NETGEAR Wireless-N Router WNR2000 User Manual NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10397-01 June 2008 v1.
©2008 by NETGEAR, Inc. All rights reserved. Product Registration, Support, and Documentation Register your product at http://www.netgear.com/register. Registration is required before you can use our telephone support service. Product updates and Web support are always available at http://www.netgear.com/support. Setup documentation is available on the CD, on the support website, and on the documentation website.
Europe – EU Declaration of Conformity This device complies with the essential requirements of the R&TTE Directive 1999/5/EC. The following test methods have been applied in order to prove presumption of conformity with the essential requirements of the R&TTE Directive 1999/5/EC: • EN 60950-1: 2001 Safety of information technology equipment • EN 300 328 V1.7.
Español [Spanish] Por medio de la presente [NETGEAR Inc.] declara que el [WNR2000] cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Eλληνική [Greek] ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ [NETGEAR Inc.] ΔΗΛΩΝΕΙ ΟΤΙ [WNR2000] ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 1999/5/ΕΚ. Français [French] Par la présente [NETGEAR Inc.
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
• This device may not cause harmful interference, and • This device must accept any interference received, including interference that may cause undesired operation. FCC Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Product and Publication Details Model Number: WNR2000 Publication Date: June 2008 Product Family: Wireless Router Product Name: Wireless-N Router Model WNR2000 Home or Business Product: Home Language: English Publication Part Number: 202-10397-01 vii v1.
viii v1.
Contents About This Manual Conventions, Formats, and Scope ................................................................................... xi How to Use This Manual ..................................................................................................xii How to Print This Manual .................................................................................................xii Revision History .................................................................................................
NETGEAR Wireless-N Router WNR2000 User Manual Understanding Your Firewall .........................................................................................2-23 Chapter 3 Restricting Access From Your Network Content Filtering Overview .............................................................................................3-1 Blocking Access to Internet Sites ...................................................................................3-1 Blocking Access to Internet Services ...............
NETGEAR Wireless-N Router WNR2000 User Manual Editing or Deleting a Port Forwarding Entry .............................................................5-8 Configuring Port Triggering .............................................................................................5-9 Using Universal Plug and Play .....................................................................................5-13 Optimizing Wireless Performance ................................................................................
NETGEAR Wireless-N Router WNR2000 User Manual Appendix A Technical Specifications Default Configuration Settings ....................................................................................... A-1 General Specifications ................................................................................................... A-3 Appendix B Related Documents Index x Contents v1.
About This Manual The user manual provides information for configuring the features of the NETGEAR® Wireless-N Router Model WNR2000 beyond initial configuration settings. Initial configuration instructions can be found in the NETGEAR Wireless-N Router Setup Manual. You should have basic to intermediate computer and Internet skills. Conventions, Formats, and Scope The conventions, formats, and scope of this manual are described in the following paragraphs: • • Typographical conventions.
NETGEAR Wireless-N Router WNR2000 User Manual Danger: This is a safety warning. Failure to take heed of this notice might result in personal injury or death. • Scope. This manual is written for the WNR2000 router according to these specifications: Product Version Wireless-N Router Model WNR2000 Manual Publication Date June 2008 For more information about network, Internet, firewall, and VPN technologies, click the links to the NETGEAR website in Appendix B, “Related Documents.
NETGEAR Wireless-N Router WNR2000 User Manual • Printing from PDF. Your computer must have the free Adobe Acrobat Reader installed for you to view and print PDF files. The Acrobat Reader is available on the Adobe website at http://www.adobe.com. – – Printing a PDF chapter. Use the PDF of This Chapter link at the top left of any page. • Click the PDF of This Chapter link at the top left of any page in the chapter you want to print.
NETGEAR Wireless-N Router WNR2000 User Manual xiv v1.
Chapter 1 Configuring Basic Connectivity This chapter describes the settings for your Internet connection and your wireless local area network (LAN) connection. When you perform the initial configuration of your wireless router using the Resource CD as described in the NETGEAR Wireless-N Router Setup Manual, these settings are specified automatically for you.
NETGEAR Wireless-N Router WNR2000 User Manual Logging In To Your Wireless Router When the wireless router is connected to your network, you can access and configure the router using your browser. To access the router: 1. Connect to the wireless router by typing http://www.routerlogin.net in the address field of your browser, and then press Enter. A login window displays.
NETGEAR Wireless-N Router WNR2000 User Manual The Checking for Firmware Updates screen appears unless you previously cleared the Check for Updated Firmware Upon Log-in check box. Figure 1-2 If the router discovers a newer version of firmware, the message on the left displays when you log in. If no new firmware is available, the message on the right displays. Figure 1-3 To automatically update to the new firmware, click Yes to allow the router to download and install the new firmware file from NETGEAR.
NETGEAR Wireless-N Router WNR2000 User Manual 3. In the main menu on the left, select Basic Settings under Setup. The Basic Settings screen displays showing the wireless router’s home page and suggested default settings. Figure 1-4 Note: If the Check for New Version Upon Log-in check box is selected, the home page is the Router Upgrade screen. Otherwise, it is the Basic Settings screen.
NETGEAR Wireless-N Router WNR2000 User Manual If you do not click Logout, the wireless router will wait for 5 minutes after no activity before it automatically logs you out. Configuring Your Internet Connection Using the Smart Setup Wizard You can manually configure your Internet connection using the Basic Settings screen, or you can allow the Smart Setup Wizard to determine your Internet Service Provider (ISP) configuration.
NETGEAR Wireless-N Router WNR2000 User Manual ISP does not require login Figure 1-5 – Account Name (might also be called Host Name). The account name is provided to the ISP during a DHCP request from your router. In most cases, this setting is not required, but some ISPs require it for access to ISP services such as mail or news servers. – Domain Name. The domain name is provided by your router to computers on your LAN when the computers request DHCP settings from your router.
NETGEAR Wireless-N Router WNR2000 User Manual – Internet IP Address. Determines how your router obtains an IP address for Internet access. • If your ISP assigns an IP address dynamically (by DHCP), select Get Dynamically From ISP. • If your ISP has assigned you a permanent, fixed (static) IP address for your computer, select Use Static IP Address. Enter the IP address that your ISP assigned. Also, enter the subnet mask and the gateway IP address.
NETGEAR Wireless-N Router WNR2000 User Manual If a login is required by your ISP, the following settings appear in the Basic Settings screen: ISP does require login Figure 1-6 • Does Your Internet Connection Require A Login? If you usually must use a login program such as WinPOET to access the Internet, your Internet connection requires a login. After you select Yes, the Basic Settings screen displays.
NETGEAR Wireless-N Router WNR2000 User Manual • Telstra Bigpond, an Australian residential cable modem service Note: The Telstra Bigpond setting is only for older cable modem service accounts still requiring a Bigpond login utility. Telstra has discontinued this type of account. Those with Telstra DSL accounts and newer cable modem accounts should select No for Does Your Internet Connection Require a Login.
NETGEAR Wireless-N Router WNR2000 User Manual • Always On. The router logs in to the Internet immediately after booting and never disconnects. • Dial on Demand. The router logs in only when outgoing traffic is present and logs out after the idle time-out. • Manually Connect. The router logs in or logs out only when the user clicks Connect or Disconnect in the Router Status screen. – Idle Timeout. Your Internet connection is logged out if there is no data transfer during the specified time interval.
NETGEAR Wireless-N Router WNR2000 User Manual 1. Select Wireless Settings under Setup in the main menu of the WNR2000 router. Figure 1-9 2. For the wireless network name (SSID), use the default name, or choose a suitable descriptive name. In the Name (SSID) field, you can enter a value of up to 32 alphanumeric characters. The default SSID is NETGEAR. Note: The SSID is case-sensitive; NETGEAR is not the same as nETgear.
NETGEAR Wireless-N Router WNR2000 User Manual 6. For Security Options, select None. 7. Click Apply to save your changes. Note: If you are configuring the router from a wireless computer and you change the router’s SSID, channel, or security settings, you will lose your wireless connection when you click Apply. You must then change the wireless settings of your computer to match the router’s new settings. 8. Select Wireless Settings under Advanced in the main menu of the WNR2000 router. Figure 1-10 9.
NETGEAR Wireless-N Router WNR2000 User Manual Once your computer has basic wireless connectivity to the router, you can configure the advanced wireless security functions of the computer and router (for more information about security and these settings, see Chapter 2, “Safeguarding Your Network ”). Configuring Basic Connectivity 1-13 v1.
NETGEAR Wireless-N Router WNR2000 User Manual 1-14 Configuring Basic Connectivity v1.
Chapter 2 Safeguarding Your Network The Wireless-N Router Model WNR2000 provides highly effective security features, which are covered in detail in this chapter.
NETGEAR Wireless-N Router WNR2000 User Manual WEP connections can take slightly longer to establish. Also, WEP, WPA-PSK, and WPA2-PSK encryption can consume more battery power on a notebook computer, and can cause significant performance degradation with a slow computer. Note: NETGEAR recommends that you change the administration password of your router. Default passwords are well known, and an intruder can use your administrator access to read or disable your security settings.
NETGEAR Wireless-N Router WNR2000 User Manual • Use Wi-Fi Protected Setup (WPS) to automatically set the SSID and implement WPA/ WPA2 security on both the router and the client device. If the clients in your network are WPS capable, you can use Wi-Fi Protected Setup (WPS) to automatically set the SSID and implement WPA/WPA2 security on both the router and the client device (see “Using Push 'N' Connect (Wi-Fi Protected Setup)” on page 2-13).
NETGEAR Wireless-N Router WNR2000 User Manual Table 2-2. Other Features That Enhance Security Security Type Description Disable the wireless router radio. If you disable the wireless router radio, wireless devices cannot communicate with the router at all. You might disable this when you are away or when other users of your network all use wired connections. For more information, see “Viewing Advanced Wireless Settings” on page 2-12. Turn off the broadcast of the wireless network name SSID.
NETGEAR Wireless-N Router WNR2000 User Manual Recording Basic Wireless Settings Setup Information Before and after customizing your wireless settings, print this section, and record the following information. If you are working with an existing wireless network, the person who set up or is responsible for the network can provide this information. Otherwise, you must choose the settings for your wireless network. Either way, record the settings for your wireless network in the spaces provided.
NETGEAR Wireless-N Router WNR2000 User Manual – Passphrase. ______________________________ These characters are case-sensitive. Enter a word or group of printable characters. When you use WPA-PSK, the other devices in the network will not connect unless they are also set to WPA-PSK and are configured with the correct passphrase. Similarly, when you use WPA2-PSK, the other devices in the network will not connect unless they are also set to WPA2-PSK and are configured with the correct passphrase.
NETGEAR Wireless-N Router WNR2000 User Manual 2. Select Wireless Settings under Setup in the main menu. The Wireless Settings screen displays. Figure 2-2 The available settings in this screen are: • Name (SSID). The SSID is also known as the wireless network name. Enter a value of up to 32 alphanumeric characters. When more than one wireless network is active, different wireless network names provide a way to separate the traffic.
NETGEAR Wireless-N Router WNR2000 User Manual • Channel. This field determines which operating frequency is used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby wireless network. The wireless router uses channel bonding technology to extend the bandwidth for data transmission. For more information about the wireless channel frequencies, see the online document that you can access from “Wireless Networking Basics” in Appendix B.
NETGEAR Wireless-N Router WNR2000 User Manual Configuring WEP Wireless Security WEP Shared Key authentication and WEP data encryption can be defeated by a determined eavesdropper using publicly available tools. WEP offers the following options: • Automatic. With the Automatic option, the router will try both Open System and Shared Key authentication. Normally this setting is suitable. If it fails, select Open System or Shared Key.
NETGEAR Wireless-N Router WNR2000 User Manual . Figure 2-3 3. Select the authentication type and encryption strength. 4. You can manually or automatically program the four data encryption keys. These values must be identical on all computers and access points in your network. • Automatic. In the Passphrase field, enter a word or group of printable characters, and click Generate. The passphrase is case-sensitive. For example, NETGEAR is not the same as nETgear.
NETGEAR Wireless-N Router WNR2000 User Manual WPA–Pre-Shared Key does perform authentication. WPA-PSK uses TKIP (Temporal Key Integrity Protocol) data encryption, and WPA2-PSK uses AES (Advanced Encryption Standard) data encryption. Both methods dynamically change the encryption keys making them nearly impossible to circumvent. Mixed mode allows clients using either WPA-PSK (TKIP) or WPA2-PSK (AES).
NETGEAR Wireless-N Router WNR2000 User Manual 4. Click Apply to save your settings. Viewing Advanced Wireless Settings This section describes the wireless settings that you can view and specify in the Advanced Wireless Settings screen, which you access under Advanced in the main menu. To configure the advanced wireless security settings of your router: 1. Log in to the router as described in “Logging In To Your Wireless Router” on page 1-2. 2. Select Wireless Settings under Advanced in the main menu.
NETGEAR Wireless-N Router WNR2000 User Manual • Enable WMM. Clear this check box to disable WMM. WMM (Wireless Multimedia), a subset of the 802.11e standard, allows wireless traffic to have a range of priorities, depending on the kind of data. Time-dependent information, like video or audio, will have a higher priority than normal traffic. For WMM to function correctly, Wireless clients must also support WMM. • Fragmentation Threshold, CTS/RTS Threshold, and Preamble Mode.
NETGEAR Wireless-N Router WNR2000 User Manual • • “Push Button Configuration” “Security PIN Entry” on page 2-15 Push Button Configuration There are two methods to enable a wireless client to join a network using a push button on the router: using the physical push button or using the software button in the Add WPS Client screen. Using the Physical Push Button 1. Press the button on the WNR2000 router for over 5 seconds.
NETGEAR Wireless-N Router WNR2000 User Manual 4. Click the button in the Add WPS Client screen. The Connecting to New Wireless Client screen displays. Figure 2-7 The green button light on the WNR2000 router begins to blink in a regular pattern. While the button light is blinking, you have 2 minutes to enable WPS on the device you are trying to connect to the router. 5. In the wireless client, follow its specific networking instructions to enable WPS, to allow it to connect to the router.
NETGEAR Wireless-N Router WNR2000 User Manual 2. Select Add WPS Client in the main menu, and click Next. 3. Select the PIN Number setup method. Figure 2-8 4. On the wireless client, obtain its security PIN, or follow its specific networking instructions to generate a client security PIN. 5. In the Add WPS Client screen of the WNR2000 router, enter the client security PIN in the Enter Client’s PIN field. 6. Click Next.
NETGEAR Wireless-N Router WNR2000 User Manual Configuring the WPS Settings 1. Log in to the router as described in “Logging In To Your Wireless Router” on page 1-2. 2. Select Wireless Settings under Advanced in the main menu. Figure 2-10 These options are available under WPS Settings: • Router’s PIN. The PIN is displayed so that you can use it to configure the router through WPS (Wi-Fi Protected Setup). It is also displayed on the router’s label. • Disable Router’s PIN.
NETGEAR Wireless-N Router WNR2000 User Manual Connecting Additional Wireless Client Devices after WPS Setup You can add WPS-enabled and non-WPS-enabled client devices. Adding Additional WPS-Enabled Clients To add an additional wireless client device that is WPS enabled: Note: Your wireless settings do not change when you add an additional WPS-enabled client unless you have cleared the Keep Existing Wireless Settings check box (in the Wireless Settings screen).
NETGEAR Wireless-N Router WNR2000 User Manual 4. For information about how to view a list of all devices connected to your router (including wireless and Ethernet connected), see “Viewing a List of Attached Devices” on page 6-7. Restricting Wireless Access by MAC Address When a Wireless Card Access List is configured and enabled, the router checks the MAC address of any wireless device attempting a connection and allows only connections to computers identified on the trusted computers list.
NETGEAR Wireless-N Router WNR2000 User Manual 3. Click Add to add a wireless device to the wireless access control list. The Wireless Card Access Setup screen opens and displays a list of currently active wireless cards and their Ethernet MAC addresses. Figure 2-12 4. If the computer you want appears in the Available Wireless Cards list, you can select the radio button of that computer to capture its MAC address; otherwise, you can manually enter a name and the MAC address of the authorized computer.
NETGEAR Wireless-N Router WNR2000 User Manual 7. Select the Turn Access Control On check box. Note: When configuring the router from a wireless computer whose MAC address is not in the Trusted PC list, if you select Turn Access Control On, you lose your wireless connection when you click Apply. You must then access the wireless router from a wired computer or from a wireless computer that is on the access control list to make any further changes. 8.
NETGEAR Wireless-N Router WNR2000 User Manual To change the administrator password: 1. On the main menu, under Maintenance, select Set Password to display the Set Password screen. Figure 2-13 2. To change the password, first enter the old password, then enter the new password twice. 3. Click Apply. Backing Up Your Configuration The configuration settings of the WNR2000 router are stored within the router in a configuration file. You can back up (save) this file and retrieve it later.
NETGEAR Wireless-N Router WNR2000 User Manual Understanding Your Firewall Your Wireless-N Router Model WNR2000 contains a true firewall to protect your network from attacks and intrusions. A firewall is a device that protects one network from another while allowing communication between the two. Using a process called Stateful Packet Inspection, the firewall analyzes all inbound and outbound traffic to determine whether or not it will be allowed to pass through.
NETGEAR Wireless-N Router WNR2000 User Manual 2-24 Safeguarding Your Network v1.
Chapter 3 Restricting Access From Your Network This chapter describes how to use the content filtering and reporting features of the Wireless-N Router Model WNR2000 to protect your network.
NETGEAR Wireless-N Router WNR2000 User Manual To block access to Internet sites: 1. Select Block Sites under Content Filtering in the main menu. The Block Sites screen displays. Figure 3-1 2. Enable keyword blocking by selecting either Per Schedule or Always. To block by schedule, be sure to specify a time period in the Schedule screen. For information about scheduling, see “Scheduling Blocking” on page 3-5. Block all access to Internet browsing during a scheduled period by entering a dot (.
NETGEAR Wireless-N Router WNR2000 User Manual Since the trusted user is identified by IP address, you should configure that computer with a fixed IP address. 5. Click Apply to save all your settings in the Block Sites screen. Blocking Access to Internet Services The WNR2000 router allows you to block the use of certain Internet services by computers on your network. This is called service blocking or port filtering. Services are functions performed by server computers at the request of client computers.
NETGEAR Wireless-N Router WNR2000 User Manual 3. Specify a service for blocking by clicking Add. The Block Services Setup screen displays. Figure 3-3 4. From the Service Type list, select the application or service to be allowed or blocked. The list already displays several common services, but you are not limited to these choices. To add any additional services or applications that do not already appear, select User Defined.
NETGEAR Wireless-N Router WNR2000 User Manual Blocking Services by IP Address Range In the Filter Services For area, you can block the specified service for a single computer, a range of computers (having consecutive IP addresses), or all computers on your network. Scheduling Blocking The WNR2000 router allows you to specify when blocking is enforced. To schedule blocking: 1. Select Schedule under Content Filtering in the main menu. The Schedule screen displays. Figure 3-4 2.
NETGEAR Wireless-N Router WNR2000 User Manual Be sure to select your time zone in the E-mail screen as described in “Setting the Time Zone” on page 3-9. 3. Click Apply to save your settings. Viewing Logs of Web Access or Attempted Web Access The log is a detailed record of the websites you have accessed or attempted to access. Up to 128 entries are stored in the log. Log entries appear only when keyword blocking is enabled and no log entries are made for the trusted user.
NETGEAR Wireless-N Router WNR2000 User Manual Table 3-1. Log Entry Descriptions Field Description Target address The name or IP address of the website or newsgroup visited or to which access was attempted. Action Whether the access was blocked or allowed. To refresh the log screen, click the Refresh button. To clear the log entries, click the Clear Log button. To e-mail the log immediately, click the Send Log button.
NETGEAR Wireless-N Router WNR2000 User Manual Figure 3-6 2. To receive e-mail logs and alerts from the router, select the Turn E-mail Notification On check box. a. Enter the name of your ISP’s outgoing (SMTP) mail server (such as mail.myISP.com) in the Your Outgoing Mail Server field. You might be able to find this information in the configuration screen of your e-mail program. If you leave this field blank, log and alert messages will not be sent by e-mail. b.
NETGEAR Wireless-N Router WNR2000 User Manual b. Enter your password for the e-mail server in the Password field. 4. You can specify that logs are automatically sent by e-mail with these options: • Send alert immediately. Select this check box for immediate notification of attempted access to a blocked site or service. • Send Logs According to this Schedule. Specifies how often to send the logs: Hourly, Daily, Weekly, or When Full. – Day. Specifies which day of the week to send the log.
NETGEAR Wireless-N Router WNR2000 User Manual 3-10 Restricting Access From Your Network v1.
Chapter 4 Customizing Your Network Settings This chapter describes how to configure advanced networking features of the Wireless-N Router Model WNR2000, including LAN, WAN, and routing settings.
NETGEAR Wireless-N Router WNR2000 User Manual To configure LAN IP settings, select LAN Setup under Advanced in the main menu. The LAN Setup screen displays. Figure 4-1 Configuring a Device Name The device name is a user-friendly name for the router. This name is shown in the Network on Windows Vista and the Network Explorer on all Windows systems. The Device Name field cannot be blank. The default name is WNR2000. 4-2 Customizing Your Network Settings v1.
NETGEAR Wireless-N Router WNR2000 User Manual Configuring LAN TCP/IP Setup Parameters These are advanced settings that you might configure if you are a network administrator and your network contains multiple routers. The router is shipped preconfigured to use private IP addresses on the LAN side and to act as a DHCP server (see “Using the Router as a DHCP Server” on page 4-4). Note: If you change the LAN IP address of the router while connected through the browser, you will be disconnected.
NETGEAR Wireless-N Router WNR2000 User Manual Using the Router as a DHCP Server By default, the router functions as a DHCP server, allowing it to assign IP, DNS server, and default gateway addresses to all computers connected to the router’s LAN. The assigned default gateway address is the LAN address of the router. The router assigns IP addresses to the attached computers from a pool of addresses specified in this screen.
NETGEAR Wireless-N Router WNR2000 User Manual Using Address Reservation When you specify a reserved IP address for a computer on the LAN, that computer always receives the same IP address each time it accesses the router’s DHCP server. Reserved IP addresses should be assigned to computers or servers that require permanent IP settings. Figure 4-2 To reserve an IP address: 1. Click Add. 2. In the IP Address field, enter the IP address to assign to the computer or server.
NETGEAR Wireless-N Router WNR2000 User Manual Using a Dynamic DNS Service If your Internet Service Provider (ISP) gave you a permanently assigned IP address, you can register a domain name and have that name linked with your IP address by public Domain Name Servers (DNS). However, if your Internet account uses a dynamically assigned IP address, you do not know in advance what your IP address will be, and the address can change frequently.
NETGEAR Wireless-N Router WNR2000 User Manual To configure for a Dynamic DNS service: 1. Register for an account with one of the Dynamic DNS service providers whose names appear in the Service Provider list. For example, for DynDNS.org, select www.dynDNS.org. 2. Select the Use a Dynamic DNS Service check box. 3. Select the name of your Dynamic DNS service provider. 4. Enter the host name (or domain name) that your Dynamic DNS service provider gave you. 5. Enter the user name for your Dynamic DNS account.
NETGEAR Wireless-N Router WNR2000 User Manual Configuring the WAN Setup Options The WAN Setup options let you configure a DMZ (demilitarized zone) server, change the Maximum Transmit Unit (MTU) size, and enable the wireless router to respond to a ping on the WAN (Internet) port. Select WAN Setup under Advanced in the main menu. The WAN Setup screen displays.
NETGEAR Wireless-N Router WNR2000 User Manual them, but there are other applications that might not function well. In some cases, one local computer can run the application correctly if that computer’s IP address is entered as the default DMZ server. Warning: DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the firewall, and is exposed to exploits from the Internet.
NETGEAR Wireless-N Router WNR2000 User Manual Configuring NAT Filtering Network Address Translation (NAT) determines how the router processes inbound traffic. Secured NAT provides a secured firewall to protect the computers on the LAN from attacks from the Internet, but might prevent some Internet games, point-to-point applications, or multimedia applications from functioning. Open NAT provides a much less secured firewall, but allows almost all Internet applications to function.
NETGEAR Wireless-N Router WNR2000 User Manual • The Gateway IP Address field specifies that all traffic for these addresses should be forwarded to the ISDN router at 192.168.1.100. • A Metric value of 1 will work since the ISDN router is on the LAN. • Private is selected only as a precautionary security measure in case RIP is activated. To add or edit a static route: 1. Select Static Routes under Advanced in the main menu. The Static Routes screen displays. Figure 4-5 2.
NETGEAR Wireless-N Router WNR2000 User Manual 6. In the Destination IP Address field, enter the IP address of the final destination. 7. In the IP Subnet Mask field, enter the IP subnet mask for this destination. If the destination is a single host, enter 255.255.255.255. 8. In the Gateway IP Address field, enter the gateway IP address, which must be a router on the same LAN segment as the WNR2000 router. 9. In the Metric field, enter a number between 1 and 15 as the metric value.
Chapter 5 Fine-Tuning Your Network This chapter describes how to modify the configuration of the Wireless-N Router Model WNR2000 to allow specific applications to access the Internet or to be accessed from the Internet, and how to make adjustments to enhance your network’s performance.
NETGEAR Wireless-N Router WNR2000 User Manual How Your Computer Accesses a Remote Computer through Your Router When a computer on your network needs to access a computer on the Internet, your computer sends your router a message containing source and destination address and process information. Before forwarding your message to the remote computer, your router must modify the source information and must create and track the communication session so that replies can be routed back to your computer.
NETGEAR Wireless-N Router WNR2000 User Manual 4. The Web server at www.example.com composes a return message with the requested Web page data. The return message contains the following address and port information: • The source address is the IP address of www.example.com. • The source port number is 80, the standard port number for a Web server process. • The destination address is the public IP address of your router. • The destination port number is 33333.
NETGEAR Wireless-N Router WNR2000 User Manual “When you initiate a session with destination port 6667, you must also allow incoming traffic on port 113 to reach the originating computer.” Using steps similar to the preceding example, the following sequence shows the effects of the port triggering rule you have defined: 1. You open an IRC client program, beginning a chat session on your computer. 2.
NETGEAR Wireless-N Router WNR2000 User Manual How Port Forwarding Changes the Communication Process In both of the preceding examples, your computer initiates an application session with a server computer on the Internet. However, you might need to allow a client computer on the Internet to initiate a connection to a server computer on your network. Normally, your router ignores any inbound traffic that is not a response to your own outbound traffic.
NETGEAR Wireless-N Router WNR2000 User Manual How Port Forwarding Differs from Port Triggering The following points summarize the differences between port forwarding and port triggering: • Port triggering can be used by any computer on your network, although only one computer can use it at a time. • Port forwarding is configured for a single computer on your network. • Port triggering does not need to know the computer’s IP address in advance. The IP address is captured automatically.
NETGEAR Wireless-N Router WNR2000 User Manual To configure port forwarding to a local server: 1. Select Port Forwarding/Port Triggering under Advanced in the main menu. The Port Forwarding/Port Triggering screen displays. Figure 5-1 2. From the Service Name list, select the service or game that you will host on your network. If the service does not appear in the list, see the following section, “Adding a Custom Service.” 3.
NETGEAR Wireless-N Router WNR2000 User Manual 2. Click Add Service (see Figure 5-1 on page 5-7).The Ports–Custom Services screen displays. Figure 5-2 3. In the Service Name field, enter a descriptive name. 4. In the Service Type field, select the protocol. If you are unsure, select TCP/UDP. 5. In the Starting Port field, enter the beginning port number. • If the application uses only a single port, enter the same port number in the Ending Port field.
NETGEAR Wireless-N Router WNR2000 User Manual 1. In the table, select the button next to the service name. Figure 5-3 2. Click Edit Service or Delete Service to make changes. 3. Click Apply. Application Example: Making a Local Web Server Public If you host a Web server on your local network, you can use port forwarding to allow Web requests from anyone on the Internet to reach your Web server. To make a local Web server public: 1.
NETGEAR Wireless-N Router WNR2000 User Manual When port triggering is enabled, the router monitors outbound traffic looking for a specified outbound “trigger” port. When the router detects outbound traffic on that port, it remembers the IP address of the local computer that sent the data. The router then temporarily opens the specified incoming port or ports, and forwards incoming traffic on the triggered ports to the triggering computer.
NETGEAR Wireless-N Router WNR2000 User Manual 3. Clear the Disable Port Triggering check box. Note: If the Disable Port Triggering check box is selected after you configure port triggering, port triggering is disabled. However, any port triggering configuration information you added to the router is retained even though it is not used. 4. In the Port Triggering Timeout field, enter a value up to 9999 minutes. This value controls the inactivity timer for the designated inbound ports.
NETGEAR Wireless-N Router WNR2000 User Manual 10. Enter the inbound connection port information in the Connection Type, Starting Port, and Ending Port fields. 11. Click Apply. The service appears in the Port Triggering Portmap table. Figure 5-6 5-12 Fine-Tuning Your Network v1.
NETGEAR Wireless-N Router WNR2000 User Manual Using Universal Plug and Play Universal Plug and Play (UPnP) helps devices, such as Internet appliances and computers, to access the network and connect to other devices as needed. UPnP devices can automatically discover the services from other registered UPnP devices on the network.
NETGEAR Wireless-N Router WNR2000 User Manual • Advertisement Period. The advertisement period is how often the router broadcasts its UPnP information. This value can range from 1 to 1440 minutes. The default period is 30 minutes. Shorter durations ensure that control points have current device status at the expense of additional network traffic. Longer durations might compromise the freshness of the device status but can significantly reduce network traffic. • Advertisement Time To Live.
NETGEAR Wireless-N Router WNR2000 User Manual • • • • Choose placement carefully. For best results, place your router: – Near the center of the area in which your computers will operate. – In an elevated location such as a high shelf where the wirelessly connected computers have line-of-sight access (even if through walls). – Avoid obstacles to wireless signals.
NETGEAR Wireless-N Router WNR2000 User Manual The best MTU setting for NETGEAR equipment is often just the default value, and changing the value might fix one problem but cause another. Leave MTU unchanged unless one of these situations occurs: • You have problems connecting to your ISP, or other Internet service, and either the technical support of the ISP or of NETGEAR recommends changing the MTU size.
NETGEAR Wireless-N Router WNR2000 User Manual To change the MTU size: 1. In the main menu, under Advanced, select WAN Setup. 2. In the MTU Size field, enter a new size between 64 and 1500. 3. Click Apply to save the new configuration. Overview of Home and Small Office Networking Technologies Common connection types and their speed and security considerations are: • Broadband Internet.
NETGEAR Wireless-N Router WNR2000 User Manual The Powerline HD family of products can coexist on the same network with older-generation XE family products or HomePlug 1.0 products, but they are not interoperable with these older products. • Wired Ethernet. As gigabit-speed Ethernet ports (10/100/1000 Mbps) become common on newer computers, wired Ethernet remains a good choice for speed, economy, and security. Gigabit Ethernet can extend up to 100 meters with twisted-pair wiring of Cat 5e or better.
NETGEAR Wireless-N Router WNR2000 User Manual Table 5-2. Theoretical Transfer Time for 1 Gigabyte (continued) Network Connection Theoretical Raw Transfer Time 10 Mbps wired Ethernet 800 seconds Cable modem (3 Mbps) 2700 seconds Analog modem (56 kbps) 144,000 seconds (40 hours) Fine-Tuning Your Network 5-19 v1.
NETGEAR Wireless-N Router WNR2000 User Manual 5-20 Fine-Tuning Your Network v1.
Chapter 6 Using Network Monitoring Tools This chapter describes how to use the maintenance features of your Wireless-N Router Model WNR2000. This chapter includes the following sections: • “Viewing Wireless Router Status Information” • “Viewing a List of Attached Devices” on page 6-7 • “Managing the Configuration File” in Chapter 6 • “Updating the Router Firmware” on page 6-9 • “Enabling Remote Management Access” on page 6-13 6-1 v1.
NETGEAR Wireless-N Router WNR2000 User Manual Viewing Wireless Router Status Information To view router status and usage information: 1. Select Router Status under Maintenance in the main menu. The Router Status screen displays. Figure 6-1 6-2 Using Network Monitoring Tools v1.
NETGEAR Wireless-N Router WNR2000 User Manual Table 6-1 describes the router status fields. Table 6-1. Wireless Router Status Fields Field Description Hardware Version The hardware version of the router. Firmware Version The version of the current software installed in the router. This will change if you update your router. Internet Port. The following settings apply to the Internet (WAN) port of the router. MAC Address The Media Access Control address.
NETGEAR Wireless-N Router WNR2000 User Manual Table 6-1. Wireless Router Status Fields (continued) Field Description Wireless Port. The following settings apply to the wireless port of the router. Name (SSID) The wireless network name (SSID) being used by the wireless port of the router. The default is NETGEAR. Region The geographic region where the router is being used. It might be illegal to use the wireless features of the router in some parts of the world.
NETGEAR Wireless-N Router WNR2000 User Manual 2. Click Connection Status to display the connection status. Figure 6-2 Table 6-2 describes the connection status settings. Table 6-2. Connection Status Settings Item Description IP Address The IP address that is assigned to the router. Subnet Mask The subnet mask that is assigned to the router. Default Gateway The IP address for the default gateway that the router communicates with.
NETGEAR Wireless-N Router WNR2000 User Manual 3. Click Show Statistics to display router usage statistics. Figure 6-3 Table 6-3 describes the router statistics. Table 6-3. Router Statistics Item Description System Up Time The time elapsed since the router was last restarted. Port The statistics for the WAN (Internet) and LAN (Ethernet) ports. For each port, the screen displays the following: Status The link status of the port.
NETGEAR Wireless-N Router WNR2000 User Manual Viewing a List of Attached Devices The Attached Devices screen contains a table of all IP devices that the router has discovered on the local network. Select Attached Devices under Maintenance in the main menu to view the table. Figure 6-4 For each device, the table shows the IP address, NetBIOS host name or device name (if available), and the Ethernet MAC address. To force the router to look for attached devices, click Refresh.
NETGEAR Wireless-N Router WNR2000 User Manual Select Backup Settings under Maintenance in the main menu. The Backup Settings screen displays. Figure 6-5 The following sections describe the three available options. Backing Up and Restoring the Configuration The Restore and Backup options in the Settings Backup screen let you save and retrieve a file containing your router’s configuration settings. To save your settings, click Backup.
NETGEAR Wireless-N Router WNR2000 User Manual Erasing the Configuration Under some circumstances (for example, if you move the router to a different network or if you have forgotten the password) you might want to erase the configuration and restore the factory default settings. After an erase, the router’s username is admin, the password is password, the LAN IP address is 192.168.1.1 (or www.routerlogin.net), and the router’s DHCP server is enabled.
NETGEAR Wireless-N Router WNR2000 User Manual Checking for New Firmware in the Router Upgrade Screen To check for new firmware and allow the router to automatically install it: 1. Select Router Upgrade under Maintenance in the main menu. The Router Upgrade screen displays. Figure 6-6 2. Check for new software versions by clicking the Check button. • If a new version is found, information about it appears. Figure 6-7 6-10 Using Network Monitoring Tools v1.
NETGEAR Wireless-N Router WNR2000 User Manual • If no new firmware version is available, a message displays and the router returns to the Firmware Update screen. Figure 6-8 3. To update your firmware, click Yes and follow the prompts. Warning: When updating firmware to the WNR2000 router, do not interrupt the Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, it could corrupt the firmware.
NETGEAR Wireless-N Router WNR2000 User Manual 3. Compare the version number of the most recent firmware offered to the firmware version of your router. If the version on the NETGEAR website is more recent, download the file from the WNR2000 support page to your computer. 4. Log in to your router and select Router Upgrade under Maintenance on the main menu. 5. Click Browse, and locate the firmware image that you downloaded to your computer (the file ends in .img or .chk). 6.
NETGEAR Wireless-N Router WNR2000 User Manual Enabling Remote Management Access Using the Remote Management feature, you can allow a user on the Internet to configure, upgrade, and check the status of your WNR2000 router. Select Remote Management under Advanced in the main menu. The Remote Management screen displays. Figure 6-10 Note: Be sure to change the router’s default configuration password to a very secure password.
NETGEAR Wireless-N Router WNR2000 User Manual 2. Under Allow Remote Access By, specify what external IP addresses will be allowed to access the router’s remote management. Note: For enhanced security, restrict access to as few external IP addresses as practical. • To allow access from any IP address on the Internet, select Everyone. • To allow access from a range of IP addresses on the Internet, select IP Address Range. Enter a beginning and ending IP address to define the allowed range.
Chapter 7 Troubleshooting This chapter provides information about troubleshooting your Wireless-N Router Model WNR2000. After each problem description, instructions are provided to help you diagnose and solve the problem. As a first step, please review the Quick Tips. Tip: NETGEAR provides helpful articles, documentation, and the latest software updates at http://www.netgear.com/support.
NETGEAR Wireless-N Router WNR2000 User Manual 4. Turn on the wireless router and wait 1 minute. 5. Turn on the computers. Make sure that the Ethernet cables are securely plugged in. • The Internet status light on the wireless router is on if the Ethernet cable connecting the wireless router and the modem is plugged in securely and the modem and wireless router are turned on.
NETGEAR Wireless-N Router WNR2000 User Manual 3. After approximately 20 seconds, verify that: a. The color of the power light changes to green. b. The LAN port lights are lit for any local ports that are connected. If a port’s light is lit, a link has been established to the connected device. If a LAN port is connected to a 100 Mbps device, verify that the port’s light is green. If the port is 10 Mbps, the light will be amber. c. The Internet port is connected and its light is lit. 4.
NETGEAR Wireless-N Router WNR2000 User Manual The Power light stays amber. When the router is turned on, the Power light turns amber for about 20 seconds and then turns green. If the light does not turn green, the router has a problem. If the Power light is still amber 1 minute after turning on power to the router: 1. Turn the power off and back on to see if the router recovers. 2. Clear the router’s configuration to factory defaults. This will set the router’s IP address to www.routerlogin.net.
NETGEAR Wireless-N Router WNR2000 User Manual 2. Check that PIN verification has succeeded for the WPS-enabled device you are connecting to the router. 3. Make sure you have not pushed the push-button after disabling the WPS function (you logged into the router and disabled this previously). 4. Check that the router is not in the temporary AP setup locked state (if you are using the wireless repeater function). For more information on WPS, see “Using Push 'N' Connect (Wi-Fi Protected Setup)” on page 2-13.
NETGEAR Wireless-N Router WNR2000 User Manual • If you are attempting to set up your NETGEAR router as an additional router behind an existing router in your network, consider replacing the existing router instead. NETGEAR does not support such a configuration. • If you are attempting to set up your NETGEAR router as a replacement for an ADSL gateway in your network, the router cannot perform many gateway services, for example, converting ADSL or Cable data into Ethernet networking information.
NETGEAR Wireless-N Router WNR2000 User Manual • You might need to force your cable or DSL modem to recognize your new router by restarting your network, in the sequence described in the NETGEAR Wireless-N Router Setup Manual. • Your service provider might require a login. Ask your service provider whether they require a PPP over Ethernet (PPPoE) login (see “Troubleshooting PPPoE” on page 7-7). • You might have incorrectly set the service name, user name or password.
NETGEAR Wireless-N Router WNR2000 User Manual Troubleshooting Internet Browsing If your wireless router can obtain an IP address but your computer is unable to load any web pages from the Internet, check the following: • Your computer might not recognize any DNS server addresses. A DNS server is a host on the Internet that translates Internet names (such as www addresses) to numeric IP addresses. Typically, your ISP will provide the addresses of one or two DNS servers for your use.
NETGEAR Wireless-N Router WNR2000 User Manual Testing the LAN Path to Your Router You can ping the router from your computer to verify that the LAN path to your router is set up correctly. To ping the router from a running Windows PC: 1. From the Windows toolbar, click Start, and then select Run. 2. In the field provided, type ping followed by the IP address of the router, as in this example: ping www.routerlogin.net 3. Click OK.
NETGEAR Wireless-N Router WNR2000 User Manual Testing the Path from Your Computer to a Remote Device After verifying that the LAN path works correctly, test the path from your computer to a remote device. 1. From the Windows toolbar, click the Start button, and then select Run. 2. In the Windows Run window, type: ping -n 10 where is the IP address of a remote device such as your ISP’s DNS server.
NETGEAR Wireless-N Router WNR2000 User Manual • Date shown is January 1, 2000. Cause: The router has not yet successfully reached a network time server. Check that your Internet access settings are correct. If you have just completed configuring the router, wait at least 5 minutes, and check the date and time again. • Time is off by one hour. Cause: The router does not adjust for daylight savings time. In the E-mail screen, select the Automatically Adjust for Daylight Savings Time check box.
NETGEAR Wireless-N Router WNR2000 User Manual If your wireless network appears, but the signal strength is weak, check these conditions: • Is your router too far from your adapter, or too close? Place the computer that has the adapter near the router, but at least 6 feet away, and see whether the signal strength improves. • Is your wireless signal obstructed by objects between the router and your adapter? See “Optimizing Wireless Performance” on page 5-14.
Appendix A Technical Specifications Default Configuration Settings This appendix provides factory default settings and technical specifications for the Wireless-N Router Model WNR2000. Table A-1. WNR2000 Router Default Configuration Settings Feature Default Setting Router Login Router Login URL http://www.routerlogin.net or http://www.routerlogin.
NETGEAR Wireless-N Router WNR2000 User Manual Table A-1.
NETGEAR Wireless-N Router WNR2000 User Manual General Specifications Table A-2. WNR2000 Router General Specifications Feature General Network Protocol and Standards Compatibility Data and Routing Protocols TCP/IP, RIP-1, RIP-2, DHCP, PPPoE, PPTP, Bigpond, Dynamic DNS, and UPnP Power Adapter North America 120V, 60 Hz, input UK, Australia 240V, 50 Hz, input Europe 230V, 50 Hz, input Japan 100V, 50/60 Hz, input All regions (output) 12V DC @ 1.0A, output Physical Dimensions 7" x 5.1" x 1.4" 177.
NETGEAR Wireless-N Router WNR2000 User Manual A-4 Technical Specifications v1.
Appendix B Related Documents This appendix provides links to reference documents you can use to gain a more complete understanding of the technologies used in your NETGEAR product. Table B-1. Reference Documents Document Link TCP/IP Networking Basics http://documentation.netgear.com/reference/enu/tcpip/index.htm Wireless Networking Basics http://documentation.netgear.com/reference/enu/wireless/index.htm Preparing Your Network http://documentation.netgear.com/reference/enu/wsdhcp/index.
NETGEAR Wireless-N Router WNR2000 User Manual B-2 Related Documents v1.
Index A inbound traffic 5-1 access blocking 3-1 remote 6-13 restricting by MAC address 2-19 to a remote computer 5-2 to the router 1-2 viewing logs 3-6 bold text xi access control turning off 1-12 turning on 2-21 channel, frequency 2-8 broadband Internet 5-17 broadcast status 6-4 C cables, checking 7-2 channel, wireless port 6-4 clients, adding 2-13, 2-18, 6-4 account name 1-6 communication mode 2-8, 6-4 adding custom service 5-7 reserved IP addresses 4-5 static routes 4-11 wireless clients 2-13,
NETGEAR Wireless-N Router WNR2000 User Manual customer support ii Ethernet MAC address 6-7 D F data packets, fragmented 5-15 factory default settings listed A-1 restoring 7-12 date and time, troubleshooting 7-10 daylight savings time 3-9, 7-11 default DMZ server 4-8 default factory settings listed A-1 restoring 7-12 default gateway 6-5 filtering content 3-1 firewalls default settings A-2 disabling 4-8 overview 2-23 deleting configuration 6-9 firmware restoring 7-3 updating 1-3, 6-3, 6-9 device nam
NETGEAR Wireless-N Router WNR2000 User Manual Internet services, blocking access 3-3 entering 1-7 restricting access by 2-19 spoofing 7-7 interval, poll 6-6 IP addresses blocking access by 3-5 current 6-3 dynamic or static 1-7 LAN 4-3 registering domain name 4-6 reserved 4-5 IP subnet mask 4-3, 6-3 mail server, outgoing 3-8 managing router remotely 6-13 metric value 4-12 mixed mode encryption 2-3, 2-11 mode, communication 2-8, 6-4 MTU size 4-9, 5-15 ISP settings, basic 1-5 italic text xi N NAT (Network
NETGEAR Wireless-N Router WNR2000 User Manual port forwarding configuring 5-6 example 5-5 port numbers 3-3 port status 6-6 port triggering configuring 5-9 example 5-3 restoring firmware 7-3 restricting access by MAC address 2-19 revision history xiii RIP (Router Information Protocol) direction 4-3 route name 4-11, 4-12 router PIN 2-15, 2-17 router status, viewing 6-2 portmap table 5-14 power adapter specifications A-3 S Power light, troubleshooting and 7-2 scheduling blocking 3-5 Powerline HD products
NETGEAR Wireless-N Router WNR2000 User Manual streaming video and audio 5-18 status 6-2 subnet mask 4-3, 6-3 W system up time 6-6 WAN setup 4-8 T WEP encryption 2-3, 2-9 TCP/IP network, troubleshooting 7-8 Wi-Fi Protected Setup (WPS) 2-13, 6-4, 7-4 technical specifications A-1 wildcards, DNS and 4-7 Telstra Bigpond 1-9 Wireless Card Access List 2-19 testing wireless connections 1-10 wireless client PIN 2-15 time of day, troubleshooting 7-10 wireless clients, adding 2-13, 2-18, 6-4 time to
NETGEAR Wireless-N Router WNR2000 User Manual Index-6 v1.
