Home » Netgear Manuals » Wireless » Netgear SRK60B03 » Manual Viewer

Netgear SRK60B03 User Manual - Page 48

Manage MAC access control lists for WiFi networks and the LAN

Add to My Manuals
Save this manual to your list of manuals

Page 48 highlights

Orbi Pro Router SRR60 and Orbi Pro Satellite SRS60 Manage MAC access control lists for WiFi networks and the LAN A MAC access control list (ACL) for a WiFi network (that is, an SSID) or the wired network (that is, the LAN) allows or denies a device access to the network based only on the MAC address of the device. If you block a device for one WiFi network or for the wired network, the device is blocked only for that WiFi network or for the wired network. You can set up an independent MAC ACL for each WiFi network and for the wired network. (The router supports a total of five MAC ACLs.) With a MAC ACL, you can allow or deny access to a device on a specific WiFi network or the wired network. Note: A MAC ACL differs from the network access control list (see Manage the Orbi network access control list on page 53). The network access control list is not specific to a particular WiFi network or to the wired network but is based on both WiFi and wired devices that the router detects on the entire Orbi network. To allow or deny access to a device on a specific WiFi network or the wired network, use a MAC ACL. MAC ACLs and the network access control list are mutually exclusive. Use either MAC ACLs or the network access control list. If you set up a MAC ACL with a policy that allows access to a specific network, devices on the MAC ACL are an exception to the default policy: • A device for which you place the MAC address on the MAC ACL is denied access to that network. • All other devices are allowed access to that network. If you set up a MAC ACL with a policy that denies access to a specific network, devices on the MAC ACL are an exception to the default policy: • A device for which you place the MAC address on the MAC ACL is allowed access to that work. • All other devices are denied access to that network. A blocked device can still get an IP address from the router but cannot communicate with other devices on the network or connect to the Internet. Note: Each network device owns a MAC address, which is a unique 12-character physical address, containing the hexadecimal characters 0-9, a-f, or A-F (uppercase or lowercase) only, and separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC address is on the label of a device. If you cannot see the label, you can display the MAC address using the network configuration utilities of a computer. You might also find the MAC addresses on Attached Devices page of the router (see View satellites, WiFi devices, and wired devices connected to the Orbi network on page 117). Control Access to the Internet 48 User Manual

Section	Page
Contents	4
1. Overview	9
Supported Orbi Pro models	10
Orbi Pro router and satellite hardware overviews	10
Orbi Pro router model SRR60 hardware overview	10
Orbi Pro satellite model SRS60 hardware overview	11
LED behavior	11
Orbi Pro WiFi system LEDs	12
Add-on Orbi Pro satellite LEDs	12
Wall mount or ceiling mount your Orbi Pro router	13
Wall-mount your Orbi Pro	13
Ceiling-mount your Orbi Pro	14
Orbi Pro router label and Orbi Pro satellite label	16
Connect your Orbi Pro router	17
Place your satellite	18
Sync your Orbi Pro satellite	18
Sync a satellite from an Orbi Pro WiFi system	18
Sync an add-on Orbi Pro satellite	19
Add satellites to your network using the router web interface	20
Set up your Orbi network with the NETGEAR Insight app	21
2. Connect to the Orbi Pro Network and Access the Router	22
Connect to the network	23
Wired connection	23
WiFi connection	23
WiFi connection using WPS	24
Types of logins	24
Use a web browser to access the router	24
Use the automatic Internet setup option	25
Log in to the Orbi router web interface	26
Change the language	27
3. Specify Your Internet Settings	28
Use the Internet Setup Wizard	29
Manually set up the Internet connection	29
Specify an Internet connection without a login	29
Specify an Internet connection that uses a login	31
Manage an IPv6 Internet connection	33
Requirements for entering IPv6 addresses	33
Specify IPv6 Internet connections	33
Use auto detection for an IPv6 Internet connection	34
Use auto configuration for an IPv6 Internet connection	35
Set up an IPv6 6rd tunnel Internet connection	36
Set up an IPv6 6to4 tunnel Internet connection	38
Set up an IPv6 pass-through Internet connection	40
Set up an IPv6 fixed Internet connection	40
Set up an IPv6 DHCP Internet connection	41
Set up an IPv6 PPPoE Internet connection	43
Change the MTU size	45
4. Control Access to the Internet	47
Manage MAC access control lists for WiFi networks and the LAN	48
Enable a MAC ACL for a specific network	49
Add automatically detected devices to a MAC ACL	50
Manually add, remove, or change the information for a device on a MAC ACL	51
Disable a MAC ACL for a specific network	52
Manage the Orbi network access control list	53
Enable the network access control list and specify the access rule	54
Manage the allowed devices on the network access control list	55
Manage the blocked devices on the network access control list	57
Use keywords to block Internet sites	58
Delete keywords that are used to block Internet sites	59
Avoid blocking on a trusted computer	60
Block services from the Internet	60
Schedule when to block Internet sites and services	62
Set up security event email notifications	63
5. Specify Network Settings	65
View or change WAN settings	66
Manage Dynamic DNS	67
Set up a new Dynamic DNS account	67
Specify a DNS account that you already created	68
Change the Dynamic DNS settings	69
Set up a default DMZ server	69
Change the router’s device name	70
Change the LAN TCP/IP settings	71
Use the router as a DHCP server	73
Disable the DHCP server feature in the router	74
Manage reserved LAN IP addresses	75
Reserve an IP address	75
Edit a reserved IP address	76
Delete a reserved IP address entry	76
Manage custom static routes	77
Set up a static route	77
Edit a static route	78
Delete a static route	79
Change the admin WiFi network settings	80
Change the admin WiFi network name and channel	80
Change the admin WiFi password or security level	81
Manage the employee WiFi network settings	83
Enable the employee WiFi network and change the settings	83
Change the employee WiFi password or security level	85
Manage the IoT WiFi network settings	87
Enable the IoT WiFi network and change the settings	87
Change the IoT WiFi password or security level	88
Set up a guest WiFi network and captive portal	90
Set up a guest WiFi network with open access or password authentication	90
Set up a guest network with a captive portal	92
Set up Facebook Wi-Fi	93
Manage the download bandwidth per SSID	95
View or change advanced WiFi settings	97
Use the router as a WiFi access point	98
Set up router mode	99
Generate a new backhaul password	99
Enable or disable implicit beamforming	100
Enable or disable MU-MIMO	101
Enable or disable Protected Management Frames	102
Check your Internet bandwidth	103
Set up a bridge for a port group or VLAN tag group	103
Set up a bridge for a port group	104
Set up a bridge for a VLAN tag group	104
Improve network connections with Universal Plug and Play	106
6. Manage Your Network	108
Update the router and satellite firmware	109
Enable the automatic firmware update feature	109
Check for firmware updates	109
Manually update firmware	110
Manually update satellite firmware	111
Manually update router firmware	111
Change the admin password	112
Enable admin password reset	113
Reset the admin password	114
View router status and usage information	114
Display Internet port statistics	115
Check the Internet connection status	116
View satellites, WiFi devices, and wired devices connected to the Orbi network	117
View satellite status	118
View and manage logs of router activity	119
Set up a syslog server	120
Monitor Internet traffic	121
Manage the router configuration file	122
Back up settings	122
Manage the automatic backup options	123
Erase the current configuration settings	123
Restore configuration settings	124
Set up remote management	125
Use remote access	126
7. Customize Internet Traffic Rules for Ports	127
Manage port forwarding to a local server	128
Set up port forwarding to a local server	128
Add a custom port forwarding service	129
Edit a port forwarding service	130
Delete a port forwarding entry	131
Application example: Make a local web server public	131
How the router implements the port forwarding rule	132
Manage port triggering	132
Add a port triggering service	133
Enable port triggering	134
Application example: Port triggering for Internet Relay Chat	134
8. Use VPN to Access Your Network	136
Set up a VPN connection	137
Specify VPN service in the router	137
Install OpenVPN software	138
Install OpenVPN software on your Windows-based computer	138
Install OpenVPN software on your Mac computer	141
Install OpenVPN software on an iOS device	142
Install OpenVPN software on an Android device	142
Use a VPN tunnel on your Windows-based computer	143
Use VPN to access your Internet service at home	145
Set up VPN client Internet access in the router	145
Block VPN client Internet access in the router	146
Use a VPN tunnel to access your Internet service at home	147
9. Troubleshooting	148
Quick tips	149
Sequence to restart your network	149
WiFi settings	149
Network settings	149
The router and satellite do not sync	149
You cannot log in to the router	151
You cannot access the Internet	151
Troubleshoot Internet browsing	152
Troubleshoot PPPoE	153
Troubleshoot WiFi connectivity	154
Troubleshoot your network using the ping utility	154
Test the LAN path to your router	154
Test the path from your computer to a remote device	155
A. Supplemental Information	157
Factory settings	158
Factory settings for Orbi Pro router model SRR60	158
Factory settings for Orbi Pro satellite model SRS60	160
Technical specifications	162
Technical specifications for Orbi Pro router model SRR60	162

Match case Limit results 1 per page

Manage MAC access control lists for WiFi

networks and the LAN

A MAC access control list (ACL) for a WiFi network (that is, an SSID) or the wired network

(that is, the LAN) allows or denies a device access to the network based only on the

MAC address of the device. If you block a device for one WiFi network or for the wired

network, the device is blocked only for that WiFi network or for the wired network. You

can set up an independent MAC ACL for each WiFi network and for the wired network.

(The router supports a total of five MAC ACLs.) With a MAC ACL, you can allow or deny

access to a device on a specific WiFi network or the wired network.

Note:

A MAC ACL differs from the network access control list (see Manage

the

Orbi

network

access

control

list

on page 53). The network access control list is not specific

to a particular WiFi network or to the wired network but is based on both WiFi and wired

devices that the router detects on the entire Orbi network. To allow or deny access to

a device on a specific WiFi network or the wired network, use a MAC ACL. MAC ACLs

and the network access control list are mutually exclusive. Use either MAC ACLs or the

network access control list.

If you set up a MAC ACL with a policy that allows access to a specific network, devices

on the MAC ACL are an exception to the default policy:

•

A device for which you place the MAC address on the MAC ACL is

denied access

that network.

•

All other devices are allowed access to that network.

If you set up a MAC ACL with a policy that denies access to a specific network, devices

on the MAC ACL are an exception to the default policy:

•

A device for which you place the MAC address on the MAC ACL is

allowed access

to that work.

•

All other devices are denied access to that network.

A blocked device can still get an IP address from the router but cannot communicate

with other devices on the network or connect to the Internet.

Note:

Each network device owns a MAC address, which is a unique 12-character physical

address, containing the hexadecimal characters 0–9, a–f, or A–F (uppercase or lowercase)

only, and separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC

address is on the label of a device. If you cannot see the label, you can display the MAC

address using the network configuration utilities of a computer. You might also find the

MAC addresses on Attached Devices page of the router (see View

satellites,

WiFi

devices,

and

wired

devices

connected

the

Orbi

network

on page 117).

User Manual

Control Access to the Internet

Orbi Pro Router SRR60 and Orbi Pro Satellite SRS60