Home » Netgear Manuals » Bridges & Routers » Netgear AC1600-WiFi » Manual Viewer

Netgear AC1600-WiFi User Manual - Page 82

Set Up a Default DMZ Server, Internet. Once compromised, the DMZ server computer attacks

View all Netgear AC1600-WiFi manuals

Add to My Manuals
Save this manual to your list of manuals

Page 82 highlights

AC1600 WiFi Cable Modem Router 7. The following table describes the protection and ping options on the WAN Setup page. Field Description Disable IPv4 Firewall Protection IPv4 firewall protection can secure your network against malicious packets. To disable IPv4 firewall protection, select the Disable IPv4 Firewall Protection check box. By default, IPv4 firewall protection is enabled. NETGEAR recommends that you leave the firewall enabled to protect your network. Disable Port Scan and DoS Protection Port scan and DoS protection can protect your LAN against denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. However, when port scan and DoS protection are enabled, some Apple computers might not be able to connect to the Internet. By default, port scan and DoS protection are disabled. To enable port scan and DoS protection, clear the Disable Port Scan and DoS Protection check box. Note: Enabling port scan and DoS protection might affect the performance of the modem router. Respond to Ping on Internet Port By default, this check box is cleared to prevent the modem router from responding to a ping from the Internet. To enable the modem router to respond to a ping, select the Respond to Ping on Internet Port check box. Note: When you allow the modem router to respond to a ping from the Internet, the modem router could be discovered by anyone and in that way become vulnerable to attacks. For optimum security, keep this check box cleared. 8. If you changed the settings, click the Apply button. Your settings are saved. Set Up a Default DMZ Server The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation (NAT). The modem router can detect some of these applications and function correctly with them but other applications might not function well. In some cases, one local computer can run the application correctly if that computer's IP address is entered as the default DMZ server. WARNING: DMZ servers pose a security risk. A computer that is designated as the default DMZ server loses firewall protection from exploits on the Internet. Once compromised, the DMZ server computer attacks other computers on your network. Manage the WAN and LAN Network Settings 82

Section	Page
AC1600 WiFi Cable Modem Router	1
Contents	3
1. Hardware Overview and Setup	8
Introduction	9
Front Panel and Right Side Panel	10
Back Panel	12
Position Your Modem Router	13
Install and Activate Your Cable Modem	14
Cable the Modem Router	14
Activate Your Internet Service	15
Activate Your Internet Service with Comcast XFINITY	16
Perform a Speed Test	17
Cable the Modem Router to a Router and Use Bridge Mode	17
2. Connect to the Network and Access the Modem Router	20
Connect to the Network	21
Connect to the Modem Router Through an Ethernet Cable	21
Join the WiFi Network of the Modem Router	21
Types of Logins and Access	22
Product Label	23
Access NETGEAR genie	23
Access the Modem Router with the NETGEAR genie App	25
3. Customize the Internet Settings	26
View the Cable Initialization of the Modem Router	27
Change the Cable Connection Starting Frequency	28
View or Manually Set Up the IPv4 Internet Settings	30
Manage the MTU Size	32
MTU Concepts	32
Change the MTU Size	34
4. Manage the Basic WiFi Network Settings	35
Manage the Basic WiFi Settings and WiFi Security of the Main Network	36
View or Change the Basic WiFi Settings	36
Configure WPA/WPA2 Enterprise WiFi Security	41
Configure WEP Legacy WiFi Security for the Main WiFi Network	43
Use the WPS Wizard to Add a Device to the WiFi Network	45
Use WPS with the Push Button Method	45
Use WPS with the PIN Method	47
Manage the Basic WiFi Settings and WiFi Security of the Guest Network	48
Set Up and Enable a Guest Network	48
Configure WEP Legacy WiFi Security for the Guest WiFi Network	52
5. Secure Your Network	54
Set Up Parental Controls	55
Allow or Block Access to Your Network	58
Enable and Manage Network Access Control	59
Manage Network Access Control Lists	60
Block Keywords and Domains for HTTP Traffic	66
Set Up Blocking	66
Remove a Keyword or Domain from the Blocked List	67
Remove All Keywords and Domains from the Blocked List	68
Specify a Trusted Computer	68
Block Access to Services and Applications	69
Block a Default Service	70
Add and Block a Custom Service	72
Change the Settings for a Blocked Service	74
Remove a Blocked Service	74
Schedule When Security Features Are Active	75
Set Up a Schedule	75
Change a Schedule	77
Remove a Schedule	77
Set Up Security Event Email Notification	78
6. Manage the WAN and LAN Network Settings	80
Manage the WAN Security Settings	81
Set Up a Default DMZ Server	82
Manage the SIP Application-Level Gateway	83
Manage the Modem Router’s LAN IP Address Settings	84
Manage IP Address Reservation	85
Reserve an IP Address	85
Change a Reserved IP Address	87
Remove an IP Address Reservation	87
Manage the IPv6 LAN Settings	88
Change the Modem Router’s Device Name	90
Manage the Built-In DHCP Server	90
Manage the DHCP Server Address Pool	91
Manage Universal Plug and Play	92
7. Manage the Modem Router and Monitor Your Network	95
View the Status and Statistics of the Modem Router	96
View the Cable Information and Internet Port and WiFi Status	96
View the Traffic Statistics	101
View the Internet Port Connection Status and Release and Renew the Connection	103
View Devices Currently on the Network	104
View WiFi Channels in Your Environment	105
View WiFi Networks in Your Environment	107
View and Manage the Log	108
Change the Password	110
Manage the Device Settings File of the Modem Router	111
Back Up the Settings	111
Restore the Settings	112
Return the Modem Router to Its Factory Default Settings	113
Use the Reset Button	114
Erase the Settings	114
Reboot the Modem Router	115
Monitor and Meter Internet Traffic	116
Start the Traffic Meter Without Traffic Volume Restrictions	116
View the Traffic Statistics and Traffic Status	117
Restrict Internet Traffic	118
Unblock the Traffic Meter After the Traffic Limit Is Reached	120
Manage the Modem Router Remotely	120
8. Share a Storage Device	123
USB Device Requirements	124
Connect a USB Device to the Modem Router	124
Access a Storage Device Connected to the Modem Router	125
Manage Access to a Storage Device	126
Enable FTP Access Within Your Network	128
View Network Folders on a Device	129
Add a Network Folder on a Storage Device	130
Change a Network Folder, Including Read and Write Access, on a USB Drive	132
Approve USB Devices	134
Safely Remove a USB Device	135
Enable the Media Server	136
9. Share a USB Printer	138
Install the Printer Driver and Cable the Printer	139
Download the ReadySHARE Printer Utility	139
Install the ReadySHARE Printer Utility	139
Use the Shared Printer	141
View or Change the Status of a Printer	142
Use the Scan Feature of a Multifunction USB Printer	143
Change NETGEAR USB Control Center Settings	144
Change the NETGEAR USB Control Center Language	145
Specify the Time-Out	145
10. Access Storage Devices Through the Internet	146
Set Up and Manage Dynamic DNS	147
Your Personal FTP Server	147
Set Up a New Dynamic DNS Account	148
Specify a DNS Account That You Already Created	149
Access Storage Devices Through the Internet	151
Set Up FTP Access Through the Internet	151
Access Storage Devices Through the Internet with FTP	153
11. Manage the Advanced WiFi Network Settings	154
Control the WiFi Radios	155
Use the WiFi On/Off Button	155
Enable or Disable the WiFi Radios	155
Set Up a WiFi Schedule	156
Manage Beamforming	158
Manage the Advanced WiFi Settings	159
Manage WPS Settings	161
Manage the Advanced WiFi Features	162
12. Manage Port Forwarding and Port Triggering	165
Manage Port Forwarding to a Local Server for Services, Applications, and Games	166
Forward Incoming Traffic for a Default Service or Application	166
Add a Port Forwarding Rule with a Custom Service or Application	167
Change a Port Forwarding Rule	169
Remove a Port Forwarding Rule	170
Application Example: Make a Local Web Server Public	171
How the Modem Router Implements the Port Forwarding Rule	172
Manage Port Triggering for Services, Applications, and Games	172
Add a Port Triggering Rule	173
Change a Port Triggering Rule	175
Disable or Remove a Port Triggering Rule	176
Specify the Time-Out Period for Port Triggering	177
Disable Port Triggering	178
Application Example: Port Triggering for Internet Relay Chat	178
13. Diagnostics and Troubleshooting	180
Perform Diagnostics	181
Ping an IP Address	181
Trace a Route	182
Quick Tips for Troubleshooting	184
Troubleshoot with the LEDs	185
Power LED Is Off	185
Power LED Is Red	185
WiFi LED Is Off	186
Ethernet LED Is Off	186
You Cannot Log In to the Modem Router	186
View and Manage the Event Log	187
Troubleshoot the Internet Connection	188
Troubleshoot the Cable Link	188
Internet LED Is Off	189
Obtain an Internet IP Address	189
Troubleshoot Internet Browsing	190
Changes Are Not Saved	191
Troubleshoot the WiFi Connectivity	191
TCP/IP Network Not Responding	192
Test the LAN Path to Your Modem Router	192
Test the Path from Your Computer to a Remote Device	192
A. Factory Default Settings and Specifications	194
Factory Default Settings	195

Match case Limit results 1 per page

Manage the WAN and LAN Network

Settings

AC1600 WiFi Cable Modem Router

The following table describes the protection and ping options on the WAN Setup page.

Field

Description

Disable IPv4 Firewall

Protection

IPv4 firewall protection can secure your network against malicious packets.

To disable IPv4 firewall protection, select the

Disable IPv4 Firewall Protection

check box.

By default, IPv4 firewall protection is enabled. NETGEAR recommends that you

leave the firewall enabled to protect your network.

Disable Port Scan and

DoS Protection

Port scan and DoS protection can protect your LAN against denial of service

attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop Attack, UDP

Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. However, when

port scan and DoS protection are enabled, some Apple computers might not be

able to connect to the Internet. By default, port scan and DoS protection are

disabled.

To enable port scan and DoS protection, clear the

Disable Port Scan and DoS

Protection

check box.

Respond to Ping on

Internet Port

By default, this check box is cleared to prevent the modem router from

responding to a ping from the Internet.

To enable the modem router to respond to a ping, select the

Respond to Ping on

Internet Port

check box.

If you changed the settings, click the

Apply

button.

Your settings are saved.

Set Up a Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and

videoconferencing applications that are incompatible with Network Address Translation

(NAT). The modem router can detect some of these applications and function correctly with

them but other applications might not function well. In some cases, one local computer can

run the application correctly if that computer’s IP address is entered as the default DMZ

server.

WARNING:

DMZ servers pose a security risk. A computer that is designated as

the default DMZ server loses firewall protection from exploits on the

Internet. Once compromised, the DMZ server computer attacks

other computers on your network.

Note:

Enabling port scan and DoS protection might affect the performance of the

modem router.

Note:

When you allow the modem router to respond to a ping from the Internet,

the modem router could be discovered by anyone and in that way become

vulnerable to attacks. For optimum security, keep this check box cleared.