Netgear D6400 Ac1600 Wifi Vdsl Adsl Modem Router 802 11ac Dual Band Gigabit User Manual

							191
11
11.   Manage the WAN and LAN 
Network Settings
This chapter describes how you can manage the WAN and LAN network settings of the modem 
router.
The chapter includes the following sections:
•Change the Physical WAN Connection Preference
•Enable and Configure a VLAN
•Set Up a Bridge for a Port Group or VLAN Tag Group
•Enable Bridge Mode for an IPTV Device
•Manage the WAN Security Settings
•Set Up a Default DMZ Server
•Manage IGMP Proxying
•Manage NAT Filtering
•Manage the SIP Application-Level Gateway
•Manage the Modem Router’s LAN IP Address Settings
•Manage the Router Information Protocol Settings
•Manage Reserved LAN IP Addresses
•Change the Modem Router’s Device Name
•Manage the DHCP Server Address Pool
•Disable the Built-In DHCP Server
•Set Up and Manage Custom Static Routes
For information about the IPv4 Internet settings, IPV6 settings, and MTU size, see Chapter 3, 
Manage the Internet Settings Manually. 
						

							Manage the WAN and LAN Network Settings 
192 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
Change the Physical WAN Connection Preference
The modem router can autodetect the type of WAN connection. However, you can also set 
the WAN connection preference manually to either the DSL port or the Ethernet WAN port.
Note:The modem router does not support load balancing over ADSL and 
Ethernet WAN interfaces. Only one WAN interface (either the DSL 
port or the Ethernet WAN port) can be active at any time.
To change the WAN connection preference:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Enter the user name and password for the modem router.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
6. From the WAN Preference menu, select one of the following options:
•Auto-Detect. The modem router automatically detects whether the WAN connection 
is DSL over the DSL port or Ethernet over the Internet port. Auto-Detect is the default 
setting.
•Must use DSL WAN. The modem router uses the DSL port for a DSL WAN 
connection. The Internet port is shut down.
•Must use Ethernet WAN. The modem router uses the Internet port for an Ethernet 
WAN connection. The DSL port is shut down.
7. Click the Apply button.
Your settings are saved.
Enable and Configure a VLAN
A network of computers and devices can behave as if they are connected to the same 
network even though they might actually be physically on different segments of a LAN. Virtual 
LANs (VLANs) are configured through software rather than hardware, which makes them 
very flexible. 
						

							Manage the WAN and LAN Network Settings 193
 AC1600 WiFi VDSL/ADSL Modem Router Model D6400
If you enable a VLAN and if the network devices (hubs and switches) on\
 your LAN support 
the VLAN (802.1Q) standard, the VLAN ID for the wireless access point \
is associated with all 
traffic coming from the modem router.
If you are subscribed to IPTV service, the modem router might require VL\
AN tags to 
distinguish between the Internet traf

fic and IPTV traffic.
Note:If your ISP provides directions on how to set up VLANs for IPTV and 
Internet service, follow those directions.
To enable and configure a VLAN for the virtual Internet interface and ano\
ther VLAN for 
the virtual IPTV interface:
1. Launch a web browser from a computer or WiFi device that is connected to\
 the network.
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  Enter the user name and password for the  modem router.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
4.  Click the  OK button.
The BASIC Home page displays.
5.  Select  Internet. 
The previous figure shows only the top of the Internet Setup page. 
						

							Manage the WAN and LAN Network Settings 
194 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
6. Configure a VLAN for the virtual Internet interface:
a.From the menu above the Enable This Interface check box, select Internet.
b. Make sure that the Enable This Interface check box is selected.
By default, the check box is selected for the virtual Internet interface.
c. Select the Use VLANID check box.
d. Enter a VLAN ID that applies to the virtual Internet interface.
The VLAN ID can be in a range from 0 to 4094. The default VLAN ID is 0.
e. To specify a priority for the VLAN, in the Priority (802.1p) field, enter a value from 0 
to 7.
f. Click the Apply button.
Your settings are saved for the virtual Internet interface.
7. Configure a VLAN for the virtual IPTV interface:
a.From the menu above the Enable This Interface check box, select IPTV.
b. Select the Enable This Interface check box.
By default, the check box is cleared for the virtual IPTV interface. However, if you 
already enabled the virtual IPTV interface (see 
Chapter 3, Manage the Internet 
Settings Manually), the check box is selected.
c. Select the Use VLANID check box.
d. Enter a VLAN ID that applies to the virtual IPTV interface.
The VLAN ID can be in a range from 0 to 4094. The default VLAN ID is 0.
e. To specify a priority for the VLAN, in the Priority (802.1p) field, enter a value from 0 
to 7.
f. Click the Apply button.
Your settings are saved for the virtual IPTV interface.
Set Up a Bridge for a Port Group or VLAN Tag Group
Some devices, such as an IPTV, cannot function behind the modem router’s network address 
translation (NAT) service or firewall. Based on what your Internet service provider (ISP) 
requires, for the device to connect to the ISP’s network directly, you can enable the bridge 
between the device and the modem router’s Internet port or add new VLAN tag groups to the 
bridge.
Note:If your ISP provides directions on how to set up a bridge for IPTV and 
Internet service, follow those directions. 
						

							Manage the WAN and LAN Network Settings 195
 AC1600 WiFi VDSL/ADSL Modem Router Model D6400
Set Up a Bridge for a Port Group
If the devices that are connected to the 
modem router’s Ethernet LAN port or WiFi network 
include an IPTV device, your ISP might require you to set up a bridge fo\
r a port group on the 
virtual Internet interface.
A bridge with a port group prevents packets that are sent between the IP\
TV device and the  modem router’s
  physical Internet port from being processed through the modem router’s 
network address translation (NAT) service.
To configure a port group and enable the bridge:
1.  Launch a web browser from a computer or WiFi device that is connected to\
 the network.
2.  T
ype  http://www.routerlogin.net .
A login window opens.
3.  Enter the user name and password for the  modem router.
The user name is  admin. 
 The default password is password. The user name and 
password are case-sensitive.
4.  Click the  OK button.
The BASIC Home page displays.
5.  Select  ADV
 ANCED > Setup > VLAN/Bridge Settings.
The VLAN/Bridge Settings page displays.
6.  Select the Enable VLAN/Bridge Group check box.
The page expands.
7.  Select the By bridge group radio button. 
						

							Manage the WAN and LAN Network Settings 
196 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
8. Select a Wired Ports check box or a Wireless check box:
•If your device is connected to an Ethernet port on the modem router, select the Wired 
Ports check box that corresponds to the Ethernet port on the modem router to which 
the device is connected.
•If your device is connected to your modem router’s WiFi network, select the Wireless 
check box that corresponds to the modem router’s WiFi network to which the device 
is connected.
Note:You must select at least one Wired Ports or Wireless check box. You 
can select more than one check box.
9. Click the Apply button.
Your settings are saved.
Set Up a Bridge for a VLAN Tag Group
If the devices that are connected to the modem router’s Ethernet LAN ports or WiFi network 
include an IPTV device, your ISP might require you to set up a bridge for a VLAN tag group.
If you are subscribed to IPTV service, the modem router might require VLAN tags to 
distinguish between the Internet traffic and the IPTV traffic. A bridge with a VLAN tag group 
prevents packets that are sent between the IPTV device and the modem router’s physical 
Internet port from being processed through the modem router’s network address translation 
(NAT) service.
You can add VLAN tag groups to a bridge and assign VLAN IDs and priority values to each 
VLAN tag group.
To add a VLAN tag group and enable the bridge:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Enter the user name and password for the modem router.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Setup > VLAN/Bridge Settings.
The VLAN/Bridge Settings page displays.
6. Select the Enable VLAN/Bridge Group check box. 
						

							Manage the WAN and LAN Network Settings 197
 AC1600 WiFi VDSL/ADSL Modem Router Model D6400
By default, the 
By VLAN tag group  radio button is selected.
7.  Click the  Add button.
8. Specify the settings as described in the following table.
FieldDescription
Name Enter a name for the VLAN tag group. 
The name can be up to 10 characters.
VLAN ID Enter a value from 1 to 4094.
Priority Enter a value from 0 to 7.
Select the check box for a wired LAN port or WiFi port.
If your device is connected to an Ethernet port on the modem router, sel\
ect the LAN port check box that 
corresponds to the Ethernet port on the modem router to which the device\
 is connected.
If your device is connected to your modem router’s WiFi network, select the WiFi check box that 
corresponds to the modem router’
 s WiFi network to which the device is connected.
9. Click the  Add button.
The VLAN tag group is added.
Note: You must select at least one LAN port or WiFi port. You can select more \
than one port. 
						

							Manage the WAN and LAN Network Settings 
198 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
10. Click the Apply button.
Your settings are saved.
Enable Bridge Mode for an IPTV Device
The modem router provides one physical DSL WAN interface and one physical Ethernet 
WAN interface; either one or the other is enabled for Internet service. Whichever physical 
WAN interface is enabled, it can be divided into two virtual interfaces: the Internet interface 
and the IPTV interface. This section refers to these virtual interfaces. (For information about 
changing the physical WAN interfaces, see 
Change the Physical WAN Connection 
Preference on page 192.)
The modem router uses the virtual Internet interface for regular Internet service. Some 
devices, such as an IPTV, cannot function behind the modem router’s network address 
translation (NAT) service or firewall. In such a situation, the modem router can use the virtual 
IPTV interface for Internet Protocol television (IPTV) service. By default, the virtual Internet 
interface is enabled and the virtual IPTV interface is disabled. In most cases, if you are not 
subscribed to IPTV service, you do not need to enable the virtual IPTV interface.
Based on what your Internet service provider (ISP) requires, for a device such as an IPTV to 
connect to the ISP’s network directly, you can enable the bridge between the device and the 
modem router’s virtual IPTV interface. In bridge mode, the LAN 4 port on the back panel of 
the modem router is bound to the virtual IPTV interface. In bridge mode, you must connect 
the device to LAN port 4.
If your ISP provides IPTV service in addition to regular Internet service and you are 
subscribed to IPTV, you might need to configure and enable the IPTV virtual interface. You 
might also need to configure one or more VLANs and set up a bridge:
•For information about configuring VLANs, see Enable and Configure a VLAN on 
page 192.
•For information about setting up a bridge, see Set Up a Bridge for a Port Group or VLAN 
Tag Group on page 194
For information about enabling and configuring the virtual IPTV interface, see one of the 
following sections:
•Manually Set Up an ADSL Internet Connection on page 47
•Manually Set Up a VDSL Internet Connection on page 57
•Manually Set Up a Cable of Fiber Internet Connection on page 66
To enable bridge mode for an IPTV device:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Enter the modem router user name and password. 
						

							Manage the WAN and LAN Network Settings 199
 AC1600 WiFi VDSL/ADSL Modem Router Model D6400
The user name is 
admin. The default password is password. The user name and 
password are case-sensitive.
4.  Click the  OK button.
The BASIC Home page displays.
5.  Select  Internet. 
6.  The Internet Setup page displays.
7.  From the menu above the Enable This Interface  check box, select IPTV.
The previous figure shows only the top of the Internet Setup page.
8.  Make sure that the  Enable This Interface  check box is selected for the IPTV interface.
If you already enabled and configured the IPTV interface, the check box \
is selected.
9.  Select the Bridge Mode (bind LAN4 to W
 AN2) check box.
The LAN 4 port is bound to the virtual IPTV interface.
10.  Click the  Apply button.
Your settings are saved.
Manage the WAN Security Settings
The WAN security settings include port scan protection and denial of service \
(DoS)  protection, which can protect your LAN against attacks such as Syn flood\
, Smurf Attack, Ping 
of Death, and many others. By default, DoS protection is disabled and a \
port scan is rejected. 
						

							Manage the WAN and LAN Network Settings 
200 AC1600 WiFi VDSL/ADSL Modem Router Model D6400 
You can also enable the modem router to respond to a ping to its WAN (Internet) port. This 
feature allows your modem router to be discovered. Enable this feature only as a diagnostic 
tool or if a specific reason exists.
To change the default WAN security settings:
1. Launch a web browser from a computer or WiFi device that is connected to the network.
2. Type http://www.routerlogin.net.
A login window opens.
3. Enter the user name and password for the modem router.
The user name is admin. The default password is password. The user name and 
password are case-sensitive.
4. Click the OK button.
The BASIC Home page displays.
5. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
6. To enable port scan and DoS protection, clear the Disable Port Scan and DoS Protection 
check box.
Note:Enabling port scan and DoS protection might affect the performance of 
the modem router.
7. To enable modem router to respond to a ping, select the Respond to Ping on Internet 
Port check box. 
8. Click the Apply button.
Your settings are saved.
Set Up a Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The modem router is programmed to recognize some of these applications and to 
work correctly with them, but other applications might not function well. In some cases, one 
local computer can run the application correctly if the IP address for that computer is entered 
as the default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the 
default DMZ server loses much of the protection of the firewall and 
is exposed to exploits from the Internet. If compromised, the DMZ 
server computer can be used to attack other computers on your 
network.