Netgear RS400 User Manual

Download

User Manual

Nighthawk AC2300 Cybersecurity WiFi Router

Model RS400

NETGEAR, Inc.

350 E. Plumeria DriveJuly 2019 San Jose, CA 95134, USA202-11963-02

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Support

Thank you for purchasing this NETGEAR product.

You can visit https://www.netgear.com/support/ to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Contact your Internet service provider for technical support.

Trademarks

©NETGEAR, Inc. NETGEAR and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only.

Compliance and Conformity

For regulatory compliance information, visit https://www.netgear.com/about/regulatory/. See the regulatory compliance document before connecting the power supply.

Chapter 1 Hardware Setup

Unpack your router.............................................................................10

Attach the antennas............................................................................10

LEDs and buttons on the top panel.................................................11

Rear panel............................................................................................12

Router label and QR Code label.......................................................13

Position your router............................................................................14

Cable your router...............................................................................15

Chapter 2 Connect to the Router’s Network and Automatically Set Up the Internet Connection

Connect to the network.....................................................................18

Connect to the network using a wired connection....................18

Find and connect to the WiFi network........................................18

WiFi connection using WPS..........................................................18

Types of logins....................................................................................19

Use a web browser to access the router..........................................19

Use a web browser to set up the router’s Internet connection

automatically...................................................................................20

Change the language........................................................................23

Install and manage your router with the Nighthawk app..............24

Chapter 3 Specify Your Internet Settings

Use the Internet Setup Wizard..........................................................26

Manually set up the Internet connection.........................................26

Specify an Internet connection without a login..........................26

Specify an Internet connection that uses a login and PPPoE

service..............................................................................................28

Specify an Internet connection that uses a login and PPTP or L2TP

service..............................................................................................29

Specify IPv6 Internet connections....................................................31

Requirements for entering IPv6 addresses.................................32

Use Auto Detect for an IPv6 Internet connection......................32

Set up an IPv6 6to4 tunnel Internet connection.........................33

Set up an IPv6 pass-through Internet connection......................35

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Set up a fixed IPv6 Internet connection......................................35

Set up an IPv6 DHCP Internet connection..................................36

Set up an IPv6 PPPoE Internet connection..................................38

Use Auto Config for an IPv6 Internet connection......................40

Set up an IPv6 6rd tunnel connection.........................................41

Manage the MTU size.........................................................................43

MTU concepts.................................................................................43

Change the MTU size....................................................................44

Chapter 4 Control Access to the Internet

Manage NETGEAR Armor.................................................................46

Activate Armor using the Nighthawk app...................................46

View or change your NETGEAR Armor settings using the

Nighthawk app...............................................................................46

View or change your NETGEAR Armor settings from the Armor

portal...............................................................................................47

start your subscription...................................................................47

Access the NETGEAR Armor portal from the router web

interface..........................................................................................48

Disable or Reenable NETGEAR Armor from the router web

interface..........................................................................................48

Enable Circle with Disney..................................................................49

Enable Circle with Disney using the Nighthawk app................50

Enable Circle with Disney using the Circle app.........................50

Enable access control to allow or block access to the Internet....51

Manage network access control lists...............................................52

Use keywords to block Internet sites...............................................53

Delete keywords from the blocked list............................................54

Prevent blocking on a trusted computer.........................................54

Block services from the Internet.......................................................55

Schedule when to block Internet sites and services......................56

Set up security event email notifications.........................................57

Chapter 5 Optimize Performance

Use Dynamic QoS to optimize Internet traffic management........60

Enable Dynamic QoS.....................................................................60

Enable or disable the automatic QoS database update...........61

Manually update the Dynamic QoS database............................61

Wi-Fi Multimedia Quality of Service.................................................62

Improve network connections with Universal Plug and Play........63

Enable or disable Smart Connect.....................................................64

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Chapter 6 Manage Network Settings

View or change the WAN settings....................................................67

Set up a default DMZ server..............................................................68

Change the LAN TCP/IP settings......................................................69

Change the router’s device name....................................................70

Specify the IP addresses that the router assigns............................71

Disable the DHCP server feature in the router...............................72

Manage reserved LAN IP addresses................................................73

Reserve an IP address....................................................................73

Edit a reserved IP address............................................................74

Delete a reserved IP address entry..............................................75

Set up the router as a WiFi access point..........................................75

Set up the router in bridge mode....................................................76

Return the router to router mode.....................................................78

Set up a bridge for a port group or VLAN tag group....................78

Set up a bridge for a port group..................................................79

Set up a bridge for a VLAN tag group........................................80

Manage custom static routes............................................................81

Set up a static route.......................................................................82

Edit a static route...........................................................................83

Delete a static route.......................................................................83

Chapter 7 Manage the WiFi Network Settings

Use the WPS Wizard for WiFi connections......................................86

Specify basic WiFi settings................................................................86

Change the WiFi password or the WiFi security.............................88

Set up WPA/WPA2 enterprise WiFi security...................................90

Set up WEP legacy WiFi security......................................................92

Change the WiFi Mbps settings.......................................................94

Change the transmission power of the WiFi radios.......................95

Set up a guest WiFi network.............................................................96

Control the WiFi radios......................................................................98

Use the WiFi On/Off button..........................................................99

Enable or disable the WiFi radios................................................99

Set up a WiFi schedule.......................................................................99

Manage WPS settings......................................................................100

Enable or disable implicit beamforming.......................................102

Enable or disable airtime fairness..................................................102

Enable or disable MU-MIMO..........................................................103

Manage advanced WiFi settings....................................................104

Chapter 8 Manage Your Router

Update the router firmware............................................................107

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Check for new firmware and update the router......................107

Manage the firmware update settings......................................108

Manually upload firmware to the router...................................108

Change the admin password..........................................................109

Enable admin password recovery..................................................110

Recover the admin password.........................................................111

Manage the router configuration file.............................................111

Back up the settings....................................................................112

Restore the settings.....................................................................112

View information about the router and the Internet and WiFi

settings...............................................................................................113

Display the statistics of the Internet port.......................................114

Check the Internet connection status............................................115

View and manage logs of router activity.......................................116

View devices currently on the network..........................................117

Monitor, meter, and control Internet traffic..................................118

Start the traffic meter without traffic restrictions......................118

Restrict Internet traffic by volume..............................................119

Restrict Internet traffic by connection time...............................120

View the Internet traffic volume and statistics..........................121

Unblock the traffic meter after the traffic limit is reached......122

Set your time zone............................................................................122

Change the NTP server....................................................................123

Disable LED blinking or turn off LEDs............................................124

Return the router to its factory default settings............................124

Use the Reset button...................................................................125

Erase the settings.........................................................................125

Chapter 9 Share USB Storage Devices Attached to the Router

USB device requirements................................................................128

Connect a USB storage device to the router................................128

Access a storage device connected to the router........................129

Access a storage device connected to the router from a

Windows-based computer.........................................................129

Map a USB device to a Windows network drive......................129

Access a storage device that is connected to the router from a

Mac................................................................................................130

Back up Windows-based computers with ReadySHARE Vault....131

Enable FTP access within your network.........................................132

View network folders on a storage device....................................132

Add a network folder on a USB storage device...........................133

Edit a network folder on a USB storage device............................134

Approve a USB storage device.......................................................135

Remotely access a USB device using ReadyCLOUD...................136

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Create a ReadyCLOUD account................................................136

Safely remove a USB storage device.............................................138

Chapter 10 Use VPN to Access Your Network

Set up a VPN connection.................................................................140

Manage Dynamic DNS for VPN connections................................140

Set up a new Dynamic DNS account.........................................140

Specify a DNS account that you already created.....................141

Change the Dynamic DNS settings...........................................142

Enable and configure OpenVPN on the router............................143

Install OpenVPN software...............................................................144

Install the OpenVPN client utility and VPN configuration files on

a Windows-based computer......................................................144

Install the OpenVPN client utility and VPN configuration files on

a Mac.............................................................................................146

Install the OpenVPN client utility and VPN configuration files on

an iOS device...............................................................................147

Install the OpenVPN client utility and VPN configuration files on

an Android device.......................................................................148

LAN requirements for VPN connections.......................................149

Use a VPN tunnel on a Windows-based computer......................149

Use VPN to access your Internet service at home........................150

Allow VPN clients full Internet access........................................150

Use a VPN tunnel to access your Internet service at home....151

Block Internet access for VPN clients........................................151

Chapter 11 Manage Port Forwarding and Port Triggering Traffic Rules

Manage port forwarding to a local server for services and

applications.......................................................................................154

Forward incoming traffic for a default service or application.154

Add a port forwarding rule for a custom service or

application....................................................................................155

Change a port forwarding rule..................................................157

Remove a port forwarding rule..................................................157

Application example: Make a local web server public...........158

How the router implements a port forwarding rule................159

Manage port triggering for services and applications................159

Add a port triggering rule..........................................................160

Change a port triggering rule....................................................161

Specify the time-out for port triggering....................................162

Disable port triggering...............................................................163

Remove a port triggering rule....................................................163

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Application example: Port triggering for Internet Relay Chat.164

Chapter 12 Troubleshooting

Quick tips...........................................................................................167

Sequence to restart your network.............................................167

Check the power adapter and Ethernet cable connections...167

Check the WiFi settings..............................................................167

Check the network settings........................................................167

Troubleshoot with the LEDs............................................................168

Standard LED behavior when the router is powered on........168

Power LED is off or blinking.......................................................168

LEDs never turn off......................................................................168

Internet or Ethernet LAN port LEDs are off..............................169

WiFi LEDs are off..........................................................................169

You cannot log in to the router.......................................................169

Resolve a browser security warning...............................................170

Google Chrome: add a security exception..............................171

Apple Safari: add a security exception.....................................172

Mozilla Firefox: add a security exception.................................172

Microsoft Internet Explorer: add a security exception............173

Microsoft Edge: add a security exception................................174

You cannot access the Internet.......................................................175

Troubleshoot Internet browsing.....................................................177

Changes are not saved....................................................................177

Troubleshoot WiFi connectivity......................................................177

Troubleshoot your network using the ping utility........................178

Test the LAN path to your router...............................................178

Test the path from a Windows-based computer to a remote

device............................................................................................179

Appendix A Supplemental Information

Factory settings.................................................................................182

Technical specifications...................................................................183

Hardware Setup

The NETGEAR Nighthawk AC2300 Cybersecurity WiFi Router Model RS400 comes with NETGEAR Armor built-in and includes a 3-year NETGEAR Armor subscription.

NETGEAR Armor protects your connected home from Internet threats and provides best-in-class anti-virus and data theft protection for all of your smartphones and computers, with an unlimited number of devices covered.

This chapter contains the following sections:

• Unpack your router

• Attach the antennas

• LEDs and buttons on the top panel

• Rear panel

• Router label and QR Code label

• Position your router

• Cable your router

For more information about the topics covered in this manual, visit the support website at netgear.com/support/.

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Unpack your router

Figure 1. Package contents

Your package contains following:

NETGEAR Nighthawk AC2300 Cybersecurity WiFi Router

•

Three Antennas

•

Power adapter (varies by region)

•

Yellow Ethernet cable

•

Quick start guide

•

Attach the antennas

The router comes with three antennas.

To attach the antennas:

Remove the antenna caps from the antenna posts on the router.

2. Align the antennas with the antenna posts on the router.

3. Attach the antennas on the threaded antenna posts.

Position the antennas for the best WiFi performance.

User Manual10Hardware Setup

45° 45°

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

We recommend that the center antenna be vertical and that you aim the others outward at 45-degree angles, as shown.

LEDs and buttons on the top panel

The status LEDs and buttons are located on the top of the router.

Table 1. LED and button descriptions

DescriptionsLEDs and Buttons

Power

Internet

2.4 GHz WiFi

5 GHz WiFi

USB 3.0 (front panel)

Solid amber. The router is starting. Blinking amber. The firmware is upgrading, or the Reset button was pressed. Solid white. The router is ready. Blinking white. The firmware is corrupted. Off. Power is not supplied to the router.

Solid white. The Internet connection is ready. Solid amber. The router detected an Ethernet cable connection to the modem. Blinking white. The port is sending or receiving traffic. Off. No Ethernet cable is connected between the router and the modem.

Solid white. The 2.4 GHz WiFi radio is operating. Blinking white. The router is sending or receiving WiFi traffic. Off. The 2.4 GHz WiFi radio is off.

Solid white. The 5 GHz WiFi radio is operating. Blinking white. The router is sending or receiving WiFi traffic. Off. The 5 GHz WiFi radio is off.

Solid white. A USB storage device is connected and is ready. Blinking white. A USB storagedevice is plugged in and is trying to connect. Off. No USB storagedevice is connected, or someone clicked the Safely Remove Hardware button and it is now safe to remove the attached USB storage device.

USB 2.0 (rear panel)

Solid white. A USB device is connected and is ready. Blinking white. A USB device is plugged in and is trying to connect. Off. No USB device is connected, or someone clicked the Safely Remove Hardware

button and it is now safe to remove the attached USB device.

User Manual11Hardware Setup

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Table 1. LED and button descriptions (Continued)

DescriptionsLEDs and Buttons

LAN ports 1–4

WiFi On/Off button with LED

WPS button with LED

The LED color indicates the speed: white for Gigabit Ethernet connections and amber for 100 Mbps or 10 Mbps Ethernet connections.

Solid white or solid amber. A powered-on device is connected to the Ethernet port. Blinking white or blinking amber. The port is sending or receiving traffic. Off. No device is connected to this Ethernet port.

Pressing this button for two seconds turns the 2.4 GHz and 5 GHz WiFi radios on and off. If this LED is solid white, the WiFi radios are on. If this LED is off, the WiFi radios are turned off and you cannot use WiFi to connect to the router.

This button lets you use WPS to join the WiFi network without typing the WiFi password. The WPS LED blinks white during this process and then lights solid white.

Rear panel

The following figure shows the rear panel connectors and buttons.

Figure 2. Router rear panel

User Manual12Hardware Setup

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

In addition to the three antenna connectors, viewed from left to right, the rear panel contains the following components:

Reset button. Pressing the Reset button resets the router. If you press the Reset

• button for at least 10 seconds, the Power LED blinks amber and the router returns to its factory settings.

LAN ports. Four Gigabit Ethernet RJ-45 LAN ports to connect the router to LAN

• devices.

Internet port. One Gigabit Ethernet RJ-45 WAN port to connect the router to an

• Internet modem such as a cable modem or DSL modem.

USB 2.0 port. One USB 2.0 port to connect the router to a USB storage device that

• does not require a USB 3.0 connection.

Note: The USB 3.0 port is on the front panel. You can use the USB 3.0 port to connect the router to a USB storage device.

Power On/Off button. Press the Power On/Off button to provide power to the

• router.

DC power connector. Connect the power adapter that came with your router to

• the DC power connector.

Router label and QR Code label

The router label on the bottom panel lists the login information, WiFi network name (SSID) and password (network key), serial number, and MAC address of the router.

Figure 3. Router label

User Manual13Hardware Setup

Your Preset Wireless Settings

WiFi Network Name (SSID):

Network Key (Password):

Your Preset Wireless Settings

WiFi Network Name (SSID):

Network Key (Password):

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The QR code label is on the top panel.

Figure 4. QR code label location

Position your router

The router lets you access your network anywhere within the operating range of your WiFi network. However, the operating distance or range of your WiFi connection can vary significantly depending on the physical placement of your router.

In addition, position your router according to the following guidelines:

Place your router near the center of the area where your computers and other devices

• operate, and within line of sight to your WiFi devices.

Make sure that the router is within reach of an AC power outlet and near Ethernet

• cables for wired computers.

Place the router in an elevated location, minimizing the number walls and ceilings

• between the router and your other devices.

Place the router away from electrical devices such as these:

•

Ceiling fans

- Home security systems

- Microwaves

- Computers

Base of a cordless phone

- 2.4 GHz or 5 GHz cordless phones

User Manual14Hardware Setup

45° 45°

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Place the router away from large metal surfaces, large glass surfaces, insulated walls,

• and items such as these:

- Solid metal door

- Aluminum studs

- Fish tanks

- Mirrors

- Brick

- Concrete

The following factors might limit the range of your WiFi:

The thickness and number of walls the WiFi signal passes through can limit the range.

•

Other WiFi access points in and around your home might affect your router’s signal.

• WiFi access points are routers, repeaters, WiFi range extenders, and any other

devices that emit a WiFi signal for network access.

Cable your router

The following figure shows how to can cable your router.

Figure 5. Cable your router

User Manual15Hardware Setup

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To cable your router:

Unplug your modem’s power, leaving the modem connected to the wall jack for your Internet service.

If your modem uses a battery backup, remove the battery.

2. Plug in and turn on your modem. If your modem uses a battery backup, put the battery back in.

Connect your modem to the Internet port of your router with the yellow Ethernet cable that came with your router.

4. Connect the power adapter to your router and plug the power adapter into an outlet.

Press the Power On/Off button on the back panel of the router.

User Manual16Hardware Setup

Connect to the Router’s Network and Automatically Set Up the Internet Connection

You can connect to the router’s WiFi networks or use a wired Ethernet connection. This chapter explains the ways you can connect, how to access the router and log in, and how to automatically set up the Internet connection.

The chapter contains the following sections:

• Connect to the network

• Types of logins

• Use a web browser to access the router

• Change the language

• Install and manage your router with the Nighthawk app

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Connect to the network

You can connect to the router’s network through a wired or WiFi connection. If you set up your computer to use a static IP address, change the settings so that it uses Dynamic Host Configuration Protocol (DHCP).

Connect to the network using a wired connection

You can connect your computer to the router using an Ethernet cable and join the router’s local area network (LAN).

To connect your computer to the router with an Ethernet cable:

1. Make sure that the router is receiving power (its Power LED is lit).

2. Connect an Ethernet cable to an Ethernet port on your computer.

Connect the other end of the Ethernet cable a LAN port on the router. Your computer connects to the local area network (LAN).

Find and connect to the WiFi network

Note: If you use a smartphone or tablet, you can scan the QR code on therouter to join its WiFi network. You can also use the following procedure.

To find and connect to the WiFi network:

1. Make sure that the router is receiving power (its Power LED is lit).

On your computer or WiFi device, find and select the WiFi network. The preset WiFi network name is on the router label. If you customized the WiFi

network name, use your new WiFi network name.

3. Join the WiFi network and enter the WiFi password. The preset WiFi password is on the router label. If you customized the WiFi password,

use your new WiFi password.

Your device connects to the WiFi network.

WiFi connection using WPS

You can connect your WPS-enabled device to the router’s WiFi network with Wi-Fi Protected Setup (WPS) or you can find and select the WiFi network.

User Manual18Connect to the Router’s Network and Automatically Set Up the Internet Connection

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To use WPS to connect to the WiFi network:

1. Make sure that the router is receiving power (its Power LED is lit).

Check the WPS instructions for your WPS-enabled device.

3. Press the WPS button on the router.

Within two minutes, on your WPS-enabled device, press its WPS button or follow its instructions for WPS connections.

Your WPS-enabled device connects to the WiFi network.

Types of logins

Separate types of logins serve different purposes. It is important that you understand the differences so that you know which login to use when.

Several types of logins are associated with the router:

ISP login. The login that your Internet service provider (ISP) gave you logs you in to

•

your Internet service. Your ISP gave you this login information in a letter or some other way. If you cannot find this login information, contact your ISP.

WiFi network key, WiFi passphrase, or WiFi password. Your router is preset with

•

a unique WiFi network name (SSID) and password for WiFi access. This information is on the router label.

NETGEAR account login. The NETGEAR account email address and password that

•

you must enter to log in to the router when you use a web browser to access the router and the router is connected to the Internet. You can also use your NETGEAR account to register your router and manage your subscriptions. If you do not own a free NETGEAR account, you can create one.

Router login. The router login password that you must enter to log in to the router

•

with the admin user name when you use a web browser to access the router and the router is not connected to the Internet.

Note: If your router is connected to the Internet, use the NETGEAR account email address and password to log in to the router. If your router is not connected to the Internet, use the admin user name and router login password to log in to the router.

Use a web browser to access the router

When you connect to the network (either with WiFi or with an Ethernet cable), you can use a web browser to access the router to view or change its settings. When you access

User Manual19Connect to the Router’s Network and Automatically Set Up the Internet Connection

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

the router, the software automatically checks to see if your router can connect to your Internet service.

Use a web browser to set up the router’s Internet connection automatically

You can set up your router automatically, or you can use a web browser to access the router and set up your router manually. Before you start the setup process, get your ISP information and make sure that the computers and devices in the network are using the settings described here.

When your Internet service starts, your Internet service provider (ISP) typically gives you all the information needed to connect to the Internet. For example, for DSL service, you might need the following information to set up your router:

The ISP configuration information for your DSL account

•

ISP login name and password

•

Fixed or static IP address setting (special deployment by ISP; this setting is rare)

•

If you cannot locate this information, ask your ISP to provide it. When your Internet connection is working, you no longer need to launch the ISP login program on your computer to access the Internet. When you start an Internet application, your router automatically logs you in.

The NETGEAR installation assistant runs on any device with a web browser. Installation and basic setup takes about 15 minutes to complete.

To use a web browser to set up your router’s Internet connection automatically:

1. Make sure that the router is powered on.

2. Make sure that your computer or mobile device is connected to the router with an

Ethernet cable (wired) or over WiFi with the preset security settings listed on the label.

Note: When the router connects to the Internet, you are prompted to customize the router’s WiFi network name and WiFi password. If you want to do so, use a wired connection to avoid being disconnected when the new WiFi settings take effect. You can also change the WiFi network name and WiFi password later.

3. Launch a web browser.

Your browser might display a security warning and might not let you proceed. You can either ignore this warning or add a security certificate as described in the following examples.

User Manual20Connect to the Router’s Network and Automatically Set Up the Internet Connection

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Note: For detailed information about security warnings and adding security

certificates, see Resolve a browser security warning on page 170.

If Google Chrome displays a Your connection is not private message or a similar

•

warning, click the ADVANCED link. Then, click the Proceed to 192.168.1.1 (unsafe) link and install a security certificate.

If Apple Safari displays a This connection is not private message or a similar

•

warning, click the Show Details button. Then, click the visit this website link. If a warning pop-up window opens, click the Visit Website button. If another pop-up window opens to let you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button.

If Mozilla Firefox displays a Your connection is not secure message or a similar

•

warning, click the ADVANCED button. Then, click the Add Exception button. In the pop-up window that opens, click the Confirm Security Exception button and install a security certificate.

If Microsoft Internet Explorer displays a There is a problem with this website’s

•

security certificate message or a similar warning, click the Continue to this website (not recommended) link and install a security certificate.

If Microsoft Edge displays a There is a problem with this website’s security

•

certificate message or a similar warning, select Details > Go on to the webpage and install a security certificate.

The page that displays depends on whether you accessed the router before:

•

The first time you set up the Internet connection for your router, the browser goes to https://www.routerlogin.net and the Configuring the Internet Connection page displays.

•

If you already set up the Internet connection, enter https://www.routerlogin.net in the address field for your browser to start the installation process.

4. Follow the onscreen instructions.

The router connects to the Internet.

If you already ignored the security warning or installed a security certificate but the browser still does not display the NETGEAR installation assistant, do the following:

Make sure that the computer is connected to one of the LAN Ethernet ports or

• over WiFi to the router.

Make sure that the router is receiving power and that its Power LED is lit.

•

Close and reopen the browser or clear the browser cache.

•

and Automatically Set Up the Internet Connection

User Manual21Connect to the Router’s Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Browse to https://www.routerlogin.net.

•

If the computer is set to a static or fixed IP address (this setting is uncommon),

• change it to obtain an IP address automatically from the router.

If the router does not connect to the Internet, do the following: a. Review your settings. Make sure that you selected the correct options and typed

everything correctly.

Contact your ISP to verify that you are using the correct configuration information.

c. Read You cannot access the Internet on page 175.

If problems persist, register your NETGEAR product and contact NETGEAR Technical Support.

During the initial installation with the NETGEAR installation assistant, you are prompted to register your product.

When the router connects to the Internet, you are prompted to do the following:

Change the password for the router admin user name and set up security questions.

•

Customize your WiFi network name and password.

•

Let the router check if a new firmware version is available and upgrade the firmware.

•

Download the Nighthawk app.

•

Log in to the router

When you first connect to your router and launch a web browser, the browser automatically displays the router web interface. If you want to view or change settings for the router later, you can use a browser to log in to the router web interface.

Your browser might display a security warning and might not let you proceed. You can either ignore this warning or add a security certificate as described in the following examples.

Note: For detailed information about security warnings and adding security certificates, see Resolve a browser security warning on page 170.

If Google Chrome displays a Your connection is not private message or a similar

•

warning, click the ADVANCED link. Then, click the Proceed to 192.168.1.1 (unsafe) link and install a security certificate.

User Manual22Connect to the Router’s Network and Automatically Set Up the Internet Connection

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

If Apple Safari displays a This connection is not private message or a similar warning,

•

click the Show Details button. Then, click the visit this website link. If a warning pop-up window opens, click the Visit Website button. If another pop-up window opens to let you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button.

If Mozilla Firefox displays a Your connection is not secure message or a similar

•

warning, click the ADVANCED button. Then, click the Add Exception button. In the pop-up window that opens, click the Confirm Security Exception button and install a security certificate.

If Microsoft Internet Explorer displays a There is a problem with this website’s security

•

certificate message or a similar warning, click the Continue to this website (not recommended) link and install a security certificate.

If Microsoft Edge displays a There is a problem with this website’s security certificate

•

message or a similar warning, select Details > Go on to the webpage and install a security certificate.

To log in to the router:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter https://www.routerlogin.net.

Note: You can also enter http://www.routerlogin.com, https://192.168.1.1, or http://192.168.1.1. If you enter one of these links starting with http://, the browser

automatically redirects your request to https:// (secure HTTP). The procedures in this manual use http://www.routerlogin.net.

Your browser might display a security message, which you can ignore (see the introduction to this task).

A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

Change the language

By default, the language that displays when you log in to the router web interface is set to Auto.

User Manual23Connect to the Router’s Network and Automatically Set Up the Internet Connection

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To change the language:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

In the upper right corner, select a language from the menu.

When prompted, click the OK button to confirm this change. The page refreshes with the language that you selected.

Install and manage your router with the Nighthawk app

With the Nighthawk app, you can easily install and manage your router. The app automatically updates the router to the latest firmware, allows you to personalize your WiFi network, and even helps register your router with NETGEAR.

The Nighthawk app is available for iOS and Android mobile devices.

To install your router using the Nighthawk app:

1. To download the app, visit

https://www.netgear.com/home/apps-services/nighthawk-app/.

On your mobile device, tap Settings > Wi-Fi and find and connect to your router’s WiFi network.

Your router’s WiFi network name (SSID) and network key (WiFi password) are on the router label.

If the label includes a QR code, you can scan the QR code to join the router’s WiFi network.

3. Launch the Nighthawk app on your mobile device.

4. Follow the prompts on the app to install your router and connect to the Internet.

User Manual24Connect to the Router’s Network and Automatically Set Up the Internet Connection

Specify Your Internet Settings

Usually, the quickest way to set up the router to use your Internet connection is to allow your router to detect the Internet connection automatically when you first access the router web interface. You can also customize and manually specify your Internet settings.

This chapter contains the following sections:

• Use the Internet Setup Wizard

• Manually set up the Internet connection

• Specify IPv6 Internet connections

• Manage the MTU size

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Use the Internet Setup Wizard

You can use the Setup Wizard to detect your Internet settings and automatically set up your router. The Setup Wizard is not the same as the pages that display the first time you connect to your router to set it up.

To use the Setup Wizard:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup Wizard.

The Setup Wizard page displays.

5. Select the Yes radio button.

If you select the No radio button, you are taken to the Internet Setup page (see Manually set up the Internet connection on page 26).

6. Click the Next button.

The Setup Wizard searches your Internet connection for servers and protocols to determine your Internet configuration.

Manually set up the Internet connection

You can view or change the router’s Internet connection settings.

Specify an Internet connection without a login

To specify the Internet connection settings:

Launch a web browser from a computer or mobile device that is connected to therouter network.

Enter http://www.routerlogin.net. A login window opens.

User Manual26Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Internet.

The Internet Setup page displays.

5. In the Does your Internet connection require a login? section, leave the No radio

button selected.

If your Internet connection requires an account name or host name, click the Edit button in the Account Name section and enter the account name.

If your Internet connection requires a domain name, type it in the Domain Name (If Required) field.

For the other sections on this page, the default settings usually work, but you can change them.

8. Select an Internet IP Address radio button:

•

Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address. Your

ISP automatically assigns these addresses.

• Use Static IP Address. Enter the IP address, IP subnet mask, and the gateway IP

address that your ISP assigned. The gateway is the ISP router to which your router connects.

9. Select a Domain Name Server (DNS) Address radio button:

•

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.

Your ISP automatically assigns this address.

•

Use These DNS Servers. If you know that your ISP requires specific servers, select

this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

10. Select a Router MAC Address radio button:

•

Use Default Address. Use the default MAC address.

• Use Computer MAC Address. The router captures and uses the MAC address

of the computer that you are now using. You must use the one computer that the ISP allows.

• Use This MAC Address. Enter the MAC address that you want to use.

11. Click the Apply button.

Your settings are saved.

User Manual27Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

12. Click the Test button to test your Internet connection.

If the NETGEAR website does not display within one minute, see You cannot access the Internet on page 175.

Specify an Internet connection that uses a login and PPPoE service

You can manually specify the connection settings for a PPPoE Internet service for which you must log in. Use the information that your Internet service provider (ISP) gave you to connect to your Internet service. If you cannot find this information, contact your ISP. Entering incorrect information might prevent the router from connecting to the Internet.

To specify the connection settings for a PPPoE Internet service for which you must log in:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Internet.

The Internet Setup page displays.

5. Select the Does your Internet connection require a login? Yes radio button.

The page adjusts.

6. From the Internet Service Provider menu, select PPPoE as the encapsulation

method. The page adjusts.

In the Login field, enter the login name that your ISP gave you. This login name is often an email address.

In the Password field, type the password that you use to log in to your Internet service.

If your ISP requires a service name, type it in the Service Name (if Required) field.

User Manual28Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

10. From the Connection Mode menu, select Always On, Dial on Demand, or Manually

Connect.

11.

To change the number of minutes until the Internet login times out, in the Idle Timeout (In minutes) field, type the number of minutes.

This is how long the router keeps the Internet connection active when no one on the network is using the Internet connection. A value of 0 (zero) means never log out.

12. Select an Internet IP Address radio button:

•

Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address. Your

ISP automatically assigns these addresses.

• Use Static IP Address. Enter the IP address, IP subnet mask, and the gateway IP

address that your ISP assigned. The gateway is the ISP router to which your router connects.

13. Select a Domain Name Server (DNS) Address radio button:

•

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.

Your ISP automatically assigns this address.

•

Use These DNS Servers. If you know that your ISP requires specific servers, select

this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

14. Select a Router MAC Address radio button:

•

Use Default Address. Use the default MAC address.

• Use Computer MAC Address. The router captures and uses the MAC address

of the computer that you are now using. You must use the one computer that the ISP allows.

• Use This MAC Address. Enter the MAC address that you want to use.

15. Click the Apply button.

Your settings are saved.

16. Click the Test button to test your Internet connection.

If the NETGEAR website does not display within one minute, see You cannot access the Internet on page 175.

Specify an Internet connection that uses a login and PPTP or L2TP service

You can manually specify the connection settings for a PPTP or L2TP Internet service for which you must log in. Use the information that your Internet service provider (ISP) gave you to connect to your Internet service. If you cannot find this information, contact

User Manual29Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

your ISP. Entering incorrect information might prevent the router from connecting to the Internet.

To specify the connection settings for a PPTP or L2TP Internet service for which you must log in:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Internet.

The Internet Setup page displays.

5. Select the Does your Internet connection require a login? Yes radio button.

The page adjusts.

6. From the Internet Service Provider menu, select PPTP or L2TP as the encapsulation

method. The page adjusts.

In the Login field, enter the login name that your ISP gave you. This login name is often an email address.

In the Password field, type the password that you use to log in to your Internet service.

9. From the Connection Mode menu, select Always On, Dial on Demand, or Manually

Connect.

10.

To change the number of minutes until the Internet login times out, in the Idle Timeout (In minutes) field, type the number of minutes.

This is how long the router keeps the Internet connection active when no one on the network is using the Internet connection. A value of 0 (zero) means never log out.

11.

If your ISP gave you fixed IP addresses and a connection ID or name, type them in the My IP Address, Subnet Mask, Server Address, Gateway IP Address, and Connection ID/Name fields.

If your ISP did not give you IP addresses, a connection ID, or name, leave these fields blank. The connection ID or name applies to a PPTP service only.

User Manual30Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

12. Select a Domain Name Server (DNS) Address radio button:

•

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.

Your ISP automatically assigns this address.

•

Use These DNS Servers. If you know that your ISP requires specific servers, select

this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

13. Select a Router MAC Address radio button:

•

Use Default Address. Use the default MAC address.

• Use Computer MAC Address. The router captures and uses the MAC address

of the computer that you are now using. You must use the one computer that the ISP allows.

• Use This MAC Address. Enter the MAC address that you want to use.

14. Click the Apply button.

Your settings are saved.

15. Click the Test button to test your Internet connection.

If the NETGEAR website does not display within one minute, see You cannot access the Internet on page 175.

Specify IPv6 Internet connections

You can set up an IPv6 Internet connection if the router does not detect it automatically.

To set up an IPv6 Internet connection:

1. Launch a web browser from a computer or mobile device that is connected to the

router network.

2. Enter http://www.routerlogin.net.

A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive. The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

5. From the Internet Connection Type menu, select the IPv6 connection type:

If you are not sure, select Auto Detect so that the router detects the IPv6 type

• that is in use.

User Manual31Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

If your Internet connection does not use PPPoe or DHCP, or is not fixed, but is

• IPv6, select Auto Config.

Your Internet service provider (ISP) can provide this information.

6. Click the Apply button.

Your settings are saved.

Requirements for entering IPv6 addresses

IPv6 addresses are denoted by eight groups of hexadecimal quartets that are separated by colons. You can reduce any four-digit group of zeros within an IPv6 address to a single zero or omit it. The following errors invalidate an IPv6 address:

More than eight groups of hexadecimal quartets

•

More than four hexadecimal characters in a quartet

•

More than two colons in a row

•

Use Auto Detect for an IPv6 Internet connection

To set up an IPv6 Internet connection through autodetection:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

5. From the Internet Connection Type menu, select Auto Detect.

The page adjusts. The router automatically detects the information in the following fields:

Connection Type. This field indicates the connection type that is detected.

•

Router’s IPv6 Address on WAN. This field shows the IPv6 address that is acquired

• for the router’s WAN (or Internet) interface. The number after the slash (/) is the

User Manual32Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.

Router’s IPv6 Address on LAN. This field shows the IPv6 address that is acquired

• for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.

6. Select an IP Address Assignment radio button:

•

Use DHCP Server. This method passes more information to LAN devices but

some IPv6 systems might not support the DHCv6 client function.

•

Auto Config. This is the default setting.

This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).

(Optional) Select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.

If you do not specify an ID here, the router generates one automatically from its MAC address.

8. Click the Apply button.

Your settings are saved.

Set up an IPv6 6to4 tunnel Internet connection

The remote relay router is the router to which your router creates a 6to4 tunnel. Make sure that the IPv4 Internet connection is working before you apply the 6to4 tunnel settings for the IPv6 connection.

To set up an IPv6 Internet connection by using a 6to4 tunnel:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

User Manual33Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

5. From the Internet Connection Type menu, select 6to4 Tunnel.

The page adjusts.

The router automatically detects the information in the Router’s IPv6 Address on LAN field. This field shows the IPv6 address that is acquired for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.

6. Select a Remote 6to4 Relay Router radio button:

• Auto. Your router uses any remote relay router that is available on the Internet.

This is the default setting.

•

Static IP Address. Enter the static IPv4 address of the remote relay router. Your

IPv6 ISP usually provides this address.

7. Select an IPv6 Domain Name Server (DNS) Address radio button:

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.

• Your ISP automatically assigns this address.

Use These DNS Servers. If you know that your ISP requires specific servers, select

• this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

8. Select an IP Address Assignment radio button:

•

Use DHCP Server. This method passes more information to LAN devices but

some IPv6 systems might not support the DHCPv6 client function.

•

Auto Config. This is the default setting.

This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).

(Optional) Select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.

If you do not specify an ID here, the router generates one automatically from its MAC address.

10. Click the Apply button.

Your settings are saved.

User Manual34Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Set up an IPv6 pass-through Internet connection

In pass-through mode, the router works as a Layer 2 Ethernet switch with two ports (LAN and WAN Ethernet ports) for IPv6 packets. The router does not process any IPv6 header packets.

To set up a pass-through IPv6 Internet connection:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

5. From the Internet Connection Type menu, select Pass Through.

The page adjusts, but no additional fields display.

6. Click the Apply button.

Your settings are saved.

Set up a fixed IPv6 Internet connection

To set up a fixed IPv6 Internet connection:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

User Manual35Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

5. From the Internet Connection Type menu, select Fixed.

The page adjusts.

Configure the fixed IPv6 addresses for the WAN connection:

IPv6 Address/Prefix Length. The IPv6 address and prefix length of the router

• WAN interface.

Default IPv6 Gateway. The IPv6 address of the default IPv6 gateway for the

• router’s WAN interface.

Primary DNS Server. The primary DNS server that resolves IPv6 domain name

• records for the router.

Secondary DNS Server. The secondary DNS server that resolves IPv6 domain

• name records for the router.

Note: If you do not specify the DNS servers, the router uses the DNS servers that are configured for the IPv4 Internet connection on the Internet Setup page. (See Manually set up the Internet connection on page 26.)

7. Select an IP Address Assignment radio button:

•

Use DHCP Server. This method passes more information to LAN devices but

some IPv6 systems might not support the DHCv6 client function.

•

Auto Config. This is the default setting.

This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).

In the IPv6 Address/Prefix Length fields, specify the static IPv6 address and prefix length of the router’s LAN interface.

If you do not specify an ID here, the router generates one automatically from its MAC address.

9. Click the Apply button.

Your settings are saved.

Set up an IPv6 DHCP Internet connection

To set up an IPv6 Internet connection with a DHCP server:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

User Manual36Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

5. From the Internet Connection Type menu, select DHCP.

The page adjusts.

The router automatically detects the information in the following fields:

Router’s IPv6 Address on WAN. This field shows the IPv6 address that is acquired

• for the router’s WAN (or Internet) interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.

Router’s IPv6 Address on LAN. This field shows the IPv6 address that is acquired

(Optional) In the DHCP User Class (If Required) field, enter a host name. Most people can leave this field blank, but if your ISP gave you a specific host name,

enter it here.

(Optional) In the DHCP Domain Name (If Required) field, enter a domain name. You can type the domain name of your IPv6 ISP. Do not enter the domain name for

the IPv4 ISP here. For example, if your ISP’s mail server is mail.xxx.yyy.zzz, type xxx.yyy.zzz as the domain name. If your ISP provided a domain name, type it in this field. For example, Earthlink Cable might require a host name of home, and Comcast sometimes supplies a domain name.

8. Select an IPv6 Domain Name Server (DNS) Address radio button:

•

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.

Your ISP automatically assigns this address.

•

Use These DNS Servers. If you know that your ISP requires specific servers, select

this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

9. Select an IP Address Assignment radio button:

User Manual37Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

•

Use DHCP Server. This method passes more information to LAN devices but

some IPv6 systems might not support the DHCv6 client function.

•

Auto Config. This is the default setting.

This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).

10.

(Optional) Select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.

If you do not specify an ID here, the router generates one automatically from its MAC address.

11. Click the Apply button.

Your settings are saved.

Set up an IPv6 PPPoE Internet connection

To set up a PPPoE IPv6 Internet connection:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

5. From the Internet Connection Type menu, select PPPoE.

The page adjusts.

The router automatically detects the information in the following fields:

Router’s IPv6 Address on WAN. This field shows the IPv6 address that is acquired

Router’s IPv6 Address on LAN. This field shows the IPv6 address that is acquired

• for the router’s LAN interface. The number after the slash (/) is the length of the

User Manual38Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.

In the Login field, enter the login information for the ISP connection. This is usually the name that you use in your email address. For example, if your main

mail account is JerAB@ISP.com, you would type JerAB in this field. Some ISPs (like Mindspring, Earthlink, and T-DSL) require that you use your full email address when you log in. If your ISP requires your full email address, type it in this field.

In the Password field, enter the password for the ISP connection.

In the Service Name field, enter a service name. If your ISP did not provide a service name, leave this field blank.

Note: The default setting of the Connection Mode menu is Always On to provide a steady IPv6 connection. The router never terminates the connection. If the connection is terminated, for example, when the modem is turned off, the router attempts to reestablish the connection immediately after the PPPoE connection becomes available again.

9. Select an IPv6 Domain Name Server (DNS) Address radio button:

•

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.

Your ISP automatically assigns this address.

•

Use These DNS Servers. If you know that your ISP requires specific servers, select

this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

10. Select an IP Address Assignment radio button:

•

Use DHCP Server. This method passes more information to LAN devices but

some IPv6 systems might not support the DHCv6 client function.

•

Auto Config. This is the default setting.

This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).

11.

(Optional) Select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.

If you do not specify an ID here, the router generates one automatically from its MAC address.

12. Click the Apply button.

Your settings are saved.

User Manual39Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Use Auto Config for an IPv6 Internet connection

To set up an IPv6 Internet connection through autoconfiguration:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

From the Internet Connection Type menu, select Auto Config. The page adjusts.

The router automatically detects the information in the following fields:

Router’s IPv6 Address on WAN. This field shows the IPv6 address that is acquired

Router’s IPv6 Address on LAN. This field shows the IPv6 address that is acquired

(Optional) In the DHCP User Class (If Required) field, enter a host name. Most people can leave this field blank, but if your ISP gave you a specific host name,

enter it here.

(Optional) In the DHCP Domain Name (If Required) field, enter a domain name. You can type the domain name of your IPv6 ISP. Do not enter the domain name for

User Manual40Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

8. Select an IPv6 Domain Name Server (DNS) Address radio button:

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.Your

• ISP automatically assigns this address.

Use These DNS Servers. If you know that your ISP requires specific servers, select

• this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

9. Select an IP Address Assignment radio button:

Use DHCP Server. This method passes more information to LAN devices but

• some IPv6 systems might not support the DHCv6 client function.

Auto Config. This is the default setting.

•

This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).

10.

(Optional) Select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.

If you do not specify an ID here, the router generates one automatically from its MAC address.

11. Click the Apply button.

Your settings are saved.

Set up an IPv6 6rd tunnel connection

The 6rd protocol makes it possible to deploy IPv6 to sites using a service provider’s IPv4 network. 6rd uses the service provider’s own IPv6 address prefix. This limits the operational domain of 6rd to the service provider’s network and is under direct control of the service provider. The IPv6 service that is provided is equivalent to native IPv6.

The 6rd mechanism relies on an algorithmic mapping between the IPv6 and IPv4 addresses that are assigned for use within the service provider’s network. This mapping allows for automatic determination of IPv4 tunnel endpoints from IPv6 prefixes, enabling stateless operation of 6rd.

To set up an IPv6 6rd tunnel connection:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

User Manual41Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > IPv6.

The IPv6 page displays.

5. From the Internet Connection Type menu, select 6rd Tunnel.

The page adjusts.

In the 6rd Configuration section, configure the 6rd settings:

6rd Prefix. Enter the IPv6 prefix that your ISP gave you.

•

6rd Prefix Length. Enter the IPv6 prefix length that your ISP gave you.

•

6rd Border Relay Address. Enter the border router’s IPv4 address that your ISP

• gave you.

6rd Address Mask Length. Enter the IPv4 mask length that your ISP gave you.

•

7. Select an IPv6 Domain Name Server (DNS) Address radio button:

•

Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.

Your ISP automatically assigns this address.

•

Use These DNS Servers. If you know that your ISP requires specific servers, select

this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.

8. Select an IP Address Assignment radio button:

•

Use DHCP Server. This method passes more information to LAN devices but

some IPv6 systems might not support the DHCv6 client function.

•

Auto Config. This is the default setting.

This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).

(Optional) Select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.

If you do not specify an ID here, the router generates one automatically from its MAC address.

User Manual42Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

10.

(Optional) Change the MTU size in bytes by specifying a new size in the field. The default size is 1480 bytes.

11. Click the Apply button.

Your settings are saved.

Manage the MTU size

The maximum transmission unit (MTU) is the largest data packet a network device transmits.

MTU concepts

When one network device communicates across the Internet with another, the data packets travel through many devices along the way. If a device in the data path uses a lower maximum transmission unit (MTU) setting than the other devices, the data packets must be split or “fragmented” to accommodate the device with the smallest MTU.

The best MTU setting for NETGEAR equipment is often the default value. In some situations, changing the value fixes one problem but causes another. Leave the MTU unchanged unless one of these situations occurs:

You experience problems connecting to your Internet service, and the technical

• support of either the Internet service provider (ISP) or NETGEAR recommends changing the MTU setting.

For example, if a secure website does not open, or displays only part of a web page, you might need to change the MTU.

You use VPN and experience severe performance problems.

•

You used a program to optimize MTU for performance reasons and now you are

• experiencing connectivity or performance problems.

CAUTION: An incorrect MTU setting can cause Internet communication problems. For

example, you might not be able to access certain websites, frames within websites, secure login pages, or FTP or POP servers.

If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are willing to experiment, you can gradually reduce the MTU from the maximum value of 1500 until the problem goes away. The following table describes common MTU sizes and applications.

User Manual43Specify Your Internet Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Table 2. Common MTU sizes

ApplicationMTU

1500

The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE or VPN and is the default value for NETGEAR routers, adapters, and switches.

Used in PPPoE environments.1492

Maximum size to use for pinging. (Larger packets are fragmented.)1472

Used in some DHCP environments.1468

Used in PPPoA environments.1458

Used in PPTP environments or with VPN.1436

Change the MTU size

To change the MTU size:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays.

In the MTU Size field, enter a value from 64 to 1500.

6. Click the Apply button. Your settings are saved.

User Manual44Specify Your Internet Settings

Control Access to the Internet

The router comes with a built-in firewall that helps protect your home network from unwanted intrusions from the Internet.

This chapter includes the following sections:

• Manage NETGEAR Armor

• Enable Circle with Disney

• Enable access control to allow or block access to the Internet

• Manage network access control lists

• Use keywords to block Internet sites

• Delete keywords from the blocked list

• Prevent blocking on a trusted computer

• Block services from the Internet

• Schedule when to block Internet sites and services

• Set up security event email notifications

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Manage NETGEAR Armor

In addition to built-in security features, your router includes a 3-year subscription to NETGEAR Armor.

After you start your subscription, NETGEAR Armor protects your home network from potential cyber threats and provides complete data protection, advanced threat defense, webcam protection, multilayer ransomware protection, anti-phishing, safe files, secure browsing, rescue mode, anti-fraud, and anti-theft. In addition, NETGEAR Armor provides multiple performance and privacy tools.

NETGEAR Armor can support features for your Windows-based computers and your Mac OS, iOS, and Android devices.

For more information about NETGEAR Armor, visit netgear.com/landings/armor/default.aspx.

We recommend that you manage NETGEAR Armor from the Nighthawk app. However you can use the router web interface to sign in to NETGEAR Armor and start your subscription. After you activate NETGEAR Armor, you can temporarily disable it. You can also reenable it again.

To view or change your Armor settings, use the NETGEAR Armor portal.

Activate Armor using the Nighthawk app

To activate Armor using the Nighthawk app:

1. Launch the Nighthawk app. The dashboard displays.

2. Tap Security. The Armor page displays.

3. Tap the ACTIVATE button. Armor is activated.

View or change your NETGEAR Armor settings using the Nighthawk app

To view or change your NETGEAR Armor settings using the Nighthawk app:

1. Launch the Nighthawk app. The dashboard displays.

2. Tap Security.

User Manual46Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The Armor page displays.

You can now view or change the settings.

View or change your NETGEAR Armor settings from the Armor portal

If you already activated NETGEAR Armor, you can view or change your NETGEAR Armor settings from the NETGEAR Armor portal.

To view or change your NETGEAR Armor settings:

1. Launch a web browser and visit armor.netgear.com. The NETGEAR account sign in page displays.

Enter your NETGEAR account email address and password in the fields and then click the Sign In button.

The NETGEAR Armor portal displays.

Sign in to NETGEAR Armor from the router web interface and start your subscription

Your router includes a NETGEAR Armor subscription. If you did not activate NETGEAR Armor during the router installation process, you can use the router web interface to activate NETGEAR Armor and start your subscription.

To sign in to NETGEAR Armor from the router web interface and start your subscription:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select NETGEAR Armor. The NETGEAR Armor Protection page displays.

5. Scroll down to the NETGEAR Armor pane and click the Sign In button. A login window opens.

User Manual47Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Enter your NETGEAR account email address and password in the fields and then click the LOGIN button.

If you did not create a NETGEAR account, visit netgear.com/mynetgear and register your router to create a NETGEAR account.

The router contacts the NETGEAR server and NETGEAR Armor is activated.

Access the NETGEAR Armor portal from the router web interface

If you already activated NETGEAR Armor, you can access the NETGEAR Armor portal through the router web interface.

To view or change your NETGEAR Armor settings from the router web interface:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Scroll down to the NETGEAR Armor pane and click the Launch NETGEAR Armor button.

The NETGEAR account sign in page displays.

Enter your NETGEAR account email address and password in the fields and then click the Sign In button.

The NETGEAR Armor portal displays.

Disable or Reenable NETGEAR Armor from the router web interface

If you already activated NETGEAR Armor, you can temporarily disable it. You can also reenable it again.

User Manual48Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To disable or reenable NETGEAR Armor from the router web interface:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select NETGEAR Armor. The NETGEAR Armor Protection page displays.

5. Set the NETGEAR Armor Status button to Enabled or to Disabled.

6. Click the Apply button. You settings are saved.

If NETGEAR Armor is enabled, the Status field displays Protected.

If NETGEAR Armor is disabled, the Status field displays Not protected.

Enable Circle with Disney

Circle with Disney is a parental control technology that helps you monitor your children’s devices that are connected to your network.

You can enable Circle using your router web interface or you can enable Circle using the Circle app.

After you enable Circle, you can do the following with the Circle app:

Set time limits for daily Internet usage

•

Set individual filter levels for each family member

•

Set a bedtime for your family member's devices

•

Pause the Internet

•

Manage your family’s mobile devices across all networks with Circle Go

•

For more information about Circle with Disney, visit www.netgear.com/circle.

User Manual49Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Enable Circle with Disney using the Nighthawk app

Before enabling Circle, make sure that your router is in router mode (which is the default mode). Your router must be in router mode to work with Circle. You can’t enable Circle if your router is in access point (AP) mode or bridge mode.

To enable Circle with Disney using the Nighthawk app:

1. Launch the Nighthawk app. The dashboard displays.

2. Tap Parental Controls. The Parental Control page displays.

3. Move the Enable Circle slider to the right to enable Circle with Disney.

4. Tap the Download and Install Circle App button.

5. Download the Circle app. You must use the Circle app to finish setting up your Circle account.

Launch the Circle app and follow the prompts.

Enable Circle with Disney using the Circle app

If your router is not running the latest firmware, the Circle app checks your router’s firmware and updates the firmware for you.

To enable Circle with Disney using the Circle app:

1. Make sure that your mobile device is connected to your router's network.

2. Download the Circle app on your mobile device.

3. Launch the Circle app.

4. Follow the prompts to set up Circle.

User Manual50Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Enable access control to allow or block access to the Internet

You can use access control to block or allow access to the Internet through your router.

To set up access control:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > Access Control. The Access Control page displays.

5. Select the Turn on Access Control check box. You must select this check box before you can specify an access rule and use the

Allow and Block buttons. When this check box is cleared, all devices are allowed to connect, even if a device is in the blocked list.

6. Select an access rule:

• Allow all new devices to connect. With this setting, a new device can access

your network. You don’t need to enter the its MAC address. This is the default setting. We recommend that you leave this radio button selected.

•

Block all new devices from connecting. With this setting, a new device cannot

access your router’s Internet connection, but can still access your router’s local network. Before a device accesses your router’s Internet connection, you must enter its MAC address for an Ethernet connection and its MAC address for a WiFi connection in the allowed list.

The access rule does not affect previously blocked or allowed devices. It applies only to devices joining your network in the future after you apply these settings.

To view allowed or blocked devices that are not connected, click one of the following links:

•

View list of allowed devices not currently connected to the network

•

View list of blocked devices not currently connected to the network

User Manual51Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The list displays.

8. To allow the WiFi-enabled computer or mobile device you’re currently using to continue to access the Internet, select the check box next to your computer or device, and click the Allow button.

9. Click the Apply button. Your settings are saved.

Manage network access control lists

You can manage network access control lists (ACLs) that block or allow access to the Internet through your router.

To manage devices that are allowed or blocked:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > Access Control. The Access Control page displays.

5. Select the Turn on Access Control radio button.

Click the View list of allowed devices not currently connected to the network link.

The list displays.

Select the check box for a device.

Use the Add button, Edit button, and Remove from the list button as needed.

9. Click the Apply button. Your settings are saved.

User Manual52Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Use keywords to block Internet sites

You can use keywords to block certain Internet sites from your network. You can use blocking all the time or based on a schedule.

To block Internet sites:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > Block Sites. The Block Sites page displays.

5. Select a keyword blocking option:

Per Schedule. Turn on keyword blocking according to a schedule that you set.

•

For more information, see Schedule when to block Internet sites and services on page 56.

Always. Turn on keyword blocking all the time, independent of the Schedule

•

page.

In the Type keyword or domain name here field, enter a keyword or domain that you want to block.

For example:

Specify XXX to block http://www.badstuff.com/xxx.html.

•

Specify .com if you want to allow only sites with domain suffixes such as .edu or

•

.gov.

Enter a period (.) to block all Internet browsing access.

•

7. Click the Add Keyword button. The keyword is added to the keyword list. The keyword list supports up to 32 entries.

8. Click the Apply button. Keyword blocking takes effect.

User Manual53Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Delete keywords from the blocked list

To delete keywords from the list:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > Block Sites. The Block Sites page displays.

Do one of the following:

• To delete a single word, select it and click the Delete Keyword button.

The keyword is removed from the list.

• To delete all keywords on the list, click the Clear List button.

All keywords are removed from the list.

6. Click the Apply button. Your settings are saved.

Prevent blocking on a trusted computer

You can exempt one trusted computer from blocking. The computer that you exempt must be assigned a fixed IP address. You can use the reserved IP address feature to specify the IP address. See Manage reserved LAN IP addresses on page 73.

To specify a trusted computer:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

User Manual54Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > Block Sites. The Block Sites page displays.

5. Scroll down and select the Allow trusted IP address to visit blocked sites check box.

In the Trusted IP Address field, enter the IP address of the trusted computer.

7. Click the Apply button. Your settings are saved.

Block services from the Internet

You can block Internet services on your network based on the type of service. You can block the services all the time or based on a schedule.

To block services:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > Block Services. The Block Services page displays.

Specify when to block the services:

• To block the services all the time, select the Always radio button.

• To block the services based on a schedule, select the Per Schedule radio button.

For information about how to specify the schedule, see Schedule when to block Internet sites and services on page 56.

User Manual55Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

6. Click the Add button. The Block Services Setup page displays.

7. To add a service that is in the Service Type menu, select the application or service. The settings for this service automatically display in the fields.

To add a service or application that is not in the menu, select User Defined, and do the following:

If you know that the application uses either TCP or UDP, select the appropriate protocol. Otherwise, select TCP/UDP (both).

b. Enter the starting port and ending port numbers.

If the service uses a single port number, enter that number in both fields. To find out which port numbers the service or application uses, you can contact the publisher of the application, ask user groups or newsgroups, or search on the Internet.

Select a filtering option:

•

Only This IP Address. Block services for a single computer.

•

IP Address Range. Block services for a range of computers with consecutive IP

addresses on your network.

•

All lP Addresses. Block services for all computers on your network.

10. Click the Add button. Your settings are saved.

Schedule when to block Internet sites and services

When you schedule blocking, the same schedule is used to block sites and to block services.

To schedule blocking:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

User Manual56Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > Schedule. The Schedule page displays.

Specify when to block keywords and services:

Days to Block. Select the check box for each day that you want to block the

•

keywords, or select the Every Day check box, which automatically selects the check boxes for all days.

Time of Day to Block. Select a start and end time in 24-hour format, or select

•

the All Day check box for 24-hour blocking.

6. Click the Apply button. Your settings are saved.

Set up security event email notifications

The router can email you its logs of router activity. The log records router activity and security events such as attempts to access blocked sites or services.

To set up email notifications:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Security > E-mail. The E-mail page displays.

Select the Turn E-mail Notification On check box.

In the Send to This E-mail Address field, type the email address to which logs and alerts are to be sent.

User Manual57Control Access to the Internet

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

This email address is also used for the From address. If this field is blank, log and alert messages are not sent.

In the Sender field, enter the email sender's name.

In the Your Outgoing Mail Server field, enter the name of your ISP outgoing (SMTP) mail server (such as mail.myISP.com).

You might be able to find this information in the configuration window of your email program. If you leave this field blank, log and alert messages are not sent.

In the Outgoing Mail Server Port Number field, enter a port number in the field. If you do not know the port number, leave the default port number.

10.

If your outgoing email server requires authentication, select the My Mail Server requires authentication check box, and do the following:

In the User Name field, type the user name for the outgoing email server.

In the Password field, type the password for the outgoing email server.

11. To send alerts when someone attempts to visit a blocked site, select the Send Alerts Immediately check box.

Email alerts are sent immediately when someone attempts to visit a blocked site.

12.

To send logs based on a schedule, specify these settings: a. From Send logs according to this schedule menu, select the schedule type.

b. From the Day menu, select the day.

c. From the Time menu, select the time, and select the am or pm radio button.

13. Click the Apply button. Your settings are saved.

Logs are sent automatically according to the schedule that you set. If the log fills before the specified time, it is sent. After the log is sent, it is cleared from the router memory. If the router cannot email the log and the log buffer fills, the router overwrites the log.

User Manual58Control Access to the Internet

Optimize Performance

You can set up the router to optimize performance for applications such as Internet gaming, high-definition video streaming, and VoIP communication. By default, the router uses Wi-Fi Multimedia Quality of Service (WMM QoS).

This chapter contains the following sections:

• Use Dynamic QoS to optimize Internet traffic management

• Wi-Fi Multimedia Quality of Service

• Improve network connections with Universal Plug and Play

• Enable or disable Smart Connect

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Use Dynamic QoS to optimize Internet traffic management

Dynamic Quality of Service (QoS) helps improve your router’s Internet traffic management capabilities through better application and device identification, bandwidth allocation, and traffic prioritization techniques. Dynamic QoS resolves traffic congestion when the Internet bandwidth is limited and different demands compete for bandwidth.

Enable Dynamic QoS

Because not everyone uses Dynamic QoS, it is disabled by default.

To enable Dynamic QoS:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Dynamic QoS. The Dynamic QoS page displays.

5. Select the Enable Dynamic QoS check box.

Specify your Internet bandwidth:

• Let Speedtest detect my Internet bandwidth. We recommend that you use

Speedtest to detect your Internet bandwidth. To use Speedtest, do the following:

a. For more accurate Speedtest results, make sure that no other devices are

accessing the Internet.

b. Select the Let Speedtest detect my Internet bandwidth radio button.

c. Click the Take a Speedtest button.

Speedtest determines your Internet bandwidth.

User Manual60Optimize Performance

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

•

I want to define my Internet Bandwidth. If you know what your download and

upload speed are, select this radio button and enter your download and upload speeds in the fields.

7. Click the Apply button. Your settings are saved.

Enable or disable the automatic QoS database update

The router uses a QoS database of the most popular applications and services to implement dynamic QoS. By default, the router automatically updates this database. If you enabled dynamic QoS, you can turn off this feature and manually update the database.

To enable or disable the automatic Dynamic QoS database update:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Dynamic QoS. The Dynamic QoS page displays.

Select or clear the Automatically update performance optimization database check box.

6. Click the Apply button. Your settings are saved.

Manually update the Dynamic QoS database

The router uses a QoS database of the most popular applications and services to implement Dynamic QoS. By default, the router automatically updates this database when you enable Dynamic QoS, but if you turned off the automatic update feature, you can manually update the database.

User Manual61Optimize Performance

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To manually update the Dynamic QoS database:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Dynamic QoS. The Dynamic QoS page displays.

5. Click the Update Now button. The router checks for the newest version of the database and downloads it.

6. Click the Apply button. Your settings are saved.

Wi-Fi Multimedia Quality of Service

Wi-Fi Multimedia Quality of Service (WMM QoS) prioritizes WiFi voice and video traffic over the WiFi link. WMM QoS is automatically enabled for the router.

WMM QoS prioritizes WiFi data packets from different applications based on four access categories: voice, video, best effort, and background. For an application to receive the benefits of WMM QoS, WMM must be enabled for both it and the WiFi client running that application. Legacy applications that do not support WMM and applications that do not require QoS are assigned to the best effort category, which receives a lower priority than voice and video.

Note: We recommend that you do not disable the WMM settings. If you disable the WMM settings for 2.4 GHz or 5 GHz, the maximum link rate your router can reach is 54 Mbps.

To disable the WMM settings:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net.

User Manual62Optimize Performance

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > QoS Setup. The Dynamic QoS page displays.

5. Click the WMM tab. The page adjusts.

Clear the Enable WMM (Wi-Fi multimedia) settings (2.4GHz b/g/n) check box.

Clear the Enable WMM (Wi-Fi multimedia) settings (5GHz a/n/ac) check box.

8. Click the Apply button. Your settings are saved.

Improve network connections with Universal Plug and Play

Universal Plug and Play (UPnP) helps devices such as Internet appliances and computers access the network and connect to other devices as needed. UPnP devices can automatically discover the services from other registered UPnP devices on the network.

If you use applications such as multiplayer gaming, peer-to-peer connections, or real-time communications such as instant messaging or remote assistance, enable UPnP.

To enable Universal Plug and Play:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > UPnP.

User Manual63Optimize Performance

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The UPnP page displays.

5. Select the Turn UPnP On check box. By default, this check box is selected. UPnP for automatic device configuration can

be enabled or disabled. If the Turn UPnP On check box is cleared, the router does not allow any device to automatically control router resources, such as port forwarding.

6. Type the advertisement period in minutes. The advertisement period specifies how often the router broadcasts its UPnP

information. This value can range from 1 to 1440 minutes. The default period is 30 minutes. Shorter durations ensure that control points receive current device status at the expense of more network traffic. Longer durations can compromise the freshness of the device status but can significantly reduce network traffic.

7. Type the advertisement time to live in hops. The time to live for the advertisement is measured in hops (steps) for each UPnP

packet sent. Hops are the steps a packet takes between routers. The number of hops can range from 1 to 255. The default value for the advertisement time to live is 4 hops, which should be fine for most home networks. If you notice that some devices are not being updated or reached correctly, it might be necessary to increase this value.

8. Click the Apply button. The UPnP Portmap Table displays the IP address of each UPnP device that is accessing

the router and which ports (internal and external) that device opened. The UPnP Portmap Table also displays what type of port is open and whether that port is still active for each IP address.

To refresh the information in the UPnP Portmap Table, click the Refresh button.

Enable or disable Smart Connect

Smart Connect selects the fastest WiFi band for your device. For Smart Connect to work, the 2.4 GHz and 5 GHz bands must use the same WiFi network name (SSID) and network key (password). That means that when you connect to the router with WiFi, you see only one SSID that connects to both bands.

Note: If you enable Smart Connect and the SSID and passwords for the 2.4 GHz and 5 GHz bands do not match, the WiFi settings for 2.4 GHz band overwrites the WiFi settings for 5 GHz band.

User Manual64Optimize Performance

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To enable or disable Smart Connect:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Wireless. The Wireless Setup page displays.

5. Select or clear the Enable Smart Connect check box. Selecting this check box turns on Smart Connect and clearing this check box turns

off Smart Connect.

6. Click the Apply button. Your settings are saved.

User Manual65Optimize Performance

Manage Network Settings

The router comes ready for WiFi, Ethernet, and USB connections. You can customize the router’s network settings. We recommend that you install the router and connect it to the Internet before you change its network settings.

This chapter includes the following sections:

• View or change the WAN settings

• Set up a default DMZ server

• Change the LAN TCP/IP settings

• Change the router’s device name

• Specify the IP addresses that the router assigns

• Disable the DHCP server feature in the router

• Manage reserved LAN IP addresses

• Set up the router as a WiFi access point

• Set up the router in bridge mode

• Return the router to router mode

• Set up a bridge for a port group or VLAN tag group

• Manage custom static routes

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

View or change the WAN settings

You can view or configure wide area network (WAN) settings for the Internet port. You can set up a DMZ (demilitarized zone) server, change the maximum transmit unit (MTU) size, and enable the router to respond to a ping to its WAN (Internet) port.

To view or change the WAN settings:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays.

View or change the following settings:

Disable Port Scan and DoS Protection. DoS protection protects your LAN against

•

denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. Select this check box only in special circumstances.

Default DMZ Server. This feature is sometimes helpful when you are playing

•

online games or videoconferencing, but it makes the firewall security less effective.

Respond to Ping on Internet Port. This feature allows your router to be

•

discovered. Use this feature only as a diagnostic tool or for a specific reason.

Disable IGMP Proxying. IGMP proxying allows a computer on the local area

•

network (LAN) to receive the multicast traffic it is interested in from the Internet. If you do not need this feature, you can select this check box to disable it.

MTU Size (in bytes). The normal MTU (maximum transmit unit) value for most

•

Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. Change the MTU only if you are sure that it is necessary for your ISP connection.

NAT Filtering. Network Address Translation (NAT) determines how the router

•

processes inbound traffic. Secured NAT protects computers on the LAN from attacks from the Internet but might prevent some Internet games, point-to-point applications, or multimedia applications from working. Open NAT provides a much less secured firewall but allows almost all Internet applications to work.

User Manual67Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Disable SIP ALG. Some voice and video communication applications do not

•

work well with the SIP ALG. Disabling the SIP ALG might help your voice and video applications to create and accept a call through the router.

5. Click the Apply button. Your settings are saved.

Set up a default DMZ server

The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation (NAT). The router is programmed to recognize some of these applications and to work correctly with them, but other applications might not function well. In some cases, one local computer can run the application correctly if the IP address for that computer is entered as the default DMZ server.

WARNING: DMZ servers pose a security risk. A computer designated as the default

DMZ server loses much of the protection of the firewall and is exposed to exploits from the Internet. If compromised, the DMZ server computer can be used to attack other computers on your network.

The router usually detects and discards incoming traffic from the Internet that is not a response to one of your local computers or a service that you configured on the Port Forwarding/Port Triggering page. Instead of discarding this traffic, you can specify that the router forwards the traffic to one computer on your network. This computer is called the default DMZ server.

To set up a default DMZ server:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays.

User Manual68Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Select the Default DMZ Server check box.

6. Type the IP address.

7. Click the Apply button. Your settings are saved.

Change the LAN TCP/IP settings

The router is preconfigured to use private IP addresses on the LAN side and to act as a DHCP server. The router’s default LAN IP configuration is as follows:

LAN IP address. 192.168.1.1

•

Subnet mask. 255.255.255.0

•

These addresses are part of the designated private address range for use in private networks and are suitable for most applications. If your network requires a different IP addressing scheme, you can change these settings.

You might want to change these settings if you need a specific IP subnet that one or more devices on the network use, or if you use competing subnets with the same IP scheme.

To change the LAN TCP/IP settings:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > LAN Setup. The LAN Setup page displays.

In the IP Address field, type the IP address.

In the IP Subnet Mask field, type the subnet mask of the router. The IP address and subnet mask identify which addresses are local to a specific

device and which must be reached through a gateway or router.

7. Change the RIP settings.

User Manual69Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Router Information Protocol (RIP) allows a router to exchange routing information with other routers.

a. Select the RIP direction:

Both. The router broadcasts its routing table periodically and incorporates

• information that it receives.

Out Only. The router broadcasts its routing table periodically.

•

In Only. The router incorporates the RIP information that it receives.

•

b. Select the RIP version:

Disabled. This is the default setting.

•

RIP-1. This format is universally supported. It is adequate for most networks,

• unless you are using an unusual network setup.

RIP-2. This format carries more information. Both RIP-2B and RIP-2M send the

• routing data in RIP-2 format. RIP-2B uses subnet broadcasting. RIP-2M uses multicasting.

8. Click the Apply button.

Your settings are saved.

If you changed the LAN IP address of the router, you are disconnected when this change takes effect.

9. To reconnect, close your browser, relaunch it, and log in to the router.

Change the router’s device name

The router’s default device name is based on its model number. This device name displays in the file manager when you browse your network.

To change the router’s device name:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

User Manual70Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The BASIC Home page displays.

4. Select ADVANCED > Setup > Device Name.

The Device Name page displays.

In the Device Name field, type a new name.

6. Click the Apply button.

Your settings are saved.

Specify the IP addresses that the router assigns

By default, the router acts as a Dynamic Host Configuration Protocol (DHCP) server. The router assigns IP, DNS server, and default gateway addresses to all computers connected to the LAN. The assigned default gateway address is the LAN address of the router.

These addresses must be part of the same IP address subnet as the router’s LAN IP address. Using the default addressing scheme, define a range between 192.168.1.2 and 192.168.1.254, although you can save part of the range for devices with fixed addresses.

To specify the pool of IP addresses that the router assigns:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

5. Make sure that the Use Router as DHCP Server check box is selected.

User Manual71Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Specify the range of IP addresses that the router assigns: a.

In the Starting IP Address field, type the lowest number in the range. This IP address must be in the same subnet as the router.

In the Ending IP Address field, type the number at the end of the range of IP addresses.

This IP address must be in the same subnet as the router.

7. Click the Apply button.

Your settings are saved.

The router delivers the following address information to any LAN device that requests a DHCP address:

An IP address from the range that you define

•

Subnet mask

•

Gateway IP address (the router’s LAN IP address)

•

DNS server IP address (the router’s LAN IP address)

•

Disable the DHCP server feature in the router

By default, the router acts as a DHCP server. The router assigns IP, DNS server, and default gateway addresses to all computers connected to the LAN. The assigned default gateway address is the LAN address of the router.

You can use another device on your network as the DHCP server or specify the network settings of all your computers.

To disable the DHCP server feature in the router:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > LAN Setup.

User Manual72Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The LAN Setup page displays.

5. Clear the Use Router as DHCP Server check box.

6. Click the Apply button.

Your settings are saved.

(Optional) If this service is disabled and no other DHCP server is on your network, set your computer IP addresses manually so that the computers can access the router.

Manage reserved LAN IP addresses

When you specify a reserved IP address for a computer on the LAN, that computer always receives the same IP address each time it accesses the router’s DHCP server. Assign reserved IP addresses to computers or servers that require permanent IP settings.

Reserve an IP address

To reserve an IP address:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

5. In the Address Reservation section, click the Add button.

The Address Reservation page displays.

Tip: If the device for which you want to reserve an IP address is already on your network, you can select its associated radio button in the Address Reservation Table so that you don’t have to manually enter the information that is described in the following three steps.

In the IP Address field, type the IP address to assign to the device.

User Manual73Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Choose an IP address from the router’s LAN subnet, such as 192.168.1.x.

In the MAC Address field, type the MAC address of the device.

In the Device Name field, type a name for the device.

9. Click the Apply button.

The reserved address is entered into the Address Reservation table on the LAN Setup page.

The reserved address is not assigned until the next time the device contacts the router’s DHCP server. Reboot the device, or access its IP configuration and force a DHCP release and renew.

Edit a reserved IP address

To edit a reserved address entry:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

5. Select the radio button next to the reserved address that you want to edit.

6. Click the Edit button.

The Address Reservation page displays.

7. Change the settings.

8. Click the Apply button.

Your settings are saved.

User Manual74Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Delete a reserved IP address entry

To delete a reserved address entry:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Setup > LAN Setup.

The LAN Setup page displays.

5. Select the radio button next to the reserved address that you want to delete.

6. Click the Delete button.

The address is removed.

Set up the router as a WiFi access point

You can set up the router to run as an access point (AP) on the same local network as another router.

To set up the router as an AP:

Use an Ethernet cable to connect the Internet port of this router to an Ethernet port on the other router.

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

4. Enter the router admin user name and password.

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

Select ADVANCED > Advanced Setup > Router/ AP / Bridge Mode.

User Manual75Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The Router / AP / Bridge Mode page displays.

6. Select AP Mode.

The page adjusts.

7. Select an IP address setting:

•

Get dynamically from existing router. The other router on the network assigns

an IP address to this router while it is in AP mode.

•

Use fixed IP settings on this device (not recommended). Use this setting if you

want to manually assign a specific IP address to this router while it is in AP mode. Using this option effectively requires advanced network experience.

Note: To avoid interference with other routers or gateways in your network, we recommend that you use different WiFi settings on each router. You can also turn off the WiFi radio on the other router or gateway and use this router only for WiFi client access.

8. Click the Apply button.

The IP address of the router changes, and you are disconnected.

To reconnect, close and restart your browser and type http://www.routerlogin.net.

Set up the router in bridge mode

You can use your router in bridge mode to connect multiple devices wirelessly at the faster 802.11ac speed. You need two routers: one set up as a router and the other set up as a bridge.

Installing your router as a bridge offers the following benefits:

Take advantage of gigabit WiFi speeds on current devices

•

Use Gigabit WiFi for applications like video and gaming.

•

Connect multiple devices like NAS, Smart TV, Blu-ray player, and game consoles at

• gigabit WiFi speeds using a WiFi link.

Avoid the need for separate WiFi adapters for each device.

•

For example, you can install the first router in a room like a home office where your Internet connection is located, then set up the second router in bridge mode. Place the router in bridge mode in a different room with your home entertainment center. Cable the router in bridge mode to your Smart TV, DVR, game console or Blu-ray player, and use its 802.11ac WiFi connection to the first router.

User Manual76Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To set up the router in bridge mode:

Make a note of the WiFi settings of the other router to which this router will connect. You must know the SSID, WiFi security mode, wireless password, and operating

frequency (either 2.4 GHz or 5 GHz).

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

4. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

Select ADVANCED > Advanced Setup > Router/ AP / Bridge Mode. The Router / AP / Bridge Mode page displays.

6. Select Bridge Mode. The page adjusts.

7. Click the setup bridge mode wireless settings button. The Wireless Settings window opens.

Specify the settings of the other router to which this router will connect: a.

Select the wireless network frequency (2.4 GHz or 5 GHz). For 802.11ac mode, select 5 GHz.

In the Name (SSID) file, enter the wireless network name (SSID).

c. In the Security Options section, select a radio button.

If prompted, type the WiFi password (network key) that you use to connect wirelessly to the other router.

9. Click the Apply button. The settings for the other router are saved and the Router / AP / Bridge Mode page

displays.

10. Click the Apply button on the Router / AP / Bridge Mode page. Your settings are saved.

User Manual77Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Return the router to router mode

By default, your router is set to router mode. If you changed the mode to access point mode or bridge mode, you can change the mode back to router mode.

To set up router mode:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

Select ADVANCED > Advanced Setup > Router/ AP / Bridge Mode. The Router / AP / Bridge Mode page displays.

5. Select Router Mode. The page adjusts.

6. Click the Apply button. Your settings are saved.

Set up a bridge for a port group or VLAN tag group

Some devices, such as an IPTV, cannot function behind the router’s network address translation (NAT) service or firewall. Based on what your Internet service provider (ISP) requires, for the device to connect to the ISP’s network directly, you can enable the bridge between the device and the router’s Internet port or add new VLAN tag groups to the bridge.

Note: If your ISP provides instructions for how to set up a bridge for IPTV and Internet service, follow those instruction.

User Manual78Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Set up a bridge for a port group

If the devices that are connected to the router’s Ethernet LAN port or WiFi network include an IPTV device, your ISP might require you to set up a bridge for a port group for the router’s Internet interface.

A bridge with a port group prevents packets that are sent between the IPTV device and the router’s Internet port from being processed through the router’s network address translation (NAT) service.

To configure a port group and enable the bridge:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

Select ADVANCED > Advanced Setup > VLAN / Bridge Settings. The VLAN / Bridge Settings page displays.

Select the Enable VLAN / Bridge Setup check box. The page expands.

6. Select the By bridge group radio button. The page expands.

7. Select a Wired Ports check box or a Wireless check box:

•

If your device is connected to an Ethernet port on the router, select the Wired Ports check box that corresponds to the Ethernet port on the router to which the device is connected.

•

If your device is connected to your router’s WiFi network, select the Wireless check box that corresponds to the router’s WiFi network to which the device is connected.

Note: You must select at least one Wired Ports or Wireless check box. You can select more than one check box.

8. Click the Apply button. Your settings are saved.

User Manual79Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Set up a bridge for a VLAN tag group

If the devices that are connected to the router’s Ethernet LAN ports or WiFi network include an IPTV device, your ISP might require you to set up a bridge for a VLAN tag group for the router’s Internet interface.

If you are subscribed to IPTV service, the router might require VLAN tags to distinguish between the Internet traffic and the IPTV traffic. A bridge with a VLAN tag group prevents packets that are sent between the IPTV device and the router’s Internet port from being processed through the router’s network address translation (NAT) service.

You can add VLAN tag groups to a bridge and assign VLAN IDs and priority values to each VLAN tag group.

To add a VLAN tag group and enable the bridge:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

Select ADVANCED > Advanced Setup > VLAN / Bridge Settings. The VLAN / Bridge Settings page displays.

Select the Enable VLAN/Bridge Setup check box. The page expands.

6. Select the By VLAN tag group radio button. The page expands.

7. Click the Add button. The Add VLAN Rule page displays.

Specify the following settings for the VLAN tag group:

Name. Enter a name for the VLAN tag group.

•

The name can be up to 10 characters.

VLAN ID. Enter a value from 1 to 4094.

•

Priority. Enter a value from 0 to 7.

•

User Manual80Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Select the check box for a wired LAN port or WiFi port. If your device is connected to an Ethernet port on the router, select the LAN port

check box that corresponds to the Ethernet port on the router to which the device is connected. If your device is connected to your router’s WiFi network, select the WiFi check box that corresponds to the router’s WiFi network to which the device is connected.

You must select at least one LAN port or WiFi port. You can select more than one port.

10. Click the Add button. The VLAN tag group is added.

11. Click the Apply button. Your settings are saved.

Manage custom static routes

Typically, you do not need to add static routes unless you use multiple routers or multiple IP subnets on your network.

As an example of when a static route is needed, consider the following case:

Your main Internet access is through a cable modem to an ISP.

•

Your home network includes an ISDN router for connecting to the company where

• you are employed. This router’s address on your LAN is 192.168.1.100.

Your company’s network address is 134.177.0.0.

•

When you set up your router, two implicit static routes were created. A default route was created with your ISP as the gateway, and a second static route was created to your local network for all 192.168.1.x addresses. With this configuration, if you try to access a device on the 134.177.0.0 network, your router forwards your request to the ISP. The ISP forwards your request to the company where you are employed, and the company firewall is likely to deny the request.

In this case you must define a static route, telling your router to access 134.177.0.0 through the ISDN router at 192.168.1.100. Here is an example:

The Destination IP Address and IP Subnet Mask fields specify that this static route

• applies to all 134.177.x.x addresses.

The Gateway IP Address field specifies that all traffic for these addresses will be

• forwarded to the ISDN router at 192.168.1.100.

User Manual81Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

A metric value of 1 works because the ISDN router is on the LAN.

•

The Private check box is selected only as a precautionary security measure in case

• RIP is activated.

Set up a static route

To set up a static route:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > Static Routes. The Static Routes page displays.

5. Click the Add button. The page adjusts.

In the Route Name field, type a name for this static route (for identification purposes only).

7. To limit access to the LAN only, select the Private check box. If the Private check box is selected, the static route is not reported in RIP.

To prevent the route from becoming active, clear the Active check box. In some situations, you might want to set up a static route but keep it disabled until

a later time. By default, the Active check box is selected and a route becomes active after you click the Apply button.

Enter the following settings:

Destination IP Address. Enter the IP address for the final destination of the route.

•

IP Subnet Mask. Enter the IP subnet mask for the final destination of the route.

•

If the destination is a single host, enter 255.255.255.255.

Gateway IP Address. Enter the IP address of the gateway.

•

The IP address of the gateway must be on the same LAN segment as the router.

Metric. Enter a number from 1 through 15.

•

User Manual82Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

This value represents the number of routers between your network and the destination. Usually, a setting of 2 or 3 works, but if this is a direct connection, set it to 1.

10. Click the Apply button. Your settings are saved. The static route is added to the table on the Static Routes

page.

Edit a static route

To edit a static route:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > Static Routes. The Static Routes page displays.

In the table, select the radio button for the route.

6. Click the Edit button. The Static Routes page adjusts.

Edit the route information.

8. Click the Apply button. Your settings are saved.

Delete a static route

To delete a static route:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

User Manual83Manage Network Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > Static Routes. The Static Routes page displays.

In the table, select the radio button for the route.

6. Click the Delete button. The route is removed from the table.

User Manual84Manage Network Settings

Manage the WiFi Network Settings

This chapter describes how you can manage the WiFi network settings of the router.

The chapter includes the following sections:

• Use the WPS Wizard for WiFi connections

• Specify basic WiFi settings

• Change the WiFi password or the WiFi security

• Set up WPA/WPA2 enterprise WiFi security

• Set up WEP legacy WiFi security

• Change the WiFi Mbps settings

• Change the transmission power of the WiFi radios

• Set up a guest WiFi network

• Control the WiFi radios

• Set up a WiFi schedule

• Manage WPS settings

• Enable or disable implicit beamforming

• Enable or disable airtime fairness

• Enable or disable MU-MIMO

• Manage advanced WiFi settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Use the WPS Wizard for WiFi connections

The WPS Wizard helps you add a WPS-enabled device to your WiFi network without typing the WiFi password.

To use the WPS Wizard:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > WPS Wizard. A note explaining WPS displays.

5. Click the Next button. The WPS page displays.

6. Select a setup method:

• Push button. Click the WPS button on this page.

• PIN Number. The page adjusts. Enter the client security PIN and click the Next

button.

Within two minutes, go to the WPS-enabled device and use its WPS software to connect to the WiFi network.

The WPS process automatically sets up yourr WPS-enabled device with the network password when it connects. The router WPS page displays a confirmation message.

Specify basic WiFi settings

The router comes with preset security. This means that the WiFi network name (SSID), network key (password), and security option (encryption protocol) are preset in the factory. You can find the preset SSID and password on the router label.

Note: The preset SSID and password are uniquely generated for every device to protect and maximize your WiFi security.

User Manual86Manage the WiFi Network

Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

If you change your preset security settings, make a note of the new settings and store it in a safe place where you can easily find it.

If your computer is connected with WiFi when you change the SSID or other WiFi security settings, you are disconnected when you click the Apply button. To avoid this problem, use a computer with a wired connection to access the router.

To specify basic WiFi settings:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Wireless. The Wireless Setup page displays.

You can specify the settings for the 2.4 GHz band and 5 GHz band.

5. From the Region menu, select your region. In some locations, you cannot change this setting.

6. To control the SSID broadcast, select or clear the Enable SSID Broadcast check box.

When this check box is selected, the router broadcasts its network name (SSID) so that it displays when you scan for local WiFi networks on your computer or WiFi device.

Select or clear the Enable 20/40 MHz Coexistence check box. Disabling this option allows your 2.4 GHz WiFi to keep its maximum speed. Enabling

this option might reduce the maximum speed of your 2.4 GHz WiFi to the half if another WiFi network is detected in your environment; this is to avoid interference between WiFi networks and to get along with other WiFi networks in the environment.

To change the network name (SSID), type a new name in the Name (SSID) field. The name can be up to 32 characters long and it is case-sensitive. The default SSID

is randomly generated and is on the router label. If you change the name, make sure to write down the new name and keep it in a safe place.

To change the WiFi channel, select a number from the Channel menu.

User Manual87Manage the WiFi Network

Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

In some regions, not all channels are available. Do not change the channel unless you experience interference (shown by lost connections or slow data transfers). If this happens, experiment with different channels to see which is the best.

When you use multiple access points, it is better if adjacent access points use different channels to reduce interference. The recommended channel spacing between adjacent access points is four channels (for example, use Channels 1 and 5, or 6 and 10).

10. Click the Apply button. Your settings are saved.

If you connected wirelessly to the network and you changed the SSID, you are disconnected from the network.

11. Make sure that you can reconnect over WiFi to the network with its new settings. If you cannot connect over WiFi, check the following:

Is your computer or mobile device already connected to another WiFi network

•

in your area? If so, disconnect it from that WiFi network and connect it to the WiFi network that the router provides. Some WiFi devices automatically connect to the first open network without WiFi security that they discover.

Is your computer or mobile device trying to connect to your network with its old

•

settings (before you changed the settings)? If so, update the WiFi network selection in your computer or mobile device to match the current settings for your network.

Does your computer or mobile device display as an attached device? If it does,

•

it is connected to the network.

Are you using the correct network name (SSID) and WiFi password?

•

Change the WiFi password or the WiFi security

The WiFi password is the one that you use to connect to the router’s WiFi network so that you can access the Internet and other shared network resources.

Your router comes with preset WPA2-PSK security. We recommend that you use the preset security. The preset WiFi password is on the router label, but you can customize the WiFi password for greater security.

Settings

User Manual88Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Note: If your computer is connected with WiFi when you change the WiFi settings, you

are disconnected when you click the Apply button. To avoid this problem, use a computer with a wired connection to access the router.

To change the WiFi password or the WiFi security:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Wireless. The Wireless Setup page displays.

5. To change the 2.4 GHz or 5 GHz WiFi password, enter a new password in the Password (Network Key) field.

You must enter a phrase of 8 to 63 characters. The Password (Network Key) field displays if you select the WPA2-PSK [AES] or WPA-PSK [TKIP] + WPA2-PSK [AES] security radio button.

To change the WiFi security for the 2.4 GHz or 5 GHz WiFi network, select a Security Options radio button.

WPA2-PSK [AES]. This option is the default setting. This type of security enables

•

WiFi devices that support WPA2 to join the router’s WiFi network. If you did not change the WiFi password, the default password displays. The default password is printed on the router label. WPA2 provides a secure connection but some older WiFi devices do not detect WPA2 and support only WPA. If your network includes such older devices, select WPA-PSK [TKIP] + WPA2-PSK [AES] security.

WPA-PSK [TKIP] + WPA2-PSK [AES]. This type of security enables WiFi devices

•

that support either WPA or WPA2 to join the router’s WiFi network. However, WPA-PSK [TKIP] is less secure than WPA2-PSK [AES] and limits the speed of WiFi devices to 54 Mbps.

•

Settings

WPA/WPA2 Enterprise. This type of security requires that your WiFi network can access a RADIUS server. For more information, see Set up WPA/WPA2 enterprise WiFi security on page 90.

WEP. This is a legacy security option that is available in the 2.4 GHz band only if the selection from the Mode menu in the Wireless Network (2.4GHz b/g/n) section

User Manual89Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

is Up to 54 Mbps (see Change the WiFi Mbps settings on page 94). For more information about WEP security, see Set up WEP legacy WiFi security on page

92. However, we recommend that you use WPA2-PSK [AES] security.

None. An open WiFi network that does not provide any security. Any WiFi device

•

can join the WiFi network. We recommend that you do not use an open WiFi network because it doesn’t provide any protection.

7. Click the Apply button. Your settings are saved.

8. Make sure that you can reconnect over WiFi to the network with its new settings. If you cannot connect over WiFi, check the following:

Is your computer or mobile device already connected to another WiFi network

•

Is your computer or mobile device trying to connect to your network with its old

•

settings (before you changed the settings)? If so, update the WiFi network selection in your computer or mobile device to match the current settings for your network.

Does your computer or mobile device display as an attached device? If it does,

•

it is connected to the network.

Are you using the correct network name (SSID) and WiFi password?

•

Set up WPA/WPA2 enterprise WiFi security

WPA/WPA2 enterprise WiFi security is typically used in business settings, not in home networks. To enable the router to provide WPA and WPA2 enterprise WiFi security, the router must be able to access a RADIUS server. Remote Authentication Dial In User Service (RADIUS) is an enterprise-level method for centralized Authentication, Authorization, and Accounting (AAA) management.

Note: If your computer is connected with WiFi when you change the WiFi security settings, you are disconnected when you click the Apply button. To avoid this problem, use a computer with a wired connection to access the router.

Settings

User Manual90Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To set up WPA and WPA2 enterprise security:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Wireless. The Wireless Setup page displays.

5. In the Wireless Network (2.4GHz b/g/n) section or the Wireless Network (5GHz a/n/ac) section, select the WPA/WPA2 Enterprise Security Options radio button.

The page displays the WPA/WPA2 Enterprise section.

Enter the following settings:

Encryption mode. From the Encryption Mode menu, select the enterprise mode:

•

WPA [TKIP] +WPA2 [AES]. This type of security enables WiFi devices that support either WPA or WPA2 to join the router’s WiFi network. This is the default mode.

- WPA2 [AES].WPA2 provides a secure connection but some older WiFi devices

do not detect WPA2 and support only WPA. If your network includes such older devices, select WPA [TKIP] + WPA2 [AES] security.

Group Key Update Interval. Enter the interval in seconds after which the RADIUS

•

group key is updated. The default interval is 3600 seconds.

RADIUS server IP Address. Enter the IPv4 address of the RADIUS server to which

•

the WiFi network can connect.

RADIUS server Port. Enter the number of the port on the router that is used to

•

access the RADIUS server for authentication. The default port number is 1812.

RADIUS server Shared Secret. Enter the shared secret (RADIUS password) that

•

is used between the router and the RADIUS server during authentication of a WiFi user.

7. Click the Apply button. Your settings are saved.

Settings

User Manual91Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

8. Make sure that you can reconnect over WiFi to the network with its new settings. If you cannot connect over WiFi, check the following:

Is your computer or mobile device already connected to another WiFi network

•

Is your computer or mobile device trying to connect to your network with its old

•

settings (before you changed the settings)? If so, update the WiFi network selection in your computer or mobile device to match the current settings for your network.

Does your computer or mobile device display as an attached device? If it does,

•

it is connected to the network.

Are you using the correct network name (SSID) and WiFi password?

•

Set up WEP legacy WiFi security

Wired Equivalent Privacy (WEP) security is a legacy authentication and data encryption mode that is superseded by WPA-PSK and WPA2-PSK. WEP limits the WiFi transmission speed to 54 Mbps (the router is capable of higher speeds in the 2.4 GHz band).

To set up WEP security:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Wireless. The Wireless Network page displays.

5. From the Mode menu, select Up to 54 Mbps.

Settings

User Manual92Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The page adjusts to display the WEP radio button.

6. Click the Apply button. Your settings are saved.

Do one of the following:

Set up WEP security for your WiFi network. Continue with Step 8.

•

Set up WEP security for the guest WiFi network. Do the following:

•

a. Select Guest Network.

The Guest Network Settings page displays.

b. Continue with Step 8.

8. In the Security Options section, select the WEP radio button. The page adjusts.

From the Authentication Type menu, select one of the following types:

• Automatic. Clients can use either Open System or Shared Key authentication.

• Shared Key. Clients can use only Shared Key authentication.

10. From the Encryption Strength menu, select the encryption key size:

• 64-bit. Standard WEP encryption, using 40/64-bit encryption.

• 128-bit. Standard WEP encryption, using 104/128-bit encryption. This selection

provides higher encryption security.

11.

Specify the active key by selecting the Key 1, Key 2, Key 3, or Key 4 radio button. Only one key can be the active key. To join the router’s WiFi network, a user must

enter the key value for the key that you specified as the active key.

12.

Enter a value for the key:

•

For 64-bit WEP, enter 10 hexadecimal digits (any combination of 0–9, A–F). The key values are not case-sensitive.

•

For 128-bit WEP, enter 26 hexadecimal digits (any combination of 0–9, A–F). The key values are not case-sensitive.

13. Click the Apply button. Your settings are saved.

14. Make sure that you can reconnect over WiFi to the network with its new settings.

User Manual93Manage the WiFi Network

Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

If you cannot connect over WiFi, check the following:

Is your computer or mobile device already connected to another WiFi network

•

Is your computer or mobile device trying to connect to your network with its old

•

settings (before you changed the settings)? If so, update the WiFi network selection in your computer or mobile device to match the current settings for your network.

Does your computer or mobile device display as an attached device? If it does,

•

it is connected to the network.

Are you using the correct network name (SSID) and WiFi password?

•

Change the WiFi Mbps settings

The data rate for high-speed transmissions is commonly identified as megabits per second (Mbps).

To change the WiFi Mbps settings:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Wireless. The Wireless Setup page displays.

5. For the 2.4 GHz WiFi band, in the Wireless Network (2.4GHz b/g/n) section, select a setting from the Mode menu:

•

Settings

Up to 600 Mbps. Performance mode. This mode allows 802.11n, 802.11g, and

802.11b devices to join the network in the 2.4 GHz band and allows 802.11n devices to function at up to 600 Mbps. This mode is the default mode.

User Manual94Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Up to 289 Mbps. Neighbor-friendly mode for reduced interference with

•

neighboring WiFi networks. This mode allows 802.11n, 802.11g, and 802.11b devices to join the network in the 2.4 GHz band but limits 802.11n devices to functioning at up to 289 Mbps.

Up to 54 Mbps. Legacy mode. This mode allows 802.11n, 802.11g, and 802.11b

•

devices to join the network in the 2.4 GHz band but limits 802.11n devices to functioning at up to 54 Mbps.

6. For the 5 GHz WiFi band, in the Wireless Network (5GHz a/n/ac) section, select a setting from the Mode menu:

Up to 1625 Mbps. Performance mode. This mode allows 802.11ac, 802.11n,

•

and 802.11a devices to join the network in the 5 GHz band and allows 802.11ac devices to function at up to 1625 Mbps. This mode is the default mode.

Up to 750 Mbps. Neighbor-friendly mode for reduced interference with

•

neighboring WiFi networks. This mode allows 802.11ac, 802.11n, and 802.11a devices to join the network in the 5 GHz band but limits 802.11ac devices to functioning at up to 750 Mbps.

Up to 360 Mbps. Legacy mode. This mode allows 802.11ac, 802.11n, and

•

802.11a devices to join the network in the 5 GHz band but limits 802.11ac and

802.11n devices to functioning at up to 300 Mbps.

7. Click the Apply button. Your settings are saved.

Change the transmission power of the WiFi radios

By default, your router’s radio transmission power is set to 100%. This allows your router to give you the largest WiFi coverage. If you need WiFi coverage for a particular area or room only, and you also want to save power consumption while using your router, you can lower the transmission power of your router.

To change the transmission power:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

Settings

User Manual95Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The user name is admin. The password is the one that you specified the first time you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Wireless. The Wireless Setup page displays.

In the Wireless Network (2.4GHz b/g/n) section, select a percentage from the Transmit Power Control menu.

In the Wireless Network (5GHz a/n/ac) section, select a percentage from the Transmit Power Control menu.

7. Click the Apply button. Your settings are saved.

Set up a guest WiFi network

A guest network lets you share your Internet connection with visitors without telling them your WiFi security password. You can create a different WiFi password for the guest network. The guest network WiFi mode and channel settings are the same as your

2.4 GHz and 5 GHz WiFi networks.

By default, the guest WiFi network is disabled. You can set up the guest WiFi network for each WiFi band. The router simultaneously supports the 2.4 GHz band for 802.11n,

802.11g, and 802.11b devices and the 5 GHz band for 802.11ac, 802.11n, and 802.11a

devices.

The router provides two default guest networks with the following names (SSIDs):

2.4 GHz guest WiFi network SSID. NETGEAR_Guest

•

5 GHz guest WiFi network SSID. NETGEAR-5G_Guest

•

By default, these networks are configured as open networks without security but are disabled. You can enable one or both networks. You can also change the SSIDs for these networks.

To set up a guest network:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password.

User Manual96Manage the WiFi Network

Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select Guest Network. The Guest Network Settings page displays.

Enter the following settings to set up a 2.4 GHz or 5 GHz guest WiFi network:

Enable Guest Network. By default, the guest WiFi network is disabled. To enable

•

the guest WiFi network, select the Enable Guest Network check box.

Enable SSID Broadcast. By default, the router broadcasts the SSID of the WiFi

•

band so that WiFi stations can detect the WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast for the guest WiFi network, clear the

Enable SSID Broadcast check box.

Allow guests to see each other and access my local network. By default, guests

•

who are connected to the guest WiFi network cannot access WiFi devices or Ethernet devices that are connected to your WiFi network. To allow access to your WiFi network, select the Allow guests to see each other and access my

local network check box.

Guest Wireless Network Name (SSID). The SSID is the guest WiFi network

•

name. The default 2.4 GHz SSID is NETGEAR_Guest. The default 5 GHz SSID NETGEAR-5G_Guest. To change the SSID, enter a 32-character (maximum), case-sensitive name in this field.

Select a WiFi security option for the 2.4 GHz or 5 GHz guest WiFi network:

WPA2-PSK [AES]. WPA2 provides a secure and fast connection but some older

•

WiFi devices do not detect WPA2 and support only WPA. Select WPA2-PSK [AES] security to allow 802.11n devices to connect to guest WiFi network at the fastest speed. If your network includes older devices that do not support WPA2, select WPA-PSK [TKIP] + WPA2-PSK [AES] security. To use WPA2 security, in the Password (Network Key) field, enter a phrase of 8 to 63 characters. To join the guest WiFi network, the guest must enter this password.

WPA-PSK [TKIP] + WPA2-PSK [AES]. This type of security enables WiFi devices

•

that support either WPA or WPA2 to join the 2.4 GHz band of the guest WiFi network. However, WPA-PSK [TKIP] is less secure than WPA2-PSK [AES] and limits the speed of WiFi devices to 54 Mbps. To use WPA + WPA2 security, in the Password (Network Key) field, enter a phrase of 8 to 63 characters. To join the guest WiFi network, the guest must enter this password.

•

Settings

WEP. This is a legacy security option that is available in the 2.4 GHz band only if the selection from the Mode menu in the Wireless Network (2.4GHz b/g/n) section

User Manual97Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

on the Wireless Setup page the is Up to 54 Mbps (see Change the WiFi Mbps settings on page 94). For more information about WEP security, see Set up WEP legacy WiFi security on page 92. However, we recommend that you use WPA2-PSK [AES] security.

None. An open WiFi network that does not provide any security. Any WiFi device

•

can join the guest WiFi network. This is the default setting for the guest WiFi network.

7. Click the Apply button. Your settings are saved.

8. Make sure that you can reconnect over WiFi to the network with its new security settings.

If you cannot connect over WiFi, check the following:

Is your computer or mobile device already connected to another WiFi network

•

Does your computer or mobile device display as an attached device?

•

If it does, it is connected to the network.

Are you using the correct network name (SSID) and password?

•

Control the WiFi radios

The router’s internal WiFi radios broadcast signals in the 2.4 GHz and 5 GHz ranges. By default, they are on so that you can connect over WiFi to the router. When the WiFi radios are off, you can still use an Ethernet cable for a LAN connection to the router.

You can turn the WiFi radios on and off with the WiFi On/Off button on the router, or you can log in to the router and enable or disable the WiFi radios. If you are close to the router, it might be easier to press its WiFi On/Off button. If you are away from the router or already logged in, it might be easier to enable or disable them.

Settings

User Manual98Manage the WiFi Network

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

Use the WiFi On/Off button

To turn the WiFi radios off and on with the WiFi On/Off button:

Press the WiFi On/Off button on the top of the router for two seconds. If you turned off the WiFi radios, the WiFi On/Off LED and the WPS LED turn off. If

you turned on the WiFi radios, the WiFi On/Off LED and the WPS LED light.

Enable or disable the WiFi radios

If you used the WiFi On/Off button to turn off the WiFi radios, you can’t log in to the router to turn them back on. You must press the WiFi On/Off button again for two seconds to turn the WiFi radios back on.

To enable or disable the WiFi radios:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > Wireless Settings. The Wireless Settings page displays.

Do one of the following for your router’s WiFi networks:

Turn off the WiFi radio. Clear the Enable Wireless Router Radio check box.

•

Turn on the WiFi radio. Select the Enable Wireless Router Radio check box.

•

6. Click the Apply button. Your settings are saved.

Set up a WiFi schedule

You can turn off the WiFi signal from your router at times when you do not need a WiFi connection. For example, you might turn it off for the weekend if you leave town.

User Manual99Manage the WiFi Network

Settings

Nighthawk AC2300 Cybersecurity WiFi Router Model RS400

To set up the WiFi schedule:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

that you logged in. The user name and password are case-sensitive.

The BASIC Home page displays.

4. Select ADVANCED > Advanced Setup > Wireless Settings. The Wireless Settings page displays.

5. Click the Add a new period button. The page adjusts.

6. Use the menus, radio buttons, and check boxes to set up a period during which you want to turn off the WiFi signal.

7. Click the Apply button. The Wireless Settings page displays.

Select the Turn off wireless signal by schedule check box to activate the schedule.

9. Click the Apply button. Your settings are saved.

Manage WPS settings

Wi-Fi Protected Setup (WPS) lets you join the WiFi network without typing the WiFi password. You can change the WPS default settings.

To manage WPS settings:

Launch a web browser from a computer or mobile device that is connected to the router network.

Enter http://www.routerlogin.net. A login window opens.

3. Enter the router admin user name and password. The user name is admin. The password is the one that you specified the first time

you logged in. The user name and password are case-sensitive.

User Manual100Manage the WiFi Network

Settings

Netgear RS400 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Contents

Hardware Setup

Unpack your router

Attach the antennas

LEDs and buttons on the top panel

Rear panel

Router label and QR Code label

Position your router

Cable your router

Connect to the Router’s Network and Automatically Set Up the Internet Connection

Connect to the network

Connect to the network using a wired connection

Find and connect to the WiFi network

WiFi connection using WPS

Types of logins

Use a web browser to access the router

Use a web browser to set up the router’s Internet connection automatically

Log in to the router

Change the language

Install and manage your router with the Nighthawk app

Specify Your Internet Settings

Use the Internet Setup Wizard

Manually set up the Internet connection

Specify an Internet connection without a login

Specify an Internet connection that uses a login and PPPoE service

Specify an Internet connection that uses a login and PPTP or L2TP service

Specify IPv6 Internet connections

Requirements for entering IPv6 addresses

Use Auto Detect for an IPv6 Internet connection

Set up an IPv6 6to4 tunnel Internet connection

Set up an IPv6 pass-through Internet connection

Set up a fixed IPv6 Internet connection

Set up an IPv6 DHCP Internet connection

Set up an IPv6 PPPoE Internet connection

Use Auto Config for an IPv6 Internet connection

Set up an IPv6 6rd tunnel connection

Manage the MTU size

MTU concepts

Change the MTU size

Control Access to the Internet

Manage NETGEAR Armor

Activate Armor using the Nighthawk app

View or change your NETGEAR Armor settings using the Nighthawk app

View or change your NETGEAR Armor settings from the Armor portal

Sign in to NETGEAR Armor from the router web interface and start your subscription

Access the NETGEAR Armor portal from the router web interface

Disable or Reenable NETGEAR Armor from the router web interface

Enable Circle with Disney

Enable Circle with Disney using the Nighthawk app

Enable Circle with Disney using the Circle app

Enable access control to allow or block access to the Internet

Manage network access control lists

Use keywords to block Internet sites

Delete keywords from the blocked list

Prevent blocking on a trusted computer

Block services from the Internet

Schedule when to block Internet sites and services

Set up security event email notifications

Optimize Performance

Use Dynamic QoS to optimize Internet traffic management

Enable Dynamic QoS

Enable or disable the automatic QoS database update

Manually update the Dynamic QoS database

Wi-Fi Multimedia Quality of Service

Improve network connections with Universal Plug and Play

Enable or disable Smart Connect

Manage Network Settings

View or change the WAN settings

Set up a default DMZ server

Change the LAN TCP/IP settings

Change the router’s device name

Specify the IP addresses that the router assigns

Disable the DHCP server feature in the router

Manage reserved LAN IP addresses

Reserve an IP address

Edit a reserved IP address