Home » Netgear Manuals » Wireless » Netgear WAX204-WiFi » Manual Viewer

Netgear WAX204-WiFi User Manual - Page 185

About VPN access to your network or Internet service at your office or home [router mode

View all Netgear WAX204-WiFi manuals

Add to My Manuals
Save this manual to your list of manuals

Page 185 highlights

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If the access point does not use a static WAN IP address, you can use a DDNS service for the access point and register for an account with a host name (also referred to as a domain name). A remote client such as a computer or mobile device can use that host name to connect with the access point and access the network over a VPN connection. For more information, see About Dynamic DNS [router mode] on page 168. About VPN access to your network or Internet service at your office or home [router mode] When you are away from your office or home and you access the Internet, you usually use a local Internet service provider. For example, at a coffee shop you might be given a code that lets you use the coffee shop's Internet service account to surf the web. The access point lets you use a VPN connection to access your own Internet service when you are away from your office or home. You might want to do this if you travel to a geographic location that does not support all the Internet services that you use at your office or home. For example, your Netflix account might work at home but not in a different country. For information about the types of VPN client connections that the access point supports, see Enable and configure OpenVPN and VPN client access on the access point [router mode] on page 178. In addition to access to your office or home network, you can either allow or block VPN client Internet access through your office or home network. For the VPN tunnel to work, the LAN where your VPN client computer is connected must use a different LAN IP address scheme from that of the LAN of the access point at your office or home. If both networks use the same LAN IP address scheme, when the VPN tunnel is established, you cannot access the access point network at your office or home with the OpenVPN software. The default LAN IP address scheme for the access point is 192.168.1.x. The most common IP schemes are 192.x.x.x, 172.x.x.x, and 10.x.x.x. If you experience a conflict while you are not at your office or home, consider asking someone else at your office or home to change the access point IP address scheme for your office or home network (see LAN IP address settings [router mode] on page 109). VPN Server and Service with 185 OpenVPN [Router Mode] User Manual

Section	Page
Contents	3
1. Hardware Overview	10
Top panel with LEDs	11
Back panel with ports, buttons, and a power connector	13
Position the antennas for best WiFi performance	14
Access point label	14
2. Installation and Initial Log-in	15
About router mode and access point mode	16
Routing features enabled only in router mode	16
Set up the access point and complete the initial log-in process	17
Connect the access point to a modem and log in for the first time	18
Connect the access point to a router and log in for the first time	22
Get a registration key	26
Find the IP address of the access point when you cannot use routerlogin.net	27
Find the IP address of the access point with the NETGEAR Insight mobile app	29
Log in to the access point after initial setup	30
Change the language	31
Connect a wired or WiFi device to the access point’s network after installation	32
Connect to the access point through an Ethernet cable	32
Use Wi-Fi Protected Setup to join the WiFi network	33
Manually join the WiFi network	33
3. Manually Set Up Internet Settings	35
Use the Setup Wizard	36
Manually set up the access point Internet connection [router mode]	37
Specify a dynamic or fixed WAN IP address Internet connection without a login [router mode]	37
Specify a PPPoE Internet connection that uses a login [router mode]	39
Specify a PPTP or L2TP Internet connection that uses a login [router mode]	41
IPv6 Internet connections and IPv6 addresses [router mode]	43
Use Auto Detect for an IPv6 Internet connection [router mode]	44
Use Auto Config for an IPv6 Internet connection [router mode]	46
Set up an IPv6 6to4 tunnel Internet connection [router mode]	48
Set up an IPv6 6rd Internet connection [router mode]	49
Set up an IPv6 passthrough Internet connection [router mode]	51
Set up an IPv6 fixed Internet connection [router mode]	52
Set up an IPv6 DHCP Internet connection [router mode]	54
Set up an IPv6 PPPoE Internet connection [router mode]	56
4. Basic WiFi and Radio Features	58
Set up or change an open or secure WiFi network	59
Configure WPA and WPA2 Enterprise WiFi security with a RADIUS server	63
Enable or disable a WiFi network	65
Hide or broadcast the SSID for a WiFi network	66
Manage client isolation for clients of the Wireless 2 or Wireless 3 network	67
Manage access to LAN ports for clients of the Wireless 2 or Wireless 3 network	68
Manage SSID isolation for all WiFi networks	69
Enable or disable a WiFi radio	70
Use WPS to connect to the WiFi network	72
Use WPS with the push button method	72
Use WPS with the PIN method	73
5. Security, Firewall, and Access Rules	75
Firewall WAN settings [router mode]	76
Manage port scan protection and denial of service protection [router mode]	76
Set up a default DMZ server [router mode]	77
Manage IGMP proxying [router mode]	78
Manage NAT filtering [router mode]	79
Manage the SIP application-level gateway [router mode]	80
Network access control lists	81
Enable and manage network access control	81
Add, remove or change a device on the the allowed list	83
Add, remove or change a device on the blocked list	84
Block specific Internet sites [router mode]	86
Set up keyword and domain blocking [router mode]	86
Remove a keyword or domain from the blocked list [router mode]	88
Remove all keywords and domains from the blocked list [router mode]	89
Block specific applications and services from the Internet [router mode]	89
Add a service blocking rule for a predefined service or application [router mode]	90
Add a service blocking rule for a custom service or application [router mode]	91
Change a service blocking rule [router mode]	93
Remove a service blocking rule [router mode]	94
Assign a trusted device [router mode]	95
Schedule blocking [router mode]	96
Set up security event email notifications	97
6. Optimize Performance	99
Enable QoS and automatically set the Internet bandwidth	100
Enable QoS and manually set the Internet bandwidth	101
Enable or disable the automatic update of the Performance Optimization Database	102
Manage WiFi Multimedia (WMM) for a radio	103
Improve network connections with Universal Plug and Play [router mode]	105
Change the priority for a connected device [router mode]	106
7. Network Settings	108
LAN IP address settings [router mode]	109
Change the LAN IP address and subnet settings [router mode]	109
Manage the DHCP server address pool [router mode]	110
Disable the DHCP server [router mode]	112
Manage the Router Information Protocol settings [router mode]	113
Change the access point network device name	114
Reserved LAN IP addresses [router mode]	115
Reserve a LAN IP address [router mode]	115
Change a reserved LAN IP address [router mode]	116
Remove a reserved LAN IP address entry [router mode]	117
Static routes	118
Add an IPv4 static route	118
Change an IPv4 static route	120
Remove an IPv4 static route	121
Bridge port and VLAN tag groups [router mode]	121
Set up a bridge for a port group [router mode]	122
Set up a bridge for a VLAN tag group [router mode]	123
Change the MTU size [router mode]	125
8. Maintain and Monitor	128
Update the firmware	129
Let the access point check for new firmware and update the firmware	129
Manually check for new firmware and update the firmware	131
Back up or restore the settings	133
Back up the access point settings	133
Restore the access point settings	134
Change the local device password	135
Change the password recovery questions for the local device password	136
Recover the local device admin password	137
Factory default settings	138
Use the dual-function Reset button to return to factory defaults	138
Use the local browser UI to return to factory defaults	140
Time and Network Time Protocol server	142
Manually set the time zone and adjust the daylight saving time	142
Change the Network Time Protocol server	143
Logs	144
Specify which activities the access point logs	144
View, send, or clear the logs	145
Status and statistics	146
Display information about the Internet port, access point, and WiFi settings [router mode]	146
Display information about the LAN port, access point, and WiFi settings [access point mode]	149
Check the Internet connection status	151
Display the Internet port statistics	153
Display the devices currently on the access point network and change device information	154
Traffic meter [router mode]	157
Start the traffic meter without traffic restrictions [router mode]	158
Restrict Internet traffic by volume [router mode]	159
Restrict Internet traffic by connection time [router mode]	160
View the Internet traffic volume and statistics [router mode]	162
Unblock the traffic meter after the traffic limit is reached [router mode]	163
Change the system mode to access point mode or to router mode	164
Disable LED blinking or turn off LEDs	166
9. Dynamic DNS [Router Mode]	167
About Dynamic DNS [router mode]	168
Set up a new Dynamic DNS account [router mode]	168
Use an existing Dynamic DNS account [router mode]	169
Change the Dynamic DNS account settings [router mode]	171
10. VPN Client [Router Mode]	172
About setting up the access point as a VPN client [router mode]	173
Enable the VPN client in the access point and connect to a VPN server [router mode]	174
Disconnect the access point from the VPN server [router mode]	176
11. VPN Server and Service with OpenVPN [Router Mode]	177
Enable and configure OpenVPN and VPN client access on the access point [router mode]	178
OpenVPN client utility and VPN configuration files [router mode]	179
Install OpenVPN on a Windows-based computer [router mode]	180
Install OpenVPN on a Mac [router mode]	181
Install OpenVPN on an iOS device [router mode]	182
Install OpenVPN on an Android device [router mode]	183
About setting up an OpenVPN connection [router mode]	184
About VPN access to your network or Internet service at your office or home [router mode]	185
Use a VPN tunnel to remotely access your Internet service [router mode]	186
12. Advanced WiFi and Radio Features	187
Change the region of operation	188
Manage 802.11ax and enable or disable OFDMA for a radio	189
Enable or disable smart connect for the access point	190
Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio	192
Change the channel for a radio	193
Change the WiFi throughput mode for a radio	194
Change the transmission output power for a radio	196
Add a WiFi schedule for a radio	197
Enable or disable MU-MIMO	199
Enable or disable explicit beamforming	200
Enable or disable PMF	201
Set up access point as a WiFi Bridge to another device	202
Change the CTS/RTS threshold and preamble mode for a radio	205
13. Port Forwarding and Port Triggering [Router Mode]	207
Port forwarding to a local server for services and applications [router mode]	208
Forward incoming traffic for a default service or application [router mode]	208
Add a port forwarding rule for a custom service or application [router mode]	209
Change a port forwarding rule [router mode]	211
Remove a port forwarding rule [router mode]	212
How the access point implements a port forwarding rule [router mode]	213
Application example: Make a local web server public [router mode]	213
Port triggering for services and applications [router mode]	214
Add a port triggering rule [router mode]	214
Change a port triggering rule [router mode]	216
Remove a port triggering rule [router mode]	217
Specify the time-out for port triggering [router mode]	218
Disable port triggering [router mode]	219
Application example: Port triggering for Internet Relay Chat [router mode]	220
14. Diagnostics and Troubleshooting	221
Reboot the access point from the local browser UI	222
Quick tips for troubleshooting	223
Restart your access point network if in router mode	223
Restart your access point when in access point mode	223
Check the Ethernet cable connections	223
Check the WiFi settings of your computer or mobile device	223
Check the DHCP network settings of your computer or mobile device	224
Standard LED behavior when the access point is powered on	225
Troubleshoot with the LEDs	225
Power LED is off	225
Power LED does not turn green	226
Internet LED is solid amber or off [router mode]	226
Internet LED is solid amber or off [access point mode]	227
WiFi LED is Off	227
The LAN LED is off while a device is connected	228
You cannot log in to the access point	228
You cannot log in to the access point [router mode]	228
You cannot log in to the access point [access point mode]	229
You cannot access the Internet [router mode]	231
Check the Internet WAN IP address [router mode]	231
Check or manually start the PPPoE connection [router mode]	233
Troubleshoot Internet browsing	234
Troubleshoot the WiFi connectivity	235
Changes are not saved	236
Troubleshoot your network using the ping utility of your computer or mobile device	236
Test the LAN path from a Windows-based computer to the access point	237
Test the path from a Windows-based computer to a remote device [router mode]	238
A. Factory Default Settings and Technical Specifications	239
Factory default settings	240
Technical specifications	242
B. Positioning and Wall-Mounting	244
Position the access point	245

Match case Limit results 1 per page

If the access point does not use a static WAN IP address, you can use a DDNS service

for the access point and register for an account with a host name (also referred to as a

domain name). A remote client such as a computer or mobile device can use that host

name to connect with the access point and access the network over a VPN connection.

For more information, see About

Dynamic

DNS

[router

mode]

on page 168.

About VPN access to your network or

Internet service at your office or home [router

mode]

When you are away from your office or home and you access the Internet, you usually

use a local Internet service provider. For example, at a coffee shop you might be given

a code that lets you use the coffee shop’s Internet service account to surf the web.

The access point lets you use a VPN connection to access your own Internet service

when you are away from your office or home. You might want to do this if you travel to

a geographic location that does not support all the Internet services that you use at your

office or home. For example, your Netflix account might work at home but not in a

different country.

For information about the types of VPN client connections that the access point supports,

see Enable

and

configure

OpenVPN

and

VPN

client

access

the

access

point

[router

mode]

on page 178. In addition to access to your office or home network, you can either

allow or block VPN client Internet access through your office or home network.

For the VPN tunnel to work, the LAN where your VPN client computer is connected must

use a different LAN IP address scheme from that of the LAN of the access point at your

office or home. If both networks use the same LAN IP address scheme, when the VPN

tunnel is established, you cannot access the access point network at your office or home

with the OpenVPN software.

The default LAN IP address scheme for the access point is 192.168.1.x. The most common

IP schemes are 192.x.x.x, 172.x.x.x, and 10.x.x.x. If you experience a conflict while you

are not at your office or home, consider asking someone else at your office or home to

change the access point IP address scheme for your office or home network (see LAN

address

settings

[router

mode]

on page 109).

User Manual

185

VPN Server and Service with

OpenVPN [Router Mode]

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204