Printing a PDF version of the Complete Manual. Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window. Click the print icon in the upper left of your browser window. Printing the Full Manual. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature.

Revision History

Part Number 208-10255-01
Version Date Number 1.0 July 2008
Description Product created

xiv v1.0, July 2008

Chapter 1 Connecting Your Router to the Internet
This chapter describes how to configure your DGN2000 Wireless-N ADSL2+ Modem Router Internet connection. When you perform the initial configuration of your modem router using the DGN2000 Wireless-N ADSL2+ Modem Router Resource CD as described in the Wireless-N ADSL2+ Modem Router DGN2000 Setup Manual, these settings are configured automatically for you. This chapter provides further details about these settings, as well as instructions on how to log in to the modem router for further configuration. Note: NETGEAR recommends using the Smart Wizard on the DGN2000 Wireless-N ADSL2+ Modem Router Resource CD for initial configuration, as described in the Wireless-N ADSL2+ Modem Router DGN2000 Setup Manual. This chapter includes: Using the Setup Manual What You Need before You Begin on page 1-2 Logging In to the Wireless Modem Router on page 1-3 Auto-detecting Your Internet Connection on page 1-5 Viewing or Manually Configuring Your ISP Settings on page 1-6 ADSL Settings on page 1-11 How the Internet Connection Works on page 1-12

Using the Setup Manual

For first-time installation of your modem router, refer to the Wireless-N ADSL2+ Modem Router DGN2000 Setup Manual. The Setup Manual explains how to launch the NETGEAR Smart Wizard on the DGN2000 Wireless-N ADSL2+ Modem Router Resource CD to step you through the procedure to connect your router, modem, and computers. The Smart Wizard will assist you in configuring your wireless settings and enabling wireless security for your network. After initial configuration using the Setup Manual, you can use the information in this Reference Manual to configure additional features of your wireless router.

1-1 v1.0, July 2008

For installation instructions in a language other than English, see the language options on the DGN2000 Wireless-N ADSL2+ Modem Router Resource CD.
What You Need before You Begin
You need to prepare the following before you can set up your firewall: Active Internet service provided by an ADSL account The Internet Service Provider (ISP) configuration information for your ADSL account ISP login name and password ISP Domain Name Server (DNS) addresses Fixed or static IP address Host and domain names Depending on how your ISP set up your Internet account, you need to know one or more of these settings: Virtual path identifier (VPI) and Virtual channel identifier (VCI) parameters Multiplexing method Host and domain names ASDL microfilters as explained in the Wireless-N ADSL2+ Modem Router DGN2000 Setup Manual

Viewing or Manually Configuring Your ISP Settings
NETGEAR recommends that you specify your country and language before you configure the settings on the Basic Settings screen. See Logging In to the Wireless Modem Router on page 1-3. You must install the ADSL filters and connect the modem router to the ADSL line as described in the Wireless-N ADSL2+ Modem Router DGN2000 Setup Manual before you configure the settings in the Basic Settings screen. To view or configure the basic settings: 1. Log in to the modem router as described in Logging In to the Wireless Modem Router on page 1-3. 2. Select Basic Settings to display the Basic Settings screen. The Basic Settings screen is explained in Understanding the Basic Settings Screen on page 1-8.

1-6 v1.0, July 2008

3. Select Yes or No depending on whether your ISP requires a login. This selection changes the fields available on the Basic Settings screen. Yes. If your ISP requires a login, select the encapsulation method. Enter the login name. If you want to change the login time-out, enter a new value in minutes. No. If your ISP does not require a login, enter the account name, if required, and the domain name, if required.
4. Enter the settings for the IP address and DNS server. The default ADSL settings usually work fine. If you have problems with your connection, check the ADSL settings. See ADSL Settings on page 1-11 for more details. 5. If no login is required, you can specify the MAC Address setting. 6. Click Apply to save your settings. 7. Click Test to test your Internet connection. If the NETGEAR website does not appear within one minute, refer to Chapter 6, Troubleshooting. Note: When your Internet connection is working you will no longer need to launch the ISPs login program on your computer to access the Internet. When you start an Internet application, your modem router automatically logs you in.
Understanding the Basic Settings Screen
The fields on the Basic Settings screen depend on whether or not your Internet connection requires a login. ISP does not require login ISP does require login

Figure 1-4

The following table explains the fields in the Basic Settings screen. Note that the group of fields included in this screen depends on whether or not a login is required.
1-8 v1.0, July 2008 Connecting Your Router to the Internet
Wireless-N ADSL2+ Modem Router DGN2000 Reference Manual Table 1-2. Basic Settings screen fields
Settings Does Your ISP Require a Login? These fields Account Name appear only if no (If required) login is required. Domain Name (If required) These fields Encapsulation appear only if your ISP Login requires a login. Password Description Yes No Enter the account name provided by your ISP. This might also be called the host name. Enter the domain name provided by your ISP. PPPoE (PPP over Ethernet) PPPoA (PPP over ATM) The login name provided by your ISP. This is often an e-mail address. The password that you use to log in to your ISP.

Settings Wireless Access Allow Broadcast of Name Point (SSID). (continued) Description Selected by default, the modem router broadcasts its SSID, allowing wireless stations that have a null (blank) SSID to adopt the correct SSID. If you disable broadcast of the SSID, only devices with the correct SSID can connect. This nullifies the wireless network discovery feature of some products such as Windows XP, but the data is still fully exposed to a determined snoop using specialized test equipment like wireless sniffers. For this reason NETGEAR recommends that you also enable wireless security. This feature is disabled by default. If it is enabled, wireless stations cannot communicate with each other or with stations on the wired network. Access control is disabled by default so that any computer configured with the correct wireless network name or SSID can access to your wireless network. For increased security, you can restrict access to the wireless network to only specific computers based on their MAC addresses. See Restricting access by MAC address. Wireless security is not used. In WEP (Wired Equivalent Privacy) mode you can select 64-bit or 128-bit data encryption. This mode has been superseded by WPA-PSK and WPA2-PSK, which should be selected if possible. See Configuring WEP. WPA Pre-Shared-Key (Wi-Fi Protected Access Pre-Shared Key) uses a pre-shared key to perform the authentication and generate the initial data encryption keys. Then, it dynamically varies the encryption key. WPA-PSK uses TKIP (Temporal Key Integrity Protocol) data encryption, implements most of the IEEE 802.11i standard, and is designed to work with all wireless network interface cards, but not all wireless access points. See Configuring Mixed WPA-PSK+WPA2-PSK Security.

Wireless Isolation

Wireless Station Turn Access Control On Access List
Security Options Disable WEP

WPA-PSK

Settings Security Options WPA2-PSK (continued) Description WPA Pre-Shared-Key (Wi-Fi Protected Access 2 with PreShared Key) uses a pre-shared key to perform the authentication and generate the initial data encryption keys. Then, it dynamically varies the encryption key. WPA2-PSK provides the best throughput with 802.11N because the encryption is supported in the hardware. WPA2-PSK uses AES (Advanced Encryption Standard) data encryption, implements the full IEEE 802.11i standard, but does not work with some older network cards. See Configuring Mixed WPA-PSK+WPA2-PSK Security. Mixed WPA-PSK + WPA2-PSK uses both WPA-PSK + WPA2-PSK standard encryption. A high performance client such as the NETGEAR WN511B should connect using WPA2-PSK in order to achieve maximum performance. Wireless clients that connect to this router using WPA-PSK will run at reduced performance levels. See Configuring Mixed WPA-PSK+WPA2-PSK Security. In WPA-802.1x mode, user authentication is implemented using 802.1x and RADIUS servers. See Configuring WPA802.1x.

3. In the Security Options section of the screen, select WPA-802.1x. 4. In the Radius Server Name/IP Address field, enter the name or IP address of the RADIUS server on your LAN. This is a required field. 5. In the Radius Port field, enter the port number used for connections to the RADIUS server. The default port is 1812. 6. In the Shared Key field, enter the value that you want to use for the RADIUS shared key. This key enables the modem router to log in to the RADIUS server and must match the client login value used on the RADIUS server.
Using Push 'N' Connect (WPS) to Configure Your Wireless Network and Security
If your wireless clients support Wi-Fi Protected Setup (WPS), you can use this feature to configure the modem routers SSID and security settings and, at the same time, connect the wireless client securely and easily to the modem router. Look for the symbol on your client device1 (computers that will connect wirelessly to the modem router are clients). WPS automatically configures the SSID and wireless security settings for the modem router (if the modem router is in its default state) and broadcasts these settings to the wireless client. Some considerations regarding WPS are: WPS supports only WPA-PSK and WPA2-PSK wireless security. WEP security is not supported by WPS. NETGEARs Push 'N' Connect feature is based on the Wi-Fi Protected Setup (WPS) standard. All other Wi-Fi-certified and WPS-capable products should be compatible with NETGEAR products that implement Push 'N' Connect. If your wireless network will include a combination of WPS capable devices and non-WPS capable devices, NETGEAR suggests that you set up your wireless network and security settings manually first, and use WPS only for adding additional WPS capable devices. See Connecting Additional Wireless Client Devices After WPS Setup on page 2-20. If the modem router has already been configured manually, and either WPS-PSK or WPA2PSK security has been enabled, a wireless client can be connected quickly and simply by using the WPS method of connecting to the wireless network. In this case, the existing wireless settings are broadcast to the WPS-capable client.

1. For a list of other Wi-Fi-certified products available from NETGEAR, go to http://www.wi-fi.org.
These instructions assume that you are configuring WPS on the modem router for the first time and connecting a WPS-capable device. To set up basic wireless connectivity: 1. Log in to the modem router at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever LAN address and password you have set up. You can also enter either of these addresses to connect to the modem router: http://www.routerlogin.net or http://www.routerlogin.com. 2. Select Add WPS Client (computers that will connect wirelessly to the router are clients) in the main menu. The Add WPS Client wizard screen displays.

Figure 2-5

3. Click Next. The screen changes to allow you to select the method for adding the WPS client. 4. Select the method for adding the WPS client. A WPS client can be added using the Push Button method or the PIN method. Using the Push Button. This is the preferred method. (See Figure 2-6 on page 2-19.) Select the Push Button radio box and either press the WPS Push Button on the side of the modem router or click the soft WPS Push Button on the screen (as shown below). The modem router will attempt to communicate with the client; you have 2 minutes to enable WPS from the client device using the clients WPS networking utility.

Figure 2-6

Entering a PIN. If you want to use the PIN method, select the PIN radio box. A screen similar to the one shown below displays. Go to your wireless client and, from the clients WPS utility, obtain the wireless clients security PIN, or follow the clients WPS utility instructions to generate a security PIN. Then, enter this PIN in the Enter Clients PIN field provided on the modem router and click Apply. You have 4 minutes to enable WPS on the router using this method.

Figure 2-7

Using either method, the client wireless device will attempt to detect the WPS signal from the modem router and establish a wireless connection in the time allotted. While the modem router attempts to connect to a WPS-capable device, the Push 'N' Connect LED on the front of the modem router blinks green. When the modem router has established a WPS connection, the LED is solid green.

Protecting Your Network v1.0, July 2008 3-3
2. In the main menu, under Security, select Block Sites to display the following screen

Figure 3-3

3. To enable keyword blocking, select one of the following: Per Schedule. Turn on keyword blocking according to the settings in the Schedule screen. Always. Turn on keyword blocking all the time, independent of the Schedule screen.
4. Enter a keyword or domain in the Keyword field, click Add Keyword, and then click Apply. Some examples of keyword application follow: If the keyword XXX is specified, the URL http://www.badstuff.com/xxx.html is blocked. If the keyword.com is specified, only websites with other domain suffixes (such as.edu or.gov) can be viewed. Enter a period (.) as to block all Internet browsing access.
Up to 32 entries are supported in the Keyword list. 5. To delete a keyword or domain, select it from the list, click Delete Keyword, and then click Apply. 6. To specify a trusted user, enter that computers IP address in the Trusted IP Address field, and click Apply.
3-4 v1.0, July 2008 Protecting Your Network
You can specify one trusted user, which is a computer that will be exempt from blocking and logging. Since the trusted user will be identified by an IP address, you should configure that computer with a fixed IP address. 7. Click Apply to save your settings.

Firewall Rules

Firewall rules block or allow specific traffic passing through from one side of the router to the other. Inbound rules (WAN to LAN) restrict access by outsiders to private resources, selectively allowing only specific outside users to access specific resources. Outbound rules (LAN to WAN) determine what outside resources local users can have access to. A firewall has two default rules, one for inbound traffic and one for outbound. The default rules of the modem router are: Inbound. Block all access from outside except responses to requests from the LAN side. Outbound. Allow all access from the LAN side to the outside.
You can define additional rules that will specify exceptions to the default rules. By adding custom rules, you can block or allow access based on the service or application, source or destination IP addresses, and time of day. You can also choose to log traffic that matches or does not match the rule you have defined. You can change the order of precedence of rules so that the rule that applies most often takes effect first. See Order of Precedence for Rules on page 3-11 for more details. To access the rules configuration of the modem router, select Firewall Rules on the main menu, and then click Add for either an outbound or inbound service. The Firewall Rules screen displays.

3-16 v1.0, July 2008

Chapter 4 Managing Your Network
This chapter describes how to perform network management tasks with your DGN2000 Wireless-N ADSL2+ Modem Router. This chapter includes: Backing Up, Restoring, and Erasing Your Settings Upgrading the Wireless Modem Routers Firmware on page 4-3 Network Management Information on page 4-4 Enabling Security Event E-mail Notification on page 4-14 Running Diagnostic Utilities and Rebooting the Wireless Modem Router on page 4-15 Configuring Remote Management on page 4-16 Automatic Firmware Recovery on page 4-18
Backing Up, Restoring, and Erasing Your Settings
The configuration settings of the modem router are stored in a configuration file. This file can be backed up to your computer, restored, or reverted to factory default settings. The following procedures explains how to do these tasks.
How to Back Up the Configuration to a File
1. Log in to the modem router at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever user name, password, and LAN address you have chosen for the modem router. 2. In the main menu, below Maintenance, select Backup Settings to display the following screen.

4-1 v1.0, July 2008

Figure 4-1
3. Click Backup to save a copy of the current settings. 4. Store the.cfg file on a computer on your network.
How to Restore the Configuration from a File
1. Log in to the modem router at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever user name, password, and LAN address you have chosen for the modem router. 2. In the main menu, below Maintenance, select Backup Settings as shown in Figure 4-1. 3. Enter the full path to the file on your network, or click the Browse button to locate the file. 4. When you have located the.cfg file, click the Restore button to upload the file to the modem router. 5. The modem router then reboots automatically.
How to Erase the Configuration
Sometimes you might want to restore the modem router to the factory default settings. This can be done by using the erase function. 1. To erase the configuration, select Backup Settings under Maintenance in the main menu, and click the Erase button on the screen.

Destination port and The service port number of the destination device, and whether it is on interface the LAN or WAN.
Log action buttons are described in the following table.
Table 4-5. Security Log Action Buttons
Field Refresh Clear Log Send Log Apply Cancel Description Refresh the log screen. Clear the log entries. E-mail the log immediately. Apply the current settings. Clear the current settings.
Selecting What Information to Log Besides the standard information that is listed in the previous two tables, you can choose to log additional information. Those optional selections are as follows: Attempted access to blocked sites Connections to the Web-based interface of the modem router Router operation (start up, get time, and so on). Known DoS attacks and port scans

4-12 v1.0, July 2008

Saving Log Files on a Server You can choose to write the logs to a computer running a syslog program. To activate this feature, select Broadcast on LAN, or enter the IP address of the server where the syslog file will be written.

Examples of Log Messages

Following are examples of log messages. In all cases, the log entry shows the time stamp as day, year-month-date hour:minute:second. Activation and Administration
Tue, 2006-05-21 18:48:39 - NETGEAR activated
[This entry indicates a power-up or reboot with initial time entry.]
Tue, 2006-05-21 18:55:00 - Administrator login successful IP:192.168.0.2 Thu, 2006-05-21 18:56:58 - Administrator logout - IP:192.168.0.2
[This entry shows an administrator logging in and out from IP address 192.168.0.2.]
Tue, 2006-05-21 19:00:06 - Login screen timed out - IP:192.168.0.2
[This entry shows a time-out of the administrator login.]
Wed, 2006-05-22 22:00:19 - Log emailed
[This entry shows when the log was e-mailed.] Dropped Packets
Wed, 2006-05-22 07:15:15 - TCP packet dropped Source:64.12.47.28,4787,WAN - Destination:134.177.0.11,21,LAN - [Inbound Default rule match] Sun, 2006-05-22 12:50:33 - UDP packet dropped Source:64.12.47.28,10714,WAN - Destination:134.177.0.11,6970,LAN [Inbound Default rule match] Sun, 2006-05-22 21:02:53 - ICMP packet dropped Source:64.12.47.28,0,WAN - Destination:134.177.0.11,0,LAN - [Inbound Default rule match]

Note: In this case, the http:// must be included in the address.
Automatic Firmware Recovery
Should the firmware become corrupted, the modem router automatically detects this situation and opens the following screen to enable you to recover the firmware.

Figure 4-12

4-18 v1.0, July 2008
To recover the firmware: 1. If you already have the firmware file on your PC, go directly to step 2. If you do not have the firmware file on your PC, obtain the firmware from the NETGEAR support site at http://www.netgear.com/support. 2. Click Browse. 3. Navigate to the firmware file. (If you used the Setup CD, recovery firmware is located in the C:\Netgear directory.) 4. Click Upgrade. 5. The recovery process takes about 5 minutes. Wait for the progress bar to complete. After the firmware recovery is complete, the login screen for the Smart Wizard displays, allowing you to log in to the modem router to check its status.

4-20 v1.0, July 2008

Chapter 5 Advanced Configuration
This chapter describes how to configure the advanced features of your DGN2000 Wireless-N ADSL2+ Modem Router.
Configuring Advanced Security
The modem router provides a variety of advanced features, which are described in the following sections: Setting Up a Default DMZ Server on page 5-2 Connecting Automatically, as Required on page 5-3 Disabling Port Scan and DOS Protection on page 5-3 Responding to a Ping on an Internet WAN Port on page 5-4 Setting the MTU Size on page 5-4 Disabling the SIP ALG on page 5-4 Configuring LAN IP Settings on page 5-4 Configuring DHCP on page 5-6 Configuring LAN TCP/IP Settings on page 5-8 Configuring Dynamic DNS on page 5-9 Using Static Routes on page 5-10 How to Configure Universal Plug and Play on page 5-13 Building Wireless Bridging and Repeating Networks on page 5-14 Displaying and Configuring Advanced WPS Settings on page 5-20 These features are discussed in the following sections.

5-1 v1.0, July 2008

Setting Up a Default DMZ Server
The default demilitarized zone (DMZ) server feature is helpful when you use some online games and videoconferencing applications that are incompatible with NAT. The modem router is programmed to recognize some of these applications and to work correctly with them, but there are other applications that might not function well. In some cases, one local computer can run the application correctly if that computers IP address is entered as the default DMZ server. Note: For security reasons, you should avoid using the default DMZ server feature. When a computer is designated as the default DMZ server, it loses much of the protection of the firewall, and is exposed to many exploits from the Internet. If compromised, the computer can be used to attack your network. Incoming traffic from the Internet is usually discarded by the modem router unless the traffic is a response to one of your local computers or a service that you have configured in the Ports screen. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the default DMZ server. How to Configure a Default DMZ Server To assign a computer or server to be a default DMZ server: 1. Log in to the modem router at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever user name, password, and LAN address you have chosen for the modem router.

5-14 v1.0, July 2008

Here are some examples of wireless bridged configurations: Point-to-point bridge. The modem router communicates with another bridge-mode wireless station. See How to Configure a Point-to-Point Bridge Configuration. Multi-point bridge. The modem router is the master for a group of bridge-mode wireless stations. Then all traffic is sent to this master, rather than to other access points. See How to Configure a Multi-Point Bridge. Repeater with wireless client association. Sends all traffic to the remote access point. See How to Configure a Repeater with Wireless Client Association. Note: The wireless bridging and repeating feature uses the default security profile to send and receive traffic. To view or change these configurations, select Advanced Wireless Settings from the main menu:
Figure 5-9 Advanced Configuration v1.0, July 2008 5-15
How to Configure a Point-to-Point Bridge Configuration
In point-to-point bridge mode, the DGN2000 modem router communicates as an access point with another bridge-mode wireless station. As a bridge, wireless client associations are disabledonly wired clients can be connected. You must enter the MAC address of the other bridge-mode wireless station in the field provided. Use wireless security to protect this communication. The following figure shows an example of point-to-point bridge mode.
Both access points (APs) are in point-to-point bridge mode. AP 2 AP 1 (DGN2000 modem router)

Internet 192.168.0.1

Switch or hub PCs LAN Segment 1 LAN Segment 2 PCs

Figure 5-10

To set up a point-to-point bridge configuration (shown in Figure 5-10): 1. Configure the DGN2000 modem router (AP 1) on LAN Segment 1 in point-to-point bridge mode. 2. Configure the other access point (AP 2) on LAN Segment 2 in point-to-point bridge mode. The DGN2000 modem router must have AP 2s MAC address in its Remote MAC Address field, and AP 2 must have the DGN2000s MAC address in its Remote MAC Address field. 3. Configure both APs and verify that both APs are using he same SSID, channel, authentication mode, if any, and security settings if security is in use. 4. Disable the DHCP server on AP2. AP1 will then be the DHCP server. 5. Verify connectivity across LAN Segment 1 and LAN Segment 2.

5-16 v1.0, July 2008

A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other PCs or servers connected to LAN Segment 1 or LAN Segment 2.
How to Configure a Multi-Point Bridge
Multi-point bridge mode allows a modem router to bridge to multiple peer access points simultaneously. As a bridge, wireless client associations are disabledonly wired clients can be connected. Multi-point bridge mode configuration includes the following steps: Entering the MAC addresses of the other access points in the fields provided. Setting the other bridge-mode access points to Point-to-Point Bridge mode, using the MAC address of this DGN2000 as the Remote MAC Address. Using wireless security to protect this traffic.
The following figure shows an example of a multi-point bridge mode configuration.
Point-to-point bridge mode DGN2000 AP 1 Point-to-point bridge mode

192.168.0.1

Internet

PCs LAN Segment 1

Hub or switch
PCs LAN Segment 3 Hub or switch

LAN Segment 2

Figure 5-11
To set up the multi-point bridge configuration shown in Figure 5-11: 1. Configure the operating mode of the modem routers. Because it is in a central location, configure the DGN2000 modem router (AP 1) on LAN Segment 1 in point-to-multi-point bridge mode, and enter the MAC addresses of AP-2 and AP-3 in the Remote MAC Address 1 and Remote MAC Address 2 fields. Configure the access point (AP2) on LAN Segment 2 in point-to-point bridge mode with the remote MAC address of the DGN2000 modem router. Configure the access point (AP3) on LAN Segment 3 in point-to-point bridge mode with the remote MAC address of the DGN2000 modem router.
2. Disable the DHCP server on AP2 and AP3. AP1 will then be the DHCP server. 3. Verify the following for all access points: The LAN network configuration of the modem router and other access points are configured to operate in the same LAN network address range as the LAN devices. Only one AP, the DGN2000 modem router in Figure 5-11, is configured in point-to-multipoint bridge mode; all the others are in point-to-point bridge mode. All APs, including the DGN2000 modem router, must be on the same LAN. That is, all the AP LAN IP addresses must be in the same network. If you are using DHCP, all access points should be set to Obtain an IP address automatically (DHCP Client) in the IP Address Source section of the Basic IP Settings screen. All APs, including the DGN2000 modem router, must use the same SSID, channel, authentication mode, if any, and WEP security settings if security is in use. All point-to-point APs must have the MAC address of AP 1 (the DGN2000 modem router in the previous figure) in the Remote AP MAC address field.

3. Verify connectivity across the LANs. A computer on any LAN segment should be able to connect to the Internet or share files and printers with any other PCs or servers connected to any of the three WLAN segments.
Displaying and Configuring Advanced WPS Settings
Note: The advanced WPS settings cannot be displayed if you have selected WEP as the security option. To display and specify advanced WPS settings: 1. Log in to the modem router at its default LAN address of http://192.168.0.1 with its default user name of admin and default password of password, or using whatever user name, password, and LAN address you have chosen for the modem router.

5-20 v1.0, July 2008

2. In the main menu, under Advanced, select Advanced Wireless Settings to display the Advanced Wireless Settings screen (Figure 5-13 shows the upper part of the screen):

Figure 5-13

3. Select the WPS (Push 'N' Connect) radio button to display the Advanced WPS Settings screen:

Figure 5-14

Table 5-1 explains the WLAN1 settings that are displayed in the Advanced WPS Settings screen. These settings are based on the selections that you made in the Wireless Settings screen (see Manually Configuring Your Wireless Network in Chapter 2). In addition, Table 5-1 explains the modem routers PIN number.
Table 5-1. WLAN1 Settings and Routers PIN
Field Name (SSID) Region Channel Wireless AP Broadcast Name Security Routers PIN Description The service set ID, also known as the wireless network name for WLAN1. The country where the unit is set up for use. The current channel, which determines the operating frequency. Indicates if the access point feature is enabled for WLAN1. If disabled, the Wireless LED on the front panel is off. Indicates if the modem router is configured to broadcast its SSID for WLAN1. Indicates if security is configured on the modem router, and if so, what type of security is configured. The PIN number that you use on a registrar (for example, from the Network Explorer on a Vista Windows PC) to configure the modem routers wireless settings through WPS. You can also find the PIN on the modem router's product label.
4. Under WPS Settings, you can configure the following settings: Disable Routers PIN. Only when the modem routers PIN is enabled, you can configure the modem routers wireless settings or add a wireless client through WPS with the modem routers PIN number. The PIN function may temporarily be disabled when the modem router detects suspicious attempts to break into the modem routers wireless settings by using the modem routers PIN through WPS. You can manually enable the PIN function by deselecting the Disable Routers PIN check box. Keep Existing Wireless Settings. By default, the Keep Existing Wireless Settings check box is cleared. This allows the modem router to automatically generate the SSID and WPA/WPA2 security settings when it implements WPS. After WPS is implemented, the modem router automatically selects this check box so that your SSID and wireless security settings remain the same if other WPS-enabled devices are added later. If you configure your wireless router settings and security manually, the Keep Existing Wireless Settings check box will also be enabled. This will allow you to use WPS (Push 'N' Connect) to connect additional WPS capable devices to your wireless network using the existing settings. 5. Click Apply to save your settings.

Virtual Private Networking Basics http://documentation.netgear.com/reference/enu/vpn/index.htm Glossary:
http://documentation.netgear.com/reference/enu/glossary/index.htm
Related Documents v1.0, July 2008

B-2 v1.0, July 2008

Related Documents

Numerics

128-bit WEP 2-16 64-bit WEP 2-16
DNS server primary DNS server 1-5, 1-6, 1-9 secondary DNS server 1-5, 1-6, 1-9 Dynamic DNS 5-9
access lists 2-9, 2-11 ADSL settings 1-11 AES 2-10

ESSID 2-5

factory settings, restoring 4-2 firewall rules inbound rules 3-6 order of precedence for firewall rules 3-11 outbound rules 3-9 flash memory 4-3
backup configuration 4-1 Basic Settings screen 1-8 basic wireless connectivity 2-4
configuration backing up the configuration 4-1 erasing the configuration 4-2 manually configuring your ISP settings 1-6 customer support 1-v

host name 1-9

inbound firewall rules 3-6 instant messaging 3-12 Internet Service Provider (ISP) 1-2
date and time 6-10 daylight savings time 3-15, 6-10 default DMZ server 5-2 default reset buttons 6-10 Denial of Service (DoS) protection 3-3 DHCP 5-6 diagnostics 4-15 disabling SIP ALG 5-4 DMZ server 5-2
LAN IP setup menu 5-5, 5-8 logging in to the modem router 1-3
MAC address configuring the MAC address 1-10 MAC address being rejected 6-9

Index-1 v1.0, July 2008

MAC address filter 2-13 MAC address spoofing 6-6 restricting wireless access by MAC address 2-15 manual configuration of your modem router 1-6 metric 5-12 multicasting 5-6 multi-point bridge mode 5-17 restoring your password 6-10 restricting wireless access by MAC address 2-15 RIP 5-5 router status 4-4
secondary DNS server 1-5, 1-9 sending logs by email 4-14 service blocking 3-9 service numbers 3-12 SIP ALG 5-4 Smart Wizard 1-1 SMTP 4-15 SSID 2-5, 2-9 static routes 5-8 syslog 4-13
Network Time Protocol 3-13, 6-10
order of precedence for firewall rules 3-11 outbound firewall rules 3-9
passphrase 2-16 password 1-5 ping 5-4 placement of your router 2-2 plug and play 5-13 point-to-point bridge mode 5-16 ports port filtering 3-9 port forwarding 3-6 port numbers 3-12 PPPoE 1-5 primary DNS server 1-5, 1-6, 1-9 primary wireless LAN 2-7 Push 'N' Connect (WPS) 2-17
TCP/IP network troubleshooting 6-8 time of day 6-10 time zone 3-14 timeout, administrator login 3-3 time-stamping 3-14 TKIP 2-9 troubleshooting general information 6-1 network troubleshooting 6-8 troubleshooting LEDs 6-3 trusted host 3-5
range of your wireless connection 2-2 remote management 4-16 repeater mode with wireless client association 5-19 reserved IP addresses 5-7 reset button 6-10 restore factory settings 4-2