a Remote Device . . . . . . . . . . . 126

Appendix A Supplemental Information

Factory Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128

Technical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130

Appendix B Notification of Compliance

6

1. Hardware Setup

Getting to know your router

1

The N600 Wireless Dual Band Router JNDR3000 provides you with an easy and secure way to

set up a wireless home network with fast access to the Internet over a high-speed digital
subscriber line (DSL) or from a cable broadband service provider. It is compatible with all major
DSL Internet service providers and cable broadband service providers, lets you block unsafe
Internet content and applications, and protects the devices (computers, gaming consoles, and so
on) that you connect to your home network.

Note: For more information about the topics covered in this manual, visit

the support website at http://support.netgear.com.

If you have not already set up your new router using the installation guide that comes in the box,
this chapter walks you through the hardware setup.
explains how to set up your Internet connection.

This chapter contains the following sections:

Chapter 3, NETGEAR genie Basic Settings,

• Unpack Your Router

• Hardware Features

• Position Your Router

• Cable Your Router

7

N600 Wireless Dual Band Router JNDR3000

Unpack Your Router

Open the box and remove the router, cables, and installation guide.

Router stand
two pieces)

N600 wireless router

Ethernet cable

Figure 1. Package contents

Your box contains the following items:

• N600 Wireless Dual Band Router JNDR3000

• Router stand (two pieces)

• AC power adapter (plug varies by region)

• Category 5 (Cat 5) Ethernet cable

• Installation guide with cabling and setup instructions

If any parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the
carton and original packing materials, in case you need to return the product for repair

Power adapter

.

Prepare the Router

To ensure proper heat dissipation and for router stability, it is important that you connect the
stand and place your router in an upright position.

Hardware Setup

8

N600 Wireless Dual Band Router JNDR3000

 To prepare your router for installation:

1. Carefully peel off the protective film covering the top and sides of your router.

Hardware Setup

9

N600 Wireless Dual Band Router JNDR3000

2. Set up your router by inserting the tabs of the stand (supplied with your router) into the slots

on the bottom of your router as shown.

3. Place your router in an area suitable for installation (near an AC power outlet and accessible

to the Ethernet cables for your wired computers).

Hardware Setup

10

N600 Wireless Dual Band Router JNDR3000

Hardware Features

Before you cable your router, take a moment to become familiar with the label and the front
and back panels. Pay particular attention to the LEDs on the front panel.

Front and Top Panel

The router front panel has the status LEDs and the top panel has the buttons shown in the
following figures.

WPS button

Wireless On/Off
button

WPS LED

USB LED

LAN Ports 1–4 LEDs

Internet LED

5 GHz Wireless LED

2.4 GHz Wireless LED

Power/Test LED

Top panel

Figure 2. Front and top panel LEDs

Hardware Setup

11

Table 1. Front panel LED descriptions

LED Description

N600 Wireless Dual Band Router JNDR3000

WPS

USB

LAN Ports
1–4

Internet

5 GHz

2.4 GHz

• Solid green. Wireless security is enabled.

• Blinking green.

• Off. No WPS connection exists.

• Solid green. The USB drive is properly mounted.

• Off. No USB drive is detected.

• Solid green. The LAN port has detected a 1,000 Mbps link with an attached device.

• Solid amber.

• Off. No link is detected on this port.

• Solid amber. The IP address was not acquired.

• Solid green.

• Off. No Ethernet cable is connected between the router and the modem.

• Solid blue. The wireless radio is operating.

• Off. The

• Solid green. The wireless radio is operating.

• Off. The

wireless radio is off.

wireless radio is off.

The router is using WPS to add a wireless device to the network.

The USB drive is missing or not mounted correctly.

The LAN port has detected a 10 Mbps link with an attached device.

An IP address was received; the router isready to transmit data.

Power • Solid amber. The unit is starting after being powered on.

• Solid green.

• Blinking amber. A

• Blinking green. The

• Off. Power is not supplied to the router

The power is on and the router is ready.

firmware update is in progress.

firmware is corrupt.

.

Hardware Setup

12

N600 Wireless Dual Band Router JNDR3000

Back Panel

The back panel has the button and port connections shown in the following figure.

USB 2.0 port

Restore Factory Settings button. Press and hold this button for
about five seconds to reset the router to its factory default
settings.

Four local area networks (LAN) 10/100 Mbps Ethernet
ports for connecting the router to your local computers.

Internet/Wide Area Network (WAN) Ethernet port for connecting
the router to a cable or DSL modem.

AC power adapter outlet for connecting the power adapter.

Power On/Off button

Figure 3. Back panel connections and buttons

For a list of the default settings, see Factory Settings on page 128.

Hardware Setup

13

N600 Wireless Dual Band Router JNDR3000

Label

The label on the router shows the WPS PIN, login information, MAC address, and serial
number.

Position Your Router

The router lets you access your network from anywhere within the operating range of your
wireless network. However, the operating distance or range of your wireless connection can
vary significantly depending on the physical placement of your router. For example, the
thickness and number of walls the wireless signal passes through can limit the range. For
best results, place your router:

• Near the center of the area where your computers and other devices operate and

preferably within line of sight to your wireless devices.

• So it is accessible to an

• In an elevated location such as a high shelf, keeping the number of walls and ceilings

between the router and your other devices to a minimum.

• A

way from electrical devices that are potential sources of interference, such as ceiling

fans, home security systems, microwaves, computers, or the base of a cordless phone or

2.4 GHz or 5 GHz cordless phone.

• A

way from any large metal surfaces, such as a solid metal door or aluminum studs. Large
expanses of other materials such as glass, insulated walls, fish tanks, mirrors, brick, and
concrete can also affect your wireless signal.

When you use multiple access points, it is better if adjacent access points use different radio
frequency channels to reduce interference.
adjacent access points is 5 channels (for example, use Channels 1 and 6, or 6 and 11).

AC power outlet and near Ethernet cables for wired computers.

The recommended channel spacing between

Hardware Setup

14

N600 Wireless Dual Band Router JNDR3000

Cable Your Router

Refer to the installation guide that came in the router box for cabling information.

Hardware Setup

15

2. Getting Started with NETGEAR

genie

2

Connecting to the router

This chapter explains how to use NETGEAR genie to set up your router after you complete

cabling as described in the installation guide and in the previous chapter in this book.

This chapter contains the following sections:

• Router Setup Preparation

• Types of Logins and Access

• NETGEAR genie Setup

• Use NETGEAR genie after Installation

• Upgrade Router Firmware

• Router Dashboard (BASIC Home Screen)

• Join Your Wireless Network

• NETGEAR genie App and Mobile genie App

16

N600 Wireless Dual Band Router JNDR3000

Router Setup Preparation

You can set up your router with the NETGEAR genie automatically, or you can use the Genie
menus and screens to set up your router manually. However, before you start the setup
process, you need to have your ISP information on hand and make sure the laptops, PCs,
and other devices in the network have the settings described here.

Use Standard TCP/IP Properties for DHCP

If you set up your computer to use a static IP address, you need to change the settings so
that it uses Dynamic Host Configuration Protocol (DHCP).

Gather ISP Information

If you have DSL broadband service, you might need the following information to set up your
router and to check that your Internet configuration is correct. Your Internet service provider
(ISP) should have provided you with all of the information needed to connect to the Internet.
If you cannot locate this information, ask your ISP to provide it. When your Internet
connection is working, you no longer need to launch the ISP login program on your computer
to access the Internet. When you start an Internet application, your router automatically logs
you in.

• The ISP configuration information for your DSL account

• ISP login name and password

• Fixed or static IP address settings (special deployment by ISP)

Wireless Devices and Security Settings

Make sure that the wireless device or computer that you are using supports WPA or WPA2
wireless security, which is the wireless security supported by the router. See

Network on page 39 for information about the router’s preconfigured security settings.

Set Up a Guest

Types of Logins and Access

There are two separate types of logins that have different purposes. It is important that you
understand the difference so that you know which login to use when.

• Router login logs you in to the router interface from NETGEAR genie. See Use
NETGEAR genie after Installation on page 19 for details about this login.

• ISP login logs you in to your Internet service. Your service provider provided you with

this login information in a letter or some other way. If you cannot find this login
information, contact your service provider.

Getting Started with NETGEAR genie

17

N600 Wireless Dual Band Router JNDR3000

• Wireless network key or password. Your router is preset with a unique wireless

network name (SSID) and password for wireless access. This information is on the label
at the bottom of your router.

NETGEAR genie Setup

NETGEAR genie runs on any device with a web browser. It is the easiest way to set up the
router because it automates many of the steps and verifies that those steps have been
successfully completed. It takes about 15 minutes to complete.

 To use NETGEAR genie to set up your router:

1. T

urn on the router by pressing the On/Off button.

2. Make sure that your device is connected with an Ethernet cable to your router

3. Launch your Internet browser

• The first time you set up the Internet connection for your router

automatically goes to http://www.routerlogin.net, and the NETGEAR genie screen
displays.

.

, the browser

.

• If you already used the NETGEAR genie, type http://www.routerlogin.net in the

address field for your browser to display the NETGEAR genie screen. See Use

NETGEAR genie after Installation on page 19.

4. Follow the instructions on the screen to complete the NETGEAR genie setup. NETGEAR

genie guides you through connecting the router to the Internet.

If the browser cannot display the web page:

• Make sure that the computer is connected to one of the four LAN Ethernet ports, or

wirelessly to the router

• Make sure that the router is up and running. Its Wireless LEDs should light.

.

Getting Started with NETGEAR genie

18

N600 Wireless Dual Band Router JNDR3000

• Close and reopen the browser to make sure that the browser does not cache the

previous page.

• Browse to http://www

• If the computer is set to a static or fixed IP address (this is uncommon), change it to

obtain an IP address automatically from the router

If the router does not connect to the Internet:

1. Review your settings to be sure that you have selected the correct options and typed

everything correctly

2. Contact your ISP to verify that you have the correct configuration information.

3. Read Chapter 9, Troubleshooting. If problems persist, register your NETGEAR product and

contact NETGEAR technical support.

.routerlogin.net.

.

.

Use NETGEAR genie after Installation

When you first set up your router, NETGEAR genie automatically starts when you launch an
Internet browser on a computer that is connected to the router. You can use NETGEAR genie
again to view or change settings for the router.

 To use NETGEAR genie again after installation:

1. Launch your browser from a computer or wireless device that is connected to the router

2. T

ype http://www.routerlogin.net or http://www.routerlogin.com.

The login screen displays:

3. Enter admin for the router user name and password for the router password, both in

lowercase letters.

Note: The router user name and password are different from the user name

and password for logging in to your Internet connection. See Types of Logins

and Access on page 17 for more information.

.

Getting Started with NETGEAR genie

19

N600 Wireless Dual Band Router JNDR3000

Upgrade Router Firmware

When you set up your router and are connected to the Internet, the router automatically
checks for you to see if newer firmware is available. If it is, a message is displayed on the top
of the screen. For more information about upgrading firmware, see Upgrade the Router

Firmware on page 77.

 To upgrade the firmware:

1. Click the message that tells you new firmware is available.

During the firmware upgrade, you cannot access the Internet.

2. Click the Ye

s button to upgrade the router with the latest firmware.

CAUTION:

Do not try to go online, turn off the router, shut down the computer, or do
anything else to the router until the router finishes restarting and the Power
LED has stopped blinking for several seconds.

Router Dashboard (BASIC Home Screen)

The router BASIC Home screen has a dashboard that lets you see the status of your Internet
connection and network at a glance. You can click any of the six sections of the dashboard to
view more detailed information. The left column has the menus. At the top is an ADVANCED
tab that is used to access more menus and screens.

Language

Menus
(Click the
ADVANCED
ab to view
more)

Dashboard
(Click to
view
details)

Figure 4. Router BASIC Home screen with dashboard, language, and online help

Getting Started with NETGEAR genie

20

N600 Wireless Dual Band Router JNDR3000

• Home. This dashboard screen displays when you log in to the router.

• Internet. Set, update, and check the ISP settings of your router.

• Wireless. View or change the wireless settings for your router.

• Attached Devices. View the devices connected to your network.

• Parental Controls. Download and set up parental controls to prevent objectionable

content from reaching your computers.

• ReadySHARE. If you connected a USB storage device to the router it is displayed here.

• Guest Network. Set up a guest network to allow visitors to use your router’s Internet

connection.

• ADVANCED tab. Set the router up for unique situations such as when remote access by

IP or by domain name from the Internet is needed. See
Using this tab requires a solid understanding of networking concepts.

• Help & Support. Visit to the NETGEAR support site for information, help, and product

documentation. These links work once you have an Internet connection.

Chapter 8, Advanced Settings.

Join Your Wireless Network

You can use the manual or the WPS method to join your wireless network. For information
about how to set up a guest network, see

Manual Method

 To connect manually:

1. Open the software that manages your wireless connections on the wireless device

(laptop computer, gaming device, iPhone) that you want to connect to your router.
The software scans for all wireless networks in your area.

2. Look for your network and select it.

If you did not change the name of your network during the setup process, look for the
default WiFi network name (SSID) and select it. The default SSID is on the product label
on the router.

3. Enter the router password and click Connect.

The default router password is on the product label on the bottom of the router.

Set Up a Guest Network on page 39.

Wi-Fi Protected Setup Method

Wi-Fi Protected Setup (WPS) lets you connect to a secure WiFi network without typing its
password. Instead, press a button or enter a PIN. NETGEAR calls WPS Push 'N' Connect.

Some older WiFi equipment is not compatible with WPS. WPS works only with WPA2 or WPA
wireless security.

Getting Started with NETGEAR genie

21

N600 Wireless Dual Band Router JNDR3000

 To use WPS to join the wireless network:

1. Press the WPS button on the router until the LED status changes .

2. Within two minutes, press the WPS button on your wireless device, or follow the WPS

instructions that came with the device.
The device is now connected to your router.

NETGEAR genie App and Mobile genie App

The genie app is the easy dashboard for managing, monitoring, and repairing your home
network. For information about the genie apps, see the NETGEAR genie App User Manual.

Retrieve wireless password

About genie

Language

Menu

Dashboard
(Click to
view
details)

Support

Figure 5. genie app dashboard

The genie app can help you with the following:

• Automatically repair common wireless network problems.

• Have easy access to router features like Live Parental Controls, guest access, Internet

traf

fic meter, speed test, and more.

Getting Started with NETGEAR genie

22

N600 Wireless Dual Band Router JNDR3000

The genie mobile app works on your iPhone, iPad, or Android phone:

Phone status

Log in to the router

Search NETGEAR
support

Figure 6. genie mobile app home screen

Information about
genie mobile app
and the connected
router

Getting Started with NETGEAR genie

23

3. NETGEAR genie Basic Settings

Your Internet connection and network

This chapter contains the following sections:

• Internet Setup

• Basic Wireless Setup

• View Attached Devices

• Parental Controls

• ReadySHARE USB Storage

• Set Up a Guest Network

For more information about the ReadySHARE feature on the BASIC Home tab, see Chapter

5, USB Storage.

3

24

N600 Wireless Dual Band Router JNDR3000

Internet Setup

The Internet Setup screen is where you view or change ISP information.

Note: You can use the Setup Wizard to detect the Internet connection and

automatically set up the modem router. For more information, see

WAN Setup on page 44.

 To view or change the basic Internet setup:

1. From the BASIC Home screen, select Internet.

The following screen displays:

The fields that display in the Internet Setup screen depend on whether your Internet
connection requires a login.

2. Select the Yes or No radio button:

s. Select the encapsulation method and enter the login name.

• Ye

For information about the fields that appear on the screen, see Internet Setup If

Your ISP Requires a Login on page 26.

• No. Enter the account and domain names, only if needed.

NETGEAR genie Basic Settings

25

N600 Wireless Dual Band Router JNDR3000

For information about the fields that appear on the screen, see Internet Setup If

Your ISP Does Not Require a Login on page 28.

3. Enter the settings for the IP address and DNS server.

The default settings usually work fine. If you have problems with your connection, check
the ISP settings.

4. Click the Apply button to save your settings.

5. Click the T

est button to test your Internet connection.

If the NETGEAR website does not display within 1 minute, see Chapter 9,

Troubleshooting.

The descriptions in the following sections explain all of the possible fields in the Internet
Setup screen.

The fields that display in this screen depend on whether an ISP login is

required.

Does Your ISP Require a Login? Select either Ye

s or No.

Internet Setup If Your ISP Requires a Login

If your ISP requires a login and you selected Yes, the following screen displays:

Figure 7. ISP requires a login screen

These fields display when your ISP requires a login:

NETGEAR genie Basic Settings

26

N600 Wireless Dual Band Router JNDR3000

• Internet Service Provider. ISP types. The choices are PPPoE, PPTP, and L2TP.

• Login. The login name provided by your ISP. The login name is usually an email address.

• Password. The password that you use to log in to your ISP.

• Service Name (If Required). If your ISP provided a service name, enter it here.

Otherwise, you can leave this field blank.

• Connection Mode. The choices are Always On, Dial on Demand, or Manually Connect.

This specifies when the router should establish the PPPoE connection. The default
connection mode is Always On to provide a steady connection. The router never
disconnects the connection, and in case the connection is broken (such as if the modem
is turned off), the router establishes the connection right after the PPPoE connection is
available.

• Idle Timeout (In minutes). If you want to change the login time-out, enter a new value in

minutes. This value determines how long the router keeps the Internet connection active
after there is no Internet activity from the LAN. Entering a value of 0 (zero) means never
log out.

Internet IP Address.

• Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address. Your ISP

automatically assigns these addresses.

• Use Static IP Address. Enter the IP address, IP subnet mask, and the gateway IP

address that your ISP assigned. The gateway is the ISP router to which your router
connects.

Domain Name Server (DNS) Address. The DNS server is used to look up site addresses
based on their names.

• Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP

automatically assigns this address.

• Use These DNS Servers. If you know that your ISP does not automatically transmit DNS

addresses to the router during login, select this option, and enter the IP address of your
ISP primary DNS server. If a secondary DNS server address is available, enter it also.

Router MAC Address. The Ethernet MAC address used by the router on the Internet port.
Some ISPs register the MAC address of the network interface card in your computer when
your account is first opened. They accept traffic only from the MAC address of that computer.
This feature allows your router to use your computer’s MAC address (this is also called
cloning).

• Use Default Address. Use the default MAC address.

• Use Computer MAC Address. The router captures and uses the MAC address of the

computer that you are now using. You have to use the one computer allowed by the ISP.

• Use This MAC Address. Enter the MAC address that you want to use.

NETGEAR genie Basic Settings

27

N600 Wireless Dual Band Router JNDR3000

Internet Setup If Your ISP Does Not Require a Login

If your ISP does not require a login and you selected No, the following screen displays:

Figure 8. ISP does not require a login screen

These fields display when no login is required:

• Account Name (If required). Enter the account name provided by your ISP

. This might

also be called the host name.

• Domain Name (If required). Enter the domain name provided by your ISP

.

Internet IP Address.

• Get Dynamically from ISP.

Your ISP uses DHCP to assign your IP address. Your ISP

automatically assigns these addresses.

• Use Static IP

Address. Enter the IP address, IP subnet mask, and the gateway IP

address that your ISP assigned. The gateway is the ISP router to which your router
connects.

Domain Name Server (DNS) Address.

The DNS server is used to look up site addresses

based on their names.

• Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP

automatically assigns this address.

• Use These DNS Servers. If you know that your ISP does not automatically transmit DNS

addresses to the router during login, select this option, and enter the IP address of your
ISP primary DNS server

. If a secondary DNS server address is available, enter it also.

NETGEAR genie Basic Settings

28

N600 Wireless Dual Band Router JNDR3000

Router MAC Address. The Ethernet MAC address used by the router on the Internet port.

Some ISPs register the MAC address of the network interface card in your computer when
your account is first opened. They accept traffic only from the MAC address of that computer.
This feature allows your router to use your computer’s MAC address (this is also called
cloning).

• Use Default Address. Use the default MAC address.

• Use Computer MAC Address. The router captures and uses the MAC address of the

computer that you are now using. You have to use the one computer allowed by the ISP.

• Use This MAC Address. Enter the MAC address that you want to use.

Basic Wireless Setup

The Wireless Setup screen lets you view or configure the wireless network setup.

The router comes with preset security. This means that the WiFi network name (SSID),
network key (password), and security option (encryption protocol) are preset in the factory.
You can find the preset SSID and password on the product label.

Note: The preset SSID and password are uniquely generated for every

device to protect and maximize your wireless security.

NETGEAR recommends that you do not change your preset security settings. If you do
decide to change your preset security settings, make a note of the new settings and store it in
a safe place where you can easily find it.

If you use a wireless computer to change the SSID or other wireless security settings, you
are disconnected when you click the Apply button. To avoid this problem, use a computer
with a wired connection to access the router.

 To view or change basic wireless settings:

1. Select BASIC > Wireless.

NETGEAR genie Basic Settings

29

N600 Wireless Dual Band Router JNDR3000

The Wireless Setup screen displays:

The screen sections, settings, and procedures are explained in the following sections.

2. Make any changes that are needed.

3. Click the Apply button.

Your settings are saved.

4. Set up and test your wireless devices and computers to make sure that they can connect

wirelessly
If they do not, check the following:

• Is your wireless device or computer connected to your network or another wireless

• Does your wireless device or computer show up on the

• If you are not sure what the SSID or password is, look on the label on your router

.

network in your area? Some wireless devices automatically connect to the first open
network (without wireless security) that they discover

does, it is connected to the network.

.

Attached Devices screen? If it

.

Wireless Setup Screen Fields

The following settings are available on the Wireless Setup screen.

NETGEAR genie Basic Settings

30

N600 Wireless Dual Band Router JNDR3000

Region

The region is the location where the router is used. Select from the countries in the list. In the
United States, the region is fixed to United States and is not changeable.

Wireless Network (2.4GHz g/g/n)

Note: These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n

bands.

• Enable Wireless Isolation. If this check box is selected, wireless clients (computers or

wireless devices) that join the network can use the Internet, but cannot access each other
or access Ethernet devices on the network.

• Enable SSID Broadcast. This feature allows the router to broadcast its SSID so wireless

stations can see this wireless name (SSID) in their scanned network lists. This check box
is selected by default. To turn off the SSID broadcast, clear the check box, and click the

Apply button.

• Name (SSID). The SSID is also known as the wireless network name. Enter a

32-character (maximum) name in this field. This field is case-sensitive. The default SSID
is randomly generated, and NETGEAR strongly recommends that you do not change

this.

• Channel. This setting is the wireless channel used by the gateway. Enter a value from 1

through 13. (For products in the North America market, only Channels 1 through 11 can
be operated.) Do not change the channel unless you experience interference (shown by
lost connections or slow data transfers). If this happens, experiment with different
channels to see which is the best.

• Mode. Up to 145 Mbps is the default and allows 802.11n and 802.11g wireless devices to

join the network. g & b supports up to 54 Mbps. The 300 Mbps setting allows 802.11n
devices to connect at this speed.

Security Options Settings

Note: These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n

bands.

The Security Options section of the Wireless Setup screen lets you change the security
option and password. NETGEAR recommends that you not change the security option

or password, but if you want to change these settings, the following section explains how.
Do not disable security.

NETGEAR genie Basic Settings

31

N600 Wireless Dual Band Router JNDR3000

A security option is the type of security protocol applied to your wireless network. The
security protocol in force encrypts data transmissions and ensures that only trusted devices
receive authorization to connect to your network.

This section presents an overview of the security options and provides guidance on when to
use which option. Although it is possible to set up a guest network without wireless security,
NETGEAR does not recommend it.

WEP uses an old encryption method and can be easily decoded with today’s powerful
computers. Use this mode only when you have a very old legacy wireless client that does not
support WPA-PSK. The Wi-Fi Alliance highly recommends against using WEP and plans to
make it obsolete. If you do decide to use WEP, see

Change the WEP Security Option on

page 32 for the procedure.

Wi-Fi Protected Access (WPA) encryption is built into all hardware that has the Wi-Fi-certified
seal. This seal means that the product is authorized by the Wi-Fi Alliance
(http://www.wi-fi.org/) because it complies with the worldwide single standard for high-speed
wireless local area networking.

WPA-PSK uses a password to perform authentication and generate the initial data encryption
keys. Then it dynamically varies the encryption key. WPA-PSK uses Temporal Key Integrity
Protocol (TKIP) data encryption, implements most of the IEEE 802.11i standard, and is
designed to work with all wireless network interface cards, but not all wireless access points.
It is superseded by WPA2-PSK.

WPA2-PSK is stronger than WPA. It is advertised to be theoretically indecipherable due to
the greater degree of randomness in encryption keys that it generates. WPA2-PSK gets
higher speed because it is implemented through hardware, while WPA-PSK is implemented
through software. WPA2-PSK uses a password to authenticate and generate the initial data
encryption keys. Then it dynamically varies the encryption key.

WPS-PSK + WPA2-PSK mixed mode can provide broader support for all wireless clients.
WPA2-PSK clients get higher speed and security, and WPA-PSK clients get decent speed
and security. The product documentation for your wireless adapter and WPA client software
should have instructions about configuring their WPA settings.

Change the WEP Security Option

WEP is a legacy security setting. NETGEAR recommends that you use WPA2 or WPA
security unless you have legacy wireless equipment that supports only WEP. WEP encryption
is available only when the Mode setting is Up to 54 Mbps.

 To change the WEP settings:

1. Select BASIC > Wireless.

The Wireless Setup screen displays.

NETGEAR genie Basic Settings

32

N600 Wireless Dual Band Router JNDR3000

2. In the Security Options section, select WEP:

3. Select the authentication type.

The default is Automatic. Other choices are Open System (any client can authenticate
itself to the network) and Shared Key (a passphrase and a four-way challenge is needed
for authentication).

4. Select the encryption strength setting, either 64 bit or 128 bit.

5. Enter the four data encryption keys either manually or automatically

These values have to be identical on all computers and access points in your network.

• Automatic. Enter a word or group of printable characters in the Passphrase field, and

click Generate.

• Manual.

strength setting:

- For 64-bit WEP

- For 128-bit WEP

6. Select the radio button for the key you want to make active.

Make sure that you understand how the WEP key settings are configured in your wireless
adapter
key entry, which has to match the default key you set in the router.

7. Click the Apply button.

The number of hexadecimal digits that you enter depends on the encryption

A–F).

A–F).

. Wireless adapter configuration utilities such as the one in Windows XP allow one

The four key fields are automatically populated with key values.

, enter 10 hexadecimal digits (any combination of 0–9, a–f, or

, enter 26 hexadecimal digits (any combination of 0–9, a–f, or

.

Change WPA Security Option and Password

Note: These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n

bands.

NETGEAR genie Basic Settings

33

N600 Wireless Dual Band Router JNDR3000

You can change the security settings for your modem router. If you do so, then write down the
new settings and store them in a secure place for future reference.

 To change the WPA settings:

1. Select BASIC > W

1. Under Security Options, select the WP

2. In the password field that displays when you select a WPA security option, enter the network

key (password) that you want to use.
It is a text string from 8 to 63 characters.

3. W

rite down the new password and keep it in a secure place for future reference.

4. Click the Apply button.

Your changes are saved.

ireless settings:

A option you want.

View Attached Devices

You can view a list of all computers or devices that are currently connected to your network
here.

 To go to the Attached Devices screen:

1. From the BASIC Home screen, select Attached Devices.

NETGEAR genie Basic Settings

34

N600 Wireless Dual Band Router JNDR3000

The following screen displays:

Wired devices are connected to the router with Ethernet cables. Wireless devices have
joined the wireless network. The following information is displayed:

• # (number). The order in which the device joined the network.

• IP Address.

network. This number can change if a device is disconnected and rejoins the network.

• MAC Address.

address is typically shown on the product label.

• Device Name. If the device name is known, it is shown here.

2. Click the Refresh button to update this screen.

The IP address that the router assigned to this device when it joined the

The unique MAC address for each device does not change. The MAC

Parental Controls

The first time you select Parental Controls from the BASIC Home screen, your browser goes
to the Live Parental Controls website. You can learn more about Live Parental Controls or
download the application.

 To set up Live Parental Controls:

1. Select Parental Controls on the Home (dashboard) screen:

NETGEAR genie Basic Settings

35

N600 Wireless Dual Band Router JNDR3000

The Live Parental Controls screen displays:

2. Click either the Windows Users or Mac Users button.

3. Follow the onscreen instructions to download and install the NETGEAR Live Parental

Controls Management utility

.

After installation, Live Parental Controls automatically starts.

4. Click the Next button, read the note, and click the Next button again to proceed.

You are prompted to log in or create a free account.

NETGEAR genie Basic Settings

36

N600 Wireless Dual Band Router JNDR3000

5. Select the radio button that applies to you and click the Next button.

• If you already have an OpenDNS account, leave the Ye

s radio button selected.

• If you do not have an OpenDNS account, select the No radio button.

After you log on or create your account, the filtering level screen displays:

6. Select the radio button for the filtering level that you want and click the Next button.

7. Click the Take me to the status screen button.

Parental controls are now set up for the router. The dashboard shows Parental Controls as
enabled.

NETGEAR genie Basic Settings

37

N600 Wireless Dual Band Router JNDR3000

ReadySHARE USB Storage

You can view information about a USB storage device that is connected to the router’s USB
port here. From the BASIC Home screen, select ReadySHARE to display the USB Storage
(Basic Settings) screen:

This screen displays the following:

• Network/Device Name.

router. The default is \\readyshare.

• A

vailable Network Folders. The folders on the USB device.

- Share Name. If only one device is connected, the default share name is

USB_Storage.
of your web browser. If Not Shared is shown, the default share was deleted and no
other share for the root folder exists. Click the link to change this setting.

- Read Access

network folder: All – no password (the default) allows all users to access the network
folder. The user name (account name) for All – no password is guest. The password
for admin is the same one that you use to log in to the router. By default, it is
password.

- Folder Name. Full path used by the network folder

- V

olume Name. Volume name from the storage device (either USB drive or HDD).

- T

otal Space and Free Space. Shows the current utilization of the storage device.

• Edit. Click the Edit button to edit the

• Safely Remove a USB Device. Click to safely remove the USB device attached to your

router

.

and Write Access. Shows the permissions and access controls on the

The name used to access the USB device connected to the

You can click the name shown, or you can type it in the address field

.

Available Network Folders settings.

NETGEAR genie Basic Settings

38

N600 Wireless Dual Band Router JNDR3000

You can click the Refresh button to update this screen.

For more information about USB storage, see Chapter 5, USB Storage.

Set Up a Guest Network

Adding a guest network allows visitors at your home to use the Internet without using your
wireless security key. You can add a guest network to each wireless network: 2.4 GHz b/g/n
and 5.0 GHz a/n.

 To set up a guest network:

1. Select BASIC > Guest Network to display the following screen:

2. Select any of the following wireless settings:

Note: These settings apply separately to the 2.4 GHz b/g/n and 5 GHz a/n

bands.

Scroll to
view more
settings

• Enable Guest Network. When this check box is selected, the guest network is

enabled, and guests can connect to your network using the SSID of this profile.

• Enable Wireless Isolation. If this check box is selected, wireless clients (computers

or wireless devices) that join the network can use the Internet, but cannot access
each other or access Ethernet devices on the network.

• Enable SSID Broadcast. If this check box is selected, the wireless access point

broadcasts its name (SSID) to all wireless stations. Stations with no SSID can adopt
the correct SSID for connections to this access point.

NETGEAR genie Basic Settings

39

N600 Wireless Dual Band Router JNDR3000

• Allow guest to access My Local Network. If this check box is selected, any user

who connects to this SSID has access to your local network, not just Internet access.

3. Give the guest network a name.

The guest network name is case-sensitive and can be up to 32 characters. You then

manually configure the wireless devices in your network to use the guest network name in
addition to the main nonguest SSID.

4. Select a security option from the list.

The security options are described in Security Options Settings on page 31.

5. Click the Apply button.

Your settings are saved.

NETGEAR genie Basic Settings

40

4. NETGEAR genie ADVANCED Home

Specifying custom settings

This chapter contains the following sections:

• NETGEAR genie ADVANCED Home Screen

• Internet Connection Setup Wizard

• WPS Wizard

• WAN Setup

• LAN Setup

• Quality of Service (QoS) Setup

Some selections on the ADVANCED Home screen are described in separate chapters:

• Guest Network. See Chapter 3, NETGEAR genie Basic Settings.

• USB Storage. See Chapter 5, USB Storage.

• Security. See Chapter 6, Security.

• Administration. See Chapter 7, Administration.

• Advanced Setup. See Chapter 8, Advanced Settings.

4

41

N600 Wireless Dual Band Router JNDR3000

NETGEAR genie ADVANCED Home Screen

The genie ADVANCED Home dashboard presents status information. The content is the
same as what is on the Router Status screen available from the Administration menu. For
more information, see View Router Status on page 78.

Figure 9. NETGEAR genie ADVANCED home screen

Internet Connection Setup Wizard

You can use the Setup Wizard to detect your Internet settings and automatically set up your
router. The Setup Wizard is not the same as the genie screens that display the first time you
connect to your router to set it up.

 To use the Setup Wizard:

1. Select ADV

2. Select the Yes button.

ANCED > Setup Wizard.

NETGEAR genie ADVANCED Home

42

N600 Wireless Dual Band Router JNDR3000

If you select the No button, you are taken to the Internet Setup screen (see Internet Setup
on page 25).

3. Select your location.

4. Click the Next button.

The Setup Wizard searches your Internet connection for servers and protocols to
determine your ISP configuration.

WPS Wizard

The WPS Wizard helps you add a WPS-capable client device (a wireless device or
computer) to your network. On the client device, you need to either press its WPS button or
locate its WPS PIN.

 To use the WPS Wizard:

1. Select ADV

The Add WPS Client screen displays.

2. Click the Next button.

ANCED > WPS Wizard.

NETGEAR genie ADVANCED Home

43

N600 Wireless Dual Band Router JNDR3000

The following screen lets you select the method for adding the WPS client (a wireless

device or computer).

3. Select the radio button for the setup method that you want to use.

• Push Button.

screen, or press the WPS button on the side of the router until the LED status
changes. Within two minutes, go to the wireless client and press its WPS button to
join the network without entering a password.

• PIN Number.

client security PIN, and click the Next button.

To use the push button method, either click the WPS button on this

To use the PIN method, select the PIN Number radio button, enter the

4. Within two minutes, go to the client device and use its WPS software to join the network

without entering a password.

The router attempts to add the WPS-capable device. The WPS LED

blinks green. When the router establishes a WPS connection, the LED is solid green, and
the router WPS screen displays a confirmation message.

on the router

WAN Setup

The WAN Setup screen lets you configure a DMZ (demilitarized zone) server, change the
maximum transmit unit (MTU) size, and enable the router to respond to a ping on the WAN
(Internet) port.

NETGEAR genie ADVANCED Home

44

N600 Wireless Dual Band Router JNDR3000

 To view or change the WAN settings:

1. Select ADVNCED > Setup > WAN Setup to view the following screen.

2. Specify the following settings:

• Disable Port Scan and DoS Protection. DoS protection protects your LAN against

denial of service attacks such as Syn flood, Smurf

Attack, Ping of Death, Teardrop
Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. This
should be disabled only in special circumstances.

• Default DMZ Server.

This feature is sometimes helpful when you are playing online
games or videoconferencing. Be careful when using this feature because it makes the
firewall security less effective. See the following section, Default DMZ Server, for
more details.

• Respond to Ping on Internet Port. If you want the router to respond to a ping from

the Internet, select this check box. Use this only as a diagnostic tool because it allows
your router to be discovered. Do not select this check box unless you have a specific
reason.

• Disable IGMP Proxying. IGMP proxying allows a computer on the local area network

(LAN) to receive the multicast traf

fic it is interested in from the Internet. If you do not

need this feature, you can select this check box to disable it.

• MTU Size (in bytes).

The normal MTU (maximum transmit unit) value for most
Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some
ISPs, you might need to reduce the MTU. This is rarely required, and should not be
done unless you are sure that it is necessary for your ISP connection. See Change

the MTU Size on page 46.

• NA

T Filtering. Network Address Translation (NAT) determines how the router

processes inbound traffic. Secured NAT provides a secured firewall to protect the
computers on the LAN from attacks from the Internet, but might prevent some Internet

NETGEAR genie ADVANCED Home

45

N600 Wireless Dual Band Router JNDR3000

games, point-to-point applications, or multimedia applications from functioning. Open
NAT provides a much less secured firewall, but allows almost all Internet applications
to function.

3. Click the Apply button.

Your changes are saved.

Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and
videoconferencing applications that are incompatible with Network Address Translation
(NAT). The router is programmed to recognize some of these applications and to work
correctly with them, but other applications might not function well. In some cases, one local
computer can run the application correctly if that computer’s IP address is entered as the
default DMZ server.

WARNING:

DMZ servers pose a security risk. A computer designated as the
default DMZ server loses much of the protection of the firewall and
is exposed to exploits from the Internet. If compromised, the DMZ
server computer can be used to attack other computers on your
network.

The router usually detect and discards incoming traffic from the Internet that is not a
response to one of your local computers or a service that you have configured in the Port
Forwarding/Port Triggering screen. Instead of discarding this traffic, you can forward it to one
computer on your network. This computer is called the default DMZ server.

 To set up a default DMZ server:

1. Select ADVANCED > Setup > WAN Setup.

2. Select the Default DMZ Server check box.

3. Type the IP address.

4. Click the Apply button.

Your changes take effect.

Change the MTU Size

The maximum transmission unit (MTU) is the largest data packet a network device transmits.
When one network device communicates across the Internet with another, the data packets
travel through many devices along the way. If any device in the data path has a lower MTU
setting than the other devices, the data packets have to be split or “fragmented” to
accommodate the device with the smallest MTU.

NETGEAR genie ADVANCED Home

46

N600 Wireless Dual Band Router JNDR3000

The best MTU setting for NETGEAR equipment is often just the default value, and changing
the value might fix one problem but cause another. Leave the MTU unchanged unless one of
these situations occurs:

ou have problems connecting to your ISP or other Internet service, and the technical

• Y

support of either the ISP or NETGEAR recommends changing the MTU setting. These
web-based applications might require an MTU change:

- A secure website that does not open, or displays only part of a web page

ahoo email

- Y

- MSN portal

- America Online’

• Y

ou use VPN and have severe performance problems.

• Y

ou used a program to optimize MTU for performance reasons, and now you have

s DSL service

connectivity or performance problems.

Note: An incorrect MTU setting can cause Internet communication

problems such as the inability to access certain websites, frames
within websites, secure login pages, or FTP or POP servers.

If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are
willing to experiment, you can gradually reduce the MTU from the maximum value of 1500
until the problem goes away
applications.

Table 2. Common MTU sizes

MTU Application

1500 The largest Ethernet packet size and the default value. This is the typical setting for

1492 Used in PPPoE environments.

1472 Maximum size to use for pinging. (Larger packets are fragmented.)

1468 Used in some DHCP environments.

1460 Usable by AOL if you do not have large email attachments, for example.

1436 Used in PPTP environments or with VPN.

1400 Maximum size for AOL DSL.

576 Typical value to connect to dial up ISPs.

 To change the MTU size:

non-PPPoE, non-VPN connections, and is the default value for NETGEAR routers,
adapters, and switches.

. The following table describes common MTU sizes and

1. Select ADV

ANCED > Setup > WAN Setup.

NETGEAR genie ADVANCED Home

47

N600 Wireless Dual Band Router JNDR3000

2. In the MTU Size field, enter a new size between 64 and 1500.

3. Click the Apply button.

Your changes are saved.

LAN Setup

The LAN Setup screen allows configuration of LAN IP services such as Dynamic Host
Configuration Protocol (DHCP) and Routing Information Protocol (RIP).

The router is shipped preconfigured to use private IP addresses on the LAN side and to act
as a DHCP server. The router’s default LAN IP configuration is:

• LAN IP address. 192.168.1.1

• Subnet mask. 255.255.255.0

These addresses are part of the designated private address range for use in private networks
and should be suitable for most applications. If your network requires a different IP
addressing scheme, you can make the changes in the LAN Setup screen.

Note: If you change the LAN IP address of the router while connected

through the browser, you will be disconnected. Open a new
connection to the new IP address and log in again.

 To change the LAN settings:

1. Select ADVANCED > Setup > LAN Setup

NETGEAR genie ADVANCED Home

48

N600 Wireless Dual Band Router JNDR3000

The following screen displays:

2. Enter the settings that you want to customize.

These settings are described in the following section, LAN Setup Screen Settings.

3. Click the Apply button.

Your changes are saved.

LAN Setup Screen Settings

The following settings are available on the LAN Setup screen.

LAN TCP/IP Setup

• IP Address. The LAN IP address of the router.

• IP Subnet Mask.

IP subnet mask allows a device to know which other addresses are local to it, and which
have to be reached through a gateway or router.

• RIP Direction. Router Information Protocol (RIP) allows a router to exchange routing

information with other routers.
RIP packets. Both is the default setting. With the Both or Out Only setting, the router
broadcasts its routing table periodically. With the Both or In Only setting, the router
incorporates the RIP information that it receives.

• RIP V

ersion. Controls the format and the broadcasting method of the RIP packets that

the router sends. It recognizes both formats when receiving. By default, the RIP function
is disabled.

The LAN subnet mask of the router. Combined with the IP address, the

This setting controls how the router sends and receives

NETGEAR genie ADVANCED Home

49

N600 Wireless Dual Band Router JNDR3000

- RIP-1 is universally supported. It is adequate for most networks, unless you have an

unusual network setup.

- RIP-2 carries more information. Both RIP-2B and RIP-2M send the routing data in

RIP-2 format. RIP-2B uses subnet broadcasting. RIP-2M uses multicasting.

Use Router as DHCP Server

This check box is selected so that the router functions as a Dynamic Host Configuration
Protocol (DHCP) server.

• Starting IP Address. Specify the start of the range for the pool of IP addresses in the

same subnet as the router.

• Ending IP Address. Specify the end of the range for the pool of IP addresses in the

same subnet as the router.

Address Reservation

When you specify a reserved IP address for a computer on the LAN, that computer receives
the same IP address each time it accesses the router’s DHCP server. Assign reserved IP
addresses to servers that require permanent IP settings. For more information, see

Address Reservation on page 51.

Set Up

Use the Router as a DHCP Server

By default, the router functions as a DHCP server, allowing it to assign IP, DNS server, and
default gateway addresses to all computers connected to the router’s LAN. The assigned
default gateway address is the LAN address of the router. The router assigns IP addresses to
the attached computers from a pool of addresses specified in this screen. Each pool address
is tested before it is assigned to avoid duplicate addresses on the LAN. For most
applications, the default DHCP and TCP/IP settings of the router are satisfactory.

You can specify the pool of IP addresses to be assigned by setting the starting IP address
and ending IP address. These addresses should be part of the same IP address subnet as
the router’s LAN IP address. Using the default addressing scheme, you should define a
range between 192.168.1.2 and 192.168.1.254, although you might want to save part of the
range for devices with fixed addresses.

The router delivers the following parameters to any LAN device that requests DHCP:

• An IP address from the range you have defined

• Subnet mask

• Gateway IP address (the router’s LAN IP address)

• DNS server (the router’s LAN IP address)

NETGEAR genie ADVANCED Home

50

N600 Wireless Dual Band Router JNDR3000

 To disable the DHCP server feature in the router:

1. Select ADVANCED > Setup > LAN Setup.

2. Clear the Use Router as DHCP Server check box.

3. Click the Apply button.

4. (Optional) If this service is disabled and no other DHCP server is available on your network,

set your computers’ IP addresses manually so they can access the router.

Set Up Address Reservation

When you specify a reserved IP address for a computer on the LAN, that computer always
receives the same IP address each time it accesses the router’s DHCP server. Reserved IP
addresses should be assigned to computers or servers that require permanent IP settings.

 To reserve an IP address:

1. Select ADVANCED > Setup > LAN Setup.

2. In the Address Reservation section of the screen, click the Add button.

3. In the IP Address field, type the IP address to assign to the computer or server.

Choose an IP address from the router’s LAN subnet, such as 192.168.1.x.

4. Type the MAC address of the computer or server.

Tip: If the computer is already on your network, you can copy its MAC

address from the Attached Devices screen and paste it here.

5. Click the Apply button.

The reserved address is entered into the table.

The reserved address is not assigned until the next time the computer contacts the router’s
DHCP server. Reboot the computer or access its IP configuration and force a DHCP release
and renew.

 To edit a reserved address entry.

1. Select ADVANCED > Setup > LAN Setup.

2. Select the radio button next to the reserved address you want to edit.

3. Click the Edit button.

 To delete a reserved address entry.

1. Select ADVANCED > Setup > LAN Setup.

2. Select the radio button next to the reserved address you want to delete.

3. Click the Delete button.

NETGEAR genie ADVANCED Home

51

N600 Wireless Dual Band Router JNDR3000

Quality of Service (QoS) Setup

QoS is an advanced feature that can be used to prioritize some types of traffic ahead of
others. The router can provide QoS prioritization over the wireless link and on the Internet
connection.

WMM QoS for Wireless Multimedia Applications

The router supports Wi-Fi Multimedia Quality of Service (WMM QoS) to prioritize wireless
voice and video traffic over the wireless link. WMM QoS provides prioritization of wireless
data packets from different applications based on four access categories: voice, video, best
effort, and background. For an application to receive the benefits of WMM QoS, both it and
the client running that application have to have WMM enabled. Legacy applications that do
not support WMM and applications that do not require QoS are assigned to the best effort
category, which receives a lower priority than voice and video. WMM QoS is enabled by
default.

 To disable WMM QoS:

1. Select ADV

The following screen displays:

ANCED > Setup > QoS.

2. Clear the Enable WMM (Wi-Fi multimedia) settings (2.4GHz b/g/n) and Enable WMM

(Wi-Fi multimedia) settings (5GHz a/n) check boxes.

NETGEAR genie ADVANCED Home

52

N600 Wireless Dual Band Router JNDR3000

3. Click the Apply button.

Set Up QoS for Internet Access

You can give prioritized Internet access to the following types of traffic:

• Specific applications

• A specific device connected to the router

• A specific device by MAC address

To specify prioritization of traffic, you have to create a policy for the type of traffic and add the
policy to the QoS Policy table in the QoS Setup screen. For convenience, the QoS Policy
table lists many common applications that can benefit from QoS handling.

QoS for Applications

 To create a QoS policy for applications:

1. Select ADV

ANCED > Setup > QoS Setup.

2. Select the Enable Internet QoS check box.

3. Select one of the following radio buttons:

• Uplink bandwidth Maximum. If you know the maximum uplink bandwidth, select this

radio button and fill in the Uplink bandwidth Maximum field.

NETGEAR genie ADVANCED Home

53

N600 Wireless Dual Band Router JNDR3000

• Automatically check Internet Uplink bandwidth. If you do not know the Internet

uplink bandwidth, select this radio button and click the Check button.

4. Select the QoS Rules radio button.

5. Select the QoS by Service radio button.

6. Select an application from the

Applications drop-down menu.

7. Select the Priority from the Priority drop-down menu.

Select the priority that this traffic should receive relative to other applications and traffic
when accessing the Internet.

The options are Low, Normal, High, and Highest.

8. Click the Add button.

9. Click the Apply button.

Fast Track

Fast Track allows you to prioritize traffic to devices that are currently connected to the router.

 To prioritize traffic using Fast Track:

1. Select ADV

ANCED > Setup > QoS Setup.

2. Select the Enable Internet QoS check box.

3. Select one of the following radio buttons:

• Uplink bandwidth Maximum. If you know the maximum uplink bandwidth, select this

radio button and fill in the Uplink bandwidth Maximum field.

• Automatically check Internet Uplink bandwidth. If you do not know the Internet

uplink bandwidth, select this radio button and click the Check button.

NETGEAR genie ADVANCED Home

54

N600 Wireless Dual Band Router JNDR3000

4. Select the Fast Track radio button.

5. Select the Turn on Fast Track check box.

6. If the device appears in the MAC Device List, select its radio button.

7. Select how much of your total bandwidth you want your router to reserve for your device

from the Trusted Device: bandwidth reserved drop-down menu.

8. Click the Apply button.

By default, the WPS button on your router enables you to connect WPS-capable client
devices to your network. However, you can change the function of the WPS button to function
as a Fast Track button.

Note: If you use the WPS button as a Fast Track button, you can still use

the NETGEAR genie to add a WPS-capable client to your network.
For more information, see WPS Wizard on page 43.

 To change the function of the WPS button:

1. Select ADVANCED > Setup > QoS Setup.

2. Select one of the following WPS/Fast Track Push Button Toggle radio buttons:

• WPS. By default, the WPS radio button is selected. If you want to use the WPS button

on the router as a WPS button, select the WPS radio button.

• Fast Track. If you want to use the WPS button on your router as a Fast Track button,

select the Fast Track radio button.

3. Click the Apply button.

QoS for a MAC Address

 To create a QoS policy for traffic from a specific MAC address:

1. Select ADVANCED > Setup > QoS Setup.

NETGEAR genie ADVANCED Home

55

N600 Wireless Dual Band Router JNDR3000

2. Select the Enable Internet QoS check box.

3. Select one of the following radio buttons:

• Uplink bandwidth Maximum. If you know the maximum uplink bandwidth, select this

radio button and fill in the Uplink bandwidth Maximum field.

• Automatically check Internet Uplink bandwidth. If you do not know the Internet

uplink bandwidth, select this radio button and click the Check button.

4. Select the QoS Rules radio button.

5. Select the QoS by Device radio button.

6. If the device to be prioritized appears in the MAC Device List, select its radio button.

The information from the MAC Device List populates the policy name, MAC Address, and
Device Name fields.

7. Select the priority from the Priority drop-down menu.

Select the priority that this device’s traffic should receive relative to other applications and
traf

fic when accessing the Internet.

The options are Low, Normal, High, and Highest.

8. Click the Add button.

9. Click the Apply button.

NETGEAR genie ADVANCED Home

56

N600 Wireless Dual Band Router JNDR3000

Your changes are saved.

Change the Priority of an Existing QoS Policy

 To edit a QoS policy:

1. Select ADV

ANCED > Setup > QoS Setup.

2. Select the QoS policy you want to edit from the QoS Rules list.

3. Click the Edit button.

The QoS - Priority Rules screen displays:

4. Select the priority from the Priority drop-down menu.

5. Click the Apply button.

Your changes are saved.

Delete an Existing QoS Policy

 To delete a QoS policy:

1. Select ADV

2. Select the QoS policy you want to delete from the QoS Rules list.

3. Click the Delete button.

4. (Optional) Click the Delete All button to delete all of the priority rules.

5. Click the Apply button.

Your changes are saved.

ANCED > Setup > QoS Setup.

NETGEAR genie ADVANCED Home

57

5. USB Storage

Accessing and configuring a USB storage

5

drive

This chapter describes how to access and configure a USB storage drive attached to your router.

Note that the USB port on the router can be used to connect only USB storage devices like flash
drives or hard drives. Do not connect computers, USB modems, printers, CD drives, or DVD
drives to the router USB port.

This chapter contains the following sections:

• USB Drive Requirements

• ReadySHARE Access

• File-Sharing Scenarios

• Access the USB Storage Device

• USB Storage Device Network and Access Settings

• Available Network Folders

• Specify Approved USB Devices

• Connect to the USB Drive from a Remote Computer

• Safely Remove a USB Drive

58

N600 Wireless Dual Band Router JNDR3000

USB Drive Requirements

The router works with 1.0 and 1.1 (USB Full Speed) and 2.0 (USB High Speed) standards.
The approximate USB bus speeds are shown in the following table. Actual bus speeds can
vary, depending on the CPU speed, memory, speed of the network, and other variables.

Table 3. USB drive speeds

Bus Speed per Second

USB 1.1 12 Mbits

USB 2.0 480 Mbits

The router should work with most USB-compliant external flash and hard drives. For the most
up-to-date list of USB drives supported by the router, visit:

http://kbserver.netgear.com/readyshare

The router supports both read and write for FAT16, FAT32, NTFS, and Linux file systems
(EXT2 and EXT3).

Note: Some USB external hard drives and flash drives require drivers to

be loaded into the Windows computer before the Windows computer
can access the USB device. Such USB devices do not work with the
router.

ReadySHARE Access

Once you have set up your router, you can connect any USB storage device and share the
contents with other users on your network.

You can access your USB device in any of the following ways:

• On Windows 7, Windows 8, Windows XP

select Start > Run, and enter \\readyshare in the dialog box. Click the OK button.

• On Windows 7, Windows 8, Windows XP

open Internet Explorer, or Safari, and enter \\readyshare in the address bar.

• On Mac OS X (version 10.2 or later), enter smb://readyshare in the address bar

• In My Network Places, enter \\readyshare in the address bar

For more information about ReadySHARE access for USB storage devices, visit:

, Windows Vista, and Windows 2000 systems,

, Windows Vista, and Windows 2000 systems,

.

.

http://www.netgear.com/readyshare.

USB Storage

59

N600 Wireless Dual Band Router JNDR3000

File-Sharing Scenarios

You can share files on the USB drive for a wide variety of business and recreational
purposes. The files can be any Windows, Mac, or Linux file type including text, Word,
PowerPoint, Excel, and MP3 files, pictures, and multimedia. USB drive applications include:

• Sharing multimedia, such as MP3 files, pictures, and so on, with friends and family who

are local or remote.

• Sharing resources on your network. You might want to store files in a central location so

that you do not need to power up a computer to perform local sharing. In addition, you
can share files between Mac, Linux, and Windows computers by using the USB drive as
a go-between across the systems.

• Sharing files such as Word documents, PowerPoint presentations, and text files with

remote users.

A few common uses are described in the following sections.

Share Photos

You can create your own central storage location for photos and multimedia. This eliminates
the need to log in to (and pay for) an external photo sharing site.

 To share files with your friends and family:

1. Insert your USB drive into the USB port on the router either directly or with a USB cable.

Computers on your local area network (LAN) can automatically access this USB drive
using a web browser or Microsoft Networking.

2. If you want to specify read-only access or to allow access from the Internet, see USB

Storage Device Network and Access Settings on page 62.

Store Files in a Central Location for Printing

This scenario is for a family that has one high-quality color printer directly attached to a
computer, but not shared on the local area network (LAN). This family does not have a print
server.

• A family member has photos on a Mac computer and wants to print them.

• The photo-capable color printer is directly attached to a Windows computer, but not

shared on the network.

• The Mac and Windows computers are not visible to each other on the network.

 To print photos from a Mac on the printer attached to a Windows computer:

1. On the Mac, access the USB drive by typing \\readyshare in the address field of a web

browser. Then copy the photos to the USB drive.

2. On the Windows computer, use a web browser or Microsoft Networking to copy the files

from the USB drive to the Windows computer.

USB Storage

60

N600 Wireless Dual Band Router JNDR3000

3. Print the files.

Share Large Files over the Internet

Sending files that are larger than 5 MB can pose a problem for many email systems. The
router allows you to share large files such as PowerPoint presentations or .zip files over the
Internet. FTP can be used to easily download shared files from the router.

Sharing files with a remote colleague involves the following considerations:

• There are two user accounts: admin and guest. The password for admin is the same one

that you use to access the router. By default, it is password. The guest user account has
no password.

• On the FTP site, the person receiving the files should use the guest user account and

enter any password (FTP requires that you type something in the password field).

• Be sure to select the FTP (via Internet) check box in the USB Storage (Advanced

Settings) screen. This option supports both downloading and uploading of files.

Note: You can enable the HTTP (via Internet) option on the USB Storage

(Advanced Settings) screen to share large files. This option supports
downloading files only.

Access the USB Storage Device

When you connect the USB device to the router USB port, it might take up to two minutes
before it is ready for sharing. By default, the USB storage device is available to all computers
on your local area network (LAN).

 To access your USB device:

1. Select BASIC > ReadySHARE.

USB Storage

61

N600 Wireless Dual Band Router JNDR3000

The USB Storage (Basic Settings) screen displays:

2. Click the network device name or the share name in your computer’s network folders list.

3. For SMB://readyshare, click the Connect button.

Note: If you log in to the router before you connected your USB device,

you might not see your USB device in the router screens until you
log out and then log back in again.

USB Storage Device Network and Access Settings

You can set up the device name, workgroups, and network folders for your USB device.

 To view or change the USB storage advanced settings:

1. Select USB Storage > Advanced Settings.

USB Storage

62

N600 Wireless Dual Band Router JNDR3000

The following screen displays:

2. Specify access to the USB storage device.

• Network/Device Name.

The default is readyshare. This is the name used to access

the USB device connected to the router.

• W

orkgroup. If you are using a Windows workgroup rather than a domain, the

workgroup name is displayed here. The name works only in an operating system that
supports NetBIOS, such as Microsoft Windows.

• Access Method.

The access methods are described here.

- Network Connection. Enabled by default, this connection allows all users on the

LAN to have access to the USB drive.

- HTTP. Enabled by default.

You can type

http://readyshare.routerlogin.net/shares to access the USB drive.

- HTTP (via internet). Disabled by default. If you select this check box, remote

users can type http://<public IP address>/shares (for example,
http://1.1.10.102/shares) or a URL domain name to access the USB drive over

the Internet.

This feature supports file uploading only.

- FTP. Disabled by default.

- FTP (via internet). Disabled by default. If you select this check box, remote users

can access the USB drive through FTP over the Internet.
both downloading and uploading of files.

3. Click the Apply button.

This feature supports

USB Storage

63

N600 Wireless Dual Band Router JNDR3000

Your changes are saved.

Available Network Folders

You can view the share name, the permissions and access controls on the network folder, the
folder name, volume name, total space and free space on your USB drive.

 To view network folder:

1. Select ADV

ACNED > USB Storage > Advanced Settings.

2. Scroll down to the Available Network Folder section of the screen.

• Share Name. If only one device is connected, the default share name is

USB_Storage.
of your web browser. If Not Shared is shown, the default share has been deleted and
no other share for the root folder exists. Click the link to change this setting.

• Read Access

network folder: All – no password (the default) allows all users to access the network
folder. The password for admin is the same one that you use to log in to the router.

• Folder Name. Full path used by the network folder

• V

olume Name. Volume name from the storage device (either USB drive or HDD).

• T

otal Space and Free Space. Shows the current utilization of the storage device.

You can click the name shown, or you can type it in the address field

and Write Access. Shows the permissions and access controls on the

.

USB Storage

64

N600 Wireless Dual Band Router JNDR3000

 To add a network folder

1. Select ADVANCED> USB Storage > Advanced Settings.

2. Click the Create Network Folder button.

If the Add a Network Folder screen does not display, your web browser might be blocking
pop-ups. If it is, change the browser settings to allow pop-ups.

3. In the Folder field, browse and select the folder.

4. Fill in the Share Name field.

5. In the Read

Access list and the Write Access list, select the settings that you want.

USB Storage

65

N600 Wireless Dual Band Router JNDR3000

The user name (account name) for All – no password is guest. The password for admin is

the same one that is used to log in to the router. By default, it is password.

6. Click the Apply button.

The folder is added on the USB device.

 To edit a network folder:

1. Select ADV

2. Click the Edit button.

The Edit Network Folder screen displays the same settings shown in the Add a Network

Folder screen.

3. Change the settings in the fields as needed.

4. Click the Apply button.

Your changes are saved.

ANCED> USB Storage > Advanced Settings.

Specify Approved USB Devices

For more security, you can set up the router to share approved USB devices only. You can
access this feature from the Advanced Setup menu on the ADVANCED tab.

 To set up approved USB devices:

1. Select ADV

The following screen displays:

ANCED > Advanced Setup > USB Settings.

2. Click the Approved Devices button.

USB Storage

66

N600 Wireless Dual Band Router JNDR3000

The USB Drive Approved Devices screen displays:

This screen shows the approved USB devices and the available USB devices. You can
remove or add approved USB devices.

3. To add an approved USB device, select it from the Available USB Devices list.

4. Click the Add button.

5. Select the Allow only approved devices check box.

6. Click the Apply button.

Your changes are saved.

If you want to work with another USB device, click the Safely Remove USB Device button
for the currently connected USB device. Connect the other USB device and repeat this
process.

Connect to the USB Drive from a Remote Computer

To connect to the USB drive from remote computers with a web browser, you have to use the
router’s Internet port IP address. If you are using Dynamic DNS, you can type the DNS
name, rather than the IP address. You can view the router’s Internet IP address from the
dashboard on the BASIC Home screen or the ADVANCED Home screen.

 To connect to the router’s USB drive using a web browser:

1. Connect to the router by typing ftp:// and the Internet port IP address in the address

field of Internet Explorer or Netscape Navigator
ftp://10.1.65.4

If you are using Dynamic DNS, you can type the DNS name rather than the IP address.

USB Storage

67

, for example:

N600 Wireless Dual Band Router JNDR3000

2. Type the account name and password that has access rights to the USB drive.

The user name (account name) for All – no password is guest.

3. The directories of the USB drive that your account accesses are displayed, for example,

share/partition1/directory1.

You can now read and copy files from the USB directory.

Safely Remove a USB Drive

To safely remove a USB disk drive so that no users can access it, select USB Storage >

Basic Settings, and click the Safely Remove USB Device button. This takes the drive

offline.

USB Storage

68

6. Security

Keeping unwanted content out of your network

6

This chapter explains how to use the basic firewall features of the router to prevent objectionable

content from reaching the computers and other devices connected to your network.

This chapter includes the following sections:

• Keyword Blocking of HTTP Traffic

• Block Services (Port Filtering)

• Schedule Blocking

• Security Event Email Notifications

69

N600 Wireless Dual Band Router JNDR3000

Keyword Blocking of HTTP Traffic

Use keyword blocking to prevent certain types of HTTP traffic from accessing your network.
The blocking can be always or according to a schedule.

1. Select ADVANCED > Security > Block Sites.

The following screen displays:

2. Select one of the keyword blocking options:

• Per Schedule.

• Always.

3. In the keyword field, enter a keyword or domain.

The keyword list supports up to 32 entries. Here are some sample entries:

• Specify XXX to block http://www

• Specify .com if you want to allow only sites with domain suf

• Enter a period (.) to block all Internet browsing access.

4. Click the Add Keyword button.

5. Click the Apply button.

 To delete a keyword or domain:

1. Select ADV

2. Select the keyword you want to delete from the list.

Turn on keyword blocking all the time, independent of the Schedule screen.

ANCED > Security > Block Sites.

Turn on keyword blocking according to the Schedule screen settings.

.badstuff.com/xxx.html.

Security

70

fixes such as .edu or .gov.

N600 Wireless Dual Band Router JNDR3000

3. Click the Delete Keyword button.

4. Click the Apply button.

Your changes are saved.

You can exempt one trusted computer from blocking and logging. The computer you exempt
must have a fixed IP address.

 To specify a trusted computer:

1. Select ADVANCED > Security > Block Sites.

2. In the Trusted IP Address field, enter the IP address.

3. Click the Apply button.

Your changes are saved.

Block Services (Port Filtering)

Services are functions performed by server computers at the request of client computers. For
example, web servers serve web pages, time servers serve time and date information, and
game hosts serve data about other players’ moves. When a computer on the Internet sends
a request for service to a server computer, the requested service is identified by a service or
port number. This number appears as the destination port number in the transmitted IP
packets. For example, a packet that is sent with the destination port number 80 is an HTTP
(web server) request.

The service numbers for many common protocols are defined by the Internet Engineering
Task Force (IETF at
Service numbers for other applications are typically chosen from the range 1024 to 65535 by
the authors of the application. Although the router already holds a list of many service port
numbers, you are not limited to these choices. You can often determine port number
information by contacting the publisher of the application, by asking user groups or
newsgroups, or by searching.

The Block Services screen lets you add and block specific Internet services by computers on
your network. This is called service blocking or port filtering. To add a service to block, first
determine which port number or range of numbers are used by the application.

 To block services:

1. Select ADVANCED > Security > Block Services

http://www.ietf.org/) and published in RFC1700, “Assigned Numbers.”

Security

71

N600 Wireless Dual Band Router JNDR3000

The following screen displays:

2. Select either the Per Schedule or the Always radio button to enable service blocking.

If you select Per Schedule, specify a time period in the Schedule screen. For more
information, seeSchedule Blocking on page 73.

3. Click the Add button.

The Block Services Setup screen displays:

4. From the Service Type list, select the application or service to allow or block.

Security

72

N600 Wireless Dual Band Router JNDR3000

The list already displays several common services, but you are not limited to these
choices. To add any services or applications that do not already appear, select User

Defined.

5. If you know that the application uses either

If you are not sure, select TCP/UDP (both).

6. Enter the starting and ending port numbers.

If the application uses a single port number, enter that number in both fields.

7. Select the radio button for the IP address configuration you want to block and enter the IP

addresses.
You can block the specified service for a single computer, a range of computers with

consecutive IP addresses, or all computers on your network.

8. Click the Add button.

Your changes are saved.

TCP or UDP, select the appropriate protocol.

Schedule Blocking

You can specify the days and time that you want to block Internet access.

 To schedule blocking:

1. Select ADV

The following screen displays:

ANCED > Security > Schedule.

Security

73

N600 Wireless Dual Band Router JNDR3000

2. Set up the schedule for blocking keywords and services.

• Days to Block. Select days on which you want to apply blocking by selecting the

appropriate check boxes, or select Every Day to select the check boxes for all days.

ime of Day to Block. Select a start and end time in 24-hour format, or select All

• T

Day for 24-hour blocking.

3. Select your time zone from the list. If you use daylight savings time, select the

Automatically adjust for daylight savings time check box.

4. Click the Apply button.

Your changes are saved.

Security Event Email Notifications

To receive logs and alerts by email, provide your email information in the E-mail screen and
specify which alerts you want to receive and how often.

 To set up email notifications:

1. Select ADV

The following screen displays:

ANCED > Security > E-mail.

2. Select the Turn E-mail Notification On check box.

3. In the

You might be able to find this information in the configuration screen of your email

Your Outgoing Mail Server field, enter the name of your ISP’s outgoing (SMTP) mail

server (such as mail.myISP.com).

program. If you leave this field blank, log and alert messages are not sent by email.

Security

74

N600 Wireless Dual Band Router JNDR3000

4. Enter the email address to which logs and alerts are sent in the Send to This E-mail Address

field.
This email address is also used for the From address. If you leave this field blank, log and

alert messages are not sent by email.

5. If your outgoing email server requires authentication, select the My Mail Server requires

authentication check box.

Fill in the User Name and Password fields for the outgoing email server.

6. (Optional) Select the Send an email notification when a downloading task is finished

check box.

7. (Optional) Select the Send Alert Immediately check box.

Email alerts are sent immediately when someone attempts to visit a blocked site.

Logs are sent automatically. If you select the Weekly, Daily, or Hourly option and the log
fills up before the specified period, the log is automatically emailed to the specified email
address. After the log is sent, the log is cleared from the router’s memory. If the router
cannot email the log file, the log buffer might fill up. In this case, the router overwrites the
log and discards its contents.

8. Click the Apply button.

Your changes are saved.

Security

75

7. Administration

Managing your network

7

This chapter describes the router settings for administering and maintaining your router and

home network.

This chapter includes the following sections:

• Upgrade the Router Firmware

• View Router Status

• View Logs of Web Access or Attempted Web Access

• Manage the Configuration File

• Change the Password

• Password Recovery

For more information about how to view computers or devices that are currently conected to you
network, see

For information about upgrading or checking the status of your router over the Internet, see

Remote Management on page 111.

For information about monitoring the volume of Internet traffic passing through your router’s
Internet port, see

View Attached Devices on page 34.

Traffic Meter on page 114.

76

N600 Wireless Dual Band Router JNDR3000

Upgrade the Router Firmware

The router firmware (routing software) is stored in flash memory. You can update the
firmware from the Administration menu on the ADVANCED tab. You might see a message at
the top of the genie screens when new firmware is available for your product.

You can use the Check button on the Router Update screen to check and update to the latest
firmware for your product if new firmware is available.

 To check for new firmware and updates for your router:

1. Select ADV

The following screen displays:

2. Click the Check button.

ANCED > Administration > Router Update.

The router finds new firmware if any is available.

3. Click the Ye

The router locates the firmware you downloaded (the file ends in .img) and begins the
update.

s button.

WARNING:

When uploading firmware to the router, do not interrupt the web
browser by closing the window, clicking a link, or loading a new
page. If the browser is interrupted, it could corrupt the firmware.

Administration

77

N600 Wireless Dual Band Router JNDR3000

When the upload is complete, your router restarts. The upgrade process typically takes
about one minute. Read the new firmware release notes to determine whether you need
to reconfigure the router after upgrading.

View Router Status

 To view router status and usage information:

Select ADV

The following screen displays:

ANCED Home, or select ADVANCED > Administration > Router Status.

Router Information

• Hardware Version. The router model.

• Firmware Version.

router firmware.

• GUI Language V

• LAN Port.

- MAC Address.

address used by the Ethernet (LAN) port of the router.

The version of the router firmware. It changes if you upgrade the

ersion. The localized language of the user interface.

The Media Access Control address. This is the unique physical

Administration

78

N600 Wireless Dual Band Router JNDR3000

- IP Address. The IP address used by the Ethernet (LAN) port of the router. The

default is 192.168.1.1.

- DHCP. Identifies whether the router

LAN-attached devices.

’s built-in DHCP server is active for the

Internet Port

• MAC Address. The Media Access Control address is the unique physical address used

by the Internet (WAN) port of the router.

• IP Address.

is shown or the address is 0.0.0.0, the router cannot connect to the Internet.

• Connection. This shows if the router is using a fixed IP address on the WAN. If the value

is DHCP Client, the router obtains an IP address dynamically from the ISP

• IP Subnet Mask.

• Domain Name Server.

Domain Name Server translates human-language URLs such as www.netgear.com into
IP addresses.

The IP address used by the Internet (WAN) port of the router. If no address

.

The IP subnet mask used by the Internet (WAN) port of the router.

The Domain Name Server addresses used by the router. A

Show Statistics Button

You can view the statistics of your router on the Show statistics screen.

 To view statistics:

1. Select ADV

2. In the Internet Port pane, click the Show Statistics button.

The following screen displays:

ANCED Home or select ADVIACED > Administration > Router Status.

The following information displays:

• System Up T

• Port.

The statistics for the WAN (Internet) and LAN (Ethernet) ports. For each port,

the screen displays:

ime. The time elapsed since the router was last restarted.

Administration

79

N600 Wireless Dual Band Router JNDR3000

- Status. The link status of the port.

- TxPkts.

- RxPkts.

- Collisions.

- Tx B/s.

The number of packets transmitted on this port since reset or manual clear.

The number of packets received on this port since reset or manual clear.

The number of collisions on this port since reset or manual clear.

The current transmission (outbound) bandwidth used on the WAN and LAN

ports.

- Rx B/s.

- Up T

- Poll Interval.

The current reception (inbound) bandwidth used on the WAN and LAN ports.

ime. The time elapsed since this port acquired the link.

The interval at which the statistics are updated in this screen.

To change the polling frequency, enter a time in seconds in the Poll Interval field, and click
the Set Interval button.

To stop the polling entirely, click the Stop button.

Connection Status Button

You can view the connection status of your router on the Connection Status screen.

 To view the Internet connection status:

1. Select ADV

ANCED Home or select ADVANCED > Administration > Router Status.

2. In the Internet Connection pane, click the Connection Status button.

The Connection Status screen displays:

The following information displays:

• IP Address.

• Subnet Mask.

The IP address that is assigned to the router.

The subnet mask that is assigned to the router.

Administration

80

N600 Wireless Dual Band Router JNDR3000

• Default Gateway. The IP address for the default gateway that the router

communicates with.

• DHCP Server.

The IP address for the Dynamic Host Configuration Protocol server
that provides the TCP/IP configuration for all the computers that are connected to the
router.

• DNS Server.

The IP address of the Domain Name Service server that provides

translation of network names to IP addresses.

• Lease Obtained.

• Lease Expires.

The date and time when the lease was obtained.

The date and time that the lease expires.

Click the Release button to return the status of all items to 0.

Click the Renew button to refresh the items.

Click the Close W

indow button to close the Connection Status screen.

Wireless Settings (2.4 GHz and 5 GHz)

Figure 10. Wireless settings

The following settings are displayed:

• Name (SSID). The

for the 5 GHz network ends in -5G to distinguish it from the 2.4 GHz network.

• Region.

The geographic region where the router is being used.

• Channel. Identifies the operating channel of the wireless port being used.

channel is Auto. When Auto is selected, the router finds the best operating channel
available. If you notice interference from nearby devices, you can select a different
channel. Channels 1, 6, and 11 do not interfere with each other.

wireless network name (SSID) used by the router. The default names

The default

• Mode. Indicates the wireless communication mode: Up to 54 Mbps, Up to 145 Mbps

(default), and Up to 300 Mbps.

ireless AP. Indicates whether the radio feature of the router is enabled. If this feature is

• W

not enabled, the Wireless LED on the front panel is off.

• Broadcast Name. Indicates whether the router is broadcasting its SSID.

Administration

81

N600 Wireless Dual Band Router JNDR3000

• Wireless Isolation. Select this check box only if you want to prevent wireless

connections to the router.

• W

i-Fi Protected Setup. Indicates whether Wi-Fi Protected Setup is configured for this

network.

Guest Network (2.4 GHz and 5 GHz)

Figure 11. Guest Network (2.4 GHz and 5 GHz)

The following settings are displayed:

• Name (SSID).

names are NETGEAR-Guest and NETGEAR-5G-Guest.

• W

ireless AP. Indicates whether the radio feature of the router is enabled. If this feature is

not enabled, the Wireless LEDs on the front panel are off.

• Broadcast Name. Indicates whether the router is broadcasting its SSID.

• W

ireless Isolation. Indicates whether computer or wireless devices that join the network

can or cannot access each other or access Ethernet device on the network

• Allow guest to access My Local Network. Indicate whether any user who connects to

this SSID can access local networks associated with the router

The 11N wireless network name (SSID) used by the router. The default

.

View Logs of Web Access or Attempted Web Access

The log is a detailed record of the websites you accessed or attempted to access. Up to
256 entries are stored in the log.

 To view logs:

Select ADV

ANCED > Administration > Logs.

Administration

82

N600 Wireless Dual Band Router JNDR3000

The Logs screen displays.

The log screen shows the following information:

• Date and time.

• Source IP address.

• T

arget address. The name or IP address of the website or news group visited or to

which access was attempted.

• Action. Whether the access was blocked or allowed.

To refresh the log screen, click the Refresh button.

To clear the log entries, click the Clear Log button.

To email the log immediately, click the Send Log button.

The date and time the log entry was recorded.

The IP address of the initiating device for this log entry.

Manage the Configuration File

The configuration settings of the router are stored within the router in a configuration file. You
can back up (save) this file to your computer, restore it, or reset it to the factory default
settings.

Administration

83

N600 Wireless Dual Band Router JNDR3000

Back Up Settings

 To back up the router’s configuration settings:

1. Select ADV

The following screen displays:

2. Click the Back Up button.

3. Choose a location to store the .cfg file that is on a computer on your network.

A copy of the current settings is saved.

ANCED > Administration > Backup Settings.

Restore Configuration Settings

 To restore configuration settings that you backed up:

1. Select ADV

2. Enter the full path to the file on your network, or click the Browse button to find the file.

3. Select the .cfg file.

4. Click the Restore button.

The file is uploaded to the router. Upon completion, the router reboots.

ANCED > Administration > Backup Settings.

WARNING:

Do not interrupt the reboot process.

Administration

84

N600 Wireless Dual Band Router JNDR3000

Erase the Current Configuration Settings

Under some circumstances (for example, if you move the router to a different network or if
you have forgotten the password), you might want to erase the configuration and restore the
factory default settings.

You can either use the Restore Factory Settings button on the back of the router (see Factory

Settings on page 128), or you can click the Erase button in this screen.

 To erase the configuration settings:

1. Select ADV

2. Click the Erase button.

The factory default settings are restored. The user name is admin, the password is
password, and the LAN IP address is 192.168.1.1.

ANCED > Administration > Backup Settings.

The DHCP is enabled.

Change the Password

This feature allows you to change the default password that is used to log in to the router with
the user name admin.

This is not the same as changing the password for wireless access. The label on your router
shows your unique wireless network name (SSID) and password for wireless access (see

Label on page 14).

 To set the password for the user name admin:

1. Select ADV

The following screen displays:

ANCED > Administration > Set Password.

2. Type the old password and type the new password twice in the fields on this screen.

3. If you want to be able to recover the password, select the Enable Password Recovery

check box.

4. Click the Apply button.

Administration

85

N600 Wireless Dual Band Router JNDR3000

Your changes are saved.

Password Recovery

NETGEAR recommends that you enable password recovery if you change the password for
the router’s user name of admin. You then have an easy way to recover the password if it is
forgotten. This recovery process is supported in Internet Explorer, Firefox, and Chrome
browsers, but not in the Safari browser.

 To set up password recovery:

1. Select ADVANCED > Administration > Set Password.

2. Select the Enable Password Recovery check box.

3. Select two security questions and provide answers to them.

4. Click the Apply button.

Your changes are saved.

 To recover your password:

1. In the address field of your browser, type www.routerlogin.net.

A login screen displays.

2. Click the Cancel button.

If password recovery is enabled, you are prompted to answer two security questions.

3. Enter the saved answers to the security questions.

Administration

86

8. Advanced Settings

Fine-tuning your network

8

This chapter describes the advanced features of your router. This information is for users with a

solid understanding of networking concepts who want to set up the router for unique situations
such as remote access from the Internet by IP or domain name.

This chapter includes the following sections:

• Advanced Wireless Settings

• Wireless Repeating Function

• Port Forwarding and Port Triggering

• Set Up Port Forwarding to Local Servers

• Set Up Port Triggering

• Dynamic DNS

• Static Routes

• Remote Management

• Universal Plug and Play

• Traffic Meter

For information about approving a USB device, see Specify Approved USB Devices on
page 66.

87

N600 Wireless Dual Band Router JNDR3000

Advanced Wireless Settings

You can use this screen to turn the wireless radio on and off, to specify WPS settings, to use
AP mode, and to set up a wireless access list.

The Fragmentation Length, CTS/RTS Threshold, and Preamble Mode options in this screen
are reserved for wireless testing and advanced configuration only. Do not change these
settings unless you have a specific reason to do so.

 To view the Wireless Settings screen:

1. Select ADV

The following screen displays:

ANCED > Advanced Setup > Wireless Settings.

2. Enter or change the following settings for the 2.4 GHz and 5 GHz bands:

Enable Wireless Router Radio.

wireless router by clearing this check box. Select this check box again to enable the wireless
portion of the router. When the wireless radio is disabled, other members of your household
can use the router by connecting their computers to the router with an Ethernet cable.

You can completely turn off the wireless portion of the

Advanced Settings

88

N600 Wireless Dual Band Router JNDR3000

Enable 20/40 MHz Coexistence. This applies only to the 2.4 GHz band. The 20/40 MHz

coexistence function is enabled by default when the wireless mode is set to Up to 300 mbps
(40 MHZ), which is required for Wi-Fi certification. This check box is grayed out if the wireless
mode is set to Up to 130 Mbps.

The router can run in either 40 MHz mode or 20 MHz mode when the wireless mode is set to
Up to 300 Mbps. When the Enable 20/40 MHz Coexistence check box is selected, the router
runs in 40 MHz mode unless there is another nearby WiFi network in the area already
running in 40 MHz mode or there is a wireless access point on the secondary channel. If that
happens, the router runs in 20 MHz mode to coexist with that network.

If you want the router to always run in 40 MHz mode, clear this check box and click the Apply
button.

Note: The Fragmentation Length, CTS/RTS Threshold, and Preamble

Mode options are reserved for wireless testing and advanced
configuration only. Do not change these settings.

Turn off wireless signal by schedule. Select this check box to turn off the wireless signal
from your router at times when you do not need a wireless connection. For example, you
could turn it off for the weekend if you leave town.

WPS Settings. You can add WPS devices to your network.

AP Mode. Select the Enable AP Mode check box to make the router function as an access

point.

Wireless Card Access List. Click the Set Up Access List button to display the Wireless
Card Access List screen. On this screen, you can restrict access to your network to specific
devices based on their MAC address.

Control the Wireless Radio

By default, the wireless radio is enabled so that you can connect wirelessly to the router. You
can turn the wireless radio on or off in the Advanced Wireless Settings screen or by using the
WiFi On/Off button on the router side panel. When the wireless radio is off, you can still use
an Ethernet cable for a LAN connection to the router.

Advanced Settings

89

N600 Wireless Dual Band Router JNDR3000

 To turn the wireless radio on or off:

1. Select ADVANCED > Advanced Setup > Wireless Settings.

By default, the Enable Wireless Router Radio check box is selected.

2. Select or clear the Enable W

ireless Router Radio check box.

Clearing this check box turns off the WiFi feature of the wireless router.

3. (Optional) Select the T

urn off wireless signal by schedule check box and fill in the fields

to specify the times when you do not need a wireless connection.
For example, you could turn off the wireless signal for the weekend if you leave town.

4. Click the Apply button.

Your changes take effect.

Set Up a Wireless Schedule

You can use this feature to turn off the wireless signal from your router at times when you do
not need a wireless connection. For example, you could turn it off for the weekend if you
leave town.

Advanced Settings

90

N600 Wireless Dual Band Router JNDR3000

 To configure and enable the wireless schedule:

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Advanced Wireless Settings screen displays.

2. Click the Add a new period button.

3. Use the drop-down lists, radio buttons, and check boxes to set up a period during which you

want to turn off the wireless signal.

4. Click the Apply button.

The Advanced Wireless Settings screen displays.

5. Select the T

urn off wireless signal by schedule check box to activate the schedule.

6. Click the Apply button.

View or Change WPS Settings

 To specify WPS Settings:

1. Select ADV

The Router’s PIN field displays the PIN that you use on a registrar (for example, from the
Network Explorer on a V
settings through WPS.

2. (Optional) Select or clear the Disable Router

The PIN function might temporarily be disabled when the router detects suspicious
attempts to break into the router’
WPS. You can manually enable the PIN function by clearing the Disable Router’s PIN
check box.

ANCED > Advanced Setup > Wireless Settings.

ista Windows computer) to configure the router’s wireless

’s PIN check box.

s wireless settings by using the router’s PIN through

3. (Optional) Select or clear the Keep Existing W

Advanced Settings

91

ireless Settings check box.

N600 Wireless Dual Band Router JNDR3000

By default, the Keep Existing Wireless Settings check box is selected. NETGEAR
recommends that you leave this check box selected.

If you clear this check box, the next time a new wireless client uses WPS to connect to
the router, the router wireless settings change to an automatically generated random
SSID and security key.

4. Click the Apply button.

Your changes are saved.

Set Up a Wireless Access List by MAC Address

You can set up a list of computers and wireless devices that are allowed to join the wireless
network. This list is based on the unique MAC address of each computer and device.

Each network device has a MAC address, which is a unique 12-character physical address,
containing the hexadecimal characters 0–9, a–f, or A–F only, and separated by colons (for
example, 00:09:AB:CD:EF:01). Typically, the MAC address is on the label of the wireless
device or network interface device. If you do not have access to the label, you can display the
MAC address using the network configuration utilities of the computer. You might also find
the MAC addresses in the Attached Devices screen.

 To restrict access based on MAC addresses:

1. Select ADV

2. Click the Set Up

ANCED > Advanced Setup > Wireless Settings.

Access List button.

3. Click the Add button.

The Wireless Card Access Setup screen opens and displays a list of currently active

wireless cards and their Ethernet MAC addresses.

4. If the computer or device you want is in the

Available Wireless Cards list, select that radio

button; otherwise, type a name and the MAC address.

Advanced Settings

92

N600 Wireless Dual Band Router JNDR3000

You can usually find the MAC address on the label of the wireless device.

Tip: You can copy and paste the MAC addresses from the Attached Devices

screen into the MAC Address field of this screen. Use each wireless
computer or device to join the wireless network. Then each is listed in the
Attached Devices screen.

5. Click the Add button.

The screen changes back to the list screen.

6. Add each computer or device you want to allow to connect wirelessly.

7. Select the Turn Access Control On check box.

8. Click the Apply button.

 To edit a wireless device or delete it from the access list:

1. Select ADVANCED > Advanced Setup > Wireless Settings.

The Advanced Wireless Settings screen displays.

2. In the table, select the radio button next to the wireless device that you want to edit or

delete.

3. Do one of the following:

• Click the Edit button.

The Edit Wireless Card screen displays.

a. Edit the address information.
b. Click the Accept button.

• Click the Delete button.

The address is removed from the table.

Wireless Repeating Function

You can set the router up to be used as a wireless access point (AP). This enables the router
to act as a wireless repeater. A wireless repeater connects to another wireless router as a
client where the network to which it connects becomes the ISP service.

Advanced Settings

93

N600 Wireless Dual Band Router JNDR3000

Wireless repeating is a type of wireless distribution system (WDS). A WDS allows a wireless
network to be expanded through multiple access points instead of using a wired backbone to
link them. The following figure shows a wireless repeating scenario.

Base station
access point

Figure 12. Wireless repeating scenario

Repeater
access point

Note: If you use the wireless repeating function, you need to select either

WEP or None as a security option in the Wireless Setup screen. The

WEP option displays only if you select the wireless mode Up to 54
Mbps in the Wireless Setup screen.

ireless base station. The router acts as the parent access point, bridging traffic to and

• W

from the child repeater access point, as well as handling wireless and wired local
computers. To configure this mode, you have to know the MAC addresses of the child
repeater access point.

ireless repeater. The router sends all traffic from its local wireless or wired computers

• W

to a remote access point. To configure this mode, you have to know the MAC address of
the remote parent access point.

The router is always in dual-band concurrent mode, unless you turn off one radio. If you

enable the wireless repeater in either radio band, the wireless base station or wireless
repeater cannot be enabled in the other radio band. However

, if you enable the wireless
base station in either radio band and use the other radio band as a wireless router or
wireless base station, dual-band concurrent mode is not affected.

Advanced Settings

94

N600 Wireless Dual Band Router JNDR3000

To set up a wireless network with WDS, the following conditions have to be met for both
access points:

• Both access points have to use the same SSID, wireless channel, and encryption mode.

• Both access points have to be on the same LAN IP subnet.

That is, all the access point

LAN IP addresses are in the same network.

• All LAN devices (wired and wireless computers) have to be configured to operate in the

same LAN network address range as the access points.

Wireless Repeating Function

The Wireless Repeating Function screen allows you to view or change the wireless repeater
settings for the router.

 To view the Wireless Repeating Function screen:

1. Select ADV

ANCED > Advanced Setup > Wireless Repeating.

The following settings are available:

• Enable W

ireless Repeating Function. Select the check box for the 2.4 GHz or 5

GHz network to use the wireless repeating function.

Advanced Settings

95

N600 Wireless Dual Band Router JNDR3000

• Wireless MAC of this router. This field displays the MAC address for your router for

your reference. Enter this MAC address in the corresponding Wireless Repeating
Function screen of the other access point you are using.

• Wireless Repeater. If your router is the repeater, select this check box.

• Disable Wireless Client Association. If your router is the repeater, selecting this

check box means that wireless clients cannot associate with it. Only LAN client
associations are allowed.

- If you are setting up a point-to-point bridge, select this check box.

- If you want all client traffic to go through the other access point (repeater with

wireless client association), leave this check box cleared.

Repeater IP Address. If your router is the repeater, enter the IP address of the other
access point.

Base Station MAC Address. If your router is the repeater, enter the MAC address for the
access point that is the base station.

• Wireless Base Station. If your router is the base station, select this check box.

Disable Wireless Client Association. If your router is the base station, selecting this

check box means that wireless clients cannot associate with it. Only LAN client
associations are allowed.

Repeater MAC Address (1 through 4). If your router is the base station, it can act as the
“parent” of up to four other access points. Enter the MAC addresses of the other access
points in these fields.

2. Click the Apply button.

Set Up the Base Station

The wireless repeating function works only in hub and spoke mode. The units cannot be
daisy-chained. You have to know the wireless settings for both units. You have to know the
MAC address of the remote unit. First, set up the base station, and then set up the repeater.

 To set up the base station:

1. Set up both units with the same wireless settings (SSID, mode, channel, and security).

The SSID and mode need to be the same and the wireless security option has to be set to

None or WEP. For more information, see

2. Select ADVANCED > Advanced Setup > Wireless Repeating.

Set Up a Guest Network on page 39.

Advanced Settings

96

N600 Wireless Dual Band Router JNDR3000

The Wireless Repeating Function screen displays.

3. For the frequency you want to use (2.4 GHz or 5 GHz), select the Enable Wireless

Repeating Function check box.

4. Select the W

5. (Optional) Select the Disable W

clients from associating with the base station and allow LAN client associations only.
Leave the check box cleared if you prefer wireless clients to be able to associate with the

base station.

6. In the Repeater MAC

repeater units.
If your router is the base station, it can function as the “parent” for up to four other access

points.

7. Click the Apply button.

Your changes are saved.

ireless Base Station radio button.

ireless Client Association check box to prevent wireless

Address 1 through 4 fields, enter the MAC address for one or more

Set Up a Repeater Unit

Use a wired Ethernet connection to set up the repeater unit to avoid conflicts with the
wireless connection to the base station.

Advanced Settings

97

N600 Wireless Dual Band Router JNDR3000

Note: If you are using the JNDR3000 base station with a non-NETGEAR

router as the repeater, you might need to change more configuration
settings. In particular, you should disable the DHCP server function
on the wireless repeater AP.

 To configure the router as a repeater unit:

1. Log in to the router that will be the repeater

2. Select BASIC > W

ireless Settings and verify that the wireless settings match the base unit

.

exactly.

The wireless security option has to be set to WEP or None.

3. Select ADV

ANCED > Wireless Repeating Function.

The Wireless Repeating Function screen displays.

4. Select the Enable Wireless Repeating Function check box for the frequency you want.

5. Select the W

6. Fill in the Repeater IP

ireless Repeater radio button.

Address field.

This IP address has to be in the same subnet as the base station, but different from the

LAN IP address of the base station.

7. (Optional) Select the Disable W

ireless Client Association check box to prevent wireless

clients from associating with the repeater and allowing LAN client associations only.

Advanced Settings

98

N600 Wireless Dual Band Router JNDR3000

Leave the check box cleared if you prefer wireless clients to be able to associate with the
repeater.

In the Base Station MAC Address field, enter the MAC addresses for the access point that
should function as the base station.

8. Click the Apply button.

Your changes are saved.

9. Verify connectivity across the LANs.

A computer on any wireless or wired LAN segment of the router connects to the Internet
or shares files and printers with any other wireless or wired computer or server connected
to the other access point.

Port Forwarding and Port Triggering

By default, the router blocks inbound traffic from the Internet to your computers except replies
to your outbound traffic. You might need to create exceptions to this rule for these purposes:

• To allow remote computers on the Internet to access a server on your local network.

• To allow certain applications and games to work correctly when their replies are not

recognized by your router.

Your router provides two features for creating these exceptions: port forwarding and port
triggering. The next sections provide background information to help you understand how
port forwarding and port triggering work, and the differences between the two.

Remote Computer Access Basics

When a computer on your network needs to access a computer on the Internet, your
computer sends your router a message containing the source and destination address and
process information. Before forwarding your message to the remote computer, your router
has to modify the source information and create and track the communication session so that
replies can be routed back to your computer.

Here is an example of normal outbound traffic and the resulting inbound responses:

1. You open a browser, and your operating system assigns port number 5678 to this

browser session.

2. You type http://www.example.com into the URL field, and your computer creates a web

page request message with the following address and port information.
The request message is sent to your router.

• Source address. Your computer’s IP address.

• Source port number. 5678, which is the browser session.

• Destination address. The IP address of www.example.com, which your computer

finds by asking a DNS server.

Advanced Settings

99

N600 Wireless Dual Band Router JNDR3000

• Destination port number. 80, which is the standard port number for a web server

process.

3. Your router creates an entry in its internal session table describing this communication

session between your computer and the web server at www.example.com.
Before sending the web page request message to www.example.com, your router stores

the original information and then modifies the source information in the request message,
performing Network Address Translation (NAT):

• The source address is replaced with your router’s public IP address. This is

necessary because your computer uses a private IP address that is not globally
unique and cannot be used on the Internet.

• The source port number is changed to a number chosen by the router, such as 33333.

This is necessary because two computers could independently be using the same
session number.

Your router then sends this request message through the Internet to the web server at

www.example.com.

4. The web server at www.example.com composes a return message with the requested web

page data.

The return message contains the following address and port information. The web server

then sends this reply message to your router.

• Source address. The IP address of www.example.com.

• Source port number. 80, which is the standard port number for a web server

process.

• Destination address. The public IP address of your router.

• Destination port number. 33333.

5. Upon receiving the incoming message, your router checks its session table to determine

whether an active session for port number 33333 exists.
Finding an active session, the router then modifies the message to restore the original

address information replaced by NAT. Your router sends this reply message to your
computer, which displays the web page from www.example.com. The message now
contains the following address and port information.

Source address. The IP address of www.example.com.

Source port number. 80, which is the standard port number for a web server process.

Destination address. Your computer’s IP address.

Destination port number. 5678, which is the browser session that made the initial

request.

6. When you finish your browser session, your router eventually detects a period of inactivity in

the communications.

Your router then removes the session information from its session table, and incoming

traffic is no longer accepted on port number 33333.

Advanced Settings

100