genie ADVANCED Home

46

N450 Wireless Router WNR2500

•

PIN Number

. To use the PIN method, do the following:

a.

Select the

PIN Number

radio button.

The screen adjusts:

b.

Enter the client security PIN.

c.

Click the

Next

button.

Within two minutes, go to the client and use its WPS software to let the client join

the network.

You do not need to enter a password.

While the router attempts to add the WPS-capable client, the WPS LED on the

front of the router blinks green. When the router establishes a WPS connection,

the LED is solid green, and the router WPS screen displays a confirmation

message.

d.

To add another WPS client to your network, repeat this procedure.

Setup Menu

Select

ADVANCED > Setup

to display the Setup menu. The following selections are

available:

•

Internet Setup

. This link is a shortcut to the same Internet Setup screen that you can

access from the dashboard on the BASIC Home screen. For information, see

Internet

Setup

on page

26.

•

Wireless Setup

. This link is a shortcut to the same Wireless Settings screen that you can

access from the dashboard on the BASIC Home screen. For information, see

Basic

Wireless Settings

on page

28.

•

Guest Network

. This link is a shortcut to the same Guest Network screen that you can

access from the dashboard on the BASIC Home screen. For information, see

Guest

Network

on page

41.

•

WAN Setup

. Internet (WAN) setup. For information, see

WAN Setup

on page

47.

•

LAN Setup

. Local area network (LAN) setup. For information, see

LAN Setup

on

page

50.

•

QoS Setup

. Quality of Service (QoS) setup. For information, see

QoS Setup

on page

54.

genie ADVANCED Home

47

N450 Wireless Router WNR2500

WAN Setup

You can configure the Internet (WAN) port.



To change the WAN settings:

1.

Select

ADVANCED > Setup > WAN Setup

.

A screen similar to the following displays:

2.

Enter the settings that you want to customize.

For more information, see

WAN Setup Screen Settings

on page

47.

3.

Click the

Apply

button.

WAN Setup Screen Settings

The following settings are available on this screen:

•

Disable Port Scan and DoS Protection

. DoS protection protects your LAN against

denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop Attack,

UDP Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. By default, this

check box is cleared.

•

Default DMZ Server

. A demilitarized zone (DMZ) server can be helpful when you play

online games and use videoconferencing. Be careful when you use this feature because

it makes the firewall security less effective. For more information, see

Default DMZ

Server

on page

48.

•

Respond to Ping on Internet Port

. If you want the router to respond to a ping from the

Internet, select this check box. By default, this check box is cleared. Use this feature only

as a diagnostic tool because it allows your router to be discovered. Do not select this

check box unless you have a specific reason.

genie ADVANCED Home

48

N450 Wireless Router WNR2500

•

Disable IGMP Proxying

. IGMP proxying allows computers on the LAN to receive the

multicast traffic they are subscribed to from the Internet. By default, this check box is

selected, and the IGMP proxy is disabled, preventing multicast traffic from the Internet to

the LAN. Clear the

Disable IGMP Proxying

check box to allow multicast traffic from the

Internet to the LAN.

•

MTU Size (in bytes)

. The normal MTU (maximum transmit unit) value for most Ethernet

networks is 1500 bytes, or 1492 bytes for PPPoE connections. For some ISPs, you might

need to reduce the MTU. This change is rarely required. Do not make this change unless

you are sure that it is necessary for your ISP connection. For more information, see

Change the MTU Size

on page

49.

•

NAT Filtering

. Network Address Translation (NAT) determines how the router processes

inbound traffic:

-

Secured NAT provides a secured firewall to protect the computers on the LAN from

attacks from the Internet, but might prevent some Internet games, point-to-point

applications, or multimedia applications from functioning. By default, the Secured

radio button is selected.

-

Open NAT provides a much less secured firewall, but allows almost all Internet

applications to function.

•

Disable SIP ALG

. Some Voice over IP (VoIP) applications do not function well with the

Session Initiation Protocol (SIP) Application Layer Gateway (ALG). Selecting the check

box to turn off the SIP ALG might enable connected VoIP devices to create and accept a

VoIP call through the router. By default, this check box is cleared.

Default DMZ Server

The default DMZ server feature is helpful when you use some online games and

videoconferencing applications that are incompatible with Network Address Translation

(NAT). The router is programmed to recognize some of these applications and to function

correctly with them, but other applications exist that might not function well. In some cases,

one local computer can run the application correctly if that computer’s IP address is entered

as the default DMZ server.

WARNING:

DMZ servers pose a security risk. A computer designated as the

default DMZ server loses much of the protection of the firewall and

is exposed to exploits from the Internet. If compromised, the DMZ

server computer can be used to attack other computers on your

network.

The router discards incoming traffic from the Internet unless the traffic is a response to one of

your local computers or a service that you have configured on the Port Forwarding / Port

Triggering screen (see

Set Up Port Forwarding to Local Servers

on page

90 and

Set Up Port

Triggering

on page

93). Instead of discarding this traffic, you can forward it to one computer

on your network. This computer is called the default DMZ server.

genie ADVANCED Home

49

N450 Wireless Router WNR2500



To set up a default DMZ server:

1.

Select

ADVANCED > Setup > WAN Setup

.

The WAN Setup screen displays.

2.

Select the

Default DMZ Server

check box.

3.

Type the IP address.

4.

Click the

Apply

button.

Change the MTU Size

The maximum transmission unit (MTU) is the largest data packet a network device transmits.

When one network device communicates across the Internet with another, the data packets

travel through many devices along the way. If any device in the data path has a lower MTU

setting than the other devices, the data packets must be split or fragmented to accommodate

the device with the smallest MTU.

The best MTU setting for NETGEAR equipment is often just the default value, and changing

the value might fix one problem but cause another.

WARNING:

An incorrect MTU setting can cause Internet communication

problems such as the inability to access certain websites, frames

within websites, secure login pages, or FTP or POP servers.

Leave the MTU unchanged unless one of these situations occurs:

•

You have problems connecting to your ISP or other Internet service, and technical

support of either the ISP or NETGEAR recommends changing the MTU setting. These

web-based applications might require an MTU change:

-

A secure website that does not open, or displays only part of a web page

-

Yahoo email

-

MSN portal

-

America Online’s DSL service

•

You use VPN and have severe performance problems.

•

You used a program to optimize MTU for performance reasons, and now you have

connectivity or performance problems.

If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are

willing to experiment, you can gradually reduce the MTU from the maximum value of 1500

until the problem goes away.

genie ADVANCED Home

50

N450 Wireless Router WNR2500

The following table describes common MTU sizes and applications.

Table 3.

Common MTU sizes

MTU

Application

1500

The largest Ethernet packet size. This value is the typical setting for non-PPPoE,

non-VPN connections, and is the default value for NETGEAR routers, adapters, and

switches.

1492

Used in PPPoE environments.

1472

Maximum size to use for pinging. (Larger packets are fragmented.)

1468

Used in some DHCP environments.

1460

Usable by AOL if you do not have large email attachments, for example.

1436

Used in PPTP environments or with VPN.

1400

Maximum size for AOL DSL.

576

Typical value to connect to dial-up ISPs.



To change the MTU size:

1.

Select

ADVANCED > Setup > WAN Setup

.

The WAN Setup screen displays.

2.

In the MTU Size field, enter a new size from 64 through 1500.

3.

Click the

Apply

button.

LAN Setup

The LAN Setup screen allows configuration of LAN IP services such as Dynamic Host

Configuration Protocol (DHCP) and Routing Information Protocol (RIP).

The router is shipped preconfigured to use private IP addresses on the LAN side and to

function as a DHCP server. The router’s default LAN IP configuration is:

•

LAN IP address

. 192.168.1.1

•

Subnet mask

. 255.255.255.0

These addresses are part of the designated private address range for use in private networks

and are suitable for most applications. If your network requires the use of a different IP

addressing scheme, change the LAN Setup screen.