Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
CG3700EMR-1CMNDS
User Manual
September 2013
202-11324-01
Support
Contact your Internet service provider for technical support.
Trademarks
NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of
NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change
without notice. NETGEAR, Inc. All rights reserved.
Contents
Chapter 1
Chapter 2
Cable Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
View or Configure Your Wireless Network . . . . . . . . . . . . . . . . . . . . . . . . . 16
Wireless Setup Screen Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Security Options Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Network Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Voice Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Chapter 3
Internet Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
WAN Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
LAN Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
LAN TCP/IP Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
DHCP IP Pool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Address Reservation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Chapter 4
Security
Chapter 5
Administration
Chapter 7 Troubleshooting
Troubleshoot with LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Cannot Log In to the Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Troubleshoot the ISP Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Troubleshoot a TCP/IP Network Using the Ping Utility . . . . . . . . . . . . . . . 68
Test the LAN Path to Your Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Test the Path from Your Computer to a Remote Device . . . . . . . . . . . . 69
Appendix B
Notification of Compliance
1.
This chapter describes how to configure the Internet connection of your gateway and includes
these sections:
Gateway Label
You can use the LEDs to verify status and connections. The following table lists and
describes each LED and button on the front panel of the gateway.
Description
Power
Downstream
Upstream
Internet
Solid green. The gateway detects an Ethernet device connected to the port and is
powered on.
Blinking green. Data is being transmitted or received on the Ethernet port.
Off. The gateway does not detect an Ethernet device.
LAN (Ethernet)
LAN (Ethernet)
Solid green. The gateway detects an Ethernet device connected to the port and is
powered on.
Blinking green. Data is being transmitted or received on the Ethernet port.
Off. The gateway does not detect an Ethernet device.
Phone
Solid green. The gateway detects a phone connected to the port and is powered on.
Blinking green. A phone is connected to the phone port and is in use.
Off. The gateway does not detect a phone connected to the phone port or the phone
is off line.
Button
Description
Pressing this button opens a two minute window for the gateway to connect with other
WPS-enabled devices.
WPS
Turn the wireless radio in the gateway on and off. The wireless radio is on by default. The
LED located below this button indicates if the wireless radio is on or off.
Wireless On/Off
Phone port
USB port (optional)
The rear panel includes the following connections, viewed from top to bottom:
Phone port. Connect a telephone to this port using an analog phone line.
Two Gigabit Ethernet LAN ports. Use these ports to connect local computers.
Coaxial cable connector. Attach a coaxial cable to the cable service provider connection.
Power On/Off button. Press to turn on power. Press again to turn off power.
Reset button. You can return the gateway to its factory settings. Press and hold the
Reset button for over seven seconds. The gateway resets and returns to its factory
settings. See Factory Default Settings on page 72.
Gateway Label
The label on the gateway shows the PIN, login information, MAC address, serial number,
SSID, and WPA key.
Adaptor of CWT
Manufacturer: Channel Well Technology Co., Ltd.
Model: SAS030F2
Adaptor of PI
Manufacturer: PI Electronics (H.K.) Ltd.
Model: P030WE120B11200
Away from sources of interference, such as computers, microwave ovens, and 2.4
GHz cordless phones.
To reduce interference when using more than one access point, best practice is to
use channel spacing between adjacent access points (for example, use Channels 1
and 6, or 6 and 11).
The gateway automatically logs you out after five minutes of no activity.
2. Log in with the user name admin and its default password of password.
The gateway BASIC Home screen displays when you log in (see BASIC Home Screen on
page 12).
Dashboard
(Click to view
details)
The BASIC Home screen has a dashboard that shows the status of your Internet connection
and network. You can click the sections of the dashboard to view more detailed information.
The left column has menus and an ADVANCED tab displays at the top that you can use to
access more menus and screens.
The following options display on the BASIC home screen:
Home. This dashboard screen displays when you log in to the gateway or select the
Home tab.
Cable Connection. This option displays the cable signal quality, the upstream power, the
downstream power, and the connection status.
Wireless. Select this option to view or change the wireless settings for your gateway.
Network Map. Select this option to view the devices that are connected to your network.
ADVANCED tab. Click the ADVANCED tab to set up the gateway for unique situations
such as when remote access by IP or by domain name from the Internet is needed. See
ADVANCED Home Screen on page 13. Using this tab requires a solid understanding of
networking concepts.
For more information about the basic settings, see Chapter 2, NETGEAR genie Basic
Settings.
The gateway ADVANCED Home screen has a dashboard that lets you see the configuration
of your gateway and network at a glance. You can click any of the sections of the dashboard
to view more detailed information. The left column has the menus and at the top a BASIC tab
displays that you can use to access the basic menus and screens.
ADVANCED Home. This dashboard screen displays when you click the ADVANCED tab.
Setup. Set up the Internet connection, wireless settings, WAN, and LAN.
Administration. View gateway status, logs, and event logs, back up and restore the
configuration file, and change the gateway password.
Advanced Setup. Configure advanced network features such as port forwarding, port
triggering, Dynamic DNS, and UPnP.
BASIC tab. Return to the BASIC Home screen. See BASIC Home Screen on page 12.
For more information about the advanced settings, see Chapter 3, NETGEAR genie
ADVANCED Home.
2.
This chapter explains the features available from the genie BASIC Home screen. This chapter
contains the following sections:
Cable Connection
Network Map
Voice Status
15
Cable Connection
Use the Cable Connection screen to track the initialization procedure of the gateway, and to
get details about the downstream and upstream cable channel. The time is displayed after
the gateway is initialized.
The gateway automatically goes through the following steps in the provisioning process:
1. Scans and locks the downstream frequency and then ranges the upstream channels.
2. Obtains a WAN address for the gateway.
3. Connects to the Internet.
The starting frequency is automatically generated. Most of the time, you do not need to enter
a value in this field. If you need to enter a starting frequency, contact your Internet service
provider.
Note: The preset SSID and password are uniquely generated for every
device to protect and maximize your wireless security.
Best practice is not change your preset security settings. If you do decide to change
your preset security settings, make a note of the new settings and store it in a safe place.
If you use a wireless computer to change the wireless network name (SSID) or other wireless
security settings, you are disconnected when you click the Apply button. To avoid this
problem, use a computer with a wired connection to access the gateway.
The screen sections, settings, and procedures are explained in the following sections.
2. Make the appropriate changes.
3. Click the Apply button.
Your settings are saved.
4. Set up and test your wireless devices and computers to make sure that they can connect
wirelessly. If they do not, check the following:
Is your wireless device or computer connected to your network or another wireless
network in your area? Some wireless devices automatically connect to the first open
network (without wireless security) that they discover.
Does your wireless device or computer appear on the Network Map screen? If it does,
it is connected to the network.
If you are not sure what the network name (SSID) or password is, look on the label on
your gateway.
Enable Wireless Gateway Radio. This setting enables the wireless interface. To turn off
the wireless interface, clear the Enable Wireless Gateway Radio check box, and click the
Apply button.
Enable SSID Broadcast. This feature allows the gateway to broadcast its SSID so that
wireless stations can see this wireless name (SSID) in their scanned network lists. This
check box is selected by default. To turn off the SSID broadcast, clear this check box, and
click the Apply button.
Name (SSID). The SSID is also known as the wireless network name. Enter a
32-character (maximum) name in this field. This field is case-sensitive. The default SSID
is randomly generated, and best practice is not to change the SSID.
Channel. This setting is the wireless channel that the gateway uses. Choose a value
from 1 through 13. (For products in the North America market, only Channels 1 through
11 can be operated.) Do not change the channel unless you experience interference
(such as lost connections or slow data transfers). If any interference happens, experiment
with different channels to see which is the best.
Mode. Up to 145 Mbps is the default and allows 802.11n and 802.11g wireless devices to
join the network. g & b supports up to 54 Mbps. The 300 Mbps setting allows 802.11n
devices to connect at this speed.
2. In the password field that displays when you select a WPA security option, enter the network
key (password) that you want to use. It is a text string from 8 to 63 characters.
3. Click the Apply button.
Network Map
You can view all computers or devices that are currently connected to your network here.
Wired devices are connected to the gateway with Ethernet cables. Wireless devices have
joined the wireless network. The following information displays:
IP Address. The IP address that the gateway assigned to this device when it joined
the network. This number can change when a device disconnects and then rejoins
the network.
Voice Status
You can review specific details about the voice connection.
MTA Provision Status. The gateway status. The values can be Operational, No Security
Association, Disconnected, or N/A. This status applies to line 1.
MTA FQDN. The fully qualified domain name (FQDN). The Internet service provider
assigns this name.
MTA Telephony Signaling. This value is set to Media Gateway Control Protocol
(MGCP), a way to set up voice calls.
3.
This chapter explains the features available from the genie ADVANCED Home screen. This
chapter contains the following sections:
Internet Setup
WAN Setup
LAN Setup
Some selections on the ADVANCED Home screen are described in separate chapters:
21
Internet Setup
The Internet Setup screen is where you view or change ISP information.
Get Dynamically from ISP. If you log in to your service or your ISP did not provide you
with a fixed IP address, the gateway finds an IP address for you automatically when you
connect. Select this radio button.
Use Static IP Address. If you have a fixed (or static) IP address, your ISP has provided
you with the required information. Select this radio button and type the IP address, IP
subnet mask, and gateway IP address in the correct fields.
For example:
-
Domain Name Server (DNS) Address. The DNS server is used to look up site addresses
that are based on their names.
Use These DNS Servers. If your ISP gave you one or two DNS addresses, select this
radio button and type the primary and secondary addresses.
Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your
ISP automatically assigns this address.
Note: If you get address not found errors when you go to a website, it is
likely that your DNS servers are not set up correctly. Contact your
ISP to get the DNS server addresses.
WAN Setup
The WAN Setup screen lets you configure a DMZ (demilitarized zone) server and enable the
gateway to respond to a ping on the WAN (Internet) port.
Disable Port Scan and DoS Protection. DoS protection protects your LAN against
denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop
Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. Disable
this feature only in special circumstances.
Default DMZ Server. The default DMZ server feature is helpful when you are using
some online games and videoconferencing applications that are incompatible with
Respond to Ping on Internet Port. If you want the gateway to respond to a ping
from the Internet, select this check box. Use this feature only as a diagnostic tool
because it also allows your gateway to be discovered. Do not select this check box
unless you have a specific reason.
MTU Size (in bytes). The normal MTU (maximum transmit unit) value for most
Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some
ISPs, you might need to reduce the MTU. Reduce the MTU only if you are sure that it
is necessary for your ISP connection.
Disable SIP/ALG. The Session Initiation Protocol (SIP) Application Level Gateway
(ALG) is disabled by default, which is useful when you are running certain
applications. To enable SIP/ALG and optimize VoIP phone calls that use the SIP,
clear the check box.
WARNING:
DMZ servers pose a security risk. A computer that is designated
as the default DMZ server loses much of the protection of the
firewall and is exposed to exploits from the Internet. If
compromised, the DMZ server computer can be used to attack
other computers on your network.
The gateway discards incoming traffic from the Internet unless the traffic is a response to one
of your local computers or a service that you have configured in the Port Forwarding/Port
Triggering screen. Instead of discarding this traffic, you can have it forwarded to one
computer on your network. This computer is called the default DMZ server.
LAN Setup
The LAN Setup screen allows you to configure LAN services such as the IP address of the
gateway and DHCP. The TCP/IP and DHCP default values work fine in most cases.
The gateway is shipped preconfigured to use private IP addresses on the LAN side and to act
as a DHCP server. The default LAN IP configuration of the gateway is:
These addresses are part of the designated private address range for use in private networks
and are suitable for most applications. If your network requires you to use a different IP
addressing scheme, make those required changes in the LAN Setup screen.
Note: If you change the LAN IP address of the gateway while connected
through the browser, you are disconnected. Open a new connection
to the new IP address and log in again.
2. Enter the settings that you want to customize. These settings are described in the following
sections.
3. Click the Apply button.
4. Your changes are saved.
IP Subnet Mask. The LAN subnet mask of the gateway. When combined with the IP
address, the IP subnet mask allows a device to know the following:
-
DHCP IP Pool
By default, the gateway functions as a DHCP server. This capability allows the gateway to
assign IP, DNS server, and default gateway addresses to all computers connected to the LAN
that is connected to the gateway. The assigned default gateway address is the LAN address
of the gateway. The gateway assigns IP addresses to the attached computers from a pool of
addresses that are specified in this screen. Each pool address is tested before it is assigned
to avoid duplicate addresses on the LAN. For most applications, the default DHCP and
TCP/IP settings of the gateway are satisfactory.
You can specify the pool of IP addresses that can be assigned by setting the starting IP
address and ending IP address. These addresses are part of the same IP address subnet as
the LAN that is connected to the gateway. Using the default addressing scheme, you define a
range between 192.168.0.2 and 192.168.0.254. You can save part of the range for devices
with fixed addresses.
Specify the following settings:
Starting IP Address. Specify the start of the range for the pool of IP addresses in the
same subnet as the gateway.
Ending IP Address. Specify the end of the range for the pool of IP addresses in the
same subnet as the gateway.
The gateway delivers the following parameters to any LAN device that requests DHCP:
Subnet mask
DNS server address (if you entered a primary DNS address in the Internet Setup screen;
otherwise, the LAN IP address of the gateway)
Address Reservation
When you specify a reserved IP address for a computer on the LAN, that computer always
receives the same IP address each time it accesses the DHCP server of the gateway. Assign
reserved IP addresses to computers or servers that require permanent IP settings.
1. Select ADVANCED > Setup > LAN Setup.
The following screen displays:
3. In the IP Address field, type the IP address to assign to the computer or server. (Choose an
IP address from the LAN subnet of the gateway, such as 192.168.0.x.)
4. Type the MAC address of the computer or server.
Tip: If the computer is already on your network, copy its MAC address from
the Attached Devices screen and paste it here.
4.
Security
K eeping un wan ted co nt ent out of y our net wor k
This chapter explains how to prevent objectionable content from reaching the computers and
other devices that are connected to your network.
This chapter includes the following sections:
Schedule Blocking
29
Per Schedule. Turn on keyword blocking according to the Schedule screen settings.
(See Schedule Blocking on page 32.)
3. In the keyword field, enter a keyword or domain and click the Add URL Keyword button.
The keyword list supports up to 32 entries. Here are some sample entries:
Specify .com if you want to allow only sites with domain suffixes such as .edu or .gov.
Security
30
To block services:
1. Select ADVANCED > Security > Block Services.
Security
31
5. From the Service Type list, select the application or service to block.
The list already displays several common services, but you are not limited to these
choices. To add any additional services or applications that do not already display, select
User Defined.
6. If you select User Defined, select the protocol, and enter the name and the range of port
numbers of the service.
If you select a known service, these fields are filled in automatically.
If you know that the application uses either TCP or UDP, select the appropriate protocol. If
you are not sure, select TCP/UDP.
7. Enter a name for this service type in the Service Type/User Defined field.
8. Enter the starting and ending port numbers. If the application uses a single port number,
enter that number in both fields.
9. Enter the IP address of the computer that you want to block.
10. Click the Add button.
Your Block Services Setup selections are enabled.
Schedule Blocking
You can specify the days and time that you want to block Internet access.
To schedule blocking:
1. Select ADVANCED > Security > Schedule.
Security
32
Time of Day to Block. Select a start and end time in 24-hour format, or select All
Day for 24-hour blocking.
Security
33
5.
Administration
Managing yo ur n etwo r k
This chapter describes the gateway settings for administering and maintaining your gateway and
home network.
This chapter includes the following sections:
Router Mode
Logs
Network Map
Back Up Settings
Set Password
Diagnostics
Wireless Channel
34
Cable Information
The following information displays:
Firmware Version. The version of the gateway firmware. It changes if you upgrade the
gateway firmware.
Cable Modem Serial Number. The serial number of the cable modem.
CM certificate. The status of the cable modem certificate. If Not installed displays as the
status, contact your Internet service provider.
LAN Port.
MAC Address. The Media Access Control address. This address is the unique
physical address that the Ethernet (LAN) port of the gateway uses.
IP Address. The IP address that the Ethernet (LAN) port of the gateway uses. The
default is 192.168.0.1.
DHCP Server. Identifies whether the built-in DHCP server of the gateway is active for
the LAN-attached devices.
To reset the admin and password to the default values, click the Factory Reset button.
To reboot the gateway, click the Reboot button.
Administration
35
Internet Port
The following information about the WAN Internet port displays:
Name (SSID). The wireless network name (SSID) that the gateway uses.
Region. The geographic region where the gateway is being used. It is illegal to use the
wireless features of the gateway in some parts of the world.
Channel. The operating channel of the wireless port being used. The default channel is
Auto. When Auto is selected, the gateway finds the best operating channel available.
Wireless AP. Indicates whether the radio feature of the gateway is enabled. If this feature
is not enabled, the Wireless LED on the front panel is off.
Wireless Isolation. Indicates that the wireless clients can connect to the Internet.
However, they cannot access each other or access Ethernet devices on the network.
Wi-Fi Protected Setup. Indicates whether Wi-Fi Protected Setup is configured for this
network.
Administration
36
Router Mode
No. The CG3700EMR device works as a bridge and devices obtain their IP
addresses from the Internet service provider.
Logs
The log is a detailed record of the websites you have accessed or attempted to access. Up to
256 entries are stored in the log. Log entries display only when keyword blocking is enabled.
No log entries are made for the trusted LAN client.
Administration
37
Description. The name and source IP of the site or group that visited.
Last Occurance. The date and time the log entry was recorded.
Target. The name or IP address of the website or news group visited or to which access
was attempted.
Source. The IP address of the initiating device for this log entry.
2. To control the information included in the log, click any of the following check boxes:
Attempted access to allowed sites.
Administration
38
Network Map
The network map displays information about devices connected to your network.
Interface. The way the device is connected: Ethernet1, Ethernet2, or WiFi interface.
Back Up Settings
The configuration settings of the wireless cable gateway are stored within the gateway in a
configuration file. You can back up (save) this file to your computer, restore it, or reset it to
the factory default settings.
Administration
39
Erase
Under some circumstances (for example, if you move the gateway to a different network or if
you have forgotten the password), you might want to erase the configuration and restore the
factory default settings.
Administration
40
Erase sets the user name to admin, the password to password, and the LAN IP address
to 192.168.0.1, and enables the DHCP of the gateway.
Set Password
This feature allows you to change the default password that is used to log in to the gateway
with the user name admin.
This gateway password is not the same as the password for wireless access. The label on
your gateway shows your unique wireless network name (SSID) and password for wireless
access (see Gateway Label on page 10).
Administration
41
Diagnostics
From the Diagnostics screen, you can run ping, traceroute, DS throughput, and US
throughput utilities.
Ping Utility
Ping is an administration utility that tests whether a computer on the network is reachable and
measures the time it takes messages sent from the originating device to reach a destination
computer and return.
Administration
42
Traceroute Utility
To display the route and measure transit delays of packets across a network, run the
traceroute utility.
Administration
43
Max Hops. The maximum number of hops to allow when tracing the route.
DS Throughput Utility
To display the speed test for downstream traffic, run the DS throughput utility.
Administration
44
US Throughput Utility
To display the speed test for upstream traffic, run the US throughput utility.
Administration
45
Wireless Channel
You can use the Wireless Channel screen to view wireless networks, or access points, in
your area and to select and join a wireless network.
Administration
46
From this screen, you can view wireless access points in use in your area.
Your network is shown in blue. Yellow shows other networks in your area. Many countries
and geographic locations have laws or guidelines about which channels can be used.
Depending on your location, some channels might not be available.
If many wireless networks at your location use the same channel as your wireless network,
you might experience interference. You can change the channel to avoid the interference.
Administration
47
Administration
48
6.
Advanced Settings
F ine-t un ing yo ur n etw or k
This chapter describes the advanced features of your gateway. The information requires a solid
understanding of networking concepts. It is for people who want to set up the gateway for unique
situations such as when remote access from the Internet by IP or domain name is needed.
This chapter includes the following sections:
Dynamic DNS
Remote Management
49
Disable Gateways PIN. The PIN function might temporarily be disabled when the
gateway detects suspicious attempts to break into the gateways wireless settings by
using the gateways PIN through WPS. You can manually enable the PIN function by
clearing the Disable Gateways PIN check box.
Keep Existing Wireless Settings. By default, the Keep Existing Wireless Settings check
box is selected. Best practice is to leave this check box selected.
If you clear this check box, the next time a new wireless client uses WPS to connect to
the gateway, the gateway wireless settings change to an automatically generated random
SSID and security key.
WMM. WMM (Wireless Multimedia) is a subset of the 802.11e standard. WMM allows
wireless traffic to have a range of priorities, depending on the kind of data.
Time-dependent information, like video or audio, has a higher priority than normal traffic.
For WMM to function properly, wireless clients must support WMM also.
WMM Support. Click this check box to enable WMM support for the 2.4 GHz channel.
WMM Support (5 GHz a/n). Click this check box to enable WMM support for the 5
GHz channel.
Advanced Settings
50
Advanced Settings
51
This screen displays a list of currently active wireless computers and devices and their
Ethernet MAC addresses.
5. If the wireless computer or device you want displays in the list, select its radio button to
capture its MAC address. Otherwise, type its MAC address.
The MAC address is found on the computer or device.
6. If no device name displays, type a descriptive name for the computer or device that you are
adding.
7. Click the Add button.
The Wireless Card Access List screen displays.
8. Click the Apply button.
To allow remote computers on the Internet to access a server on your local network.
To allow certain applications and games to work correctly when your gateway does not
recognize their replies.
Your gateway provides two features for creating these exceptions: port forwarding and port
triggering. The next sections provide background information to help you understand how
port forwarding and port triggering work, and the differences between the two.
Advanced Settings
52
Destination port number. 80, which is the standard port number for a web server
process.
3. Your gateway creates an entry in its internal session table describing this communication
session between your computer and the web server at www.example.com. Before sending
the web page request message to www.example.com, your gateway stores the original
information and then modifies the source information in the request message, performing
Network Address Translation (NAT):
The source address is replaced with the public IP address of your gateway. This step
is necessary because your computer uses a private IP address that is not globally
unique and cannot be used on the Internet.
The source port number is changed to a number that is chosen by the gateway, such
as 33333. This step is necessary because two computers could independently be
using the same session number.
Your gateway then sends this request message through the Internet to the web server at
www.example.com.
4. The web server at www.example.com composes a return message with the requested web
page data. The return message contains the following address and port information. The
web server then sends this reply message to your gateway:
Source address. The IP address of www.example.com.
Source port number. 80, which is the standard port number for a web server
process.
5. When your gateway receives the incoming message, it checks its session table for an active
session for port number 33333. Finding an active session, the gateway then modifies the
message to restore the original address information that is replaced by NAT. Your gateway
sends this reply message to your computer, which displays the web page from
www.example.com. The message now contains the following address and port information:
Source address. The IP address of www.example.com.
Source port number. 80, which is the standard port number for a web server
process.
Destination port number. 5678, which is the browser session that made the initial
request.
6. When you finish your browser session, your gateway eventually detects a period of inactivity
in the communications. Your gateway then removes the session information from its session
table, and incoming traffic is no longer accepted on port number 33333.
Advanced Settings
53
as FTP and IRC servers) send replies to multiple port numbers. Using the port triggering
function of your gateway, you can tell the gateway to open more incoming ports when a
particular outgoing port originates a session.
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at
destination port 6667. The IRC server not only responds to your originating source port, but
also sends an identify message to your computer on port 113. Using port triggering, you can
tell the gateway, When you initiate a session with destination port 6667, you must allow
incoming traffic also on port 113 to reach the originating computer. Using steps similar to the
preceding example, the following sequence shows the effects of the port triggering rule you
have defined:
1. You open an IRC client program to start a chat session on your computer.
2. Your IRC client composes a request message to an IRC server using a destination port
number of 6667, the standard port number for an IRC server process. Your computer then
sends this request message to your gateway.
3. Your gateway creates an entry in its internal session table describing this communication
session between your computer and the IRC server. Your gateway stores the original
information, performs Network Address Translation (NAT) on the source address and port,
and sends this request message through the Internet to the IRC server.
4. Noting your port triggering rule and having observed the destination port number of 6667,
your gateway creates an additional session entry to send any incoming port 113 traffic to
your computer.
5. The IRC server sends a return message to your gateway using the NAT-assigned source
port (as in the previous example, say port 33333) as the destination port. The IRC server
also sends an identify message to your gateway with destination port 113.
6. When your gateway receives the incoming message to destination port 33333, it checks its
session table for an active session for port number 33333. Finding an active session, the
gateway restores the original address information that is replaced by NAT and sends this
reply message to your computer.
7. When your gateway receives the incoming message to destination port 113, it checks its
session table and finds an active session for port 113 associated with your computer. The
gateway replaces the destination IP address of the message with the IP address of your
computer and forwards the message to your computer.
8. When you finish your chat session, your gateway eventually senses a period of inactivity in
the communications. The gateway then removes the session information from its session
table, and incoming traffic is no longer accepted on ports 33333 or 113.
To configure port triggering, you need to know which inbound ports the application needs.
Also, you need to know the number of the outbound port that triggers the opening of the
inbound ports. You can usually find this information by contacting the publisher of the
application or user groups or newsgroups.
Note: Only one computer at a time can use the triggered application.
Advanced Settings
54
Destination port number. 80, which is the standard port number for a web server
process.
The remote computer then sends this request message through the Internet to your
gateway.
2. Your gateway receives the request message and looks in its rules table for any rules
covering the disposition of incoming port 80 traffic. Your port forwarding rule specifies that
incoming port 80 traffic is forwarded to local IP address 192.168.0.123. Therefore, your
gateway modifies the destination information in the request message:
The destination address is replaced with 192.168.0.123.
Your gateway then sends this request message to your local network.
3. Your web server at 192.168.0.123 receives the request and composes a return message
with the requested web page data. Your web server then sends this reply message to your
gateway.
4. Your gateway performs Network Address Translation (NAT) on the source IP address, and
sends this request message through the Internet to the remote computer, which displays the
web page from www.example.com.
To configure port forwarding, you need to know which inbound ports the application needs.
Usually you can find this information by contacting the publisher of the application or the
relevant user groups and newsgroups.
Advanced Settings
55
Port triggering is used by any computer on your network, although only one computer can
use it at a time.
With port triggering, the gateway does not need to know the computers IP address in
advance. The IP address is captured automatically.
Port forwarding requires that you specify the computers UP address during configuration,
and the UP address can never change.
Port triggering requires specific outbound traffic to open the inbound ports, and the
triggered ports are closed after a period of no activity.
Advanced Settings
56
Advanced Settings
57
If the application uses a range of ports, enter the ending port number of the range in
the External Ending Port field.
7. In the Internal Starting Port fields, enter the beginning port number of the internal LAN
device.
If the application uses a single port, enter the same port number in the Internal Ending
Port field.
If the application uses a range of ports, enter the ending port number of the range in
the Internal Ending Port field.
8. In the Internal IP Address field, enter the IP address of your local computer that provides this
service.
9. In the External IP Address field, select Any (the default) to allow any device access, or enter
the IP address of the outside device.
10. Click the Apply button.
The service displays in the list in the Port Forwarding/Port Triggering screen.
Advanced Settings
58
More than one local computer needs port forwarding for the same application (but not
simultaneously).
An application opens incoming ports that are different from the outgoing port.
When port triggering is enabled, the gateway monitors outbound traffic looking for a specified
outbound trigger port. When the gateway detects outbound traffic on that port, it remembers
the IP address of the local computer that sent the data. The gateway then temporarily opens
the specified incoming port or ports, and forwards incoming traffic on the triggered ports to
the triggering computer.
Advanced Settings
59
While port forwarding creates a static mapping of a port number or range to a single local
computer, port triggering can dynamically open ports to any computer that needs them and
can close the ports when they are no longer needed.
To set up port triggering, you must know which inbound ports the application needs. Also,
you must know the number of the outbound port that triggers the opening of the inbound
ports. You can usually find this information by contacting the publisher of the application or
user groups or newsgroups.
Advanced Settings
60
6. In the Service Name field, type a descriptive service name. No spaces are allowed in this
field.
7. In the Service User list, select Any (the default) to allow any computer on the Internet to use
this service. Otherwise, select Single address, and enter the IP address of one computer to
restrict the service to a particular computer.
8. Select the service type, either TCP or UDP or TCP/UDP (both). If you are not sure, select
TCP/UDP.
9. In the Triggering Starting Port field, enter the number of the outbound traffic port that causes
the inbound ports to open.
If the application uses a single port, enter the same port number in the Triggering
Ending Port field.
If the application uses a range of ports, enter the ending port number of the range in
the Triggering Ending Port field.
10. In the Triggering Ending Port field, enter the number of the outbound traffic port that causes
the inbound ports to close.
11. Enter the inbound connection port information in the Starting Port, and Ending Port fields.
12. Click the Apply button.
The service displays in the Port Triggering Portmap Table.
Dynamic DNS
If your Internet service provider (ISP) gave you a permanently assigned IP address, you can
register a domain name and have that name linked with your IP address by public Domain
Name Servers (DNS). However, if your Internet account uses a dynamically assigned IP
address, you do not know in advance what your IP address is, and the address can change
frequently. In this case, you can use a commercial Dynamic DNS service. This type of service
Advanced Settings
61
lets you register your domain to their IP address and forwards traffic directed at your domain
to your frequently changing IP address.
If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), the Dynamic
DNS service does not work because private addresses are not routed on the Internet.
Your gateway contains a client that can connect to the Dynamic DNS service that
DynDNS.org provided. First visit their website at http://www.dyndns.org and obtain an
account and host name that you configure in the gateway. Then, whenever your
ISP-assigned IP address changes, your gateway automatically contacts the Dynamic DNS
service provider, logs in to your account, and registers your new IP address. If your host
name is hostname, for example, you can reach your gateway at http://hostname.dyndns.org.
2. Register for an account with one of the Dynamic DNS service providers whose URLs display
in the Service Provider list.
3. Select the Use a Dynamic DNS Service check box.
4. Select the URL of your Dynamic DNS service provider.
If your Dynamic DNS service provider is DynDNS.org, for example, select
www.dyndns.org.
5. Type the host name (or domain name) that your Dynamic DNS service provider gave you.
6. Type the user name for your Dynamic DNS account.
This name is the name that you use to log in to your account, not your host name.
7. Type the password (or key) for your Dynamic DNS account.
8. Click the Apply button.
Your configuration is saved.
Advanced Settings
62
Remote Management
The remote management feature lets you access your gateway over the Internet to view or
change its settings.
To allow access from a single IP address on the Internet, select the Only This
Computer radio button. Enter the IP address that will be allowed access.
To allow access from a range of IP addresses on the Internet, select the IP Address
Range radio button. To define the allowed range, enter a beginning and ending IP
address.
To allow access from any IP address on the Internet, select the Everyone radio
button.
Advanced Settings
63
4. Specify the port number for accessing the web management interface.
Normal web browser access uses the standard HTTP service port 80. For greater
security, enter a custom port number for the remote web management interface. Choose
a number from 1024 to 65535, but do not use the number of any common service port.
The default is 8080, which is a common alternate for HTTP.
5. Click the Apply button.
Your changes take effect.
When you access your gateway from the Internet, type your gateways WAN IP address into
your browsers address or location field followed by a colon (:) and the custom port number.
For example, if your external address is 134.177.0.123 and you use port number 8080, enter
http://134.177.0.123:8080 in your browser.
Advanced Settings
64
Advertisement Time to Live. The time to live for the advertisement is measured in
hops (steps) for each UPnP packet sent. The number of hops can range from 1 to
255. The default value for the advertisement time to live is four hops, which is fine for
most home networks. If you notice that some devices are not being updated or
reached correctly, you should increase this value.
Advanced Settings
65
7.
Troubleshooting
F inding an d fixing co m m on is s ues
This chapter provides information about troubleshooting your gateway. This chapter contains the
following sections:
66
Action
All LEDS are off when the gateway Make sure that the power cord is properly connected to your gateway
is plugged in.
and that the power supply adapter is properly connected to a
functioning power outlet.
Check that you are using the 12 V-DC power adapter from NETGEAR
for this product.
If the error persists, you have a hardware problem.
All LEDs stay on.
Check the Ethernet connection between the computer and the gateway as described in
the previous section.
Troubleshooting
67
Make sure that the IP address of your computer is on the same subnet as the gateway. If
you are using the recommended addressing scheme, the address of your computer is in
the range of 192.168.0.10 to 192.168.0.254.
If the IP address of your gateway has been changed and you do not know the current IP
address, clear the configuration of the gateway to its factory defaults. This operation sets
the IP address of the gateway to 192.168.0.1. For more information, see Factory Default
Settings on page 72.
Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using
Internet Explorer, click the Refresh button to make sure that the Java applet is loaded.
Make sure that you are using the correct login information. The gateway user name is
admin and the default password is password. Make sure Caps Lock is off when you enter
this information.
If the gateway does not save changes you have made, check the following:
When entering configuration settings, be sure to click the Apply button before moving to
another screen, or your changes are lost.
Click the Refresh or Reload button in the web browser. The changes have occurred, but
the web browser might be caching the old configuration.
Troubleshooting
68
easily troubleshoot a TCP/IP network by using the ping utility in your computer or
workstation.
Make sure that the LAN port LED is on. If the LED is off, see Troubleshoot with
LEDs on page 67.
Check to see if the corresponding LEDs are on for your network interface card
and the hub ports (if any) that are connected to your workstation and gateway.
Verify that the Ethernet card driver software and TCP/IP software are both
installed and configured on your computer or workstation.
Verify that the IP address for your gateway and your workstation are correct and
that the addresses are on the same subnet.
Troubleshooting
69
Check that your computer has the IP address of your gateway listed as the default
gateway. If the IP configuration of your computer is assigned by DHCP, this
information is not visible in the Network Control Panel of your computer.
Check that the network address of your computer (the portion of the IP address
specified by the netmask) is different from the network address of the remote device.
If your ISP assigned a host name to your computer, enter that host name as the
account name in the Internet Setup screen.
Troubleshooting
70
A.
Supplemental Information
Technical Specifications
71
Local network
(LAN)
Firewall
http://192.168.0.1
admin / password
LAN IP
192.168.0.1
Subnet mask
255.255.255.0
DHCP server
Enabled
192.168.0.2
192.168.0.254
Inbound communication from the Disabled (except traffic on port 80, the HTTP port)
Internet
Outbound communication to the
Internet
Enabled (all)
Disabled
Internet
connection
Wireless
Wireless communication
Enabled
SSID name
Security
WPA/WPA2.
The default WPA/WPA2 passphrase is on the
product label.
Broadcast SSID
Enabled
Supplemental Information
72
Transmission speed
Auto*
Country/region
EU
RF channel
Auto
Operating mode
n, g, and b
Data rate
Best
Output power
Full
Access point
Enabled
Authentication type
Open System
*. Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput will
vary. Network conditions and environmental factors, including volume of network traffic, building materials
and construction, and network overhead, may lower actual data throughput rate.
Technical Specifications
The following table describes the technical specifications for the gateway.
Table 4. Technical specifications
Technical Specifications
Network protocol and
standards compatibility
Data and routing protocols: TCP/IP, DHCP server and client, DNS relay, NAT
(many-to-one)
Power adapter
Physical specifications
Environmental
Interface
Supplemental Information
73
B.
Notification of Compliance
N E T GEAR du al b an d - wir eles s
74
FCC Caution
Any changes or modifications not expressly approved by the party responsible for compliance could void the
user's authority to operate this equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This
device may not cause harmful interference, and (2) this device must accept any interference received, including
interference that may cause undesired operation.
For product available in the USA and Canada market, only channel 1~11 can be operated. Selection of other
channels is not possible.
Pour les produits disponibles aux tats-Unis / Canada du march, seul le canal 1 11 peuvent tre exploits.
Slection d'autres canaux n'est pas possible.
This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna or
transmitter except in accordance with FCC multi-transmitter product procedures.
Cet appareil et son antenne (s) ne doit pas tre co-localiss ou fonctionnement en association avec une autre
antenne ou transmetteur.
For operation within a 5.15 ~ 5.25 GHz/5.47 ~ 5.725 GHz frequency range, it is restricted to an indoor
environment. The band from 5600-5650 MHz will be disabled by the software during the manufacturing and
cannot be changed by the end user. This device meets all the other requirements specified in Part 15E, Section
15.407 of the FCC Rules.
Devices will not permit operations on channels 120-132 for 11a and 11n/a which overlap the 5600 - 5650 MHz
band.
Industry Canada
This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
Ce dispositif est conforme la norme CNR-210 d'Industrie Canada applicable aux appareils radio exempts de licence.
Son fonctionnement est sujet aux deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage
prjudiciable, et (2) ce dispositif doit accepter tout brouillage reu, y compris un brouillage susceptible de provoquer un
fonctionnement indsirable.
The device could automatically discontinue transmission in case of absence of information to transmit, or operational
failure. Note that this is not intended to prohibit transmission of control or signaling information or the use of repetitive
codes where required by the technology.
Le dispositif pourrait automatiquement cesser d'mettre en cas d'absence d'informations transmettre, ou une
dfaillance oprationnelle. Notez que ce n'est pas l'intention d'interdire la transmission des informations de contrle ou
de signalisation ou l'utilisation de codes rptitifs lorsque requis par la technologie.
Notification of Compliance
75
Dynamic Frequency Selection (DFS) for devices operating in the bands 5250- 5350 MHz,5470-5600 MHz and
5650-5725 MHz.
Slection dynamique de frquences (DFS) pour les dispositifs fonctionnant dans les bandes 5250-5350 MHz,
5470-5600 MHz et 5650-5725 MHz.
The maximum antenna gain permitted (for devices in the bands 5250-5350 MHz and 5470-5725 MHz) to comply with
the e.i.r.p. limit.
Le gain maximal d'antenne permis pour les dispositifs utilisant les bandes 5250-5350 MHz et 5470-5725 MHz doit se
conformer la limite de p.i.r.e.
Users should also be advised that high-power radars are allocated as primary users (i.e. priority users) of the bands
5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN
devices.
De plus, les utilisateurs devraient aussi tre aviss que les utilisateurs de radars de haute puissance sont dsigns
utilisateurs principaux (c.--d., qu'ils ont la priorit) pour les bandes 5250-5350 MHz et 5650-5850 MHz et que ces
radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL.
The device could automatically discontinue transmission in case of absence of information to transmit, or operational
failure. Note that this is not intended to prohibit transmission of control or signaling information or the use of repetitive
codes where required by the technology.
Le dispositif pourrait automatiquement cesser d'mettre en cas d'absence d'informations transmettre, ou une
dfaillance oprationnelle. Notez que ce n'est pas l'intention d'interdire la transmission des informations de contrle ou
de signalisation ou l'utilisation de codes rptitifs lorsque requis par la technologie.
Caution:
The device for the band 5150-5250 MHz is only for indoor usage to reduce po-tential for harmful interference to
co-channel mobile satellite systems.
High power radars are allocated as primary users (meaning they have priority) of 5250-5350 MHz and 5650-5850 MHz
and these radars could cause interference and/or damage to LE-LAN devices.
Avertissement:
Le dispositif fonctionnant dans la bande 5150-5250 MHz est rserv uniquement pour une utili-sation l'intrieur afin
de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux.
Les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., qu'ils ont la priorit) pour
les bandes 5250-5350 MHz et 5650-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages
aux dispositifs LAN-EL.
Notification of Compliance
76
Microwave ovens
30 feet / 9 meters
20 feet / 6 meters
40 feet / 12 meters
20 feet / 6 meters
30 feet / 9 meters
Bluetooth devices
20 feet / 6 meters
ZigBee
20 feet / 6 meters
Notification of Compliance
77