Home » Netgear Manuals » Bridges & Routers » Netgear R6120 » Manual Viewer

Netgear R6120 User Manual - Page 81

Manage the WAN Security Settings, Set Up a Default DMZ Server

Add to My Manuals
Save this manual to your list of manuals

Page 81 highlights

AC1200 WiFi Router Model R6120 Manage the WAN Security Settings The WAN security settings include port scan protection and denial of service (DoS) protection, which can protect your LAN against attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. By default, DoS protection is enabled and a port scan is rejected. You can also enable the router to respond to a ping to its WAN (Internet) port. This feature allows your router to be discovered. Enable this feature only as a diagnostic tool or if a specific reason exists. To change the default WAN security settings: 1. Launch a web browser from a computer or mobile device that is connected to the network. 2. Enter http://www.routerlogin.net. A login window opens. 3. Enter the router user name and password. The user name is admin. The default password is password. The user name and password are case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays. 5. To enable a port scan and disable DoS protection, clear the Disable Port Scan and DoS Protection check box. 6. To enable the router to respond to a ping, select the Respond to Ping on Internet Port check box. 7. Click the Apply button. Your settings are saved. Set Up a Default DMZ Server The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation (NAT). The router is programmed to recognize some of these applications and to work correctly with them, but other applications might not function well. In some cases, one local computer can run the application correctly if the IP address for that computer is entered as the default DMZ server. WARNING: DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the firewall and is exposed to exploits from the Internet. If compromised, the DMZ server computer can be used to attack other computers on your network. The router usually detects and discards incoming traffic from the Internet that is not a response to one of your local computers or a service or application for which you set up a port forwarding or port triggering rule. Instead of discarding this traffic, you can direct the router to forward the traffic to one computer on your network. This computer is called the default DMZ server. Manage the WAN and LAN Network Settings 81

Section	Page
Contents	3
1. Hardware Overview of the Router	8
Unpack Your Router	9
LED Descriptions	10
Ports, Buttons, and Connectors on the Back Panel	10
Router Label	12
Position the Router	12
Cable Your Router	13
2. Connect to the Network and Access the Router	14
Connect to the Router	15
Connect to the Router Through an Ethernet Cable	15
Join the WiFi Network of the Router	15
Manual Method	15
Wi-Fi Protected Setup Method	16
Types of Logins	16
Use a Web Browser to Access the Router	17
Automatic Internet Setup	17
Log In to the Router	18
Change the Language	18
Access the Router With the NETGEAR genie App	19
3. Specify Your Internet Settings	20
Use the Internet Setup Wizard	21
Manually Set Up the Internet Connection	21
Specify an Internet Connection Without a Login	21
Specify an Internet Connection That Uses a Login and PPPoE Service	22
Specify an Internet Connection That Uses a Login and PPTP Service	24
Specify an Internet Connection That Uses a Login and L2TP Service	25
Specify an IPv6 Internet Connection	26
IPv6 Internet Connections and IPv6 Addresses	26
Use Auto Detect for an IPv6 Internet Connection	27
Use Auto Config for an IPv6 Internet Connection	28
Set Up an IPv6 6to4 Tunnel Internet Connection	29
Set Up an IPv6 Pass-Through Internet Connection	30
Set Up a Fixed IPv6 Internet Connection	31
Set Up an IPv6 DHCP Internet Connection	32
Set Up an IPv6 PPPoE Internet Connection	33
Manage the MTU Size	35
MTU Concepts	35
Change the MTU Size	36
4. Control Access to the Internet	37
Set Up Parental Controls	38
Allow or Block Access to Your Network	39
Enable and Manage Network Access Control	39
Manage Network Access Control Lists	40
Add Devices to or Remove Them From the Allowed List	41
Add Devices to or Remove Them From the Blocked List	42
Use Keywords to Block Internet Sites	43
Set Up Blocking	43
Remove a Keyword or Domain From the Blocked List	44
Remove All Keywords and Domains From the Blocked List	44
Specify a Trusted Computer	45
Set Up a Schedule for Keyword Blocking and Outbound Firewall Rules	45
5. Manage the Basic WiFi Network Settings	47
Manage the Basic WiFi Settings and WiFi Security of the Main Network	48
View or Change the Basic WiFi Settings and WiFi Security Settings	48
Configure WEP Legacy WiFi Security	53
Configure WPA/WPA2 Enterprise WiFi Security	54
Use WPS to Add a Device to the WiFi Network	56
Use WPS With the Push Button Method	56
Use WPS With the PIN Method	57
Manage the Basic WiFi Settings and WiFi Security of the Guest Network	58
Enable or Disable the WiFi Radios	61
6. Share a Storage Device Attached to the Router	63
USB Device Requirements	64
Connect a USB Device to the Router	65
Access a Storage Device Connected to the Router	65
Access the Storage Device From a Windows-Based Computer	65
Access the Storage Device From a Mac	66
Map a USB Device to a Windows Network Drive	66
Manage Access to a Storage Device	67
Enable FTP Access Within Your Network	68
View Network Folders on a Device	69
Add a Network Folder on a Storage Device	70
Change a Network Folder, Including Read and Write Access, on a USB Drive	71
Approve USB Devices	71
Safely Remove a USB Device	72
7. Share a USB Printer	74
Install the Printer Driver and Cable the Printer	75
Download the ReadySHARE Printer Utility	75
Install the ReadySHARE Printer Utility	75
Use the Shared Printer	76
Manually Connect and Print	76
Print and Release the Printer	76
View or Change the Status of a Printer	77
Use the Scan Feature of a Multifunction USB Printer	78
Manage the NETGEAR USB Control Center Settings	78
Turn Off Automatic Startup of the NETGEAR USB Control Center	78
Change the NETGEAR USB Control Center Language	79
Specify the USB Control Center Time-Out	79
8. Manage the WAN and LAN Network Settings	80
Manage the WAN Security Settings	81
Set Up a Default DMZ Server	81
Manage IGMP Proxying	82
Manage VPN Pass-Through	83
Manage NAT Filtering	83
Manage the SIP Application-Level Gateway	84
Manage the LAN IP Address Settings	84
Manage the Router Information Protocol Settings	85
Manage the DHCP Server Address Pool	86
Manage Reserved LAN IP Addresses	87
Reserve a LAN IP Address	87
Change a Reserved IP Address	88
Remove a Reserved IP Address Entry	88
Disable the Built-In DHCP Server	89
Change the Router’s Device Name	89
Set Up and Manage Custom Static Routes	90
Set Up a Static Route	91
Change a Static Route	92
Remove a Static Route	92
Set Up a Bridge for a Port Group or VLAN Tag Group	93
Set Up a Bridge for a Port Group	93
Set Up a Bridge for a VLAN Tag Group	94
Improve Network Connections With Universal Plug-N-Play	96
9. Manage the Router	97
Update the Firmware of the Router	98
Check for New Firmware and Update the Router	98
Manually Upload New Firmware and Update the Router	99
Change the admin Password	100
Set Up Password Recovery	101
Recover the admin Password	101
Manage the Configuration File of the Router	102
Back Up the Settings	102
Restore the Settings	102
Return the Router to Its Factory Default Settings	103
Use the Reset Button	103
Erase the Settings	104
View the Status and Statistics of the Router	105
View Information About the Router and the Internet and WiFi Settings	105
Display Internet Port Statistics	105
Check the Internet Connection Status	106
Manage the Activity Log	107
View, Email, or Clear the Logs	107
Specify Which Activities Are Logged	108
View Devices Currently on the Network	108
10. Manage the Advanced WiFi Features	110
Set Up a WiFi Schedule	111
Manage the WPS Settings	111
Manage Advanced WiFi Settings	112
Use the Router as a WiFi Access Point Only	113
11. Manage Port Forwarding and Port Triggering	115
Manage Port Forwarding to a Local Server for Services and Applications	116
Forward Incoming Traffic for a Default Service or Application	116
Add a Port Forwarding Rule With a Custom Service or Application	117
Change a Port Forwarding Rule	118
Remove a Port Forwarding Rule	119
Application Example: Make a Local Web Server Public	119
How the Router Implements the Port Forwarding Rule	120
Manage Port Triggering for Services and Applications	120
Add a Port Triggering Rule	121
Change a Port Triggering Rule	122
Remove a Port Triggering Rule	123
Specify the Time-Out for Port Triggering	123
Disable Port Triggering	124
Application Example: Port Triggering for Internet Relay Chat	124
12. Troubleshooting	126
Reboot the Router From Its Web Interface	127
Quick Tips	127
Sequence to Restart Your Network	127
Check Ethernet Cable Connections	127
WiFi Settings	128
Network Settings	128
Troubleshoot With the LEDs	128
Standard LED Behavior When the Router Is Powered On	128
Power LED Is Off or Blinking	128
Power LED Stays Amber	129
Internet or Ethernet LEDs Are Off	129
WiFi LED Is Off	129
You Cannot Log In to the Router	129
You Cannot Access the Internet	130
Check the WAN IP Address	130
Troubleshoot PPPoE	131
Troubleshoot Internet Browsing	132
Changes Are Not Saved	132
Troubleshoot WiFi Connectivity	133
Troubleshoot Your Network Using the Ping Utility	133
Test the LAN Path to Your Router	133
Test the Path From Your Computer to a Remote Device	134
13. Supplemental Information	135
Factory Settings	136

Match case Limit results 1 per page

Manage the WAN Security Settings

The WAN security settings include port scan protection and denial of service (DoS) protection, which can

protect your LAN against attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. By

default, DoS protection is enabled and a port scan is rejected.

You can also enable the router to respond to a ping to its WAN (Internet) port.This feature allows your router

to be discovered. Enable this feature only as a diagnostic tool or if a specific reason exists.

To change the default WAN security settings:

Launch a web browser from a computer or mobile device that is connected to the network.

Enter

http://www.routerlogin.net

A login window opens.

Enter the router user name and password.

The user name is

admin

. The default password is

password

. The user name and password are

case-sensitive.

The BASIC Home page displays.

Select

ADVANCED > Setup > WAN Setup

The WAN Setup page displays.

To enable a port scan and disable DoS protection, clear the

Disable Port Scan and DoS Protection

check box.

To enable the router to respond to a ping, select the

Respond to Ping on Internet Port

check box.

Click the

Apply

button.

Your settings are saved.

Set Up a Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and videoconferencing

applications that are incompatible with Network Address Translation (NAT).The router is programmed to

recognize some of these applications and to work correctly with them, but other applications might not

function well. In some cases, one local computer can run the application correctly if the IP address for that

computer is entered as the default DMZ server.

WARNING:

DMZ servers pose a security risk. A computer designated as the default DMZ

server loses much of the protection of the firewall and is exposed to exploits

from the Internet. If compromised, the DMZ server computer can be used to

attack other computers on your network.

The router usually detects and discards incoming traffic from the Internet that is not a response to one of

your local computers or a service or application for which you set up a port forwarding or port triggering rule.

Instead of discarding this traffic, you can direct the router to forward the traffic to one computer on your

network. This computer is called the default DMZ server.

Manage the WAN and LAN Network Settings

AC1200 WiFi Router Model R6120