Advanced Settings

36

NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway

3.

Click

Apply

.

MAC Filtering

By default, the gateway allows any connected computer to access the Internet. The MAC

Filtering screen lets you block specific computers, based on their MAC addresses, from

access to the Internet on selected days and times.



To use MAC filtering to block Internet access for a specific computer:

1.

In the main menu, under Advanced, select

MAC

Filtering

.

The Trusted Devices table shows computers that

have access to the Internet through the gateway.

2.

In the Add MAC Filter table, use one of these

methods to specify computers to block:

•

If the computer is in the Trusted Devices table,

select its radio button. The MAC address is

added into the Add MAC Filter table.

•

If the computer you want is not listed, click

Refresh

to update the Trusted Devices table.

If the computer is still not listed, complete the

Device Name and MAC Address fields.

3.

Click

Add

.

The Enable check box for the computer in the MAC

Filter List is automatically selected.

4.

To block the computer, select the days and times:

•

Days to Block

. Select the days to block the

computer selected in the MAC Filter List. The default is Everyday.

WPS Settings

Disable router’s PIN

Selecting this check box disables the PIN that WPS

clients use to connect to the gateway with the PIN

method. Normally this check box is cleared, which is

the default setting.

Keep Existing Settings

If a WPS client is added, the gateway automatically

selects this check box. When the Keep Existing

Settings check box is selected, the SSID and

wireless security settings remain the same when

more WPS clients are added.

Wireless Access List

Set up Access List

Access control is disabled by default so that any

computer that is configured with the correct SSID

can connect.

Advanced Wireless Settings

Description

Advanced Settings

37

NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway

•

Time of Day to Block

. You can specify the time of day to block the computer. The

default is All Day. Be sure that you clear the

All Day

check box if you want to enter

specific times. The selected period applies to each day that you selected.

5.

Click

Apply

.

6.

Repeat these steps for all computers that you want to block.



To stop blocking a computer:

1.

In the MAC Filter List, select the computer.

2.

Clear its

Enable

check box.

The computer remains in the list; however, it is not blocked.

3.

Click

Apply

.



To remove a computer from the list:

1.

In the MAC Filter List, select the computer.

2.

Click

Delete

.

3.

Click

Apply

.

Advanced Settings

38

NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway

IP Filtering

By default, any computer is allowed access to the Internet through your gateway. You can

use IP filtering to block specific computers based on their IP addresses from access to the

Internet on selected days and times.



To set up IP filtering:

1.

In the main menu, under Advanced, select

IP

Filtering

.

The Trusted Devices table shows computers

that are allowed access to the Internet

through your gateway.

2.

Add devices to the IP Filter List as needed:

•

If the computer you want to add appears

in the Trusted Devices table, select its

radio button to capture its IP address.

If the computer you want is not listed,

click

Refresh

to update the Trusted

Devices table.

•

If the name of the computer you want to

add does not display, you can type a

name for the computer you are adding; or

enter the IP address of the computer you

want to block.

3.

Click

Add

.

The Enable check box is automatically selected.

4.

Select the days to block.

5.

In the Time of Day to Block section, select a start time and an end time. This time range

applies to each day you selected in Day(s) to Block section for the specific computer. All day

is the default value.

6.

Click

Apply

.



To delete a device from the IP Filter List:

1.

In the main menu, under Advanced, select

IP Filtering

.

2.

Select the computer.

3.

Click

Delete

.

4.

Click

Apply

.

Advanced Settings

39

NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway

Port Blocking

You can use port blocking to block outbound traffic on specific ports. Outbound traffic rules

control access to outside resources from local users. The default rule is to allow all access

from the LAN side to the outside. You can use port blocking to add predefined or custom

rules to specify exceptions to the default rule.

Note:

The default rule allows any outbound traffic not blocked by rules that

you create.



To configure port blocking:

1.

In the main menu, under Advanced, select

Port Blocking

.

2.

From the Service list, select the service you want

to block.

3.

To add a custom service that is not in the list of

services, specify these settings in the Add

Custom Service table:

•

Name

. A name for the service.

•

Start Port

. The start port for the service.

•

End Port

. The end port for the service.

•

Protocol

. The protocol for the ports:

-

TCP

. TCP only.

-

UDP

. UDP only.

-

Both

. Both TCP and UDP.

•

Local IP Address

. Complete the local IP address for the computer that is using the

service.

4.

Perform one of the following actions:

•

Click

Add

to save your settings. The Active Filters table now displays the list of ports

that are currently blocked.

•

To delete a service, select the radio button in the Active Filters table for the service

that you want to delete, and click

Delete

.

•

To reset the selection in the Services drop-down list and to clear all the fields in the

Add Custom Service table, click

Reset

.

Port Forwarding

A firewall has default rules for inbound traffic (WAN to LAN) and for outbound traffic. Port

forwarding affects the inbound rules. These rules restrict access from outsiders. By default,

Advanced Settings

40

NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway

the gateway blocks access from outside except for responses to requests from the LAN side.

You can use port forwarding to add rules to specify exceptions to the default rule.

Because the gateway uses Network Address Translation (NAT), your network presents only

one IP address to the Internet, and outside users cannot directly address any of your local

computers. However, by defining an inbound rule you can make a local server (for example, a

web server or game server) or computer visible and available to the Internet. The rule tells

the gateway to direct inbound traffic for a particular service to one local server or computer

based on the destination port number. Directing traffic is also known as port forwarding.

Some residential broadband ISPs do not allow you to run server processes (such as a web or

FTP server) from your location. Your ISP might check for servers and suspend your account

if it finds active services at your location. See the ISP’s Acceptable Use policy.

Pay attention to the following considerations before configuring port forwarding:

•

If the DHCP assigns the IP address of the local server computer, the address might

change when the computer is rebooted. To keep the address from changing, you can

assign a static IP address to your server outside the range that DHCP assigns, but in the

same subnet as your LAN. By default, the IP addresses from 192.168.0.2 through

192.168.0.9 are reserved for this purpose.

•

Local computers must access the local server using the computers’ local LAN address

(192.168.0.XXX, by default). Attempts by local computers to access the server using the

external WAN IP address fail.

•

Port forwarding opens holes in your firewall. Enable only ports that are necessary.



To configure port forwarding and services for specific inbound traffic:

1.

In the main menu, under Advanced, select

Port Forwarding

.

2.

From the Service list, select the service for

which you want to configure port forwarding.

3.

To add a custom rule that is not in the list of

services, specify these settings in the Add

Custom Rules table:

•

Name

. A name for the service.

•

Start Port

. The start port for the service.

•

End Port

. The end port for the service.

•

Protocol

. The protocol for the ports:

-

TCP

. TCP only.

-

UDP

. UDP only.

-

Both

. Both TCP and UDP.

•

Local IP Address

. Complete the local IP

address for the computer that is using the

service.

4.

Perform one of these actions:

•

Click

Add

. The Active Forwarding Rules table displays the list of forwarded ports.