Netgear C6250 Ac1600 Wifi Cable Modem Router User Manual

							Manage the Basic WiFi Network Settings 
51  AC1600 WiFi Cable Modem Router
7. If you changed the settings, click the Apply button.
Your settings are saved.
8. Make sure that you can reconnect over WiFi to the guest network. If you cannot connect 
over WiFi, check the following:
•Is your WiFi device connected to your network or another WiFi network in your area? 
Some WiFi devices automatically connect to the first open network (without WiFi 
security) that they discover.
•Does your WiFi device display as a connected device in the web management 
interface? (See 
View Devices Currently on the Network on page 104.) If it does, it is 
connected to the network.
•Do you use the correct network name (SSID) and password?
Wireless Network (5GHz a/n/ac) - Profile
Enable Guest 
NetworkBy default, the guest WiFi network is disabled. To enable the guest WiFi network for 
the 5 GHz WiFi band, select the Enable Guest Network check box.
Enable SSID 
Broadcast By default, the modem router broadcasts its SSID of the 5 GHz WiFi band so that WiFi 
stations can detect the WiFi name (SSID) in their scanned network lists. To turn off the 
SSID broadcast for the 5 GHz WiFi band for the guest WiFi network, clear the Enable 
SSID Broadcast check box.
Allow guests to 
see each other 
and access my 
local networkBy default, WiFi clients that are connected to the 5 GHz WiFi band of the guest WiFi 
network cannot access WiFi devices or Ethernet devices that are connected to the 
main WiFi network. To allow access to the main WiFi network, select the Allow guests 
to see each other and access my local network check box.
Guest Wireless 
Network Name 
(SSID) The SSID is the 5 GHz WiFi band name. If you did not change the SSID, the default 
SSID displays, which is NETGEAR-5G-Guest. If you want to change the SSID in the 
5
 GHz WiFi band for the guest WiFi network, enter a 32-character (maximum), 
case-sensitive name in this field.
Security Options - Profile
If you want to change the WiFi security, select one of the following WiFi security options for the 5 GHz band 
of the guest WiFi network:
• None. An open WiFi network that does not provide any security. Any WiFi device can join the 5 GHz 
band of the guest WiFi network. This is the default setting for the guest WiFi network.
• WPA2-PSK [AES]. WPA2 provides a secure and fast connection but some older WiFi devices do not 
detect WPA2 and support only WPA. Select WPA2 to allow 802.11n devices to connect to the 5
 GHz 
band of the guest WiFi network at the fastest speed. If your network includes older devices that do not 
support WPA2, select WPA-PSK [TKIP] + WPA2-PSK [AES] security.
To use WPA2 security, in the Passphrase field, enter a phrase of 8 to 63 characters. To join the 5 GHz 
band of the guest WiFi network, a user must enter this passphrase.
• WPA-PSK [TKIP] + WPA2-PSK [AES]. This type of security enables WiFi devices that support either 
WPA or WPA2 to join the 5
 GHz band of the guest WiFi network. However, WPA-PSK [TKIP] is less 
secure than WPA2-PSK [AES] and limits the speed of WiFi devices to 54 Mbps.
To use WPA + WPA2 security, in the Passphrase field, enter a phrase of 8 to 63 characters. To join the 
5   GHz band of the guest WiFi network, a user must enter this passphrase.
FieldDescription 
						

							Manage the Basic WiFi Network Settings 52
AC1600 WiFi Cable Modem Router 
Configure WEP Legacy WiFi Security for the Guest WiFi 
Network
Wired Equivalent Privacy (WEP) security is a legacy authentication and\
 data encryption 
mode that is superseded by WPA-PSK and WPA2-PSK. WEP supports speeds of up to 
54  
Mbps (the modem router is capable of speeds of up to 300   Mbps).
IMPORTANT:
The WiFi mode of the guest WiFi network depends on the WiFi 
mode of the main WiFi network. For you to be able to configure 
WEP in the guest WiFi network, first configure the mode for the 
main WiFi network as Up to 54 Mbps. For information about 
configuring the WiFi mode, see Manage the Basic WiFi Settings and 
WiFi Security of the Main Network  on page
  36.
To configure WEP security for the guest WiFi network:
1. Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network.
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4.  Click the  OK button. 
The BASIC Home page displays.
5.  Select  BASIC > Guest Network .
The Guest Network Settings page displays.
6.  In the Security Options section, select the  WEP radio button.
These options display only if you
select the Up to 54 Mbps mode
for the main WiFi network. 
						

							Manage the Basic WiFi Network Settings 
53  AC1600 WiFi Cable Modem Router
7. From the Authentication Type menu in the Security Encryption (WEP) section, select one 
of the following types:
•Shared Key. Clients can use only Shared Key authentication.
•Automatic. Clients can use either Open System or Shared Key authentication.
8. From the Encryption Strength menu in the Security Encryption (WEP) section, select the 
encryption key size:
•64-bit. Standard WEP encryption, using 40/64-bit encryption.
•128-bit. Standard WEP encryption, using 104/128-bit encryption. This selection 
provides stronger encryption security.
9. In the Security Encryption (WEP) Key section, generate the key automatically:
a.In the Passphrase field, enter a passphrase.
b. Click the Generate button.
For 64-bit WEP, four different WEP keys are generated and the four key fields are 
populated with different WEP keys. For 128-bit WEP, only one WEP key is generated 
and the four key fields are populated with the same WEP key. 
c. Specify the active key by selecting the Key 1, Key 2, Key 3, or Key 4 radio button.
Only one key can be the active key.
To join the guest WiFi network, a user must enter the key value for the key that you 
specified as the active key.
10. Click the Apply button.
Your settings are saved. 
						

							54
5
5.   Secure Your Network
This chapter describes how to use the firewall features of the modem router to prevent 
objectionable content from reaching the computers and other devices connected to your network 
and how to control which computers and devices are allowed access to the network.
This chapter includes the following sections:
•Set Up Parental Controls
•Allow or Block Access to Your Network
•Block Keywords and Domains for HTTP Traffic
•Block Access to Services and Applications
•Schedule When Security Features Are Active
•Set Up Security Event Email Notification
For information about more advanced ways to configure Internet security, see 
Chapter 12, Manage Port Forwarding and Port Triggering. 
						

							Secure Your Network 55
 AC1600 WiFi Cable Modem Router
Set Up Parental Controls
The first time that you select 
Parental Controls from the BASIC Home page, your browser 
goes to the  Parental Controls website, where you can learn more about Parental Controls. To 
set up Parental Controls, you must download the genie app.
Figure 5. Parental Controls website

To set up Parental Controls:
1.  Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network.
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type  password for the password.
4.  Click the  OK button.
The BASIC Home page displays.
5.  Select  Parental Controls.
The  Parental Controls website opens.
6.  Click the button for the genie app or version that you want to download \
and use.
7.  Follow the onscreen instructions to download and install the genie app. 
						

							Secure Your Network 56
AC1600 WiFi Cable Modem Router 
8. 
Open the genie app and select  Parental Controls.
Live Parental Controls automatically starts.
9.  Click the  Next button, read the note, and click the  Next button again.
Because Live Parental Controls uses free OpenDNS accounts, you are promp\
ted to log 
in or create a free account.
10.  Select a radio button as follows:
• If you already own an OpenDNS account, leave the  Ye
 s radio button selected. 
• If you did not yet create an OpenDNS account, select the No radio button.
If you are creating an account, the following page displays. 
						

							Secure Your Network 57
 AC1600 WiFi Cable Modem Router
a. 
Complete the fields.
b.  Click the Next  button.
After you log on or create your account, the filtering level page displa\
ys.
11.  Select a radio button for a filtering level and click the  Next button. 
						

							Secure Your Network 58
AC1600 WiFi Cable Modem Router 
12. 
Click the  Take me to the status screen button.
Parental Controls are now set up for the modem router.
13.  T
o enable Parental Controls, click the  Enable Live Parental Controls button.
Allow or Block Access to Your Network
You can use access control to block or allow access of devices to your ne\
twork. You define 
access by selecting or specifying the MAC addresses of the wired and WiF\
i devices that can 
either access your entire network or are blocked from accessing your ent\
ire network.  
						

							Secure Your Network 59
 AC1600 WiFi Cable Modem Router
Enable and Manage Network Access Control
When you enable access control, you must select whether new devices are \
allowed to 
access the network or blocked from accessing the network. By default, cu\
rrently connected 
devices are allowed to access the network, but you can also block these \
devices from 
accessing the network.
To set up network access control:
1. 
Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network. 
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type  password for the password.
4.  Click the  OK button. 
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Security > Access Control .
6. Select the  Turn on Access Control check box.
You must select this check box before you can specify an access rule and \
use the  Allow 
and Block buttons. When this check box is cleared, all devices are allowed to con\
nect, 
even if the device is in the list of blocked devices.
7.  Click the  Apply button.
Your settings are saved. 
						

							Secure Your Network 60
AC1600 WiFi Cable Modem Router 
8. 
Select an access rule for new devices:
• Allow all new devices to connect. With this setting, if you add a new device, it can 
access your network. 
 You do not need to enter its MAC address on this page. 
NETGEAR recommends that you leave this radio button selected.
• Block all new devices from connecting. With this setting, if you add a new device, 
before it can access your network, you must enter its MAC address for an\
 Ethernet 
connection and its MAC address for a WiFi connection in the allowed list\
. For more 
information, see  Manage Network Access Control Lists  on page
  60.
The access rule does not affect previously blocked or allowed devices. It applies only to  devices joining your network in the future after you apply these setting\
s.
9.  T
o manage access for currently connected computers and devices, do one of\
 the following:
•If you blocked all new devices from connecting, to allow the computer or\
 device that 
you are currently using to continue to access the network, select the ch\
eck box next 
to your computer or device in the table, and click the  Allow button.
• T
o either continue to allow or to block other computers and devices that \
are currently 
connected, select the check box next to the computer or device in the ta\
ble, and click 
either the  Allow button or the Block button.
10. Click the  Apply button.
Your settings are saved.
Manage Network Access Control Lists
You can use access control to block or allow access to your network. An access control list  (ACL) functions with the MAC addresses of wired and WiFi devices that \
can either access 
your entire network or are blocked from accessing your entire network.
The modem router can detect the MAC addresses of devices that are connec\
ted to the  network and list the MAC addresses of devices that were connected to the\
 network.
Each network device owns a MAC address, which is a unique 12-character p\
hysical address, 
containing the hexadecimal characters 0–9, a–f, or 
 A–F (uppercase or lowercase) only, and 
separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC address is on the 
label of the WiFi card or network interface device. If you cannot see th\
e label, you can display 
the MAC address using the network configuration utilities of the compute\
r. You might also 
find the MAC addresses through the web management interface of the modem\
 router (see 
View Devices Currently on the Network on page  104).