Netgear C6250 Ac1600 Wifi Cable Modem Router User Manual

							Secure Your Network 
61  AC1600 WiFi Cable Modem Router
Add Disconnected Devices to or Remove Them from the Allowed List
If you set up an access list that blocks all new devices from accessing your network, you can 
specify which devices that are currently not connected to the modem router but that were 
connected in the past are allowed to access your network when they attempt to reconnect.
Note:You cannot remove a device from the allowed list while the device is 
currently connected to the modem router. To remove such a device, 
you must wait until the device disconnects from the modem router.
To add a disconnected device to the allowed list or remove it from the allowed list:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Security > Access Control.
The Access Control page displays.
6. Click the View list of allowed devices not currently connected to the network link. 
						

							Secure Your Network 62
AC1600 WiFi Cable Modem Router 
A table displays the detected device names, MAC addresses, and connectio\
n types of 
the devices that are not connected but allowed to access the network.
7.  T
o add a device to the allowed list, do the following:
a.Click the  Add button.
The Add Allowed Device page displays.
b.  Enter the MAC address and device name for the device that you want to al\
low
 .
c.  Click the  Add button on the 
 Add Allowed Device page.
The device is added to the allowed list on the Access Control page.
8.  T
o remove a device from the allowed list, do the following:
a.Select the check box for the device.
b.  Click the Remove from the list button.
The device is removed from the allowed list.
9.  Click the  Apply button.
Your settings are saved. 
						

							Secure Your Network 
63  AC1600 WiFi Cable Modem Router
Add Disconnected Devices to or Remove Them from the Blocked List
If you set up an access list that allows all new devices from accessing your network, you can 
specify which devices that are currently not connected to the modem router but that were 
connected in the past are blocked from accessing your network when they attempt to 
reconnect.
Note:You cannot remove a device from the blocked list after you just placed it 
on the blocked list and the device is still connected to the modem router. 
(In such a situation, the device would be blocked from accessing your 
network when it attempts to reconnect.) To remove such a device, you 
must wait until the device disconnects from the modem router.
To add a disconnected device to the blocked list or remove it from the blocked list:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Security > Access Control.
The Access Control page displays.
6. Click the View list of blocked devices not currently connected to the network link. 
						

							Secure Your Network 64
AC1600 WiFi Cable Modem Router 
A table displays the detected device names, MAC addresses, and connectio\
n types of 
the devices that are not connected and blocked from accessing the networ\
k.
7.  T
o add a device to the blocked list, do the following:
a.Click the  Add button.
The Add Blocked Device page displays.
b.  Enter the MAC address and device name for the device that you want to bl\
ock.
c.  Click the  Add button on the 
 Add Blocked Device page.
The device is added to the blocked list on the Access Control page.
8.  T
o remove a device from blocked list, do the following:
a.Select the check box for the device.
b.  Click the Remove from the list button.
The device is removed from the blocked list.
9.  Click the  Apply button.
Your settings are saved.
Change the Permission for a Device or Change the Device Name on a List
For a device on the blocked list, whether or not currently connected to \
the network, you can 
change the permission and move the device to the allowed list. Similarly\
, for a device on the 
allowed list, whether or not currently connected to the network, you can\
 change the 
permission and move the device to the blocked list. For a device on any \
access list, you can 
change the device name that displays in the list. You cannot change the MAC address of a 
device on an access list. 
						

							Secure Your Network 65
 AC1600 WiFi Cable Modem Router
To change the permission or device name for a device on an access list:
1. 
Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network.
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type  password for the password.
4.  Click the  OK button.
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Security > Access Control .
The Access Control page displays.
6.  Select a device on an access control list:
• T
o select a device that is currently connected to the modem router, selec\
t its 
associated check box in the  table.
•To select a device that is not connected to the modem router and that is \
on the 
allowed list, do the following:
a.  Click the V
 iew list of allowed devices not currently connected to the 
network link.
b.  Select its associated check box in the  table (that is, the allowed list).
• T
o select a device that is not connected to the modem router and that is \
on the 
blocked list, do the following:
a.  Click the V
 iew list of blocked devices not currently connected to the 
network link.
b.  Select its associated check box in the  table (that is, the blocked list).
The  Edit button that is associated with the table becomes available.
7.  Click the  Edit button.
The Edit Device Name page displays.
8.  T
o change the permission, from the  Access Control menu, select either  Allow or Block.
9.  T
o change the device name, enter a new name in the  Device Name field.
10.  Click the  Apply button.
Your settings are saved and the Access Control page displays again. 
						

							Secure Your Network 66
AC1600 WiFi Cable Modem Router 
Block Keywords and Domains for HTTP Traffic
You can block keywords and domain names (website names) to prevent HTTP\
 traffic 
between your network and websites that include such keywords and names. \
By default, 
keyword blocking is disabled and no domains are blocked. 
Set Up Blocking
You can set up blocking of specific keywords and domains to occur continu\
ously or according to a schedule.
To set up keyword and domain blocking:
1.  Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network. 
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4.  Click the  OK button. 
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Security >  Block Sites. 
						

							Secure Your Network 
67  AC1600 WiFi Cable Modem Router
6. Specify a keyword blocking option:
•Per Schedule. Use keyword blocking according to a schedule that you set and select 
a schedule from the menu.
For more information, see Schedule When Security Features Are Active on page 75.
•Always. Use keyword blocking continuously.
7. In the Type keyword or domain name here field, enter a keyword or domain.
Here are some sample entries:
•Specify XXX to block http://www.badstuff.com/xxx.html.
•Specify .com if you want to allow only sites with domain suffixes such as .edu or .gov.
•Enter a period (.) to block all Internet browsing access.
8. Click the Add Keyword button.
The keyword or domain is added to the Block sites containing these keywords or 
domain names field (which is also referred to as the blocked list).
9. To add more keywords or domains, repeat Step 7 and Step 8.
The keyword list supports up to 32 entries.
10. Click the Apply button.
Your settings are saved.
Remove a Keyword or Domain from the Blocked List
If you no longer need a keyword or domain on the blocked list, you can remove the keyword 
or domain.
To remove a keyword or domain from the blocked list:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network. 
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button. 
The BASIC Home page displays.
5. Select ADVANCED > Security > Block Sites.
The Block Sites page displays.
6. In the Block sites containing these keywords or domain names field, select the 
keyword or domain that you want to remove.
7. Click the Delete Keyword button. 
						

							Secure Your Network 
68 AC1600 WiFi Cable Modem Router 
The keyword or domain is removed from the blocked list.
8. Click the Apply button. 
Your settings are saved.
Remove All Keywords and Domains from the Blocked List
You can simultaneously remove all keywords and domains from the blocked list.
To remove all keywords and domains from the blocked list:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network. 
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button. 
The BASIC Home page displays.
5. Select ADVANCED > Security > Block Sites.
The Block Sites page displays.
6. Click the Clear List button.
All keywords and domains are removed from the blocked list.
7. Click the Apply button. 
Your settings are saved.
Specify a Trusted Computer
You can exempt one trusted device from blocking and logging. The device that you exempt 
must be assigned a fixed (static) IP address.
To specify a trusted device:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network. 
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.  
						

							Secure Your Network 69
 AC1600 WiFi Cable Modem Router
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Security >  Block Sites.
6.  Scroll down and select the  Allow trusted IP address to visit blocked sites  check box.
7.  In the T
rusted IP Address  field, enter the IP address of the trusted device.
The first three octets of the IP address are automatically populated and\
 depend on the IP  address that is assigned to the modem router on the LAN Setup page.
8.  Click the  Apply button.
Your settings are saved.
Block Access to Services and Applications
Services are functions that servers perform at the request of client dev\
ices. For example, 
web servers serve web pages, time servers serve time and date informatio\
n, and game hosts 
serve data about the moves of the players. 
When a device on the Internet sends a request for service to a server, the requested service 
is identified by a service or port number
 . (For this reason, service blocking is also referred to 
as port filtering.) The service or port number appears as the destination port number in the\
 
transmitted IP packets. For example, a packet that is sent with the dest\
ination port number 
80 is an HTTP (web server) request.  
						

							Secure Your Network 70
AC1600 WiFi Cable Modem Router 
The service numbers for many common protocols are defined by the Interne\
t Engineering 
Task Force (IETF at ietf.org/
) and published in RFC1700, Assigned Numbers . Service 
numbers for other applications are typically chosen from the range 1024–\
65535 by the 
authors of the application. 
 Although the modem router already holds a list of many service 
port numbers, you are not limited to these choices. 
You can block access to specific Internet services by devices on your net\
work. This feature is  called service blocking or port filtering. 
 The modem router provides default (predefined) 
services that you can select to block. You can also add a new service for blocking, but you 
first must find out which port number or range of numbers the applicatio\
n uses. You can find 
port number information by contacting the publisher of the application, \
by asking user groups 
or newsgroups, or by searching the Internet.
Block a Default Service
You can set up blocking of specific services to occur continuously or acc\
ording to a schedule.
To block a default service:
1.  Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network. 
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4.  Click the  OK button. 
The BASIC Home page displays.
5.  Select 
ADVANCED > Security > Block Services.