Netgear C6250 Ac1600 Wifi Cable Modem Router User Manual

							Manage the WAN and LAN Network Settings 
81
 AC1600 WiFi Cable Modem Router
Manage the WAN Security Settings
The WAN security settings include port scan protection and denial of service \
(DoS) 
protection, which can protect your LAN against attacks such as Syn flood\
, Smurf Attack, Ping 
of Death, and many others. By default, DoS protection is disabled and a \
port scan is rejected.
You can also enable the modem router to respond to a ping to its WAN (Internet) port. This  feature allows your modem router to be discovered. Enable this feature o\
nly as a diagnostic 
tool or if a specific reason exists.
To change the default WAN security settings:
1.  Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network.
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type  password for the password.
4.  Click the  OK button.
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Setup > WAN Setup.
6. View or change the security settings. 
						

							Manage the WAN and LAN Network Settings 
82
AC1600 WiFi Cable Modem Router 
7. 
The following table describes the protection and ping options on the WAN Setup page.
FieldDescription
Disable IPv4 Firewall 
Protection IPv4 firewall protection can secure your network against malicious packe\
ts.
To disable IPv4 firewall protection, select the Disable IPv4 Firewall Protection  check box.
By default, IPv4 firewall protection is enabled. NETGEAR recommends that\
 you 
leave the firewall enabled to protect your network.
Disable Port Scan and 
DoS Protection Port scan and DoS protection can protect your LAN against denial of serv\
ice 
attacks such as Syn flood, Smurf 

Attack, Ping of Death, Teardrop Attack, UDP 
Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. However, when 
port scan and DoS protection are enabled, some Apple computers might not be 
able to connect to the Internet. By default, port scan and DoS protectio\
n are 
disabled.
To enable port scan and DoS protection, clear the Disable Port Scan and DoS  Protection  check box.
Respond to Ping on 
Internet Port By default, this check box is cleared to prevent the modem router from 
responding to a ping from the Internet. 
To enable the modem router to respond to a ping, select the  Respond to Ping on 
Internet Port  check box.
8. If you changed the settings, click the  Apply button.
Your settings are saved.
Set Up a Default DMZ Server
The default DMZ server feature is helpful when you are using some online\
 games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The modem router can detect some of these applications and function corr\
ectly with 
them but other applications might not function well. In some cases, one \
local computer can 
run the application correctly if that computer’s IP address is entered as the default DMZ 
server.
WARNING:
DMZ servers pose a security risk. A computer that is designated as 
the default DMZ server loses firewall protection from exploits on the 
Internet. Once compromised, the DMZ server computer attacks 
other computers on your network.
Note: Enabling port scan and DoS protection might affect the performance of th\
e 
modem router.
Note: When you allow the modem router to respond to a ping from the Internet, \
the modem router could be discovered by anyone and in that way become 
vulnerable to attacks. For optimum security, keep this check box cleared\
. 
						

							Manage the WAN and LAN Network Settings 
83  AC1600 WiFi Cable Modem Router
The modem router discards incoming traffic from the Internet that is not a response to one of 
your local computers or a service that you specially set up for this purpose (see 
Manage Port 
Forwarding to a Local Server for Services, Applications, and Games on page 166). Instead of 
discarding this traffic, you can let the modem router forward the traffic to one computer on 
your network. This computer is called the default DMZ server.
To set up a default DMZ server: 
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network. 
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button. 
The BASIC Home page displays.
5. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
6. Select the Default DMZ Server check box.
7. Type the IP address for the DMZ server.
8. Click the Apply button.
Your settings are saved and the modem router might restart.
Manage the SIP Application-Level Gateway
The application-level gateway (ALG) for the Session Initiation Protocol (SIP) is enabled by 
default for enhanced address and port translation. However, some types of VoIP and video 
traffic might not work well when the SIP ALG is enabled. For this reason, the modem router 
provides the option to disable the SIP ALG.
To disable the default SIP ALG:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.
The BASIC Home page displays. 
						

							Manage the WAN and LAN Network Settings 
84 AC1600 WiFi Cable Modem Router 
5. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
6. Select the Disable SIP ALG check box.
The SIP ALG is enabled by default.
7. Click the Apply button.
Your settings are saved.
Manage the Modem Router’s LAN IP Address Settings
The modem router is preconfigured to use private IP addresses on the LAN side and to act as 
a DHCP server. The modem router’s default LAN IP configuration is as follows:
•LAN IP address. 192.168.0.1 (This is the same as www.routerlogin.net and 
www.routerlogin.com.)
•Subnet mask. 255.255.255.0
These addresses are part of the designated private address range for use in private networks 
and are suitable for most applications. The IP address and subnet mask identify which 
addresses are local to a specific device and which must be reached through a gateway or 
modem router. You might want to change these settings if you need a specific IP subnet that 
one or more devices on the network use, or if competing subnets use the same IP scheme.
To change the LAN IP address settings:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Setup > LAN Setup. 
						

							Manage the WAN and LAN Network Settings 
85
 AC1600 WiFi Cable Modem Router
6. 
In the IP Address field, enter the LAN IP address for the  modem router.
7.  In the IP Subnet Mask  field, enter the LAN subnet mask for the modem router.
8.  Click the  Apply button.
Your settings are saved.
If you changed the LAN IP address of the modem router, you are disconnec\
ted when the 
changes take ef
 fect.
To reconnect, close your browser, relaunch it, and log in to the modem router at its new  LAN IP address.
Manage IP Address Reservation
When you specify a reserved IP address for a device on the LAN, that com\
puter always 
receives the same IP address each time it accesses the modem router’s DHCP server. 
NETGEAR recommends that you assign a reserved IP address to a computer o\
r server that 
requires permanent IP settings.
Reserve an IP Address
You must know the IP address and MAC address of a device for which you wa\
nt to reserve an IP address.
To reserve an IP address:
1.  Launch an Internet browser from a computer or WiFi device that is connec\
ted to the 
network. 
2.  T
ype  http://www.routerlogin.net . 
						

							Manage the WAN and LAN Network Settings 
86
AC1600 WiFi Cable Modem Router 
A login window opens.
3.  T
ype  admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4.  Click the  OK button. 
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Setup > LAN Setup .
The LAN Setup page displays.
6.  In the 
Address Reservation section, click the  Add button.
7. In the IP Address field, type the IP address to assign to the device. 
Choose an IP address from the modem router’s LAN subnet, such as 192.168.0.x. 
Tip: If the computer is already on your network, you can select the 
corresponding radio button from the 

Address Reservation Table. The 
computer’s information is automatically copied into the  IP Address, 
MAC Address, and Device Name fields.
8.  T
ype the MAC address of the device.
9. T
ype a name for the device.
10.  Click the  Add button.
The reserved address is entered into the Address Reservation Table on the LAN Setup  page.
11.  On the LAN Setup page, click the  Apply button.
Your settings are saved.
The reserved address is not assigned until the next time the device cont\
acts the modem  router’
 s DHCP server. Reboot the device or access its IP configuration and force a DHCP 
release and renew. 
						

							Manage the WAN and LAN Network Settings 
87  AC1600 WiFi Cable Modem Router
Change a Reserved IP Address
You can change the settings for a reserved IP address.
To change a reserved IP address:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network. 
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button. 
The BASIC Home page displays.
5. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
6. In the Address Reservation Table, select the radio button next to the reserved address that 
you want to change.
7. Click the Edit button.
The Address Reservation page displays.
8. Change the settings.
9. Click the Apply button.
The changes are entered into the Address Reservation Table on the LAN Setup page.
10. On the LAN Setup page, click the Apply button.
Your settings are saved.
Remove an IP Address Reservation
You can remove an IP address reservation that you no longer need.
To remove an IP address reservation:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network. 
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.  
						

							Manage the WAN and LAN Network Settings 
88 AC1600 WiFi Cable Modem Router 
The BASIC Home page displays.
5. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
6. In the Address Reservation Table, select the radio button next to the reserved address that 
you want to remove.
7. Click the Delete button.
The reserved address is removed from the Address Reservation Table.
8. Click the Apply button.
Your settings are saved.
Manage the IPv6 LAN Settings
You can manage the IPv6 LAN settings only if the cable Internet provider assigns an IPv6 
Internet address to the modem router. If the cable Internet provider assigns only an IPv4 
Internet address to the modem router, you can skip this section.
If the cable Internet provider assign an IPv6 IP address to the modem router, you can specify 
how the modem router must assign IPv6 addresses to the devices on your home network 
(the LAN) and you can enable or disable the IPv6 firewall.
To manage the IPv6 LAN settings:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Advanced Setup > IPv6. 
						

							Manage the WAN and LAN Network Settings 
89
 AC1600 WiFi Cable Modem Router
In the previous figure shows, the System Delegated Prefix
 field shows an IPv6 address 
and prefix that were delegated by the cable Internet provider.
Note: If the modem router does not obtain an IPv6 address, all options onscreen 
are masked out.
6.  Select 
an  IP Address Assignment  radio  button:
•Use DHCP Server .
  The modem router assigns IPv6 addresses to the devices on your 
home network (the LAN) through a DHCP server.  This method passes more information 
to LAN devices, but some IPv6 systems might not support the DHCPv6 clien\
t 
function. 
• Auto Config.
  The modem router configures the IPv6 addresses to the devices on your 
home network automatically.  This is the default setting.
7.  T
o disable the IPv6 firewall protection, select the  Disable IPv6 Firewall Protection check 
box.
IPv6 firewall protection can secure your network against malicious packe\
ts and is 
enabled by default. NETGEAR recommends that you leave the firewall enabl\
ed to protect 
your network.
8.  Click the  Apply button.
Your settings are saved. 
						

							Manage the WAN and LAN Network Settings 
90 AC1600 WiFi Cable Modem Router 
Change the Modem Router’s Device Name
The modem router’s default device name is C6250-100NAS. This device name displays in a 
file manager when you browse your network.
To change the modem router’s device name:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Type admin for the user name and type your password.
If you did not yet personalize your password, type password for the password.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
6. In the Device Name field, enter a new name.
7. Click the Apply button.
Your settings are saved.
Manage the Built-In DHCP Server
By default, the modem router functions as a DHCP server. The modem router assigns IP, 
DNS server, and default gateway addresses to all devices connected to the LAN. The 
assigned default gateway address is the LAN address of the modem router.
You can use another device on your network as the DHCP server or specify the network 
settings of all your computers.
Note:If you disable the DHCP server and no other DHCP server is available 
on your network, you must set your computer IP addresses manually 
so that they can access the modem router.
To disable the built-in DHCP server:
1. Launch an Internet browser from a computer or WiFi device that is connected to the 
network.
2. Type http://www.routerlogin.net.
A login window opens.