background image

NETGEAR Wireless-N 300 Router JWNR2000 User Manual 

Fine-Tuning Your Network

5-9

v1.0, February 2010

Editing or Deleting a Port Forwarding Entry

To edit or delete a port forwarding entry:

1.

In the table, select the button next to the service name.

2.

Click 

Edit Service

 or 

Delete Service

 to make changes.

3.

Click 

Apply

.

Application Example: Making a Local Web Server Public

If you host a Web server on your local network, you can use port forwarding to allow Web requests 
from anyone on the Internet to reach your Web server. 

To make a local Web server public:

1.

Assign your Web server either a fixed IP address or a dynamic IP address using DHCP address 
reservation, as explained in 

“Using Address Reservation” on page 4-5

. In this example, your 

router will always give your Web server an IP address of 192.168.1.33. 

2.

In the Port Forwarding screen, configure the router to forward the HTTP service to the local 
address of your Web server at 

192.168.1.33

HTTP (port 80) is the standard protocol for Web servers.

3.

(Optional) Register a host name with a Dynamic DNS service, and configure your router to 
use the name as described in 

“Using a Dynamic DNS Service” on page 4-6

To access your Web server from the Internet, a remote user must know the IP address that has 
been assigned by your ISP. However, if you use a Dynamic DNS service, the remote user can 
reach your server by a user-friendly Internet name, such as mynetgear.dyndns.org.

Figure 5-3

Summary of Contents for JWNR2000 - Wireless- N 300 Router

Page 1: ...202 10625 01 February 2010 v1 0 NETGEAR Inc 350 East Plumeria Drive San Jose CA 95134 USA NETGEAR Wireless N 300 Router JWNR2000 User Manual ...

Page 2: ...r Importer It is hereby certified that the Wireless N 300 Router Model JWNR2000 has been suppressed in accordance with the conditions set out in the BMPT AmtsblVfg 243 1991 and Vfg 46 1992 The operation of some equipment for example test transmitters in accordance with the regulations may however be subject to certain restrictions Please refer to the notes in the operating instructions Federal Off...

Page 3: ...ctions In Italy the end user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and or for supplying public access to telecommunications and or network services This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP ...

Page 4: ...Inc jiddikjara li dan JWNR2000 jikkonforma mal htigijiet essenzjali u ma provvedimenti ohrajn relevanti li hemm fid Dirrettiva 1999 5 EC Magyar Hungarian Alulírott NETGEAR Inc nyilatkozom hogy a JWNR2000 megfelel a vonatkozó alapvetõ követelményeknek és az 1999 5 EC irányelv egyéb elõírásainak Polski Polish Niniejszym NETGEAR Inc oświadcza że JWNR2000 jest zgodny z zasadniczymi wymogami oraz pozos...

Page 5: ...ion Exposure Statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interfer...

Page 6: ...er Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected Consult the dealer or an experienced radio TV technician for help Modifications made to the product unless expressly approved by NETGEAR Inc could void the user s right to operate the equipment Industry Canada IC This Class B digital apparatus complies with Canadian ICE 003 Cet...

Page 7: ...Publication Details Model Number JWNR2000 Publication Date February 2010 Product Family Wireless Router Product Name Wireless N 300 Router Model JWNR2000 Home or Business Product Home Language English Publication Part Number 202 10625 01 ...

Page 8: ...v1 0 February 2010 viii ...

Page 9: ...Appropriate Wireless Security 2 1 Recording Basic Wireless Settings Setup Information 2 5 Changing Wireless Security Settings 2 6 Viewing Basic Wireless Settings 2 6 Configuring WEP Wireless Security 2 9 Configuring WPA PSK and WPA2 PSK Wireless Security 2 10 Viewing Advanced Wireless Settings 2 12 Using Push N Connect Wi Fi Protected Setup 2 13 Push Button Configuration 2 14 Security PIN Entry 2 ...

Page 10: ...TCP IP Setup Parameters 4 3 Using the Router as a DHCP Server 4 4 Using Address Reservation 4 5 Using a Dynamic DNS Service 4 6 Configuring the WAN Setup Options 4 8 Disabling the SPI Firewall 4 8 Setting Up a Default DMZ Server 4 8 Responding to a Ping on the Internet WAN Port 4 9 Setting the MTU Size 4 9 Configuring NAT Filtering 4 10 Configuring Static Routes 4 10 Wireless Repeating Also Called...

Page 11: ...g Your Speed Requirements 5 25 Chapter 6 Using Network Monitoring Tools Viewing Wireless Router Status Information 6 2 Viewing a List of Attached Devices 6 7 Managing the Configuration File 6 7 Backing Up and Restoring the Configuration 6 8 Erasing the Configuration 6 9 Updating the Router Firmware 6 9 Checking for New Firmware in the Router Upgrade Screen 6 10 Updating Manually to New Router Firm...

Page 12: ... Your Computer to a Remote Device 7 9 Problems with Date and Time 7 9 Problems with Wireless Adapter Connections 7 10 Restoring the Default Configuration and Password 7 11 Appendix A Technical Specifications Default Configuration Settings A 1 General Specifications A 3 Appendix B Related Documents Index ...

Page 13: ...f this manual are described in the following paragraphs Typographical conventions This manual uses the following typographical conventions Formats This manual uses the following formats to highlight special messages Italic Emphasis books CDs Bold User input GUI screen text Fixed Command prompt CLI text code Italic URL links Note This format is used to highlight information of importance or special...

Page 14: ...e free Adobe Acrobat reader installed in order to view and print PDF files The Acrobat reader is available on the Adobe Web site at http www adobe com Danger This is a safety warning Failure to take heed of this notice might result in personal injury or death Product Version Wireless N 300 Router Model JWNR2000 Manual Publication Date February 2010 Note Product updates are available on the NETGEAR...

Page 15: ...nstantly searching for ways to improve its products and documentation The following table indicates any changes that might have been made since the JWNR2000 router was introduced Table 2 1 Publication Revision History Part Number Version Number Date Description 202 10625 01 1 0 February 2010 First publication ...

Page 16: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual xiv v1 0 February 2010 ...

Page 17: ...ng the Smart Setup Wizard on page 1 5 Viewing and Configuring Basic ISP Settings on page 1 5 Setting Up and Testing Basic Wireless Connectivity on page 1 10 Using the Setup Manual For first time installation of your wireless router refer to the NETGEAR Wireless Router Setup Manual The Setup Manual explains how to launch the NETGEAR Smart Wizard on the Resource CD to step you through the procedure ...

Page 18: ... 2 Enter admin for the router user name and your password or the default password For information about how to change the password see Changing the Administrator Password on page 2 21 Figure 1 1 Tip You can connect to the wireless router by typing either of these URLs in the address field of your browser and then pressing Enter http www routerlogin net http www routerlogin com If these URLs do not...

Page 19: ...f no new firmware is available the message on the right displays To automatically update to the new firmware click Yes to allow the router to download and install the new firmware file from NETGEAR When the upload is complete your router automatically restarts The update process typically takes about 1 minute Figure 1 2 Figure 1 3 Warning When uploading firmware to the JWNR2000 router do not inter...

Page 20: ... settings If the wireless router is connected to the Internet you can select Knowledge Base under Web Support in the main menu to view support information for the wireless router If you do not click Logout the wireless router will wait for 5 minutes after no activity before it automatically logs you out Figure 1 4 Note If the Check for New Version Upon Log in check box is selected the home page is...

Page 21: ...the Internet connection settings 1 Select Setup Wizard from the top of the main menu 2 Click Next to proceed Enter your ISP settings as needed 3 At the end of the Setup Wizard click Test to verify your Internet connection If you have trouble connecting to the Internet see Chapter 7 Troubleshooting Viewing and Configuring Basic ISP Settings Settings related to your Internet service are specified in...

Page 22: ...ISP during a DHCP request from your router In most cases this setting is not required but some ISPs require it for access to ISP services such as mail or news servers Domain Name The domain name is provided by your router to computers on your LAN when the computers request DHCP settings from your router In most cases this settings is not required Figure 1 5 ISP does not require login ...

Page 23: ...If a secondary DNS server address is available enter it also Router MAC Address This section determines the Ethernet MAC address that the router will use on the Internet port Typically you would leave Use Default Address selected However some ISPs especially cable modem providers register the Ethernet MAC address of the network interface card in your computer when your account is first opened They...

Page 24: ...ection requires a login After you select Yes the Basic Settings screen displays Internet Service Provider This drop down list contains a few ISPs that need special protocols for connection The list includes PPTP Point to Point Tunneling Protocol used primarily in Austrian DSL services Figure 1 6 Note After you finish setting up your router you will no longer need to launch the ISP s login program ...

Page 25: ...e If your connection is capable of connecting to multiple Internet services this setting specifies which service to use Connection Mode This drop down list selects when the router will connect to and disconnect from the Internet Note The Telstra Bigpond setting is only for older cable modem service accounts still requiring a Bigpond login utility Telstra has discontinued this type of account Those...

Page 26: ... ISP does not automatically transmit DNS addresses to the router during login select Use These DNS Servers and enter the IP address of your ISP s primary DNS server If a secondary DNS server address is available enter it also Setting Up and Testing Basic Wireless Connectivity Follow these instructions to set up and test basic wireless connectivity Once you have established basic wireless connectiv...

Page 27: ...ing frequency is used It should not be necessary to change the wireless channel unless you notice interference problems with another nearby wireless router or access point Select a channel that is not being used by any other wireless networks within several hundred feet of your router For more information about the wireless channel frequencies click the link to the online document Wireless Network...

Page 28: ...ontrol On check box is not selected 12 Configure and test your wireless computer for wireless connectivity Program the wireless adapter of your computer to have the same SSID and channel that you specified in the router and disable encryption Check that your computer has a wireless link and can obtain an IP address by DHCP from the router Note If you are configuring the router from a wireless comp...

Page 29: ...tivity 1 13 v1 0 February 2010 Once your computer has basic wireless connectivity to the router you can configure the advanced wireless security functions of the computer and router for more information about security and these settings see Chapter 2 Safeguarding Your Network ...

Page 30: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual 1 14 Configuring Basic Connectivity v1 0 February 2010 ...

Page 31: ...ns well beyond your walls Operating an unsecured wireless network creates an opportunity for outsiders to eavesdrop on your network traffic or to enter your network to access your computers and files Indoors computers can connect over 802 11g n wireless networks at ranges of up to 300 feet Such distances can allow for others outside your immediate area to access your network Use the security featu...

Page 32: ...ttings on page 2 6 Advanced Wireless Settings You access these under Advanced in the main menu see Viewing Advanced Wireless Settings on page 2 12 Note NETGEAR recommends that you change the administration password of your router Default passwords are well known and an intruder can use your administrator access to read or disable your security settings For information about how to change the admin...

Page 33: ...ommended only for troubleshooting wireless connectivity Do not run an unsecured wireless network unless it is your intention to provide free Internet access for the public WEP Wired Equivalent Privacy Wired Equivalent Privacy WEP data encryption provides moderate data security WEP Shared Key authentication and WEP data encryption can be defeated by a determined eavesdropper using publicly availabl...

Page 34: ... 12 Restrict access based on MAC address You can restrict access to only trusted computers so that unknown computers cannot wirelessly connect to the JWNR2000 router MAC address filtering adds an obstacle against unwanted access to your network by the general public but the data broadcast over the wireless link is fully exposed This data includes your trusted MAC addresses which can be read and im...

Page 35: ...hentication is used circle one Open System Shared Key or Auto WEP Encryption Key Size Choose one 64 bit or 128 bit Again the encryption key size must be the same for the wireless adapters and the wireless router Data Encryption WEP Keys There are two methods for creating WEP data encryption keys Whichever method you use record the key values in the spaces provided Passphrase Method _______________...

Page 36: ...her devices in the network will not connect unless they are also set to WPA2 PSK and are configured with the correct passphrase Use the procedures described in the following sections to specify the JWNR2000 router Store this information in a safe place Changing Wireless Security Settings This section describes the wireless settings that you can view and configure in the Wireless Settings screen wh...

Page 37: ...ss network names provide a way to separate the traffic For a wireless device to participate in a particular wireless network it must be configured with the SSID for that network The JWNR2000 default SSID is NETGEAR You can disable this broadcast as described in Viewing Advanced Wireless Settings on page 2 12 Region This field identifies the region where the JWNR2000 router can be used It might not...

Page 38: ...hannel and expand to the secondary channel primary channel 4 or 4 to achieve a 40 MHz frame by frame bandwidth The JWNR2000 router will detect channel usage and will disable frame by frame expansion if the expansion would result in interference with the data transmission of other access points or clients Security Options The selection of wireless security options can significantly affect your netw...

Page 39: ...the network This setting provides very little practical wireless security Shared Key With Shared Key authentication a wireless device must know the WEP key to join the network Select the encryption strength 64 or 128 bit data encryption Manually enter the key values or enter a word or group of printable characters in the Passphrase field Manually entered keys are not case sensitive but passphrase ...

Page 40: ...igits any combination of 0 9 a f or A F These entries are not case sensitive For example AA is the same as aa Select which of the four keys to activate 5 Click Apply to save your settings Configuring WPA PSK and WPA2 PSK Wireless Security Wi Fi Protected Access with Pre Shared Key WPA PSK and WPA2 PSK data encryption provides extremely strong data security very effectively blocking eavesdropping B...

Page 41: ... PSK WPA2 PSK 1 Select Wireless Settings under Setup in the main menu The Wireless Settings screen displays 2 Select one of the WPA PSK or WPA2 PSK options for the security type The third option WPA PSK TKIP WP2 PSK AES is the most flexible since it allows clients using either WPA PSK or WPA2 PSK 3 In the Passphrase field enter a word or group of 8 63 printable characters The passphrase is case se...

Page 42: ...r on page 1 2 2 Select Wireless Settings under Advanced in the main menu The advanced Wireless Settings screen displays The available settings in this screen are Enable Wireless Router Radio If you disable the wireless router radio wireless devices cannot connect to the JWNR2000 router If you will not be using your wireless network for a period of time you can clear this check box and disable all ...

Page 43: ...otected Setup If your wireless clients support Wi Fi Protected Setup WPS you can use this feature to configure the router s network name SSID and security settings and at the same time connect a wireless client securely and easily to the router Look for the WPS push button on the rear panel of your client device WPS automatically configures the network name SSID and wireless security settings for ...

Page 44: ...k in a regular pattern While the light is blinking you have 2 minutes to enable WPS on the client that you are trying to connect to the router 2 On the wireless client follow its specific networking instructions to enable WPS to allow it to connect to the router The JWNR2000 router s WPS LED ceases blinking and remains on when one of these conditions occurs The router and the client establish a wi...

Page 45: ...the client establish a wireless connection The 2 minute window period expires for establishing a WPS connection If the connection is not established no WPS security settings will be specified in the JWNR2000 router Security PIN Entry There are two ways to enable a wireless client to join a network using a PIN using the router s security PIN or using the wireless client s security PIN Using the Rou...

Page 46: ...r setup method 4 On the wireless client obtain its security PIN or follow its specific networking instructions to generate a client security PIN 5 In the Add WPS Client screen of the JWNR2000 router enter the client security PIN in the Enter Client s PIN field 6 Click Next The following screen displays and the Smart Wizard initiates the wireless connection Figure 2 8 Figure 2 9 ...

Page 47: ...an still add WPS enabled wireless clients The router might disable the PIN if it detects suspicious attempts to break into your wireless settings this can happen if the check box is selected You can enable the PIN by clearing the check box and clicking Apply Keep Existing Wireless Settings This check box is automatically selected after WPS is enabled to prevent unwanted settings changes and is als...

Page 48: ...ireless Settings screen for WPA PSK or WPA2 PSK security and record that information See Configuring WPA PSK and WPA2 PSK Wireless Security on page 2 10 When you change security settings all existing connected wireless clients that do not share those settings are disassociated and disconnected from the router 2 For the non WPS enabled devices that you wish to connect open the networking utility an...

Page 49: ...e correct SSID and wireless security settings to access the wireless router The MAC address is a network device s unique 12 character physical address containing the hexadecimal characters 0 9 a f or A F only and separated by colons for example 00 09 AB CD EF 01 It can usually be found on the bottom of the wireless card or network interface device If you do not have access to the physical label yo...

Page 50: ...ss otherwise you can manually enter a name and the MAC address of the authorized computer You can usually find the MAC address on the bottom of the wireless device 5 Click Add to add this wireless device to the Wireless Card Access List The screen changes back to the list screen 6 Repeat step 3 through step 5 for each additional device you want to add to the list Figure 2 12 Tip You can copy and p...

Page 51: ...rom a wired computer or from a wireless computer that is on the access control list to make any further changes Warning MAC address filtering adds an obstacle against unwanted access to your network by the general public However because your trusted MAC addresses appear in your wireless transmissions an intruder can read them and impersonate them Do not rely on MAC address filtering alone to secur...

Page 52: ...tion file after you complete the configuration If the router fails or becomes corrupted or an administrator password is lost you can easily re create your configuration by restoring the configuration file For instructions on saving and restoring your configuration file see Managing the Configuration File on page 6 7 Figure 2 13 Tip Before saving your configuration file change the administrator pas...

Page 53: ...bed in Blocking Access to Internet Sites on page 3 1 Blocking services Block the use of certain Internet services by specific computers on your network This feature is described in Blocking Access to Internet Services on page 3 3 Scheduled blocking Block sites and services according to a daily schedule This feature is described in Scheduling Blocking on page 3 5 Allow inbound access to your server...

Page 54: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual 2 24 Safeguarding Your Network v1 0 February 2010 ...

Page 55: ...Overview The Wireless N 300 Router Model JWNR2000 provides you with Web content filtering options plus browser activity reporting and instant alerts through e mail Parents and network administrators can establish restricted access policies based on time of day Web addresses and Web address keywords You can also block Internet access by applications and services such as chat rooms or games Blocking...

Page 56: ...ng on page 3 5 Block all access to Internet browsing during a scheduled period by entering a dot as the keyword and then set a schedule in the Schedule screen 3 Add a keyword or domain by entering it in the keyword field and clicking Add Keyword The keyword or domain name then appears the Block sites containing these keywords or domain names list Delete a keyword or domain name by selecting it fro...

Page 57: ... servers serve time and date information and game hosts serve data about other players moves When a computer on your network sends a request for service to a server computer on the Internet the requested service is identified by a service or port number This number appears as the destination port number in the transmitted IP packets For example a packet that is sent with destination port number 80...

Page 58: ...rotocols are defined by the Internet Engineering Task Force IETF and published in RFC1700 Assigned Numbers Service numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of the application You can often determine port number information by contacting the publisher of the application by asking user groups or newsgroups or by searching Enter the starting port...

Page 59: ...king The JWNR2000 router allows you to specify when blocking is enforced To schedule blocking 1 Select Schedule under Content Filtering in the main menu The Schedule screen displays 2 Configure the schedule for blocking keywords and services a Days to Block Select days on which you want to apply blocking by selecting the appropriate check boxes Select Every Day to select the check boxes for all da...

Page 60: ...ailed record of the websites you have accessed or attempted to access Up to 128 entries are stored in the log Log entries appear only when keyword blocking is enabled and no log entries are made for the trusted user Select Logs under Content Filtering in the main menu The Logs screen displays Table 3 1 describes the log entries Figure 3 5 Table 3 1 Log Entry Descriptions Field Description Date and...

Page 61: ... E mail Alert and Web Access Log Notifications To receive logs and alerts by e mail you must provide your e mail account information To configure e mail alert and web access log notifications 1 Select E mail under Content Filtering in the main menu The E mail screen displays Target address The name or IP address of the website or newsgroup visited or to which access was attempted Action Whether th...

Page 62: ...ormation in the configuration screen of your e mail program If you leave this field blank log and alert messages will not be sent by e mail b Enter the e mail address to which logs and alerts are sent in the Send To This E mail Address field This e mail address will also be used as the From address If you leave this field blank log and alert messages will not be sent by e mail 3 If your e mail ser...

Page 63: ...sent the log is cleared from the router s memory If the router cannot e mail the log file the log buffer might fill up In this case the router overwrites the log and discards its contents 5 Click Apply to save your settings So that the log entries are correctly time stamped and sent at the correct time be sure to set the time as described in the next section Setting the Time Zone The JWNR2000 rout...

Page 64: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual 3 10 Restricting Access From Your Network v1 0 February 2010 ...

Page 65: ...s It contains the following sections Using the LAN IP Setup Options Using a Dynamic DNS Service on page 4 6 Configuring the WAN Setup Options on page 4 8 Configuring Static Routes on page 4 10 Wireless Repeating Also Called WDS on page 4 12 Using the LAN IP Setup Options The LAN Setup screen allows configuration of LAN IP services such as Dynamic Host Configuration Protocol DHCP and Routing Inform...

Page 66: ... select LAN Setup under Advanced in the main menu The LAN Setup screen displays Configuring a Device Name The device name is a user friendly name for the router This name is shown in the Network on Windows Vista and the Network Explorer on all Windows systems The Device Name field cannot be blank The default name is JWNR2000 Figure 4 1 ...

Page 67: ...d with the IP address the IP subnet mask allows a device to know which other addresses are local to it and which must be reached through a gateway or router RIP Direction RIP allows a router to exchange routing information with other routers The RIP Direction selection controls how the router sends and receives RIP packets Both is the default When set to Both or In Only the router incorporates the...

Page 68: ...art of the range for devices with fixed addresses The router delivers the following parameters to any LAN device that requests DHCP An IP address from the range you have defined Subnet mask Gateway IP address the router s LAN IP address Primary DNS server if you entered a primary DNS address in the Basic Settings screen otherwise the router s LAN IP address Secondary DNS server if you entered a se...

Page 69: ...gn to the computer or server Choose an IP address from the router s LAN subnet such as 192 168 1 x 3 Enter the MAC address of the computer or server 4 Click Apply to enter the reserved address into the table To edit or delete a reserved address entry 1 Click the button next to the reserved address you want to edit or delete 2 Click Edit or Delete Figure 4 2 Tip If the computer is already present o...

Page 70: ... traffic directed at your domain to your frequently changing IP address Your router contains a client that can connect to the Dynamic DNS service provided by DynDNS org You must first visit their website at www dyndns org and obtain an account and host name which you specify in the router Then whenever your ISP assigned IP address changes your router automatically contacts the Dynamic DNS service ...

Page 71: ... DNS service provider 4 Enter the host name or domain name that your Dynamic DNS service provider gave you 5 Enter the user name for your Dynamic DNS account This is the name that you use to log in to your account not your host name 6 Enter the password or key for your Dynamic DNS account 7 If your Dynamic DNS provider allows the use of wildcards in resolving your URL you can select the Use Wildca...

Page 72: ...ection SPI firewall protects your network and computers against attacks and intrusions A stateful packet firewall carefully inspects incoming traffic packets looking for known exploits such as malformed oversized or out of sequence packets The firewall should be disabled only in special circumstances such as when you are troubleshooting application issues Setting Up a Default DMZ Server The defaul...

Page 73: ... Ping on the Internet WAN Port If you want the router to respond to a ping from the Internet select the Respond to Ping on Internet Port check box This should be used only as a diagnostic tool since it allows your router to be discovered by Internet scanners Do not select this check box unless you have a specific reason to do so such as when troubleshooting your connection Setting the MTU Size The...

Page 74: ...itional static routes You must configure static routes only for unusual cases such as multiple routers or multiple IP subnets located on your network As an example of when a static route is needed consider the following case Your primary Internet access is through a cable modem to an ISP You have an ISDN router on your home network for connecting to the company where you are employed This router s...

Page 75: ...ecautionary security measure in case RIP is activated To add or edit a static route 1 Select Static Routes under Advanced in the main menu The Static Routes screen displays 2 Click Add to expand the Static Routes screen 3 In the Route Name field enter a name for this static route This is for identification purposes only 4 Select the Private check box if you want to limit access to the LAN only If ...

Page 76: ... value This represents the number of routers between your network and the destination Usually a setting of 2 or 3 works but if this is a direct connection set it to 1 10 Click Apply to have the static route entered into the table Wireless Repeating Also Called WDS The JWNR2000 router can be used with a wireless access point AP to build large bridged wireless networks Wireless repeating is a type o...

Page 77: ...ust be configured to operate in the same LAN network address range as the APs If you make changes in the Wireless Settings screen click Apply so that they take effect Wireless Repeating Function You can view or change wireless repeater settings for the wireless router From the main menu of the browser interface under Advanced click Wireless Repeating Function to display the Wireless Repeating Func...

Page 78: ... this screen The router still communicates with wire connected LAN devices Setting Up the Base Station The wireless repeating function works only in hub and spoke mode The units cannot be daisy chained You must know the wireless settings for both units You must know the MAC address of the remote unit First set up the base station and then set up the repeater To set up the base station 1 Set up bot...

Page 79: ...tings see Setting Up and Testing Basic Wireless Connectivity on page 1 10 3 In the Wireless Repeating Function screen select the Enable Wireless Repeating Function check box and the Wireless Repeater radio button 4 Fill in the IP Address field This IP address must be in the same subnet as the base station but different from the LAN IP of the base station 5 Fill in the Base Station MAC Address fiel...

Page 80: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual 4 16 Customizing Your Network Settings v1 0 February 2010 ...

Page 81: ...uality of Service on page 5 18 Overview of Home and Small Office Networking Technologies on page 5 24 Allowing Inbound Connections to Your Network By default the JWNR2000 router blocks any inbound traffic from the Internet to your computers except for replies to your outbound traffic However you might need to create exceptions to this rule for the following purposes To allow remote computers on th...

Page 82: ...ge with the following address and port information The source address is your computer s IP address The source port number is 5678 the browser session The destination address is the IP address of www example com which your computer finds by asking a DNS server The destination port number is 80 the standard port number for a Web server process Your computer then sends this request message to your r...

Page 83: ...e browser session that made the initial request Your router then sends this reply message to your computer which displays the Web page from www example com 6 When you finish your browser session your router eventually senses a period of inactivity in the communications Your router then removes the session information from its session table and incoming traffic is no longer accepted on port number ...

Page 84: ...NAT assigned source port as in the previous example let s say port 33333 as the destination port The IRC server also sends an identify message to your router with destination port 113 6 Upon receiving the incoming message to destination port 33333 your router checks its session table to determine whether there is an active session for port number 33333 Finding an active session the router restores...

Page 85: ...IP address of your router The remote computer composes a Web page request message with the following destination information The destination address is the IP address of www example com which is the address of your router The destination port number is 80 the standard port number for a Web server process The remote computer then sends this request message through the Internet to your router 2 Your...

Page 86: ...Forwarding to Local Servers Using the port forwarding feature you can allow certain types of incoming traffic to reach servers on your local network For example you might make a local Web server FTP server or game server visible and available to the Internet Use the Port Forwarding screen to configure the router to forward specific incoming protocols to computers on your local network In addition ...

Page 87: ...ng Server IP Address fields enter the last digit of the IP address of your local computer that will provide this service 4 To the right of Server IP Address click Add The service appears in the list in the screen Adding a Custom Service To define a service game or application that does not appear in the Service Name list you must first determine which port number or range of numbers is used by the...

Page 88: ...re unsure select TCP UDP 5 In the Starting Port field enter the beginning port number If the application uses only a single port enter the same port number in the Ending Port field If the application uses a range of ports enter the ending port number of the range in the Ending Port field 6 In the Server IP Address field enter the IP address of your local computer that will provide this service 7 C...

Page 89: ...amic IP address using DHCP address reservation as explained in Using Address Reservation on page 4 5 In this example your router will always give your Web server an IP address of 192 168 1 33 2 In the Port Forwarding screen configure the router to forward the HTTP service to the local address of your Web server at 192 168 1 33 HTTP port 80 is the standard protocol for Web servers 3 Optional Regist...

Page 90: ...warding creates a static mapping of a port number or range to a single local computer port triggering can dynamically open ports to any computer that needs them and can close the ports when they are no longer needed To configure port triggering you need to know which inbound ports the application needs Also you need to know the number of the outbound port that will trigger the opening of the inbou...

Page 91: ...p to 9999 minutes This value controls the inactivity timer for the designated inbound ports The inbound ports close when the inactivity time expires This is required because the router cannot be sure when the application has terminated Figure 5 4 Note If the Disable Port Triggering check box is selected after you configure port triggering port triggering is disabled However any port triggering con...

Page 92: ... allow this service to be used by any computer on the Internet Otherwise select Single address and enter the IP address of one computer to restrict the service to a particular computer 8 Select the service type either TCP or UDP 9 In the Triggering Port field enter the number of the outbound traffic port that will cause the inbound ports to be opened 10 Enter the inbound connection port informatio...

Page 93: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual Fine Tuning Your Network 5 13 v1 0 February 2010 11 Click Apply The service appears in the Port Triggering Portmap table Figure 5 6 ...

Page 94: ...ect UPnP under Advanced the main menu The UPnP screen displays 2 The available settings and information displayed in this screen are Turn UPnP On UPnP can be enabled or disabled for automatic device configuration The default setting for UPnP is disabled If this check box is not selected the router does not allow any device to automatically control the resources such as port forwarding mapping of t...

Page 95: ... currently accessing the router and which ports Internal and External that device has opened The UPnP Portmap Table also displays what type of port is open and whether that port is still active for each IP address 3 Click Apply to save your settings Optimizing Wireless Performance The speed and operating distance or range of your wireless connection can vary significantly based on the physical pla...

Page 96: ...uency band Common noise creating sources are Computers and fax machines no closer than 1 foot Copying machines elevators and cell phones no closer than 6 feet Microwave ovens no closer than 10 feet Choose your settings Use a scanning utility to determine what other wireless networks are operating nearby and choose an unused channel Turn off SSID broadcast and change the default SSID Other nearby d...

Page 97: ... problem a common solution is to change the MTU size to 1400 If you are willing to experiment you can gradually reduce the MTU size from the maximum value of 1500 until the problem goes away Table 5 1 describes common MTU sizes and applications Note An incorrect MTU setting can cause Internet communication problems such as the inability to access certain Web sites frames within Web sites secure lo...

Page 98: ...ultimedia Quality of Service WMM QoS to prioritize wireless voice and video traffic over the wireless link WMM QoS provides prioritization of wireless data packets from different applications based on four access categories voice video best effort and background For an application to receive the benefits of WMM QoS both it and the client running that application must be WMM enabled Legacy applicat...

Page 99: ... Setup screen displays WMM QoS is enabled by default You can disable it by clearing the Enable WMM check box and clicking Apply QoS for Applications and Online Gaming To create a QoS policy for traffic for specific applications or online games 1 From the main menu of the browser interface under Advanced select QoS Setup The QoS Setup screen displays as shown in Figure 5 8 Figure 5 8 ...

Page 100: ...anual 5 20 Fine Tuning Your Network v1 0 February 2010 2 Click Setup QoS rule The QoS Priority Rules screen displays For convenience the QoS Policy table lists many common applications and online games that can benefit from QoS handling Figure 5 9 ...

Page 101: ...ys in the Applications drop down list 5 From the Applications list you can select an existing item or you can scroll to the bottom of the list and select Add a New Application or Add a New Game a If you chose to add a new entry the screen expands as shown b In the QoS Policy for field enter a descriptive name for the new application or game c Select the packet type either TCP UDP or both TCP UDP a...

Page 102: ...ted to one of the router s LAN ports 1 From the main menu under Advanced select QoS Setup The QoS Setup screen displays as shown in Figure 5 8 on page 5 19 2 Click Add Priority Rule 3 From the Priority Category list select Ethernet LAN Port The QoS Priority Rules screen changes 4 From the LAN port list select the LAN port that will have a QoS policy 5 From the Priority drop down list select the pr...

Page 103: ...C Device List select it The information from the MAC Device List is used to populate the policy name MAC Address and Device Name fields If the device does not appear in the MAC Device List click Refresh If it still does not appear you must complete these fields manually 5 From the Priority drop down list select the priority that this device s traffic should receive relative to other applications a...

Page 104: ... as the connection speed of the sites to which you connect and general Internet traffic ADSL and cable modem connections are asymmetrical meaning they have a lower data rate to the Internet upstream than from the Internet downstream Keep in mind that when you connect to another site that also has an asymmetrical connection the data rate between your sites is limited by each side s upstream data ra...

Page 105: ...ut they are not interoperable with these older products Wired Ethernet As gigabit speed Ethernet ports 10 100 1000 Mbps become common on newer computers wired Ethernet remains a good choice for speed economy and security Gigabit Ethernet can extend up to 100 meters with twisted pair wiring of Cat 5e or better A wired connection is not susceptible to interference and eavesdropping would require a p...

Page 106: ...ata using various networking technologies Table 5 2 Theoretical Transfer Time for 1 Gigabyte Network Connection Theoretical Raw Transfer Time Gigabit wired Ethernet 8 seconds RangeMax NEXT Wireless N 26 seconds Powerline HD 40 seconds 100 Mbps wired Ethernet 80 seconds 802 11n wireless 45 seconds 802 11g wireless 150 seconds 802 11b wireless 700 seconds 10 Mbps wired Ethernet 800 seconds Cable mod...

Page 107: ...of your Wireless N 300 Router Model JWNR2000 This chapter includes the following sections Viewing Wireless Router Status Information Viewing a List of Attached Devices on page 6 7 Managing the Configuration File in Chapter 6 Updating the Router Firmware on page 6 9 Enabling Remote Management Access on page 6 13 on page 6 14 ...

Page 108: ...nual 6 2 Using Network Monitoring Tools v1 0 February 2010 Viewing Wireless Router Status Information To view router status and usage information 1 Select Router Status under Maintenance in the main menu The Router Status screen displays Figure 6 1 ...

Page 109: ...e the router is configured to use a fixed IP address on the WAN If set to DHCP Client the router is configured to obtain an IP address dynamically from the ISP IP Subnet Mask The IP subnet mask being used by the Internet WAN port of the router For an explanation of subnet masks and subnet addressing click the link to the online document TCP IP Networking Basics in Appendix B Domain Name Server The...

Page 110: ...ss Networking Basics in Appendix B for the frequencies used on each channel Mode Indicates the wireless communication mode Up to 54 Mbps Up to 145 Mbps Up to 300 Mbps in this mode there are two channels a primary channel P and a secondary channel S Wireless AP Indicates whether the radio feature of the router is enabled If not enabled the Wireless LED on the front panel is off Broadcast Name Indic...

Page 111: ...Figure 6 2 Table 6 2 Connection Status Settings Item Description IP Address The IP address that is assigned to the router Subnet Mask The subnet mask that is assigned to the router Default Gateway The IP address for the default gateway that the router communicates with DHCP Server The IP address for the Dynamic Host Configuration Protocol server that provides the TCP IP configuration for all the c...

Page 112: ...ort The statistics for the WAN Internet and LAN Ethernet ports For each port the screen displays the following Status The link status of the port TxPkts The number of packets transmitted on this port since reset or manual clear RxPkts The number of packets received on this port since reset or manual clear Collisions The number of collisions on this port since reset or manual clear Tx B s The curre...

Page 113: ...le For each device the table shows the IP address NetBIOS host name or device name if available and the Ethernet MAC address To force the router to look for attached devices click Refresh Managing the Configuration File The configuration settings of the JWNR2000 router are stored within the router in a configuration file You can back up save this file to your computer restore it or reset it to the...

Page 114: ... file from the router and prompts you for a location on your computer to store the file You can give the file a meaningful name at this time such as comcast cfg To restore your settings from a saved configuration file enter the full path to the file on your computer or click Browse to browse to the file When you have located it click Restore to send the file to the router The router then reboots a...

Page 115: ...releases new firmware You can update your firmware by logging into the router and using one of these procedures Enable the Check for Updated Firmware Upon Log in check box Each time you log in to the router it will automatically detect a new version of the firmware and then install it This check box is enabled in the router s default state See Logging In To Your Wireless Router on page 1 2 Use the...

Page 116: ... the Router Upgrade Screen To check for new firmware and allow the router to automatically install it 1 Select Router Upgrade under Maintenance in the main menu The Router Upgrade screen displays 2 Check for new software versions by clicking the Check button If a new version is found information about it appears Figure 6 6 Figure 6 7 ...

Page 117: ... about 1 minute Updating Manually to New Router Firmware To manually select download and install new software to your router 1 Log in to your router select Router Status under Maintenance on the main menu and make note of the firmware version of your router 2 Go to the JWNR2000 support page on the NETGEAR website at http www netgear com support Figure 6 8 Warning When updating firmware to the JWNR...

Page 118: ...router and select Router Upgrade under Maintenance on the main menu 5 Click Browse and locate the firmware image that you downloaded to your computer the file ends in img or chk 6 Click Upload to send the firmware to the router When the upload is complete your router automatically restarts The upgrade process typically takes about 1 minute Warning When updating firmware to the JWNR2000 router do n...

Page 119: ... Remote Management under Advanced in the main menu The Remote Management screen displays To configure your router for remote management 1 Select the Turn Remote Management On check box Figure 6 10 Note Be sure to change the router s default configuration password to a very secure password The ideal password should contain no dictionary words from any language and should be a mixture of letters bot...

Page 120: ...ort number for accessing the management interface Normal Web browser access uses the standard HTTP service port 80 For greater security enter a custom port number for the remote management Web interface Choose a number between 1024 and 65535 but do not use the number of any common service port The default is 8080 which is a common alternate for HTTP 4 Click Apply to have your changes take effect N...

Page 121: ...Internet Service Connection on page 7 5 Troubleshooting Your Network Using the Ping Utility on page 7 7 Problems with Date and Time on page 7 9 Problems with Wireless Adapter Connections on page 7 10 Restoring the Default Configuration and Password on page 7 11 Quick Tips This section describes tips for troubleshooting some common problems Be sure to restart your network in this sequence 1 Turn of...

Page 122: ...MAC address to the router s wireless card access list Make sure that the network settings of the computer are correct LAN connected computers must be configured to obtain an IP address automatically using DHCP For more information see the links in Appendix B Related Documents Some cable modem services require you to use the MAC address of the computer registered on the account If so in the Router ...

Page 123: ...e off when your router is turned on Make sure that the power cord is properly connected to your router and that the power adapter is properly connected to a functioning power outlet Check that you are using the power adapter supplied by NETGEAR for this product If the error persists you have a hardware problem and should contact Technical Support The Power light blinks green slowly and continuousl...

Page 124: ...nected computer check the Ethernet connection between the computer and the router as described in the NETGEAR Wireless Router Setup Manual Make sure you are using the correct login information The factory default login name is admin and the password is password Make sure that the Caps Lock is off when entering this information Make sure your computer s IP address is on the same subnet as the route...

Page 125: ...net Service Connection If you can access your router but your router is unable to access the Internet review the topics in this section Obtaining an Internet IP Address Troubleshooting PPPoE Troubleshooting Internet Browsing Obtaining an Internet IP Address If your wireless router is unable to access the Internet and your Internet light is amber check the wireless router to see if it is able to ge...

Page 126: ... device and ask them to use the wireless router s MAC address or Configure your router to spoof your computer s MAC address On the Basic Settings screen in the Router MAC Address section select Use this Computer s MAC Address and click Apply Then restart your network in the correct sequence see the NETGEAR Wireless Router Setup Manual for instructions Troubleshooting PPPoE If you are using PPPoE t...

Page 127: ...gateway address You might be running login software that is no longer needed If your ISP provided a program to log you in to the Internet such as WinPoET you no longer need to run that software after installing your router You might need to go to Internet Explorer and select Tools Internet Options click the Connections tab and select Never dial a connection If the wireless router does not save cha...

Page 128: ...ing you see this message Request timed out If the path is not functioning correctly you could have one of the following problems Wrong physical connections For a wired connection make sure that the numbered LAN port light is on for the port to which you are connected If the light is off follow the instructions in Troubleshooting Basic Functions on page 7 2 Check that the appropriate LEDs are on fo...

Page 129: ...ess of your computer the portion of the IP address specified by the subnet mask is different from the network address of the remote device Check that your cable or DSL modem is connected and functioning If your ISP assigned a host name to your computer enter that host name as the account name in the Basic Settings screen Your ISP could be rejecting the Ethernet MAC addresses of all but one of your...

Page 130: ...You can find this program in your Windows Program menu or as an icon in your system tray Other wireless card manufacturers might include a similar program Windows basic setup utility If you have no specific wireless card setup program installed you can use the basic setup utility in Windows Open the Windows Control Panel and double click Network Connections In the LAN section double click Wireless...

Page 131: ...see Erasing the Configuration on page 6 9 Use the restore factory settings button on the rear panel of the router Use this method for cases when the administration password or IP address is not known To use the restore settings button 1 Locate the restore factory settings button on the rear panel of the router 2 Use a sharp object such as a pen or a paper clip to press and hold the restore factory...

Page 132: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual 7 12 Troubleshooting v1 0 February 2010 ...

Page 133: ...outerlogin net or http www routerlogin com Login Name case sensitive printed on product label admin Login Password case sensitive printed on product label password Internet Connection WAN MAC Address Default hardware address on label MTU Size 1500 Local Network Router LAN IP address printed on product label also known as Gateway IP address 192 168 1 1 Router Subnet 255 255 255 0 DHCP Server Enable...

Page 134: ...d Operating Mode 145 Mbps Data Rate Best Output Power Full Firewall Inbound communications coming in from the Internet Disabled bars all unsolicited requests except for traffic on port 80 the http port Outbound communications going out to the Internet Enabled all Maximum Wireless signal rate derived from IEEE Standard 802 11 specifications Actual throughput will vary Network conditions and environ...

Page 135: ... UK Australia 240V 50 Hz input Europe 230V 50 Hz input Japan 100V 50 60 Hz input All regions output 12V DC 1 0A output Physical Dimensions 6 8 x 4 6 x 1 4 172 7 x 115 7 x 32 6 mm Weight 0 48 lbs 0 216 kg Environmental Operating temperature 0 to 40 C 32º to 104º F Operating humidity 90 maximum relative humidity noncondensing Electromagnetic Emissions Designed to conform to the following standards F...

Page 136: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual A 4 Technical Specifications v1 0 February 2010 ...

Page 137: ...ETGEAR Wireless Router Setup Manual Table B 1 Reference Documents Document Link TCP IP Networking Basics http documentation netgear com reference enu tcpip index htm Wireless Networking Basics http documentation netgear com reference enu wireless index htm Preparing Your Network http documentation netgear com reference enu wsdhcp index htm Virtual Private Networking Basics http documentation netge...

Page 138: ...NETGEAR Wireless N 300 Router JWNR2000 User Manual B 2 Related Documents v1 0 February 2010 ...

Page 139: ...automatic logout 1 5 B backing up configuration file 6 8 backing up transfer time 5 26 base station setting up 4 14 basic settings 2 6 basic wireless connectivity 1 11 Big Pond 1 10 blocking access 3 1 inbound traffic 5 1 bold text xi broadband Internet 5 24 broadcast status 6 4 C cables checking 7 2 channel frequency 2 8 channel wireless port 6 4 clients adding 2 13 2 18 6 4 communication mode 2 ...

Page 140: ...omain Name Server DNS addresses current 6 3 entering 1 8 1 11 Dynamic DNS 4 6 dynamic IP addresses 1 8 DynDNS org 4 6 E electromagnetic emissions A 3 e mailing logs 3 7 encryption 2 1 encryption keys 2 10 environmental specifications A 3 erasing configuration 6 9 Ethernet MAC address 6 7 F factory default settings listed A 1 restoring 7 12 filtering content 3 1 firewalls default settings A 2 disab...

Page 141: ...rding to 5 6 logging in 1 2 login required 1 9 login settings A 1 logout automatic 1 5 logs sending 3 7 time stamping entries 3 9 viewing 3 6 M MAC addresses attached devices 6 7 current 6 3 entering 1 8 restricting access by 2 19 spoofing 7 7 mail server outgoing 3 8 managing router remotely 6 13 metric value 4 12 mixed mode encryption 2 3 2 11 mode communication 2 8 6 4 MTU size 4 9 5 16 N NAT N...

Page 142: ...gistering product ii releasing connection status 6 5 remote devices testing path 7 10 remote management 6 13 renewing connection status 6 5 repeater units 4 15 requirements speed 5 25 reserved IP adresses 4 5 Resource CD 1 1 restarting network 7 1 restoring configuration 6 8 default factory settings 7 12 restoring firmware 7 3 restricting access by MAC address 2 19 revision history xiii RIP Router...

Page 143: ... backing up 5 26 troubleshooting 7 1 trusted user 3 2 typographical conventions xi U Universal Plug and Play UPnP 5 14 up time system 6 6 updating firmware 1 3 6 3 6 9 URLs typography for xi usage statistics 6 6 V version firmware 6 3 6 9 RIP Router Information Protocol 4 3 viewing advanced wireless settings 2 12 attached devices 6 7 basic security settings 2 6 logs 3 6 status 6 2 W WAN setup 4 8 ...

Page 144: ...EAR Wireless N 300 Router JWNR2000 User Manual Index 6 v1 0 February 2010 testing 1 11 WMM Wi Fi Multimedia 5 18 WPA2 PSK encryption 2 3 2 10 WPA PSK WPA2 PSK encryption 2 3 2 10 WPA PSK encryption 2 3 2 10 ...

Reviews: