Home » Netgear Manuals » Wireless » Netgear WAX204 » Manual Viewer

Netgear WAX204 User Manual - Page 173

About setting up the access point as a VPN client [router mode

Add to My Manuals
Save this manual to your list of manuals

Page 173 highlights

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 About setting up the access point as a VPN client [router mode] In addition to using a virtual private network (VPN) to securely access your own network over the Internet when you are not home (see VPN Server and Service with OpenVPN [Router Mode] on page 177), you can also set up the access point as a VPN client to let devices on the access point's network securely access an external network, while protecting your own network identity and preventing a distributed denial-of-service (DDoS) attack. An external network can be a business network behind a firewall or an Internet service that might not be accessible from your geographical location without using a VPN server in another country. Similar to using the access point as a VPN server, this type of VPN access is also called a client-to-gateway tunnel, but in this situation the access point functions as the client and an external gateway (that is not on the access point's network) functions as the VPN server. A VPN creates a secure, encrypted tunnel over the Internet between your access point and a VPN server. The VPN client on the access point redirects the Internet connection so that the access point first connects to a VPN server (which could be in another country) and then to the Internet. All devices that are connected to your access point are assigned new IP addresses from the VPN server, which hides the actual location of your access point and the devices that are connected to it. After the VPN connection is established, you use your web browser and any apps as you would normally do. Note: The access point comes with a predefined commercial VPN service provider called PureVPN. To use the VPN client feature in the access point, you need a license from this provider. However, if you want to use a free VPN service on a device on your access point's network, you can download the service's VPN client on your device and establish a connection to the free VPN server. Such a connection serves only that individual device, not all devices on theaccess point's network. To use the VPN client feature, the access point must be in router mode and you must log in to the access point, enable the access point's VPN client, and establish a connection to an external VPN server (see Enable the VPN client in the access point and connect to a VPN server [router mode] on page 174). VPN Client [Router Mode] 173 User Manual

Section	Page
Contents	3
1. Hardware Overview	10
Top panel with LEDs	11
Back panel with ports, buttons, and a power connector	13
Position the antennas for best WiFi performance	14
Access point label	14
2. Installation and Initial Log-in	15
About router mode and access point mode	16
Routing features enabled only in router mode	16
Set up the access point and complete the initial log-in process	17
Connect the access point to a modem and log in for the first time	18
Connect the access point to a router and log in for the first time	22
Get a registration key	26
Find the IP address of the access point when you cannot use routerlogin.net	27
Find the IP address of the access point with the NETGEAR Insight mobile app	29
Log in to the access point after initial setup	30
Change the language	31
Connect a wired or WiFi device to the access point’s network after installation	32
Connect to the access point through an Ethernet cable	32
Use Wi-Fi Protected Setup to join the WiFi network	33
Manually join the WiFi network	33
3. Manually Set Up Internet Settings	35
Use the Setup Wizard	36
Manually set up the access point Internet connection [router mode]	37
Specify a dynamic or fixed WAN IP address Internet connection without a login [router mode]	37
Specify a PPPoE Internet connection that uses a login [router mode]	39
Specify a PPTP or L2TP Internet connection that uses a login [router mode]	41
IPv6 Internet connections and IPv6 addresses [router mode]	43
Use Auto Detect for an IPv6 Internet connection [router mode]	44
Use Auto Config for an IPv6 Internet connection [router mode]	46
Set up an IPv6 6to4 tunnel Internet connection [router mode]	48
Set up an IPv6 6rd Internet connection [router mode]	49
Set up an IPv6 passthrough Internet connection [router mode]	51
Set up an IPv6 fixed Internet connection [router mode]	52
Set up an IPv6 DHCP Internet connection [router mode]	54
Set up an IPv6 PPPoE Internet connection [router mode]	56
4. Basic WiFi and Radio Features	58
Set up or change an open or secure WiFi network	59
Configure WPA and WPA2 Enterprise WiFi security with a RADIUS server	63
Enable or disable a WiFi network	65
Hide or broadcast the SSID for a WiFi network	66
Manage client isolation for clients of the Wireless 2 or Wireless 3 network	67
Manage access to LAN ports for clients of the Wireless 2 or Wireless 3 network	68
Manage SSID isolation for all WiFi networks	69
Enable or disable a WiFi radio	70
Use WPS to connect to the WiFi network	72
Use WPS with the push button method	72
Use WPS with the PIN method	73
5. Security, Firewall, and Access Rules	75
Firewall WAN settings [router mode]	76
Manage port scan protection and denial of service protection [router mode]	76
Set up a default DMZ server [router mode]	77
Manage IGMP proxying [router mode]	78
Manage NAT filtering [router mode]	79
Manage the SIP application-level gateway [router mode]	80
Network access control lists	81
Enable and manage network access control	81
Add, remove or change a device on the the allowed list	83
Add, remove or change a device on the blocked list	84
Block specific Internet sites [router mode]	86
Set up keyword and domain blocking [router mode]	86
Remove a keyword or domain from the blocked list [router mode]	88
Remove all keywords and domains from the blocked list [router mode]	89
Block specific applications and services from the Internet [router mode]	89
Add a service blocking rule for a predefined service or application [router mode]	90
Add a service blocking rule for a custom service or application [router mode]	91
Change a service blocking rule [router mode]	93
Remove a service blocking rule [router mode]	94
Assign a trusted device [router mode]	95
Schedule blocking [router mode]	96
Set up security event email notifications	97
6. Optimize Performance	99
Enable QoS and automatically set the Internet bandwidth	100
Enable QoS and manually set the Internet bandwidth	101
Enable or disable the automatic update of the Performance Optimization Database	102
Manage WiFi Multimedia (WMM) for a radio	103
Improve network connections with Universal Plug and Play [router mode]	105
Change the priority for a connected device [router mode]	106
7. Network Settings	108
LAN IP address settings [router mode]	109
Change the LAN IP address and subnet settings [router mode]	109
Manage the DHCP server address pool [router mode]	110
Disable the DHCP server [router mode]	112
Manage the Router Information Protocol settings [router mode]	113
Change the access point network device name	114
Reserved LAN IP addresses [router mode]	115
Reserve a LAN IP address [router mode]	115
Change a reserved LAN IP address [router mode]	116
Remove a reserved LAN IP address entry [router mode]	117
Static routes	118
Add an IPv4 static route	118
Change an IPv4 static route	120
Remove an IPv4 static route	121
Bridge port and VLAN tag groups [router mode]	121
Set up a bridge for a port group [router mode]	122
Set up a bridge for a VLAN tag group [router mode]	123
Change the MTU size [router mode]	125
8. Maintain and Monitor	128
Update the firmware	129
Let the access point check for new firmware and update the firmware	129
Manually check for new firmware and update the firmware	131
Back up or restore the settings	133
Back up the access point settings	133
Restore the access point settings	134
Change the local device password	135
Change the password recovery questions for the local device password	136
Recover the local device admin password	137
Factory default settings	138
Use the dual-function Reset button to return to factory defaults	138
Use the local browser UI to return to factory defaults	140
Time and Network Time Protocol server	142
Manually set the time zone and adjust the daylight saving time	142
Change the Network Time Protocol server	143
Logs	144
Specify which activities the access point logs	144
View, send, or clear the logs	145
Status and statistics	146
Display information about the Internet port, access point, and WiFi settings [router mode]	146
Display information about the LAN port, access point, and WiFi settings [access point mode]	149
Check the Internet connection status	151
Display the Internet port statistics	153
Display the devices currently on the access point network and change device information	154
Traffic meter [router mode]	157
Start the traffic meter without traffic restrictions [router mode]	158
Restrict Internet traffic by volume [router mode]	159
Restrict Internet traffic by connection time [router mode]	160
View the Internet traffic volume and statistics [router mode]	162
Unblock the traffic meter after the traffic limit is reached [router mode]	163
Change the system mode to access point mode or to router mode	164
Disable LED blinking or turn off LEDs	166
9. Dynamic DNS [Router Mode]	167
About Dynamic DNS [router mode]	168
Set up a new Dynamic DNS account [router mode]	168
Use an existing Dynamic DNS account [router mode]	169
Change the Dynamic DNS account settings [router mode]	171
10. VPN Client [Router Mode]	172
About setting up the access point as a VPN client [router mode]	173
Enable the VPN client in the access point and connect to a VPN server [router mode]	174
Disconnect the access point from the VPN server [router mode]	176
11. VPN Server and Service with OpenVPN [Router Mode]	177
Enable and configure OpenVPN and VPN client access on the access point [router mode]	178
OpenVPN client utility and VPN configuration files [router mode]	179
Install OpenVPN on a Windows-based computer [router mode]	180
Install OpenVPN on a Mac [router mode]	181
Install OpenVPN on an iOS device [router mode]	182
Install OpenVPN on an Android device [router mode]	183
About setting up an OpenVPN connection [router mode]	184
About VPN access to your network or Internet service at your office or home [router mode]	185
Use a VPN tunnel to remotely access your Internet service [router mode]	186
12. Advanced WiFi and Radio Features	187
Change the region of operation	188
Manage 802.11ax and enable or disable OFDMA for a radio	189
Enable or disable smart connect for the access point	190
Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio	192
Change the channel for a radio	193
Change the WiFi throughput mode for a radio	194
Change the transmission output power for a radio	196
Add a WiFi schedule for a radio	197
Enable or disable MU-MIMO	199
Enable or disable explicit beamforming	200
Enable or disable PMF	201
Set up access point as a WiFi Bridge to another device	202
Change the CTS/RTS threshold and preamble mode for a radio	205
13. Port Forwarding and Port Triggering [Router Mode]	207
Port forwarding to a local server for services and applications [router mode]	208
Forward incoming traffic for a default service or application [router mode]	208
Add a port forwarding rule for a custom service or application [router mode]	209
Change a port forwarding rule [router mode]	211
Remove a port forwarding rule [router mode]	212
How the access point implements a port forwarding rule [router mode]	213
Application example: Make a local web server public [router mode]	213
Port triggering for services and applications [router mode]	214
Add a port triggering rule [router mode]	214
Change a port triggering rule [router mode]	216
Remove a port triggering rule [router mode]	217
Specify the time-out for port triggering [router mode]	218
Disable port triggering [router mode]	219
Application example: Port triggering for Internet Relay Chat [router mode]	220
14. Diagnostics and Troubleshooting	221
Reboot the access point from the local browser UI	222
Quick tips for troubleshooting	223
Restart your access point network if in router mode	223
Restart your access point when in access point mode	223
Check the Ethernet cable connections	223
Check the WiFi settings of your computer or mobile device	223
Check the DHCP network settings of your computer or mobile device	224
Standard LED behavior when the access point is powered on	225
Troubleshoot with the LEDs	225
Power LED is off	225
Power LED does not turn green	226
Internet LED is solid amber or off [router mode]	226
Internet LED is solid amber or off [access point mode]	227
WiFi LED is Off	227
The LAN LED is off while a device is connected	228
You cannot log in to the access point	228
You cannot log in to the access point [router mode]	228
You cannot log in to the access point [access point mode]	229
You cannot access the Internet [router mode]	231
Check the Internet WAN IP address [router mode]	231
Check or manually start the PPPoE connection [router mode]	233
Troubleshoot Internet browsing	234
Troubleshoot the WiFi connectivity	235
Changes are not saved	236
Troubleshoot your network using the ping utility of your computer or mobile device	236
Test the LAN path from a Windows-based computer to the access point	237
Test the path from a Windows-based computer to a remote device [router mode]	238
A. Factory Default Settings and Technical Specifications	239
Factory default settings	240
Technical specifications	242
B. Positioning and Wall-Mounting	244
Position the access point	245

Match case Limit results 1 per page

About setting up the access point as a VPN

client [router mode]

In addition to using a virtual private network (VPN) to securely access your own network

over the Internet when you are not home (see VPN

Server

and

Service

with

OpenVPN

[Router

Mode]

on page 177), you can also set up the access point as a VPN

client

to let

devices on the access point’s network securely access an

external

network, while

protecting your own network identity and preventing a distributed denial-of-service

(DDoS) attack. An external network can be a business network behind a firewall or an

Internet service that might not be accessible from your geographical location without

using a VPN server in another country.

Similar to using the access point as a VPN server, this type of VPN access is also called

a client-to-gateway tunnel, but in this situation the access point functions as the

client

and an external gateway (that is not on the access point’s network) functions as the VPN

server.

A VPN creates a secure, encrypted tunnel over the Internet between your access point

and a VPN server. The VPN client on the access point redirects the Internet connection

so that the access point first connects to a VPN server (which could be in another country)

and then to the Internet. All devices that are connected to your access point are assigned

new IP addresses from the VPN server, which hides the actual location of your access

point and the devices that are connected to it. After the VPN connection is established,

you use your web browser and any apps as you would normally do.

Note:

The access point comes with a predefined commercial VPN service provider

called PureVPN. To use the VPN client feature in the access point, you need a license

from this provider. However, if you want to use a free VPN service on a device on your

access point’s network, you can download the service’s VPN client on your device and

establish a connection to the free VPN server. Such a connection serves only that

individual device, not all devices on theaccess point’s network.

To use the VPN client feature, the access point must be in router mode and you must

to an external VPN server (see Enable

the

VPN

client

the

access

point

and

connect

VPN

server

[router

mode]

on page 174).

User Manual

173

VPN Client [Router Mode]

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204