Home » Netgear Manuals » Wireless » Netgear WAX204-WiFi » Manual Viewer

Netgear WAX204-WiFi User Manual - Page 76

Firewall WAN settings [router mode]

View all Netgear WAX204-WiFi manuals

Add to My Manuals
Save this manual to your list of manuals

Page 76 highlights

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Firewall WAN settings [router mode] If the access point is in router mode, the basic firewall settings let you manage port scan protection and denial of service (DoS) protection, specify whether the access point can respond to a ping from the Internet (WAN) port, set up a DMZ server, and manage IGMP proxying, NAT filtering, and the application-level gateway (ALG) for the Session Initiation Protocol (SIP). For information about the MTU size, which is another basic firewall setting, see Change the MTU size [router mode] on page 125. Note: The information in this section and subsections does not apply if the access point is in access point mode. Manage port scan protection and denial of service protection [router mode] Port scan protection and denial of service (DoS) protection can protect your LAN against attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. By default, DoS protection is enabled and a port scan is rejected. You can also enable the access point to respond to a ping to its Internet (WAN) port. This feature allows your access point to be discovered. Enable this feature only as a diagnostic tool or if a specific reason exists. To change the default WAN security settings: 1. Launch a web browser from a computer or mobile device that is connected to the access point network. 2. Enter http//www.routerlogin.net in the address field. If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27. A login window displays. If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30. 3. Enter the access point local device password. The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. Security, Firewall, and Access 76 Rules User Manual

Section	Page
Contents	3
1. Hardware Overview	10
Top panel with LEDs	11
Back panel with ports, buttons, and a power connector	13
Position the antennas for best WiFi performance	14
Access point label	14
2. Installation and Initial Log-in	15
About router mode and access point mode	16
Routing features enabled only in router mode	16
Set up the access point and complete the initial log-in process	17
Connect the access point to a modem and log in for the first time	18
Connect the access point to a router and log in for the first time	22
Get a registration key	26
Find the IP address of the access point when you cannot use routerlogin.net	27
Find the IP address of the access point with the NETGEAR Insight mobile app	29
Log in to the access point after initial setup	30
Change the language	31
Connect a wired or WiFi device to the access point’s network after installation	32
Connect to the access point through an Ethernet cable	32
Use Wi-Fi Protected Setup to join the WiFi network	33
Manually join the WiFi network	33
3. Manually Set Up Internet Settings	35
Use the Setup Wizard	36
Manually set up the access point Internet connection [router mode]	37
Specify a dynamic or fixed WAN IP address Internet connection without a login [router mode]	37
Specify a PPPoE Internet connection that uses a login [router mode]	39
Specify a PPTP or L2TP Internet connection that uses a login [router mode]	41
IPv6 Internet connections and IPv6 addresses [router mode]	43
Use Auto Detect for an IPv6 Internet connection [router mode]	44
Use Auto Config for an IPv6 Internet connection [router mode]	46
Set up an IPv6 6to4 tunnel Internet connection [router mode]	48
Set up an IPv6 6rd Internet connection [router mode]	49
Set up an IPv6 passthrough Internet connection [router mode]	51
Set up an IPv6 fixed Internet connection [router mode]	52
Set up an IPv6 DHCP Internet connection [router mode]	54
Set up an IPv6 PPPoE Internet connection [router mode]	56
4. Basic WiFi and Radio Features	58
Set up or change an open or secure WiFi network	59
Configure WPA and WPA2 Enterprise WiFi security with a RADIUS server	63
Enable or disable a WiFi network	65
Hide or broadcast the SSID for a WiFi network	66
Manage client isolation for clients of the Wireless 2 or Wireless 3 network	67
Manage access to LAN ports for clients of the Wireless 2 or Wireless 3 network	68
Manage SSID isolation for all WiFi networks	69
Enable or disable a WiFi radio	70
Use WPS to connect to the WiFi network	72
Use WPS with the push button method	72
Use WPS with the PIN method	73
5. Security, Firewall, and Access Rules	75
Firewall WAN settings [router mode]	76
Manage port scan protection and denial of service protection [router mode]	76
Set up a default DMZ server [router mode]	77
Manage IGMP proxying [router mode]	78
Manage NAT filtering [router mode]	79
Manage the SIP application-level gateway [router mode]	80
Network access control lists	81
Enable and manage network access control	81
Add, remove or change a device on the the allowed list	83
Add, remove or change a device on the blocked list	84
Block specific Internet sites [router mode]	86
Set up keyword and domain blocking [router mode]	86
Remove a keyword or domain from the blocked list [router mode]	88
Remove all keywords and domains from the blocked list [router mode]	89
Block specific applications and services from the Internet [router mode]	89
Add a service blocking rule for a predefined service or application [router mode]	90
Add a service blocking rule for a custom service or application [router mode]	91
Change a service blocking rule [router mode]	93
Remove a service blocking rule [router mode]	94
Assign a trusted device [router mode]	95
Schedule blocking [router mode]	96
Set up security event email notifications	97
6. Optimize Performance	99
Enable QoS and automatically set the Internet bandwidth	100
Enable QoS and manually set the Internet bandwidth	101
Enable or disable the automatic update of the Performance Optimization Database	102
Manage WiFi Multimedia (WMM) for a radio	103
Improve network connections with Universal Plug and Play [router mode]	105
Change the priority for a connected device [router mode]	106
7. Network Settings	108
LAN IP address settings [router mode]	109
Change the LAN IP address and subnet settings [router mode]	109
Manage the DHCP server address pool [router mode]	110
Disable the DHCP server [router mode]	112
Manage the Router Information Protocol settings [router mode]	113
Change the access point network device name	114
Reserved LAN IP addresses [router mode]	115
Reserve a LAN IP address [router mode]	115
Change a reserved LAN IP address [router mode]	116
Remove a reserved LAN IP address entry [router mode]	117
Static routes	118
Add an IPv4 static route	118
Change an IPv4 static route	120
Remove an IPv4 static route	121
Bridge port and VLAN tag groups [router mode]	121
Set up a bridge for a port group [router mode]	122
Set up a bridge for a VLAN tag group [router mode]	123
Change the MTU size [router mode]	125
8. Maintain and Monitor	128
Update the firmware	129
Let the access point check for new firmware and update the firmware	129
Manually check for new firmware and update the firmware	131
Back up or restore the settings	133
Back up the access point settings	133
Restore the access point settings	134
Change the local device password	135
Change the password recovery questions for the local device password	136
Recover the local device admin password	137
Factory default settings	138
Use the dual-function Reset button to return to factory defaults	138
Use the local browser UI to return to factory defaults	140
Time and Network Time Protocol server	142
Manually set the time zone and adjust the daylight saving time	142
Change the Network Time Protocol server	143
Logs	144
Specify which activities the access point logs	144
View, send, or clear the logs	145
Status and statistics	146
Display information about the Internet port, access point, and WiFi settings [router mode]	146
Display information about the LAN port, access point, and WiFi settings [access point mode]	149
Check the Internet connection status	151
Display the Internet port statistics	153
Display the devices currently on the access point network and change device information	154
Traffic meter [router mode]	157
Start the traffic meter without traffic restrictions [router mode]	158
Restrict Internet traffic by volume [router mode]	159
Restrict Internet traffic by connection time [router mode]	160
View the Internet traffic volume and statistics [router mode]	162
Unblock the traffic meter after the traffic limit is reached [router mode]	163
Change the system mode to access point mode or to router mode	164
Disable LED blinking or turn off LEDs	166
9. Dynamic DNS [Router Mode]	167
About Dynamic DNS [router mode]	168
Set up a new Dynamic DNS account [router mode]	168
Use an existing Dynamic DNS account [router mode]	169
Change the Dynamic DNS account settings [router mode]	171
10. VPN Client [Router Mode]	172
About setting up the access point as a VPN client [router mode]	173
Enable the VPN client in the access point and connect to a VPN server [router mode]	174
Disconnect the access point from the VPN server [router mode]	176
11. VPN Server and Service with OpenVPN [Router Mode]	177
Enable and configure OpenVPN and VPN client access on the access point [router mode]	178
OpenVPN client utility and VPN configuration files [router mode]	179
Install OpenVPN on a Windows-based computer [router mode]	180
Install OpenVPN on a Mac [router mode]	181
Install OpenVPN on an iOS device [router mode]	182
Install OpenVPN on an Android device [router mode]	183
About setting up an OpenVPN connection [router mode]	184
About VPN access to your network or Internet service at your office or home [router mode]	185
Use a VPN tunnel to remotely access your Internet service [router mode]	186
12. Advanced WiFi and Radio Features	187
Change the region of operation	188
Manage 802.11ax and enable or disable OFDMA for a radio	189
Enable or disable smart connect for the access point	190
Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio	192
Change the channel for a radio	193
Change the WiFi throughput mode for a radio	194
Change the transmission output power for a radio	196
Add a WiFi schedule for a radio	197
Enable or disable MU-MIMO	199
Enable or disable explicit beamforming	200
Enable or disable PMF	201
Set up access point as a WiFi Bridge to another device	202
Change the CTS/RTS threshold and preamble mode for a radio	205
13. Port Forwarding and Port Triggering [Router Mode]	207
Port forwarding to a local server for services and applications [router mode]	208
Forward incoming traffic for a default service or application [router mode]	208
Add a port forwarding rule for a custom service or application [router mode]	209
Change a port forwarding rule [router mode]	211
Remove a port forwarding rule [router mode]	212
How the access point implements a port forwarding rule [router mode]	213
Application example: Make a local web server public [router mode]	213
Port triggering for services and applications [router mode]	214
Add a port triggering rule [router mode]	214
Change a port triggering rule [router mode]	216
Remove a port triggering rule [router mode]	217
Specify the time-out for port triggering [router mode]	218
Disable port triggering [router mode]	219
Application example: Port triggering for Internet Relay Chat [router mode]	220
14. Diagnostics and Troubleshooting	221
Reboot the access point from the local browser UI	222
Quick tips for troubleshooting	223
Restart your access point network if in router mode	223
Restart your access point when in access point mode	223
Check the Ethernet cable connections	223
Check the WiFi settings of your computer or mobile device	223
Check the DHCP network settings of your computer or mobile device	224
Standard LED behavior when the access point is powered on	225
Troubleshoot with the LEDs	225
Power LED is off	225
Power LED does not turn green	226
Internet LED is solid amber or off [router mode]	226
Internet LED is solid amber or off [access point mode]	227
WiFi LED is Off	227
The LAN LED is off while a device is connected	228
You cannot log in to the access point	228
You cannot log in to the access point [router mode]	228
You cannot log in to the access point [access point mode]	229
You cannot access the Internet [router mode]	231
Check the Internet WAN IP address [router mode]	231
Check or manually start the PPPoE connection [router mode]	233
Troubleshoot Internet browsing	234
Troubleshoot the WiFi connectivity	235
Changes are not saved	236
Troubleshoot your network using the ping utility of your computer or mobile device	236
Test the LAN path from a Windows-based computer to the access point	237
Test the path from a Windows-based computer to a remote device [router mode]	238
A. Factory Default Settings and Technical Specifications	239
Factory default settings	240
Technical specifications	242
B. Positioning and Wall-Mounting	244
Position the access point	245

Match case Limit results 1 per page

Firewall WAN settings [router mode]

If the access point is in router mode, the basic firewall settings let you manage port scan

protection and denial of service (DoS) protection, specify whether the access point can

respond to a ping from the Internet (WAN) port, set up a DMZ server, and manage IGMP

proxying, NAT filtering, and the application-level gateway (ALG) for the Session Initiation

Protocol (SIP).

For information about the MTU size, which is another basic firewall setting, see Change

the

MTU

size

[router

mode]

on page 125.

Note:

The information in this section and subsections does not apply if the access point

is in access point mode.

Manage port scan protection and denial of service

protection [router mode]

Port scan protection and denial of service (DoS) protection can protect your LAN against

attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. By default,

DoS protection is enabled and a port scan is rejected.

You can also enable the access point to respond to a ping to its Internet (WAN) port.

This feature allows your access point to be discovered. Enable this feature only as a

diagnostic tool or if a specific reason exists.

To change the default WAN security settings:

Launch a web browser from a computer or mobile device that is connected to the

access point network.

Enter

http//www.routerlogin.net

in the address field.

If you are not connected to the access point network but to the same network as the

access point, enter the IP address that is assigned to the access point. If you do not

know the IP address, see Find

the

address

the

access

point

when

you

cannot

use

routerlogin.net

on page 27.

A login window displays.

If your browser does not display the login window but displays a security message

and does not let you proceed, see Log

the

access

point

after

initial

setup

page 30.

Enter the access point local device password.

The local device password is the one that you specified. The local device password

is case-sensitive.

The BASIC Home page displays.

User Manual

Security, Firewall, and Access

Rules

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204