N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User M anua l 350 East Plumeria Drive San Jose, CA 95134 USA March 2012 202-11035-01 v1.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 © 2012 NETGEAR, Inc. All rights reserved No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc. Technical Support Thank you for choosing NETGEAR.
Table of Contents Chapter 1 Router Internet Setup Using the Setup Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Log In to Your N300 Wireless Modem Router . . . . . . . . . . . . . . . . . . . . . . . 8 Use the Setup Wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 View or Manually Configure Your ISP Settings . . . . . . . . . . . . . . . . . . . . . 10 Configure ADSL Settings . . . . . . . . . . . . . . . . . . . . . . . .
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Set the Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Chapter 4 Network Maintenance Upgrade the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 Manually Check for Firmware Upgrades . . . . . . . . . . . . . . . . . . . . . . . . 51 View N300 Wireless Modem Router Status Information . . . . . . . . . . . . . . 53 Connection Status . . . . . . . . . . .
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Activate a VPN Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94 Verify the Status of a VPN Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Deactivate a VPN Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Delete a VPN Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 Set Up VPN Tunnels in Special Circumstances . . . . . . . . .
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Appendix B NETGEAR VPN Configuration Configuration Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144 Step-by-Step Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145 N300 Wireless Modem Router with FQDN to Gateway B . . . . . . . . . . . . 147 Configuration Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147 Step-by-Step Configuration . . .
1. Router Internet Setup 1 Con n e ct to the n et work This chapter describes how to configure your N300 Wireless Modem Router Internet connection. When you install your N300 wireless modem router using the Resource CD as described in the N300 Wireless Dual Band ADSL2+ Modem Router Installation Guide, these settings are configured automatically for you. This chapter provides instructions on how to log in to the N300 wireless modem router for further configuration.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 For installation instructions in a language other than English, see the language options on the Resource CD. Log In to Your N300 Wireless Modem Router You can log in to the N300 wireless modem router to view or change its settings. Links to the Knowledge Base and documentation are also available on the N300 wireless modem router main menu. Note: Your computer needs to be configured for DHCP.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Checking for Firmware Updates screen. After the initial configuration, the Firmware Update screen displays unless you previously cleared the Check for Updated Firmware Upon Log-in check box. Note: If the N300 wireless modem router is not configured (is in its factory default state) when you log in, the Setup Wizard displays. See Use the Setup Wizard on page 9.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To use the Setup Wizard: 1. From the top of the main menu, select Setup Wizard. 2. Under Auto-Detect Connection Type, select Yes and then click Next to proceed. 3. Enter your ISP settings, as needed. 4. At the end of the Setup Wizard, click Test to verify your Internet connection. If you have trouble connecting to the Internet, see Troubleshooting in Appendix A.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. From the N300 wireless modem router menu, select Basic Settings to display the Basic Settings screen: 3. Select Yes or No depending on whether your ISP requires a login. This selection changes the fields available on the Basic Settings screen. • Yes. If your ISP requires a login, select the encapsulation method. Enter the login name. If you want to change the login time-out, enter a new value in minutes. • No.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The fields displayed depend on whether or not your Internet connection requires a login. ISP does not require login ISP does require login Settings Description Does Your ISP Require a Login? • Yes • No These fields Account Name appear only if (If required) no login is Domain Name required. (If required) Enter the account name provided by your ISP. This might also be called the host name.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Settings Description Internet IP Address • Get Dynamically from ISP. Your ISP uses DHCP to assign your IP address. Your ISP automatically assigns these addresses. • Use Static IP Address. Enter the IP address that your ISP assigned. Also enter the IP subnet mask and the gateway IP address. The gateway is the N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2. • Use IP Over ATM (PoA).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Configure ADSL Settings Note: For information about how to install ADSL filters, see the Setup Manual. NETGEAR recommends that you use the Setup Wizard to automatically detect and configure your ADSL settings. This usually works fine.
2. Wireless Settings 2 Prote ct you r net work For a wireless connection, the SSID, also called the wireless network name, and the wireless security setting needs to be the same for the N300 wireless modem router and wireless computers or wireless adapters. NETGEAR strongly recommends that you use wireless security. WARNING: Computers can connect wirelessly at a range of several hundred feet. This can allow others outside of your immediate area to access your network.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 - SSID. The default 11N SSID for the N300 wireless modem router is NETGEAR-DualBand-N. The default 11G SSID is NETGEAR-2.4-G. - The wireless mode (802.11g or 802.11b) that each wireless adapter supports. - Wireless security option. To successfully implement wireless security, check each wireless adapter to determine which wireless security option it supports. See Manually Configure Your Wireless Settings on page 18.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Put the antenna in a vertical position to provide the best side-to-side coverage. Put the antenna in a horizontal position to provide the best up-and-down coverage. • If you are using multiple access points, it is better if adjacent access points use different radio frequency channels to reduce interference. The recommended channel spacing between adjacent access points is 5 channels (for example, use Channels 1 and 6, or 6 and 11).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Note: NETGEAR recommends WPA2 security because it is the strongest, and WPA security as the next strongest. WEP security is the weakest of these alternatives, but you might need to use WEP security to be able to link with your older wireless devices. Manually Configure Your Wireless Settings You can view or manually configure the wireless settings for the N300 wireless modem router in the Wireless Settings screen.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The settings for this screen are explained in the following table. Settings Description Name (11N SSID) Name (11G SSID) This is the wireless network name. Enter a 32-character (maximum) name in this field. This field is case-sensitive. In a setting where there is more than one wireless network, different wireless network names provide a means for separating the traffic.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Settings Description Security Options • Disable. You can use this setting to establish wireless connectivity before implementing wireless security. NETGEAR strongly recommends that you implement wireless security. • WEP (Wired Equivalent Privacy). Use encryption keys and data encryption for data security. Select 64-bit or 128-bit encryption. See Configure WEP Wireless Security on page 20. • WPA-PSK (Wi-Fi Protected Access Pre-Shared Key).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Note: NETGEAR recommends WPA2 security because it is the strongest, and WPA security as the next strongest. WEP security is the weakest of these alternatives, but you might need to use WEP security to be able to link with your older wireless devices. To configure WEP data encryption: 1. Log in to the N300 wireless modem router at its default LAN address of http://192.168.0.1 or http://www.routerlogin.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 6. Enter the encryption keys. You can manually or automatically program the four data encryption keys. These values need to be identical on all computers and access points in your network: • Passphrase. To use a passphrase to generate the keys, enter a passphrase, and click Generate. This automatically creates the keys. Wireless stations need to use the passphrase or keys to access the N300 wireless modem router.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To configure WPA or WPA2 in the N300 wireless modem router: 1. Log in to the N300 wireless modem router at its default LAN address of http://192.168.0.1 or http://www.routerlogin.net with its default user name of admin and default password of password, or using whatever user name, password, and LAN address you have chosen for the N300 wireless modem router. 2. From the main menu select Wireless Settings. 3.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Use Push 'N' Connect (WPS) to Configure Your Wireless Network If your wireless clients support Wi-Fi Protected Setup (WPS), you can use this feature to configure the N300 wireless modem router’s SSID and security settings and, at the same time, connect the wireless client securely and easily to the N300 wireless modem router.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 and default password of password, or using whatever LAN address and password you have set up. 2. On the N300 wireless modem router main menu, select Add WPS Client, and then click Next. The following screen displays: WPS button By default, the Push Button (recommended) radio button is selected. 3. Either press the N300 wireless modem router dome for a few seconds, which works as a WPS button, or click the onscreen button.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The first time you add a WPS client, make sure that the Keep Existing Wireless Settings check box on the WPS Settings screen is cleared. This is the default setting for the N300 wireless modem router, and allows it to generate the SSID and WPA/WPA2 security settings when it implements WPS.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Configure Advanced WPS Settings From the main menu, select Advanced > Wireless Settings to display the following screen: The WPS settings show the N300 wireless modem router PIN and the Disable Router’s PIN and Keep Existing Wireless Settings check boxes. By default, the Keep Existing Wireless Settings check box is cleared.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Add More WPS Clients Note: Your wireless settings remain the same when you add another WPS-enabled client, as long as the Keep Existing Wireless Settings check box is selected in the Advanced Wireless Settings screen (select Wireless Settings under Advanced in the N300 wireless modem router main menu).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 5. For information about how to view a list of all devices connected to your N300 wireless modem router (including wireless and Ethernet connected), see View a List of Attached Devices on page 57. Restrict Access to Your N300 Wireless Modem Router You can use the Advanced Wireless Settings screen to enable or disable the wireless router radio and the SSID broadcast.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Turn off wireless signal by schedule. To enable the turning off of the wireless function at various times, click Add a new period or Edit. The following screen appears: a. Select the start time and end time. Times are listed in 30-minute increments in the Start and End drop-down lists. b. For the Recurrence pattern, select either Daily or Select Days. • Daily. The rule applies on all days of the week. • Select Days.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Restricting access by MAC address. You can use the Wireless Card Access List to restrict access. See Restrict Access by MAC Address on page 35. Wireless Guest Networks A wireless guest network allows you to provide guests access to your wireless network without prior authorization of each individual guest. You can configure wireless guest networks and specify the security options for each wireless guest network.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To configure a wireless guest network: 1. In the main menu, under Setup, select either Wireless Guest Network g/b or Wireless Guest Network a, n. A Wireless Guest Network Settings screen similar to the following figure displays: 2. Make sure that the Enable Guest Network check box is selected. 3. You can specify whether the SSID broadcast is enabled, and whether you want to allow guests to access your local network. 4.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Live Parental Controls NETGEAR Live Parental Controls, powered by OpenDNS, is a router-based Web filtering solution available on NETGEAR Wireless-N router and gateway products. Designed to protect you from identity theft and scams, Live Parental Control blocks up to 50 categories of Internet content. Live Parental Controls is an excellent solution for keeping your family safe online, but like all Web filtering tools, it is not perfect.
3. Security Settings Ke ep u nwa nted c ontent out of you r net work 3 This chapter describes how to use the content filtering and reporting features of the N300 wireless modem router to protect your network.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 NETGEAR recommends that you change this password to a more secure password. The ideal password should contain no dictionary words from any language, and should be a mixture of both uppercase and lowercase letters, numbers, and symbols. Your password can be up to 30 characters. Change the Built-In Password To change the built-in password: 1. Log in to the N300 wireless modem router at its default LAN address of http://192.168.0.1 or http://www.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. From the main menu, under Advanced > Wireless Settings, and then click Setup Access List to display the Wireless Card Access List screen. The Wireless Station Access List screen displays a list of wireless computers that are allowed to connect to the N300 wireless modem router based on their MAC addresses. These wireless computers need to also have the correct SSID and wireless security settings to access the wireless network. 3.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 - If the wireless station is shown in the Available Wireless Stations list, click its radio button to select it, and then click Add. - To manually specify the wireless station, in the Add New Station Manually section, enter the name of the wireless station and its MAC address.The MAC address is 12 hexadecimal digits and can usually be found on the bottom of the wireless device. Click Add.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To block by schedule, be sure to specify a time period in the Schedule screen. For information about scheduling, see Schedule Blocking on page 46. Block all access to Internet browsing during a scheduled period by entering a dot (.) as the keyword, and then set a schedule in the Schedule screen. 3. Add a keyword or domain by entering it in the keyword field and clicking Add Keyword.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 From the main menu, select Security > Firewall Rules to display the following screen: • Outbound Services. This lists all existing rules for outbound traffic. If you have not defined any rules, only the default rule is listed. The default rule allows all outgoing traffic. • Inbound Services. This lists all existing rules for inbound traffic. If you have not defined any rules, only the default rule is listed.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To add or edit a rule from the Firewall Rules screen: 1. To edit a rule, select its radio button. To add a rule, click Add (it does not matter which radio button is selected). Depending on your selection, either the Outbound Services screen or Inbound Services screen is displayed. 2. From the Service list, select the service that you want to add or edit. 3. Enter the settings to specify the service as explained in the following table.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Field Outbound Rules Inbound Rules Send to LAN — Server (inbound services only) Enter the IP address of the computer or server on your LAN that will receive the inbound traffic covered by this rule. WAN Servers These settings determine which Internet locations are covered by the rule, based on their destination (WAN) IP address. Select the option you want: • Any. All local IP addresses are covered by this rule. • Address range.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Select Security > Port Forwarding in the main menu. The Port Forwarding screen displays: You can add a pre-set port forwarding rule or a custom rule. Add a Pre-set Port Forwarding Rule To add a pre-set port forwarding rule: 1. From the Port Forwarding screen, click Add to display the following screen: 2. In the Service Name list, select the rule. 3. Fill in the Server IP Address field, and then click Apply.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. Select the Custom Rule radio button, and the screen changes: 3. In the Service Name field, enter a name. 4. In the Service Type list, select the protocol. If you are unsure, select TCP/UDP. 5. Fill in the Starting Port and Ending Port fields. 6. In the Server IP Address field, enter the IP address of your local computer that will provide this service. 7. Click Apply. The service appears in the list.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Note: Only one computer can use a port triggering application at any time. After a computer has finished using a port triggering application, there is a short time-out period before the application can be used by another computer. To configure port triggering: 1. In the main menu, select Security > Port Triggering. The Port Triggering screen displays. 2. Specify the information for port triggering: • Service Name.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Block Access to Internet Services The N300 wireless modem router allows you to block the use of certain Internet services by computers on your network. This is called service blocking or port filtering. Services are functions performed by server computers at the request of client computers. For example, Web servers serve Web pages, time servers serve time and date information, and game hosts serve data about other players’ moves.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Schedule Blocking To schedule blocking: 1. From the main menu, select Security > Schedule. The Schedule screen displays. 2. Configure the schedule for blocking keywords and services. a. Days. Select days on which you want to apply blocking by selecting the appropriate check boxes. Select Every Day to select the check boxes for all days. Click Apply. b. Time of Day. Select a start and end time in 24-hour format. Select All Day for 24-hour blocking.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • To clear the log entries, click the Clear Log button. • To e-mail the log immediately, click the Send Log button. The following information is provided in the logs: Field Description Date and time The date and time the log entry was recorded. Source IP The IP address of the initiating device for this log entry. Target address The name or IP address of the website or newsgroup visited, or to which access was attempted.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Configure Email Alert and Web Access Log Notifications To receive logs and alerts by e-mail, you need to provide your e-mail account information: 1. From the main menu, select Security > E-mail. The E-mail screen displays. 2. To receive email logs and alerts from the N300 wireless modem router, select the Turn E-mail Notification On check box. a.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 If you select the Weekly, Daily, or Hourly option and the log fills up before the specified period, the log is automatically emailed to the specified email address. After the log is sent, the log is cleared from the N300 wireless modem router’s memory. If the N300 wireless modem router cannot e-mail the log file, the log buffer might fill up. In this case, the N300 wireless modem router overwrites the log and discards its contents. 5.
4. Network Maintenance 4 Ad m in i ster you r net work This chapter describes features to help you manage your N300 wireless modem router.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Note: To turn off the automatic firmware check at login, clear the Check for Updated Firmware Upon Log-in check box on the Router Upgrade screen. If the N300 wireless modem router discovers a newer version of firmware, the message on the left displays. If no new firmware is available, the message on the right displays. To upgrade, click Yes to allow the N300 wireless modem router to download and install the new firmware.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 4. From the main menu, select Maintenance > Router Upgrade to display the following screen: 5. Click Browse, and locate the firmware you downloaded (the file ends in .img or .chk). 6. Click Upload to send the firmware to the N300 wireless modem router. WARNING: When uploading firmware to the N300 wireless modem router, do not interrupt the Web browser by closing the window, clicking a link, or loading a new page.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 View N300 Wireless Modem Router Status Information To view N300 wireless modem router status and usage information, from the main menu, select Maintenance > Router Status. The Router Status screen displays. You can use the Show Statics and Connection Status buttons to view additional status information, as described in Connection Status on page 55 and Statistics on page 56. The following table explains Router Status screen fields.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Field ADSL Port LAN Port Modem Description MAC Address The Media Access Control address. This is the unique physical address being used by the Internet (WAN) port of the N300 wireless modem router. IP Address The IP address being used by the Internet (WAN) port of the N300 wireless modem router. If no address is shown, or is 0.0.0.0, the N300 wireless modem router cannot connect to the Internet.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Field Wireless Port Description Name (11N SSID) The 11N wireless network name (SSID) being used by the wireless port of the N300 wireless modem router. The default is NETGEAR-DualBand-N. Name (11G SSID) The 11G wireless network name (SSID) being used by the wireless port of the N300 wireless modem router. The default is NETGEAR-2.4-G. Region The geographic region where the N300 wireless modem router is being used.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Click the Close Window button to close the Connection Status screen. The following table describes the connection status settings. Item Description Connection Time The time elapsed since the last connection to the Internet through the ADSL port. Connecting to sender The connection status. Negotiation Success or Failed. Authentication Success or Failed.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The following table describes the N300 wireless modem router statistics. Item Description System Up Time The time elapsed since the N300 wireless modem router was last restarted. Port The statistics for the WAN (Internet) and LAN (Ethernet) ports. For each port, the screen displays: Status The link status of the port. TxPkts The number of packets transmitted on this port since reset or manual clear.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Manage the Configuration File The configuration settings of the N300 wireless modem router are stored within the unit in a configuration file. You can back up (save) this file to your computer, restore it, or reset it to the factory default settings. From the main menu, select Maintenance > Backup Settings. The following sections describe the available options.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 configuration and restore the factory default settings. After an erase, the N300 wireless modem router’s user name is admin, the password is password, the LAN IP address is 192.168.0.1, and its DHCP server is enabled. • To erase the configuration, click the Erase button in the Backup Settings screen.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Enable Remote Management Access The remote management feature allows you to upgrade or check the status of your N300 wireless modem router through the Internet. From the main menu, select Advanced > Remote Management. Note: Be sure to change the N300 wireless modem router’s default configuration password to a very secure password.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • To allow access from any IP address on the Internet, select Everyone. • To allow access from a range of IP addresses on the Internet, select IP Address Range. Enter a beginning and ending IP address to define the allowed range. • To allow access from a single IP address on the Internet, select Only This Computer. Enter the IP address that will be allowed access. 3. Specify the port number for accessing the management interface.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To monitor traffic on your router: 1. From the main menu, click Advanced > Traffic Meter. a. To enable the traffic meter, select the Enable Traffic Meter check box. 2. If you would like to record and restrict the volume of Internet traffic, select the Traffic volume control by radio button. You can select one of the following options for controlling the traffic volume: • No Limit. No restriction is applied when the traffic limit is reached.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • The Internet LED flashes green. • The Internet connection is disconnected and disabled. 6. Under Internet Traffic Statistics, set up monitoring the data traffic. 7. Click the Traffic Status button if you want a live update on Internet traffic status on your router. 8. Click Apply to save your settings.
5. USB Storage Net work storage to share files and back up data 5 This chapter describes how to access and configure a USB storage drive attached to your N300 wireless modem router. USB port Note: The USB port on the N300 wireless modem router can be used only to connect USB storage devices like flash drives or hard drives. Do not connect computers, USB modems, printers, CD drives, or DVD drives to the N300 wireless modem router USB port.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 USB Drive Requirements The N300 wireless modem router works with 1.0 and 1.1 (USB Full Speed) and 2.0 (USB High Speed) standards. The approximate USB bus speeds are shown in the following table. Bus Speed/Second USB 1.1 12 Mbits USB 2.0 480 Mbits Actual bus speeds can vary, depending on the CPU speed, memory, speed of the network, and other variables. The N300 wireless modem router should work with USB 2.0 or 1.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Share Photos with Friends and Family You can create your own central storage location for photos and multimedia. This eliminates the need to log in to (and pay for) an external photo sharing site. To share files with your friends and family: 1. Insert the USB drive into the N300 wireless modem router USB port either directly or with a USB cable.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. If you want to limit USB drive access to read only access, from the N300 wireless modem router USB Storage (Basic Settings) screen, click Edit a Network folder. In the Write Access field, select Edit, and then click Apply. Note: The password for admin is the same one that you use to access the N300 wireless modem router. By default it is password. 3. Enable FTP through the Internet in the USB Storage (Advanced Settings) screen.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 You can also type \\readyshare in the address field of your Web browser. Note: If you logged in to the N300 wireless modem router before you connected your USB device, you might not see your USB device in the N300 wireless modem router screens until you log out and then log back in again. The following table explains the fields and buttons in this screen. Fields and Buttons Description Network Device Name The default is \\readyshare.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Edit a Network Folder This process is the same from either the USB Storage (Basic Settings) screen or the USB Storage (Advanced Settings) screen. Click the Edit button to open the Edit Network Folder screen: You can use this screen to select a folder, to change the share name, or to change the read access or write access from All - no password to admin.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Configure USB Storage Advanced Settings To configure advanced USB settings, from the main menu, select USB > Advanced Settings. The USB Storage (Advanced Settings) screen displays: You can use this screen to specify access to the USB storage device. The following table explains the fields and buttons in the USB Storage (Advanced Settings) screen. Fields Description Network Device Name The default is readyshare.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Fields Available Network Folders Description Folder Name Full path of the used by the network folder. Volume name Volume name from the storage device (either USB drive or HDD). Total/Free Space The current utilization of the storage device. Share Name • You can click the name shown, or you can type it into the address field of your Web browser.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Media Server Settings You can set this modem router as a ReadyDLNA media server to enable the playback of videos, movies, and pictures on DLNA/UPnP AV-compliant media players such as the Xbox360, Playstation, and NETGEAR’s Digital Entertainer Live. ReadyDLNA means that this device serves media in DLNA-compatible form to DLNA/UPnP AV-compliant media players. To set up the media server: 1. From the main menu, select USB Storage > Media Server.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Specify Approved USB Devices You can specify which USB devices are approved for use when connected to the N300 wireless modem router: 1. From the main menu, select Advanced > USB Settings, and then click Approved Devices. The USB Drive Approved Settings screen displays: 2. Select the USB device from the Available USB Devices list. 3. Click Add. 4. Select the Allow only approved devices check box. 5. Click Apply so that your change goes into effect.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Locate the Internet Port IP Address The Router Status screen shows the Internet port IP address: 1. Log in to the N300 wireless modem router. 2. From the main menu, select Maintenance > Router Status. 3. Record the IP address that is listed for the Internet port. This is the IP address you can use to connect to the router remotely. Access the Router’s USB Drive Remotely Using FTP You can connect to the router’s USB drive using a Web browser: 1.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Configure Windows 98SE and Windows ME The easiest way to get to your network properties is to go to your desktop, right-click Network Neighborhood and then click from the main menu,. File and Printer Sharing for Microsoft Network should be listed. If it is not, click Add and follow the installation prompts. Note: If you have any questions about File and Printer Sharing, contact Microsoft for assistance.
6. Virtual Private Networking 6 This chapter describes how to use the virtual private networking (VPN) features of the N300 wireless modem router. VPN communications paths are called tunnels. VPN tunnels provide secure, encrypted communications between your local network and a remote network or computer.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Overview of VPN Configuration Two common scenarios for VPN tunnels are between a remote computer and a network gateway; and between two or more network gateways. The DGND3300v2 supports both types. The DGND3300v2 supports up to five concurrent tunnels. Client-to-Gateway VPN Tunnels Client-to-gateway VPN tunnels provide secure access from a remote computer, such as a telecommuter connecting to an office network.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 A VPN between two or more NETGEAR VPN-enabled routers is a good way to connect branch or home offices and business partners over the Internet. VPN tunnels also enable access to network resources across the Internet. In this case, use gateways on each end of the tunnel to form the VPN tunnel end points. See Set Up a Gateway-to-Gateway VPN Configuration on page 90 for information about how to set up this configuration.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 can allow a VPN endpoint with a dynamic IP address to initiate or respond to a tunnel request. Otherwise, the side using a dynamic IP address has to always be the initiator. • Which method will you use to configure your VPN tunnels? - The VPN Wizard using VPNC defaults (see Table 2, Parameters Recommended by the BPNC and Used in the VPN Wizard on page 79).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • See Use Manual Policy to Configure VPN Tunnels on page 107 when the VPN Wizard and its VPNC defaults are not appropriate for your special circumstances and you have to specify each phase of the connection. You manually enter all the authentication and key parameters.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The following worksheet identifies the parameters used in this procedure, which are highlighted in blue. For a blank worksheet, see Plan a VPN on page 78. Table 3.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 3. Select the radio button for the type of target end point, and click Next. 4. Enter the remote IP address and subnet mask, and click Next. The Summary screen displays: Note: To view the VPNC-recommended authentication and encryption settings used by the VPN Wizard, click the here link. 5. Click Done.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To view or modify the tunnel settings, select its radio button and click Edit. Note: See Use Auto Policy to Configure VPN Tunnels on page 101 for information about how to enable the IKE keep-alive capability on an existing VPN tunnel. Step 2: Configure the NETGEAR ProSafe VPN Client This section describes how to configure the NETGEAR ProSafe VPN Client on a remote computer.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 b. From the Edit menu of the Security Policy Editor, select Add, and then click Connection. A New Connection listing appears in the list of policies. c. Rename the new connection so that it matches the Connection Name field in the VPN Settings screen of the N300 wireless modem router on LAN A. Choose connection names that make sense to the people using and administering the VPN.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The resulting connection settings are shown in Figure 4 on page 85. 3. Configure the security policy in the NETGEAR ProSafe VPN Client software: a. In the Network Security Policy list, expand the new connection by double-clicking its name or clicking the + symbol. My Identity and Security Policy subheadings appear below the connection name. b. Click the Security Policy subheading to view the Security Policy settings. Figure 4.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 b. In the Select Certificate drop-down list, select None. c. In the ID Type drop-down list, select IP Address. If you are using a virtual fixed IP address, enter this address in the Internal Network IP Address field. Otherwise, leave this field empty. d. In the Internet Interface section of the screen, select the adapter that you use to access the Internet. If you have a dial-up Internet account, select PPP Adapter in the Name field.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 b. Expand the Authentication subheading by double-clicking its name or clicking the + symbol. Then click Proposal 1 below Authentication. c. In the Authentication Method drop-down list, select Pre-Shared key. d. In the Encrypt Alg drop-down list, select the type of encryption that is configured for the Encryption Protocol in the N300 wireless modem router in Table 1 on page 78. This example uses Triple DES. e.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 b. In the SA Life drop-down list, select Unspecified. c. In the Compression drop-down list, select None. d. Select the Encapsulation Protocol (ESP) check box. e. In the Encrypt Alg drop-down list, select the type of encryption that is configured for the encryption protocol in the N300 wireless modem router in Table 1 on page 78. This example uses Triple DES. f. In the Hash Alg drop-down list, select SHA-1. g.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 This causes a continuous ping to be sent to the first N300 wireless modem router. After between several seconds and 2 minutes, the ping response should change from timed out to reply. Once the connection is established, you can open a browser on the computer and enter the LAN IP address of the remote gateway.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 9. The Connection Monitor screen for this connection is shown in the following figure: In this example you can see these settings: • The N300 wireless modem router has a GW address (public IP WAN address) of 22.23.24.25. • The N300 wireless modem router has a remote address (LAN IP address) of 192.168.3.1. • The VPN client computer has a local address (dynamically assigned address) of 192.168.2.2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Follow this procedure to configure a gateway-to-gateway VPN tunnel using the VPN Wizard. IP:192.168.3.1 IP: 192.168.0.1 VPN tunnel 14.15.16.17 22.23.24.25 Gateway A Gateway B Internet Figure 5. Gateway-to-gateway VPN tunnel Set the LAN IPs on each N300 wireless modem router to a different subnet and configure each correctly for the Internet. The subsequent examples assume the settings shown in the following table. Table 4.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To configure a gateway-to-gateway VPN tunnel using the VPN Wizard: 1. Log in to Gateway A on LAN A. Select VPN Wizard. Click Next, and the Step 1 of 3 screen displays. 2. Fill in the Connection Name field and pre-shared key fields. Select the radio button for the type of target end point, and click Next, and the Step 2 of 3 screen displays. 3. Fill in the IP address or FQDN for the target VPN endpoint WAN connection, and click Next..
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The VPN Wizard Summary screen displays: To view the VPNC-recommended authentication and encryption settings used by the VPN Wizard, click the here link. 5. Click Done on the Summary screen. 6. The VPN Policies screen displays, showing that the new tunnel is enabled. Note: See Use Auto Policy to Configure VPN Tunnels on page 101 for information about how to enable the IKE keepalive capability on an existing VPN tunnel. 7.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Note: The VPN Status screen is only one of three ways to active a VPN tunnel. See Activate a VPN Tunnel on page 94 for information about the other ways. a. On the N300 wireless modem router menu, select VPN Status. The VPN Status/Log screen displays: b. Click the VPN Status button to display the Current VPN Tunnels (SAs) screen: c. Click Connect for the VPN tunnel you want to activate.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Use the VPN Status screen. • Ping the remote endpoint. • Start using the VPN tunnel. Note: See Use Auto Policy to Configure VPN Tunnels on page 101 for information about how to enable the IKE keep-alive capability on an existing VPN tunnel. Use the VPN Status Screen to Activate a VPN Tunnel To activate a VPN tunnel: 1. Select Advanced - VPN > VPN Status. The VPN Status/Log screen displays: 2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Activate the VPN Tunnel by Pinging the Remote Endpoint Note: This section uses 192.168.3.1 for sample remote endpoint LAN IP address. To activate the VPN tunnel by pinging the remote endpoint (for example, 192.168.3.1), perform the following steps depending on whether your configuration is client-to-gateway or gateway-to-gateway: • Client-to-gateway configuration.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 login screen of the N300 wireless modem router (unless another computer already has the DGND3300v2 management interface open). • Gateway-to-gateway configuration. Test the VPN tunnel by pinging the remote network from a computer attached to Gateway A (the N300 wireless modem router). a. Open a command prompt (for example, Start > Run > cmd). b. Type ping 192.168.3.1. Note: The pings might fail the first time.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. Click VPN Status to display the Current VPN Tunnels (SAs) screen. This table lists the following data for each active VPN tunnel. • SPI. Each SA has a unique SPI (Security Parameter Index) for traffic in each direction. For manual key exchange, the SPI is specified in the policy definition. For automatic key exchange, the SPI is generated by the IKE protocol. • Policy Name. The VPN policy associated with this SA. • Remote Endpoint.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Use the Policy Table on the VPN Policies Screen to Deactivate a VPN Tunnel To deactivate a VPN tunnel: 1. Select Advanced - VPN > VPN Policies to display the VPN Policies screen. 2. In the Policy Table, clear the Enable check box for the VPN tunnel that you want to deactivate, and then click Apply. (To reactivate the tunnel, select the Enable check box, and then click Apply.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. Click VPN Status. The Current VPN Tunnels (SAs) screen displays: 3. Click Drop for the VPN tunnel that you want to deactivate. Delete a VPN Tunnel To delete a VPN tunnel: 1. Select Advanced - VPN > VPN Policies to display the VPN Policies screen. 2. In the Policy Table, select the radio button for the VPN tunnel to be deleted, and then click Delete.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 policy does not use IKE. Rather, you manually enter all the authentication and key parameters. You have more control over the process; however, the process is more complex, and there are more opportunities for errors or configuration mismatches between your DGND3300v2 and the corresponding VPN endpoint gateway or client workstation. Use Auto Policy to Configure VPN Tunnels You need to configure matching VPN settings on both VPN endpoints.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The DGND3300v2 VPN tunnel network connection fields are defined in the following sections. VPN Auto Policy General Settings • Policy Name. Enter a unique name. This name is not supplied to the remote VPN endpoint. It is used only to help you manage the policies. • Remote VPN Endpoint. The remote VPN endpoint has to have this VPN gateway’s address entered as its remote VPN endpoint.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 - Any. Any outgoing traffic from the computers in the Local IP fields triggers an attempted VPN connection to the remote VPN endpoint. Be sure you want this option before selecting it. • Finish IP Address. Enter the finish IP address for a range of addresses. This has to be an address range used on the remote LAN. • Subnet Mask. Enter the network mask. VPN Auto Policy IKE Settings • Direction.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Authentication Algorithm. The authentication algorithm used for both IKE and IPSec. This setting has to match the setting used on the remote VPN gateway. Auto, MD5, and SHA-1 are supported. Auto negotiates with the remote VPN endpoint and is not available in responder-only mode. - MD5. 128 bits, faster but less secure. - SHA-1. 160 bits, slower but more secure. This is the default. • Pre-shared Key.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Table 5.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 3. Enter these policy settings: Auto Policy Field Description General Policy Name GtoG Remote VPN Endpoint Address Type Fixed Remote VPN Endpoint Address Data 22.23.24.25 Local LAN Remote LAN IKE Parameters Use the default settings. IP Address Select Subnet address from the drop-down list. Start IP Address 192.168.3.1 Subnet Mask 255.255.255.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 - Pre-shared Key (for example, 12345678) 6. Use the VPN Status screen to activate the VPN tunnel: Note: The VPN Status screen is only one of three ways to active a VPN tunnel. See Activate a VPN Tunnel on page 94 for information about the other ways. a. Select VPN > VPN Status to display the VPN Status/Log screen. Then click VPN Status to display the Current VPN Tunnels (SAs) screen: b. Click Connect for the VPN tunnel that you want to activate.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Select Advanced - VPN > VPN Policies, and then click the Add Manual Policy radio button to display the VPN - Manual Policy screen: The following sections explain the fields in the VPN Manual Policy screen. VPN Manual Policy General Settings The DGND3300v2 VPN tunnel network connection fields are as follows. • Policy Name. Enter a unique name to identify this policy. This name is not supplied to the remote VPN endpoint.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Single/Start IP Address. The IP address for a single address, or the starting address for an address range used on the LAN. If you want to make a single server on your LAN available to remote users, use a single address Any settings. The remote VPN endpoint can be at any IP address. • Finish IP Address. For an address range, enter the finish IP address. This has to be an address range used on your LAN. • Subnet Mask. Enter the network mask.
7. Advanced Settings (Part 1) Con figu re for u n ique s it uat ion s 7 This chapter describes advanced features of the N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To configure LAN settings: 1. Log in to the N300 wireless modem router, and from the main menu, select Advanced > LAN Setup. The following screen displays: 2. After you make changes, you need to click Apply for the changes to take effect. Note: If you change the LAN IP address of the N300 wireless modem router while connected through the browser, you will be disconnected.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Settings LAN TCP/IP Setup DHCP Server Description IP Address The LAN IP address of the N300 wireless modem router. IP Subnet Mask The LAN subnet mask of the N300 wireless modem router. Combined with the IP address, the IP subnet mask allows a device to know which other addresses are local to it, and which needs to be reached through a gateway or N300 wireless modem router.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 the attached computers from a pool of addresses specified in this screen. Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN. For most applications, the default DHCP and TCP/IP settings of the N300 wireless modem router are satisfactory. Specify the pool of IP addresses to be assigned by setting the starting IP address and ending IP address.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Note: The reserved address is not assigned until the next time the computer contacts the N300 wireless modem router’s DHCP server. Reboot the computer or access its IP configuration and force a DHCP release and renew. To edit or delete a reserved address entry: 1. Select the radio button next to the reserved address you want to edit or delete. 2. Click Edit or Delete.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To configure Dynamic DNS: 1. From the main menu, select Advanced > Dynamic DNS to display the Dynamic DNS screen. 2. Register for an account with one of the Dynamic DNS service providers whose names appear in the Service Provider list. For example, for DynDNS.org, select www.dyndns.org. 3. Select the Use a Dynamic DNS Service check box. 4. Select the name of your Dynamic DNS service provider. 5.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To configure the WAN setup options: From the main menu, under Advanced, click WAN Setup to view the WAN Setup screen. The WAN Setup fields are described in the following table: Setting Description Connect Automatically, as Required Usually, this check box is selected, so that an Internet connection is made automatically whenever Internet-bound traffic is detected.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Setting Description MTU Size (in bytes) The normal MTU (Maximum Transmit Unit) value for most Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some ISPs you might need to reduce the MTU. This is rarely required, and should not be done unless you are sure it is necessary for your ISP connection. See Change the MTU Size on page 132.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Set Up Quality of Service (QoS) Quality of Service (QoS) is an advanced feature that can be used to prioritize some types of traffic ahead of others. The N300 wireless modem router can provide QoS prioritization over the wireless link and on the Internet connection. The N300 wireless modem router supports Wi-Fi Multimedia Quality of Service (WMM QoS) to prioritize wireless voice and video traffic over the wireless link.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 QoS for Applications and Online Gaming To create a QoS policy for traffic for specific applications or online games: 1. From the main menu, select Advanced > QoS Setup. The QoS Setup screen displays. 2. Click Setup QoS rule. The QoS Priority Rule List screen displays. 3. Click Add Priority Rule. The QoS - Priority Rules screen displays. 4. In the Priority Category list, either use the default selection of Applications, or select Online Gaming.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 a. If you choose to add a new entry, the screen expands as shown: b. In the QoS Policy for field, enter a descriptive name for the new application or game. c. Select the connection type, either TCP, UDP, or both (TCP/UDP), and specify the port number or range of port numbers used by the application or game. 6.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 QoS for a MAC Address To create a QoS policy for traffic from a specific MAC address: 1. From the main menu, select Advanced > QoS Setup. The QoS Setup screen displays. 2. Click Add Priority Rule. 3. In the Priority Category field, select MAC Address. The screen changes: 4. If the device to be prioritized appears in the MAC Device List, select it.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 information after it has been configured for Internet access, and you do not need to configure additional static routes. You need to configure static routes only for unusual cases such as multiple routers or multiple IP subnets located on your network. As an example of when a static route is needed, consider the following case: • Your primary Internet access is through a cable modem to an ISP.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. In the Route Name field, type a name for this static route. (This is for identification purposes only.) 3. Select the Private check box if you want to limit access to the LAN only. If Private is selected, the static route is not reported in RIP. 4. Select the Active check box to make this route effective. 5. Type the destination IP address of the final destination. 6. Type the IP subnet mask for this destination.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The following figure shows a wireless repeating scenario: Base Station AP Repeater AP To set up a wireless network using WDS, the following conditions need to be met for both APs: • Both APs need to use the same SSID, wireless channel, and encryption mode (see Manually Configure Your Wireless Settings on page 18 or Use Push 'N' Connect (WPS) to Configure Your Wireless Network on page 24). • Both APs need to be on the same LAN IP subnet.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Wireless Repeating Function You can view or change wireless repeater settings for the N300 wireless modem router. From the main menu of the browser interface, under Advanced, click Wireless Repeating Function to display the Wireless Repeating Function screen. The N300 wireless modem router supports two modes of the wireless repeating function, and allows you to control wireless client association: • Wireless Repeater.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. Log in to the N300 wireless modem router base unit. Select Advanced > Wireless Repeating Function to display the Wireless Repeating Function screen. 3. Select the Enable Wireless Repeating Function check box and the Wireless Base Station radio button. 4. Enter the MAC address for the repeater units. 5. Click Apply to save your changes.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. Log in to the router that will be the repeater. Check the Wireless Settings screen, and verify that the wireless settings match the base unit exactly. The wireless security option needs to be set to WEP or None. 3. In the Wireless Repeating Function screen, select the Enable Wireless Repeater Mode radio button. This IP address needs to be in the same subnet as the base station but different from the LAN IP of the base station. 4.
8. Advanced Settings (Part 2) Fine -tune your net work 8 This chapter describes features to help you manage your N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 802.11g). In addition, many older wireless products do not support the latest security protocols, WPA and WPA2. • Powerline. For connecting rooms or floors that are blocked by obstructions or are distant vertically, consider networking over your building’s AC wiring. NETGEAR’s Powerline HD family of products delivers up to 200 Mbps to any outlet, while the older-generation XE family of products delivers 14 Mbps or 85 Mbps.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Network Connection Theoretical Raw Transfer Time 100 Mbps wired Ethernet 80 seconds 802.11n wireless 45 seconds 802.11g wireless 150 seconds 802.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The previous figure shows a sample network using multiple networking technologies. In this network, the two computers with Gigabit (1000 Mbps) Ethernet adapters have a gigabit connection through the GS605 switch to the storage server. This connection should allow for extremely fast backups or quick access to large files on the server.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • • • Copying machines, elevators, and cell phones (no closer than 6 feet) • Microwave ovens (no closer than 10 feet) Choose your settings. - Use a scanning utility to determine what other wireless networks are operating nearby, and choose an unused channel. - Turn off SSID broadcast, and change the default SSID.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 until the problem goes away. The following table describes common MTU sizes and applications. MTU Application 1500 The largest Ethernet packet size and the default value. This is the typical setting for non-PPPoE, non-VPN connections, and is the default value for NETGEAR routers, adapters, and switches. 1492 Used in PPPoE environments. 1472 Maximum size to use for pinging. (Larger packets are fragmented.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To turn on Universal Plug and Play: 1. From the main menu, click Advanced > UPnP. The UPnP screen displays. 2. The available settings and information in this screen are: • Turn UPnP On. UPnP can be enabled or disabled for automatic device configuration. The default setting for UPnP is disabled.
A. Troubleshooting Diagnose and solve problems A This appendix provides information about troubleshooting your N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2. After each problem description, instructions are provided to help you diagnose and solve the problem. As a first step, review the Quick Tips. Tip: NETGEAR provides helpful articles, documentation, and the latest firmware updates at http://support.netgear.com/.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Recommendation Instructions Make sure that the Ethernet cables are securely plugged in. For each powered-on computer connected to the N300 wireless modem router by an Ethernet cable, the corresponding numbered router LAN port LED is on. Make sure that the wireless settings in the computer and router match exactly.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 If any of the conditions in step 2 on page 136 does not occur, see the following table. Situation Recommended Action Power LED is off. If the Power and other LEDs are off when your router is turned on: • Make sure that the power cord is correctly connected to your router and that the power supply adapter is correctly connected to a functioning power outlet. • Check that you are using the power adapter supplied by NETGEAR for this product.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Situation Recommended Action The Ethernet port LEDs are off. If the Ethernet port LEDs do not light when the Ethernet connection is made, check the following: • Make sure that the Ethernet cable connections are secure at the N300 wireless modem router and computer. • Make sure that power is turned on to the connected modem or computer. Wireless LEDs are off.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Cannot Access the Internet Note: If you are installing the N300 wireless modem router and have not yet configured the Internet connection, see Chapter 1, Router Internet Setup, or the N300 Wireless Dual Band ADSL2+ Modem Router Installation Guide. If your Internet connection was working previously, it is possible that this is due to a problem at your Internet Service Provider (ISP).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • Your ISP might require a login program. Ask your ISP whether they require PPP over Ethernet (PPPoE) or some other type of login. • If your ISP requires a login, the login name and password might be set incorrectly. • Your ISP might check for your computer’s host name. Assign the computer host name of your ISP account as the account name in the Basic Settings screen.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To ping the router from a computer running Windows: 1. From the Windows toolbar, click the Start button, and then select Run. 2. In the field provided, type ping followed by the IP address of the router, as in this example: ping www.routerlogin.net 3. Click OK.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 visible in your computer’s Network Control Panel. Verify that the IP address of the router is listed as the default gateway. • Check to see that the network address of your computer (the portion of the IP address specified by the subnet mask) is different from the network address of the remote device. • Check that your cable or DSL modem is connected and functioning.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 When you install a NETGEAR wireless card in your computer, a Smart Wizard is installed that can provide helpful information about your wireless network. You can find this program in your Windows Program menu or as an icon in your system tray. Other wireless card manufacturers might include a similar program. If you have no specific wireless card setup program installed, you can use the basic setup utility in Windows by following these steps: 1.
B. NETGEAR VPN Configuration B This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR DGND3300v2 to a FVL328. This case study follows the VPN Consortium interoperability profile guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html). Configuration Profile The configuration in this appendix follows the addressing and configuration mechanics defined by the VPN Consortium. Gather necessary information before you begin configuration.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Step-by-Step Configuration To configure the VPN tunnel: 1. Use the VPN Wizard to configure Gateway A (DGND3300v2) for a gateway-to-gateway tunnel (see Set Up a Gateway-to-Gateway VPN Configuration on page 90), being certain to use appropriate network addresses for the environment. The LAN addresses used in this example are as follows: Unit WAN IP LAN IP LAN Subnet Mask DGND3300v2 14.15.16.17 10.5.6.1 255.255.255.0 FVL328 22.13.24.25 172.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 3. On the Gateway B router menu, under VPN, select IKE Policies, and click the Edit button to display the IKE Policy Configuration screen: toGW_A 22.23.24.25 14.15.16.17 4. On Gateway B router menu, under VPN, select VPN Policies, and click the Edit button to display the VPN Auto Policy screen: toGW_A toGW_A 14.15.16.17 172 23 10 9 5 1 6 5.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 N300 Wireless Modem Router with FQDN to Gateway B This section is a case study on how to configure a VPN tunnel from a NETGEAR N300 wireless modem router to a gateway using a fully qualified domain name (FQDN) to resolve the public address of one or both routers. This case study follows the VPN Consortium interoperability profile guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 and retrieved. Now, a gateway can be configured to use a third-party service instead of a permanent and unchanging IP address to establish bi-directional VPN connectivity. To use DDNS, you need to register with a DDNS service provider. Some DDNS service providers include: • DynDNS: www.dyndns.org • TZO.com: netgear.tzo.com • ngDDNS: ngddns.iego.net In this example, Gateway A is configured using a sample FQDN provided by a DDNS service provider.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 d. Click Show Status. The resulting screen should show Update OK: good: 3. On NETGEAR Gateway B, configure the Dynamic DNS settings. Assume a correctly configured DynDNS account. a. From the main menu, select Dynamic DNS. b. Select the DynDNS.org radio button. The Dynamic DNS screen displays: c. Fill in the fields with the account and host name settings. • In the Host and Domain Name field enter fvl328.dyndns.org.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The LAN addresses used in this example are as follows: Device LAN IP Address LAN Subnet Mask DGND3300v2 10.5.6.1 255.255.255.0 FVL328 172.23.6.1 255.255.255.0 a. Enter toFVL328 for the connection name. b. Enter fvl328.dyndns.org for the remote WAN's IP address. c. Enter the following: • IP Address: 172.23.9.1 • Subnet Mask: 255.255.255.0 5.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Verify that the firmware is up to date, and make sure you have all the addresses and parameters to be set on both sides. Assure that there are no firewall restrictions. VPN Consortium Scenario Scenario 1 Type of VPN: computer/client-to-gateway, with client behind NAT router Security scheme: IKE with pre-shared secret/key (not certificate based) IP addressing: Gateway Fully qualified domain name (FQDN) Client Dynamic 192.168.0.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Step 1: Configure Gateway A (the NETGEAR VPN Router at the Main Office) To configure the VPN tunnel: 1. Log in to the VPN router. Select VPN Policies to display the VPN Policies screen. Click Add Auto Policy to proceed and enter the information. fromGW_A (in the example) IKE Keep Alive is optional; has to match Remote LAN IP Address when enabled (remote computer has to respond to pings) 192.168.2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 To view or modify the tunnel settings, select the radio button next to the tunnel entry, and then click Edit. Step 2: Configure Gateway B (the N300 Wireless Modem Router at the Regional Office) This procedure assumes that the computer running the client has a dynamically assigned IP address. The computer needs to have a VPN client program installed that supports IPSec (in this case study, the NETGEAR VPN ProSafe Client is used).
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 c. Rename the new connection to match the connection name you entered in the VPN settings of Gateway A. Choose connection names that make sense to the people using and administrating the VPN. Note: In this example, the connection name on the client side of the VPN tunnel is toGW_A. It does not have to match the VPN_client connection name used on the gateway side of the VPN tunnel because connection names do not affect how the VPN tunnel functions. d.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 b. Click Security Policy to show the Security Policy screen. c. Select the Main Mode radio button in the Select Phase 1 Negotiation Mode group. 4. Configure the VPN client identity. In this step, you provide information about the remote VPN client computer. You have to provide the pre-shared key that you configured in the N300 wireless modem router and either a fixed IP address or a fixed virtual IP address of the VPN client computer. a.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 d. In the Internet Interface section, select Intel PRO/100VE Network Connection (in this example; your Ethernet adapter might be different) in the Name field, and then enter 192.168.2.3 (in this example) in the IP Addr field. e. Click the Pre-Shared Key button. f. In the Pre-Shared Key screen, click Enter Key. Enter the DGND3300v2’s pre-shared key and click OK. In this example, 12345678 is entered, though the screen shows asterisks.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 a. Expand the Key Exchange subheading by double-clicking its name or clicking the + symbol. Then select Proposal 1 below Key Exchange. b. In the SA Life drop-down list, select Unspecified. c. In the Compression drop-down list, select None. d. Select the Encapsulation Protocol (ESP) check box. e. In the Encrypt Alg drop-down list, select the type of encryption. In this example, use Triple DES. f. In the Hash Alg drop-down list, select SHA-1. g.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 The N300 wireless modem router reports the results of the attempt to connect. Once the connection is established, you can access resources of the network connected to the VPN router. Right-click the system tray icon to open the pop-up menu. To perform a ping test using this example, start from the remote computer: a. Establish an Internet connection from the computer. b. On the Windows taskbar, click the Start button, and then select Run. c.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Monitor the VPN Tunnel (Telecommuter Example) To view information about the progress and status of the VPN client connection, open the Log Viewer. In Windows, click Start, and select Programs > N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 > Log Viewer. Note: Use the active VPN tunnel information and pings to determine whether a failed connection is due to the VPN tunnel or some reason outside the VPN tunnel.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 View the VPN Router’s VPN Status and Log Information To view information about the status of the VPN client connection: 1. Open the VPN router’s VPN Status screen, then on the N300 wireless modem router main menu, select Router Status, and then click the VPN Status button. The VPN Status/Log screen displays: 2. To view the VPN tunnels status, click VPN Status.
C. Default Configuration and Technical Specifications C This appendix provides factory default settings and technical specifications for the N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2. Restore the Factory Configuration Settings Note: This procedure erases your current configuration, including your wireless security. When you log in after resetting, you will be prompted to configure these settings. This section explains how to restore the factory default configuration settings.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 2. Release the Restore Factory Settings button and wait for the router to reboot.The Power LED blinks red three times and then turns green when the default configuration settings have been restored. Feature Default Setting Router login N300 Wireless Modem Router login URL http://www.routerlogin.net or http://www.routerlogin.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Feature Default Setting Firewall Inbound (communications coming in from the Internet) Disabled (except traffic on port 80, the HTTP port) Outbound (communications going out to the Internet) Enabled (all) Source MAC filtering Disabled Wireless Wireless communication Enabled Name (11N SSID) NETGEAR-Dual Band-N Name (11G SSID) NETGEAR-2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Technical Specifications Feature General Network Protocol and Standards Compatibility Data and Routing Protocols TCP/IP, RIP-1, RIP-2, DHCP, PPPoE or PPPoA, RFC 1483 Bridged or Routed Ethernet, and RFC 1577 Classical IP over ATM Power Adapter North America 120V, 60 Hz, input UK, Australia 240V, 50 Hz, input Europe 230V, 50 Hz, input All regions (output) 12V @ 1.5A output Physical Dimensions 8.9 in. x 6.8 in. x 1.5 in. (225.
D. Notification of Compliance NETG EAR Wireless Routers, G ateways, APs D Regulatory Compliance Information Note: This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Español [Spanish] Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Ελληνική [Greek] ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc. ∆ΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩ∆ΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ∆ΙΑΤΑΞΕΙΣ ΤΗΣ Ο∆ΗΓΙΑΣ 1999/5/ΕΚ. Français [French] Par la présente NETGEAR Inc.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Íslenska [Icelandic] Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur og aðrar kröfur, sem gerðar eru í tilskipun 1999/5/EC. Norsk [Norwegian] NETGEAR Inc. erklærer herved at utstyret Radiolan er i samsvar med de grunnleggende krav og øvrige relevante krav i direktiv 1999/5/EF. This device is a 2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 • This device and its antenna(s) must not be co-located or operation in conjunction with any other antenna or transmitter. Canadian Department of Communications Radio Interference Regulations This digital apparatus (TBD) does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Interference Reduction Table The table below shows the Recommended Minimum Distance between NETGEAR equipment and household appliances to reduce interference (in feet and meters).
Index Numerics compliance 165 configuration file 58 configuring ADSL settings 14 DMZ server 115, 117 Dynamic DNS 114, 115 email alerts 48 firewall rules 38 firmware upgrades 50 ISP settings 10 LAN IP services 110 log notifications 48 logs of web access 46 MTU size 132 parental controls 33 port forwarding 41 port triggering 43 QoS 118 remote management 60 repeater unit 126 static routes 121 UPnP 133 USB storage 67, 70, 74 using the Setup Manual 7 using the Smart Wizard 7 using WPS 24 WEP security 20 wireles
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 tunnels using 147 deleting VPN tunnels 100 device name 57 devices attached 57 DHCP server 112 diagnostics 59 Digital Living Network Alliance (DLNA) 72 disabling automatic WAN connection 116 firewall 13, 116 net address translation (NAT) 13 router PIN 27 security 20 SIP ALG 117 SSID broadcast 29 UPnP 134 wireless client association 125 wireless router radio 29 disabling WMM QoS 118 disablingDHCP server function 126 DMZ server 117 DNS addresses, trouble
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 O Live Parental Controls 33 local network, default settings 162 Log Viewer 89 logging in and out 8 login settings 162 logs sending 48 time-stamping entries 49 viewing 46 obstructions, connecting through 129 OpenDNS 33 optimizing bandwidth 130 performance 131 outgoing mail server 48 P M packets, fragmented 132 parental controls 33 password, restoring 161 path, testing 141 performance, optimizing 131 photos, sharing 66 PIN, adding WPS client using 25
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 trusted user 38 requirements, speed 129 reserved IP adresses 113 restarting network 136 restoring default factory settings 58, 59, 161, 162 restrict access by MAC address 22 restricting access 22, 29, 35 RIP (Router Information Protocol) 112 router status, viewing 53 rules, firewall 38 U Universal Plug and Play (UPnP) 72, 133 up time, system 57 Up to 145 Mbps at 2.4 GHz mode 19, 31 Up to 145 Mbps at 5 GHz and 54 Mbps at 2.
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 warning DMZ servers 117 protecting against unauthorized access 15 reboot process 58 unmount USB drive 72 uploading firmware 51, 52 wireless repeating function 123 WEP, configuring 20 wireless access points 17 wireless card, setting up 143 wireless clients, adding 25, 27 wireless connection type 128 Wireless Distribution System (WDS) 123, 125 Wireless light, troubleshooting and 138 wireless network name 55 Wireless port settings 55 wireless radio 29, 55
