Netgear Dgnd4000 N750 Wireless Dual Band Gigabit Adsl2 Plus Modem Router User Manual

							Advanced Settings 
121  N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
3. In the Route Name field, type a name for this static route (for identification purposes only).
4. Select the Private check box if you want to limit access to the LAN only. If Private is 
selected, the static route is not reported in RIP. 
5. Select the Active check box to make this route effective. 
6. Type the IP address of the final destination. 
7. Type the IP subnet mask for this destination. If the destination is a single host, type 
255.255.255.255. 
8. Type the gateway IP address, which has to be a wireless modem router on the same LAN 
segment as the N750 Modem Router. 
9. Type a number from 1 through 15 as the metric value. 
This value represents the number of wireless modem routers between your network and 
the destination. Usually, a setting of 2 or 3 works, but if this link is a direct connection, set 
it to 1. 
10. Click Apply to add the static route.  
						

							Advanced Settings 122
N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
Remote Management
The remote management feature lets you upgrade or check the status of yo\
ur N750 Modem 
Router over the Internet.
To set up remote management:
1. 
Select  ADV
 ANCED > Advanced Setup > Remote Management . 
Note:Be sure to change the wireless modem router’s default login password \
to a very secure password. The ideal password should contain no 
dictionary words from any language and contain uppercase and 
lowercase letters, numbers, and symbols. It can be up to 30 
characters.
2.  Select the  T
 urn Remote Management On check box.
3.  Under 
Allow Remote Access By, specify the external IP addresses to be allowed to access 
the  wireless modem router’s  remote web management interface.
Note: For enhanced security, restrict access to as few external IP addresses 
as practical.
• T
o allow access from a single IP address on the Internet, select Only This 
Computer . Enter the IP address that is allowed access. 
• T
o allow access from a range of IP addresses on the Internet, select IP Address 
Range. Enter a beginning and ending IP address to define the allowed range. 
• T
o allow access from any IP address on the Internet, select Everyone. 
4.  Specify the port number for accessing the web management interface. 
						

							Advanced Settings 
123  N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
Normal web browser access uses the standard HTTP service port 80. For greater 
security, enter a custom port number for the remote web management interface. Choose 
a number from 1024 through 65535, but do not use the number of any common service 
port. The default is 8080, which is a common alternate for HTTP.
5. Click Apply to have your changes take effect.
6. When accessing your wireless modem router from the Internet, type your wireless modem 
router’s WAN IP address into your browser’s address or location field followed by a colon (:) 
and the custom port number. For example, if your external address is 134.177.0.123 and 
you use port number 8080, enter http://134.177.0.123:8080 in your browser.
USB Settings
For added security, the wireless modem router can be set up to share only approved USB 
devices. See 
Specify Approved USB Devices on page 69 for the procedure.
Universal Plug and Play
Universal Plug and Play (UPnP) helps devices, such as Internet appliances and computers, 
to access the network and connect to other devices as needed. UPnP devices can 
automatically discover the services from other registered UPnP devices on the network.
Note:If you use applications such as multiplayer gaming, peer-to-peer 
connections, or real-time communications such as instant messaging 
or remote assistance (a feature in Windows XP), you should enable 
UPnP. 
						

							Advanced Settings 124
N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
To turn on Universal Plug and Play:
1. 
Select  ADV
 ANCED > Advanced Setup >  UPnP . 
2. The available settings and information in this screen are:
Turn UPnP On. UPnP can be enabled or disabled for automatic device configuration. 
The default setting for UPnP is disabled. If this check box is not selec\
ted, the wireless  modem router does not allow any device to automatically control the reso\
urces, such as 
port forwarding (mapping) of the wireless modem router. 
Advertisement Period.  The advertisement period is how often the wireless modem 
router broadcasts its UPnP information. 
 This value can range from 1 to 1440 minutes. 
The default period is 30 minutes. Shorter durations ensure that control \
points have  current device status at the expense of additional network traffic. Longer durations can 
compromise the freshness of the device status, but can significantly red\
uce network 
traffic.
Advertisement Time to Live.  The time to live for the advertisement is measured in hops 
(steps) for each UPnP packet sent. 
 The time to live hop count is the number of steps a 
broadcast packet is allowed to propagate for each UPnP advertisement bef\
ore it 
disappears. The number of hops can range from 1 to 255. The default value for the 
advertisement time to live is 4 hops, which should be fine for most home\
 networks. If you 
notice that some devices are not being updated or reached correctly, then it might be 
necessary to increase this value.
UPnP Portmap Table.  The UPnP Portmap 
 Table displays the IP address of each UPnP 
device that is accessing the wireless modem router and which ports (int\
ernal and 
external) that device has opened. The UPnP Portmap Table also displays what type of 
port is open and whether that port is still active for each IP address. \
3.  Click  Apply  to save your settings. 
						

							Advanced Settings 125
 N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
IPv6
You can use this feature to set up an IPv6 Internet connection type if NE\
TGEAR genie does 
not detect it automatically.
To set up an IPv6 Internet connection type:
1.  Select  ADV
 ANCED > Advanced Setup > IPv6.
2. Select the IPv6 connection type from the list. Your Internet service provider (ISP) can 
provide this information.
• If your ISP did not provide details, you can select IPv6 T
 unnel. 
• If you are not sure, select  Auto Detect so that the wireless modem router detects the 
IPv6 type that is in use.
• If your Internet connection does not use PPPoE, DHCP
 , or fixed, but is IPv6, then 
select IPv6 auto config.
3.  Click  Apply so that your changes take ef
 fect.
Traffic Meter
Traffic metering allows you to monitor the volume of Internet traffic passing through your 
wireless modem router’s Internet port. With the traffic meter utility, you can set limits for traffic 
volume, set a monthly limit, and get a live update of traffic usage. 
						

							Advanced Settings 126
N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
To monitor Internet traffic:
1. 
Click  ADV
 ANCED > Advanced Setup > Traffic Meter . 
2. To enable the traffic meter, select the  Enable Traffic Meter check box.
3.  If you would like to record and restrict the volume of Internet traf
 fic, select the Traffic 
volume control  by radio button. You can select one of the following options for controlling 
the traffic volume:
• No Limit. No restriction is applied when the traf
 fic limit is reached.
• Download only . 
 The restriction is applied to incoming traffic only.
• Both Directions. 
 The restriction is applied to both incoming and outgoing traffic.
4.  Y
ou can limit the amount of data traffic allowed per month by specifying how many Mbytes 
per month are allowed or by specifying how many hours of traffic are allowed.
5.  Set the traf
 fic counter to begin at a specific time and date.
6.  Set up traf
 fic control to issue a warning message before the monthly limit of Mbyte\
s or hours 
is reached. You can select one of the following to occur when the limit is attained:
• The Internet LED blinks green or red. 
• The Internet connection is disconnected and disabled.
7.  Set up Internet traf
 fic statistics to monitor the data traffic.
8.  Click the  T
 raffic Status button to get a current update of Internet traffic status on your 
wireless modem router.
9.  Click  Apply  to save your settings. 
						

							Advanced Settings 127
 N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
Device Mode
When the wireless modem router is in Router mode, this screen allows swi\
tching to Modem 
mode, where the wireless modem router acts as a pure bridge or DSL modem\
.
Routing, firewall, wireless support, USB, and the traffic meter are not available in Modem 
mode. 

A typical application is a small-to-medium business scenario where the w\
ireless 
modem router is used for DSL connectivity behind a carrier class router \
or firewall or security 
device manager. When the wireless modem router is in Modem mode, this screen allows 
switching back to Router mode with all of the standard features. 
To switch the device mode:
1.  Click  ADV
 ANCED > Advanced Setup > Device Mode .
2. From the Device Mode list, select Router (Modem + Router) or  Modem (Modem only).
3.  Click  Apply to save your settings.
VPN Policies
Manage your VPN policies from the VPN Policies screen.
•T
raffic covered by a policy is automatically sent through a VPN tunnel.
• Where traf
 fic is covered by two or more policies, the first matching policy is use\
d. In this 
situation, the order of the policies is important. However, if you only have one policy for 
each remote VPN endpoint, then the policy order is not important.
• The VPN tunnel is created according to the parameters in the SA (securi\
ty association).
• The remote VPN endpoint must have a matching SA, or else it refuses the \
connection. 
						

							Advanced Settings 128
N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
There are two types of VPN policies:
• Manual. 
 All settings (including the keys) for the VPN tunnel are input manuall\
y at each 
end (both VPN endpoints). No third-party server or organization is inv\
olved.
• Auto. Some parameters for the VPN tunnel are generated automatically
 . This process 
requires using the IKE (Internet Key Exchange) protocol to perform neg\
otiations between 
the two VPN endpoints. 
To manage the VPN policies:
1.  Click  ADV
 ANCED > Advanced Setup > VPN Policies .
The Policy Table contains the following data:
• Enable. Use this check box to enable or disable a policy as required. Click  Apply 
after you make any changes.
• Name. Each policy has a unique name to identify it.
• T
ype. The type is Auto or Manual.
•Local. 
The IP address or address range on your local LAN. Traffic must be from (or 
to) these addresses to be covered by this policy.
• Remote. 
 The IP address or address range of the remote network. Traffic must be to 
(or from) these addresses to be covered by this policy.
• ESP . Encapsulating Security Payload. 
 This setting specifies the encryption protocol 
used for the VPN data.
2.  Click the appropriate button to manage a VPN policy:
• Edit. Edit (modify) the selected policy
 . (Select a policy by selecting the radio button.)
• Delete. Delete the selected policy
 . 
						

							Advanced Settings 129
 N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000
•
Apply . Save any changes to the Enable setting for each policy.
• Cancel. Discard any unsaved changes to the Enable setting for each policy
 .
• Add Auto 
 Policy. Change to the input screen for an Auto policy. When the new policy 
is saved, it appears in the bottom row of the Policy Table. See Add or Edit an Auto 
VPN Policy on page  129.
• Add Manual Policy . Change to the input screen for a Manual policy
 . When the new 
policy is saved, it appears in the bottom row of the Policy Table. See  Add or Edit a 
Manual VPN Policy on page  132.
Add or Edit an Auto VPN Policy
An Auto VPN policy uses the IKE (Internet Key Protocol) to exchange and n\
egotiate 
parameters for the IPsec SA (security association). Because of this ne\
gotiation, not all of the 
settings on this VPN gateway have to match the settings on the remote VP\
N endpoint. 
Where settings have match, this requirement is indicated.
To add or edit an Auto VPN Policy:
1.  Click  ADV
 ANCED > Advanced Setup > VPN Policies.
2.  Click the  Add Auto 
 Policy button.
3. Enter or select the following parameters:
• General. 
 These settings identify this policy and determine its major characterist\
ics.
- Policy Name. Enter a unique name to identify this policy
 . This name is not 
supplied to the remote VPN endpoint. It is used only to help you manage \
the 
policies. 
						

							Advanced Settings 
130 N750 Wireless Dual Band Gigabit ADSL Modem Router DGND4000 
-Remote VPN Endpoint. If the remote endpoint has a dynamic IP address, select 
Dynamic IP Address. No address data input is required.
Otherwise, select the desired option (IP address or domain name) and enter the 
address of the remote VPN endpoint you wish to connect to.
The remote VPN endpoint must have this VPN gateway’s address entered as its 
remote VPN endpoint.
-IKE Keep Alive. Check this check box if you wish to ensure that a connection is 
kept open, or, if that is not possible, it is quickly reestablished when disconnected.
The ping IP address has to be associated with the remote endpoint. Either the 
WAN or a LAN address can be used; a LAN address is preferable. This IP 
address is pinged to generate some traffic for the VPN tunnel.
•Local LAN. These settings identify which computers on your LAN are covered by this 
policy. For each selection, data must be provided as follows:
-Single address. Enter an IP address in the Single/Start IP address field. 
Typically, this setting is used when you wish to make a single server on your LAN 
available to remote users.
-Range address. Enter the starting IP address in the Single/Start IP address field, 
and the finish IP address in the Finish IP address field. This range must be an 
address range used on your LAN.
-Subnet address. Enter an IP address in the Single/Start IP address field, and the 
desired network mask in the Subnet Mask field.
The remote VPN endpoint must have these IP addresses entered as its remote 
addresses.
•Remote LAN. These settings identify which computers on the remote LAN are 
covered by this policy. For each selection, data must be provided as follows:
-Single PC - no Subnet. Select this option if there is no LAN (only a single 
computer) at the remote endpoint. If this option is selected, no additional data is 
required.
-Single address. Enter an IP address in the Single/Start IP address field. This 
value must be an address on the remote LAN. Typically, this setting is used when 
you wish to access a server on the remote LAN.
-Range address. Enter the starting IP address in the Single/Start IP address field, 
and the finish IP address in the Finish IP address field. This range must be an 
address range used on the remote LAN.
-Subnet address. Enter an IP address in the Single/Start IP address field, and the 
desired network mask in the Subnet Mask field.
The remote VPN endpoint must have these IP addresses entered as its local 
addresses.
•IKE.