NETGEAR genie ADVANCED Home

46

D6200 WiFi DSL Modem Router

2.

Click

Next

.

Enter the requested information:

•

Connection name

. Enter an appropriate name for the connection. This name is not

supplied to the remote VPN endpoint. Rather, it is used to help you manage the VPN

settings.

•

Pre-shared key

. The key has to be entered both here and on the remote VPN

gateway or the remote VPN client. This method does not require using a CA

(certificate authority).

•

VPN tunnel connection

. The wizard has to know if you are planning to connect to a

remote gateway or setting up the connection for a remote client or computer to

establish a secure connection to this device.

3.

Click

Next

.

Enter the remote IP address of the gateway you want to connect to, or provide the

Internet name of the gateway. The Internet name is the fully qualified domain name, as

set up in a Dynamic DNS service.

4.

Click

Next

.

Enter the remote LAN IP address and subnet mask of the remote gateway.

•

If this information does not match the LAN IP address and subnet mask in the remote

gateway, the secure tunnel fails to connect.

•

The IP address range used on the remote LAN has to be different from the IP address

range used on the local LAN.

NETGEAR genie ADVANCED Home

47

D6200 WiFi DSL Modem Router

5.

Click

Next

.

This screen shows the summary of the Wizard configuration with a link to view the VPNC

recommended parameters (click the

here

link to view the VPNC-recommended

parameters).

6.

Click

Done

.

For information about how to add or modify VPN policies, see

VPN Policies

on page 135.

Setup Menu

Select

ADVANCED > Setup

to display the Setup menu.

The following selections are available:

•

Internet Setup

. This selection is a shortcut to the same Internet Setup screen that you

can access from the dashboard on the BASIC Home screen. See

Internet Basic Settings

on page 30.

•

ADSL Setup

. Internet (ADSL) setup. See

ADSL Setup

on page 48.

•

Wireless Setup

. This selection is a shortcut to the same Wireless Settings screen that

you can access from the dashboard on the BASIC Home screen. See

Basic Wireless

Settings

on page 33.

•

WAN Setup

. Internet (WAN) setup. See

WAN Setup

on page 49.

•

LAN Setup

. Local area network (LAN) setup. See

LAN Setup

on page 52.

•

QoS Setup

. Quality of Service (QoS) setup. See

Quality of Service Setup

on page 56.

NETGEAR genie ADVANCED Home

48

D6200 WiFi DSL Modem Router

•

Guest Network

. This selection is a shortcut to the same Wireless Settings (for guest

networks) screen that you can access from the dashboard on the BASIC Home screen.

See

Guest Networks

on page 37.

ADSL Setup

The ADSL Settings screen lets you configure the multiplexing method and virtual circuit of

your ADSL connection. The default parameters should match those on the system used by

your ISP.



To configure ADSL:

1.

Select

ADVANCED > Setup > ADSL Settings

.

2.

Configure the following settings:

•

Multiplexing Method

. Your ISP indicates whether your multiplexing method is

VC-BASED or LLC-BASED.

•

VPI

,

VCI

. Your ISP indicates which VPI and VCI combination is used for your service.

•

DSL Mode

. Your ISP indicates that the best setting is used for your DSL connection.

3.

Click

Apply

.

NETGEAR genie ADVANCED Home

49

D6200 WiFi DSL Modem Router

WAN Setup

The WAN Setup screen lets you configure the WAN (Internet) port.



To configure the WAN:

1.

Select

ADVANCED > Setup > WAN Setup

.

2.

Configure the following settings:

•

WAN Preference

. Select your WAN preference: Auto Detect, Must use DSL WAN, or

Must use Ethernet WAN.

•

Disable Port Scan and DoS Protection

. DoS protection protects your LAN against

denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop

Attack, UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. This

feature should be disabled only in special circumstances.

•

Default DMZ Server

. This feature is sometimes helpful when you are playing online

games or videoconferencing. Be careful when using this feature because it makes the

firewall security less effective. For more information, see

Default DMZ Server

on

page 50.

•

Respond to Ping on Internet Port

. If you want the WiFi DSL modem router to

respond to a ping from the Internet, select this check box. Use this feature only as a

diagnostic tool because it allows your WiFi DSL modem router to be discovered. Do

not select this check box unless you have a specific reason.

•

MTU Size (in bytes)

. The normal MTU (maximum transmit unit) value for most

Ethernet networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some

ISPs, you might need to reduce the MTU. This change is rarely required, and should

not be done unless you are sure that it is necessary for your ISP connection. See

Change the MTU Size

on page 51.

NETGEAR genie ADVANCED Home

50

D6200 WiFi DSL Modem Router

•

Disable IGMP Proxying

. The IGMP proxying function lets a LAN computer receive

the multicast traffic it is interested in from the Internet. Select this check box to disable

the function if you do not need it.

•

NAT Filtering

. Network Address Translation (NAT) determines how the WiFi DSL

modem router processes inbound traffic. Secured NAT provides a secured firewall to

protect the computers on the LAN from attacks from the Internet, but might prevent

some Internet games, point-to-point applications, or multimedia applications from

functioning. Open NAT provides a much less secured firewall, but allows almost all

Internet applications to function.

•

Disable SIP ALG

. Some VoIP applications do not work well with the SIP ALG.

Selecting this check box to turn off the SIP ALG might help your VoIP devices to

create or accept a call through the router.

3.

Click

Apply

.

Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and

videoconferencing applications that are incompatible with Network Address Translation

(NAT). The WiFi DSL modem router is programmed to recognize some of these applications

and to work correctly with them, but other applications might not function well. In some cases,

one local computer can run the application correctly if that computer’s IP address is entered

as the default DMZ server.

WARNING:

DMZ servers pose a security risk. A computer designated as the

default DMZ server loses much of the protection of the firewall and

is exposed to exploits from the Internet. If compromised, the DMZ

server computer can be used to attack other computers on your

network.

Incoming traffic from the Internet is discarded by the WiFi DSL modem router unless the

traffic is a response to one of your local computers or a service that you have configured in

the Port Forwarding/Port Triggering screen. Instead of discarding this traffic, you can forward

it to one computer on your network. This computer is called the default DMZ server.



To set up a default DMZ server:

1.

Select

ADVANCED > Setup > WAN Setup

.

2.

Select the

Default DMZ Server

check box.

3.

Type the IP address.

4.

Click

Apply

.