Netgear Dgnd3700v2 N600 Wireless Dual Band Gigabit Adsl2 Plus Modem Router User Manual

							Genie Basic Settings 
41  N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2
because it is usually implemented through hardware, while WPA-PSK is usually implemented 
through software. WPA2-PSK uses a passphrase to authenticate and generate the initial data 
encryption keys. Then it dynamically varies the encryption key. 
WPS-PSK + WPA2-PSK Mixed Mode can provide broader support for all wireless clients. 
WPA2-PSK clients get higher speed and security, and WPA-PSK clients get decent speed 
and security. The product documentation for your wireless adapter and WPA client software 
should have instructions about configuring their WPA settings. 
						

							42
4
4.   Genie Advanced Home
Specify custom settings
This chapter contains the following sections:
•Setup Wizard 
•WPS Wizard 
•VPN Wizard 
•Setup Menu 
•ADSL Setup 
•WAN Setup 
•LAN Setup 
•Quality of Service (QoS) Setup 
Some selections on the Advanced Home screen are described in separate chapters:
•USB Storage. See Chapter 5, USB Storage.
•Security. See Chapter 7, Security.
•Administration. See Chapter 8, Administration.
•Advanced Setup. See Chapter 9, Advanced Settings. 
						

							Genie Advanced Home 43
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2
Setup Wizard
The NETGEAR Genie installation process is launched the first time you se\
t up the wireless 
modem router. After setting up the wireless modem router the first time, if you want t\
o 
perform this task again, you can run Setup Wizard from the Advanced tab of the Genie.
1.  Select  Setup W
 izard to display the following screen: 
2. Select either  Ye s or No, I want to configure the router myself . If you select No, you are 
taken to the Internet Setup screen (see Internet Basic Settings on page  30). 
3.  If you selected 
 Yes, click Next. The following screen displays:
The Setup Wizard searches your Internet connection for servers and proto\
cols to 
determine your ISP configuration. The following screen displays: 
						

							Genie Advanced Home 44
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2 
WPS Wizard
The WPS Wizard helps you add a WPS-capable client device (a wireless de\
vice or 
computer) to your network. On the client device you need to either pres\
s its WPS button or 
locate its WPS PIN.
To use the WPS Wizard:
1.  Select  Advanced > WPS W
 izard.
2.  Click  Next. 
 The following screen lets you select the method for adding the WPS clien\
t (a 
wireless device or computer).
 
You can use either the push button or PIN method. 
3.  Select either  Push Button or  PIN Number. 
• T
o use the push button method, either click the WPS  button on this screen, or press 
the  WPS button located on the top of the wireless modem router. Within two minu\
tes, 
go to the wireless client and press its  WPS button to join the network without entering 
a password.
• T
o use the PIN method, select the  PIN Number radio button, enter the client security 
PIN, and click Next. 
						

							Genie Advanced Home 45
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2
Within two minutes, go to the client device and use its WPS software to \
join the 
network without entering a password.
The wireless modem router attempts to add the WPS-capable device. The WPS LED 
 on the top of the wireless modem router blinks green. When the wireless\
 modem 
router establishes a WPS connection, the LED is solid green, and the wir\
eless modem 
router WPS screen displays a confirmation message. 
4.  Repeat Step 2 and Step 3 to add another WPS client to your network.
VPN Wizard
The VPN Wizard asks you series of questions that determine the IPSec key\
s and VPN 
policies it sets up. The VPN Wizard sets the parameters for the network connection, Security \
Association, traffic selectors, authentication algorithm, and encryption. These parameters are  based on the VPNC recommendations. More information about the VPNC recom\
mendations 
is presented in the VPN Wizard summary page. 
						

							Genie Advanced Home 46
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2 
To use the VPN Wizard:
1. 
Select  ADV
 ANCED > VPN Wizard . 
2.  Click the  Next button. 
Enter the requested information:
•Connection name. Enter an appropriate name for the connection. 
 This name is not 
supplied to the remote VPN endpoint. Rather, it is used to help you manage the VPN 
settings.
• Pre-shared key . 
 The key has to be entered both here and on the remote VPN 
Gateway or the remote VPN client. This method does not require using a CA 
(Certificate Authority).
• VPN tunnel connection. 
 The wizard has to know if you are planning to connect to a 
remote gateway or setting up the connection for a remote client or compu\
ter to 
establish a secure connection to this device.
3.  Click the  Next button. 
						

							Genie Advanced Home 47
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2
Enter the remote IP address of the gateway you want to connect to, or pr\
ovide the 
Internet name of the gateway. The Internet name is the fully qualified domain name, as 
set up in a Dynamic DNS service.
4.  Click the  Next button.
Enter the remote LAN IP address and subnet mask of the remote gateway.
•If this information does not match the LAN IP address and subnet mask in\
 the remote 
gateway

, the secure tunnel fails to connect.
• The IP address range used on the remote LAN has to be dif
 ferent from the IP address 
range used on the local LAN.
5.  Click the  Next button.
This screen shows the summary of the Wizard configuration with a link to\
 view the VPNC 
recommended parameters (click the here link to view the VPNC-recommended 
parameters).
6.  Click the  Done button. 
For information about how to add or modify VPN policies, see  VPN Policies on page 123. 
						

							Genie Advanced Home 48
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2 
Setup Menu
Select 
ADVANCED > Setup to display the Setup menu. The following selections are 
available:
• Internet Setup. 
 This is a shortcut to the same Internet Basic Settings screen that you c\
an 
access from the dashboard on the Basic Home screen. See Internet Basic Settings on 
page   30.
• ADSL Setup. Internet (ADSL) setup. See ADSL Setup  on page
  48.
• W
ireless Setup . This is a shortcut to the same Wireless Settings screen that you can 
access from the dashboard on the Basic Home screen. See Basic Wireless Settings on 
page
  35.
• Guest Network. 
 This is a shortcut to the same Wireless Settings (for guest networks) \
screen that you can access from the dashboard on the Basic Home screen. \
See Guest 
Networks on page  39. 
• W
AN Setup. Internet (WAN) setup. See  WAN Setup on page
  49.
• LAN Setup. Local area network (LAN) setup. See LAN Setup on page  52.
• QoS Setup. Quality of Service (QoS) setup. See Quality of Service (QoS) Setup on 
page
  55.
ADSL Setup
The ADSL Settings screen lets you configure the multiplexing method and \
virtual circuit of 
your ADSL connection. The default parameters should be correct to match the system used 
by your ISP. Select  Advanced > Setup > ADSL Setup to view the following screen:
•Multiplexing Method. Your ISP will indicate whether your multiplexing method is 
VC-BASED or LLC-BASED. 
						

							Genie Advanced Home 49
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2
•
VPI, VCI. Your ISP will indicate which VPI/VCI combination is used for your service\
.
WAN Setup
The WAN Setup screen lets you configure a DMZ (demilitarized zone) server, change the 
maximum transmit unit (MTU) size, and enable the wireless modem router\
 to respond to a 
ping on the WAN (Internet) port. Select  Advanced > Setup > WAN Setup to view the 
following screen:
• Disable Port Scan and DoS Protection. DoS protection protects your LAN against 
denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop 
Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. This should  be disabled only in special circumstances. 
• Default DMZ Server . 
 This feature is sometimes helpful when you are playing online 
games and/or videoconferencing. Be careful when using this feature becau\
se it makes 
the firewall security less effective. See the following section,  Default DMZ Server, for 
more details.
• Respond to Ping on Internet Port . If you want the wireless modem router to respond to 
a ping from the Internet, select this check box. Use this only as a diag\
nostic tool because 
it allows your wireless modem router to be discovered. Do not select thi\
s check box 
unless you have a specific reason.
• MTU Size (in bytes). 
 The normal MTU (maximum transmit unit) value for most Ethernet 
networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some IS\
Ps you might 
need to reduce the MTU. This is rarely required, and should not be done unless you are 
sure it is necessary for your ISP connection. See  Change the MTU Size on page
  50.
• NA
T Filtering . Network Address Translation (NAT) determines how the wireless modem 
router processes inbound traffic. Secured NAT provides a secured firewall to protect the 
computers on the LAN from attacks from the Internet, but might prevent s\
ome Internet 
games, point-to-point applications, or multimedia applications from func\
tioning. Open 
NAT provides a much less secured firewall, but allows almost all Internet \
applications to 
function. 
• Disable SIP 
 ALG. Some VoIP applications do not work well with the SIP ALG. Enabling 
this option to turn off the SIP ALG might help your VoIP devices to create/accept a call 
through the router. 
						

							Genie Advanced Home 
50 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700v2 
Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and 
videoconferencing applications that are incompatible with Network Address Translation 
(NAT). The wireless modem router is programmed to recognize some of these applications 
and to work correctly with them, but there are other applications that might not function well. 
In some cases, one local computer can run the application correctly if that computer’s IP 
address is entered as the default DMZ server.
WARNING:
DMZ servers pose a security risk. A computer designated as the 
default DMZ server loses much of the protection of the firewall and 
is exposed to exploits from the Internet. If compromised, the DMZ 
server computer can be used to attack other computers on your 
network.
Incoming traffic from the Internet is usually discarded by the wireless modem router unless 
the traffic is a response to one of your local computers or a service that you have configured 
in the Port Forwarding/Port Triggering screen. Instead of discarding this traffic, you can have 
it forwarded to one computer on your network. This computer is called the default DMZ 
server.
To set up a default DMZ server: 
1. On the WAN Setup screen, select the Default DMZ Server check box.
2. Type the IP address.
3. Click Apply.
Change the MTU Size
The maximum transmission unit (MTU) is the largest data packet a network device transmits. 
When one network device communicates across the Internet with another, the data packets 
travel through many devices along the way. If any device in the data path has a lower MTU 
setting than the other devices, the data packets have to be split or “fragmented” to 
accommodate the device with the smallest MTU. 
The best MTU setting for NETGEAR equipment is often just the default value, and changing 
the value might fix one problem but cause another. Leave MTU unchanged unless one of 
these situations occurs:
•You have problems connecting to your ISP or other Internet service, and the technical 
support of either the ISP or NETGEAR recommends changing the MTU setting. These 
web-based applications might require an MTU change:
-A secure website that will not open, or displays only part of a web page
-Yahoo email