background image

4

Control Access to the Internet

The router comes with a built-in firewall that helps protect your business network from
unwanted intrusions from the Internet.

This chapter includes the following sections:

MAC access control lists

Network access control list

Block Internet sites by using keywords

Delete keywords that are used to block Internet sites

Trusted computer

Block services from the Internet

Schedule when to block Internet sites and services

Email notifications for security events

51

Содержание SXR50

Страница 1: ...Pro WiFi 6 AX5400 Tri band WiFi System Models Orbi Pro WiFi 6 AX5400 Router Model SXR50 Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 NETGEAR Inc 350 E Plumeria Drive February 2022 San Jose CA 95134 U...

Страница 2: ...device you are agreeing to NETGEAR s Terms and Conditions at https www netgear com about terms and conditions If you do not agree return the device to your place of purchase within your return period...

Страница 3: ...satellite 18 Add satellites to your network using the router web interface 19 Set up your satellite with a wired connection to your router 20 Set up and sync an Orbi Pro satellite over a wired connect...

Страница 4: ...ected devices to a MAC ACL 54 Manually add remove or change the information for a device on a MAC ACL 55 Disable a MAC ACL for a specific network 56 Network access control list 57 Enable the network a...

Страница 5: ...s 95 Change the IoT WiFi password or security level 96 Guest WiFi network and captive portal 99 Set up a guest WiFi network with open access or password authentication 100 Set up Facebook Wi Fi for th...

Страница 6: ...satellite 142 Enable the automatic firmware update feature 142 Check for firmware updates 142 Manually update firmware 143 Manually update satellite firmware 144 Manually update router firmware 145 ad...

Страница 7: ...174 SSID broadcast for a radio 175 20 40 MHz coexistence for the 2 4 GHz radio 176 Wi Fi multimedia for a radio 177 CTS RTS threshold and preamble mode for a radio 178 Transmission output power for a...

Страница 8: ...ite do not sync 206 You cannot log in to the router 208 You cannot access the Internet 208 Troubleshoot Internet browsing 209 Troubleshoot PPPoE 210 Troubleshoot WiFi connectivity 211 Troubleshoot you...

Страница 9: ...Technical specifications for Orbi Pro WiFi 6 AX5400 satellite model SXS50 227 9 Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50...

Страница 10: ...i Pro WiFi 6 AX5400 router and satellite labels Connect your Orbi Pro WiFi 6 AX5400 router Place your Orbi Pro WiFi 6 AX5400 satellite Sync your Orbi Pro WiFi 6 AX5400 satellite Set up your satellite...

Страница 11: ...o WiFi 6 AX5400 router web interface Orbi Pro WiFi 6 AX5400 router and satellite hardware overviews The following sections display and describe the hardware features of the Orbi Pro WiFi 6 AX5400 rout...

Страница 12: ...6 AX5400 satellite model SXS50 hardware 1 2 5 4 3 6 Figure 2 Orbi Pro WiFi 6 AX5400 satellite model SXS50 front and back views 1 Bar LED 2 Sync button also used for WPS connection 3 LAN Gigabit Ethern...

Страница 13: ...ing red The firmware is corrupted Off Power is not supplied Power LED The bar LED is located on the front Pulsing white The router is booting or someone pressed the Sync button Off The router finished...

Страница 14: ...ED is located on the front Pulsing white The satellite is booting Solid white The satellite is ready to sync to the router press the Sync button Blue for three minutes The connection between the satel...

Страница 15: ...of what the satellite label might look like Figure 4 Orbi Pro WiFi 6 AX5400 SXS50 satellite label Connect your Orbi Pro WiFi 6 AX5400 router The back of the router has one yellow WAN port and three L...

Страница 16: ...the back of the router lights green When the bar LED on the front of the router lights solid white the router s preset WiFi network is ready for setup The router s bar LED turns off after about three...

Страница 17: ...6 AX5400 router Note The first time that you sync the satellite and the router the sync process can take up to five minutes because the router might automatically update the satellite s firmware The...

Страница 18: ...out two minutes for the satellite bar LED to light solid white 4 Press the Sync button on the back of the satellite and within two minutes press the Sync button on the back of your Orbi WiFi 6 AX5400...

Страница 19: ...page displays 5 Follow the instructions about where to place your satellite at your location 6 Connect the satellite to a power source 7 Click the NEXT button 8 Wait about two minutes for the satelli...

Страница 20: ...up and sync your Orbi Pro satellite over a wired connection 1 Place your satellite in the room where you want WiFi service 2 Connect an Ethernet cable to one of the LAN ports 3 Connect the other end...

Страница 21: ...ups in the diagrams do apply to your models The following figure shows how to connect your Orbi Pro WiFi 6 satellites to your Orbi Pro WiFi 6 router using a star topology to create an Ethernet backhau...

Страница 22: ...nitor your Orbi network with NETGEAR Insight If you are a NETGEAR Insight Premium or Pro subscriber after you use the router web interface to set up your Orbi system you can use NETGEAR Insight to man...

Страница 23: ...ites that are connected to your Orbi Pro Wifi 6 network you must manage them from your Orbi Pro WiFi 6 AX5400 router web interface This chapter contains the following sections Connect to the network f...

Страница 24: ...first time you can connect to the router s WiFi network by scanning the QR code on your router with the camera app on your mobile device To scan the QR code with your camera app your mobile device mus...

Страница 25: ...our ISP WiFi network login Your router uses a preset WiFi network name SSID and password for WiFi access This information is on the router label During setup you can change the WiFi network name SSID...

Страница 26: ...wired or wirelessly with the preset security settings listed on the label Note If you want to change the router s WiFi settings use a wired connection so the WiFi device that you are using for setup i...

Страница 27: ...s settings to obtain an IP address automatically from the router Log in to the Orbi router web interface When you log in to the Orbi the browser displays the router web interface You can use the route...

Страница 28: ...Access to the router web interface is encrypted through the Hyper Text Transfer Protocol Secure HTTPS protocol instead of the Hyper Text Transfer Protocol HTTP The extra security of HTTPS requires you...

Страница 29: ...the Add Exception button In the pop up window that displays click the Confirm Security Exception button Microsoft Edge Select Details Go on to the webpage Microsoft Internet Explorer Click the Continu...

Страница 30: ...nection is to allow Orbi to detect the Internet connection when you first access the router with a web browser You can also customize or specify your Internet settings This chapter contains the follow...

Страница 31: ...ged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Setup Wizard The Setup Wizard page displays 5 Select the Yes radio button If you select No you are t...

Страница 32: ...ted 6 If your Internet connection requires an account name or host name do the following a Next to the Account Name If Required field click the Edit button The Device Name page displays b Type the nam...

Страница 33: ...the Apply button Your settings are saved 12 Click the Test button to test your Internet connection Set up an Internet connection with a login To set up an Internet connection that uses a login 1 Launc...

Страница 34: ...ddress Your ISP automatically assigns these addresses Use Static IP Address Enter the IP address IP subnet mask and gateway IP address that your ISP assigned The gateway is the ISP router to which you...

Страница 35: ...nternet connections You can set up an IPv6 Internet connection if the router does not detect it automatically To set up an IPv6 Internet connection 1 Launch a web browser from a computer or mobile dev...

Страница 36: ...DHCP Internet connection on page 45 Set up an IPv6 PPPoE Internet connection on page 47 6 Click the Apply button Your settings are saved Use auto detection for an IPv6 Internet connection To set up a...

Страница 37: ...d displays Not Available 6 In the LAN Setup section select an IP Address Assignment radio button Use DHCP Server This method passes more information to LAN devices but some IPv6 systems might not supp...

Страница 38: ...ired for the router s WAN or Internet interface The number after the slash is the length of the prefix which is also indicated by the underline _ under the IPv6 address If no address is acquired the f...

Страница 39: ...pecify the interface ID that you want to be used for the IPv6 address of the router s LAN interface If you do not specify an ID here the router generates one automatically from its MAC address 11 Sele...

Страница 40: ...utton Auto Your router uses any remote relay router that is available on the Internet This is the default setting Static IP Address Enter the static IPv4 address of the remote relay router Your IPv6 I...

Страница 41: ...ed for use within the service provider s network This mapping allows for automatic determination of IPv4 tunnel endpoints from IPv6 prefixes allowing stateless operation of 6rd With a 6rd Tunnel confi...

Страница 42: ...splays Not Available 6 If the router does not automatically detect the information in the 6rd IPv6 Rapid Development Configuration section specify the 6rd prefix 6rd prefix length 6rd IPv4 border rela...

Страница 43: ...up a pass through IPv6 Internet connection 1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser...

Страница 44: ...he Internet Connection Type menu select Fixed The page adjusts 6 In the WAN Setup section configure the fixed IPv6 addresses for the WAN connection IPv6 Address Prefix Length The IPv6 address and pref...

Страница 45: ...pen mode the router inspects UDP packets only 10 Click the Apply button Your settings are saved Set up an IPv6 DHCP Internet connection To set up an IPv6 Internet connection with a DHCP server 1 Launc...

Страница 46: ...r ISP s mail server is mail xxx yyy zzz type xxx yyy zzz as the domain name If your ISP provided a domain name type it in this field For example Earthlink Cable might require a host name of home and C...

Страница 47: ...The user name is admin The password is the one that you set the first time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Advanced Setu...

Страница 48: ...connection If the connection is terminated for example when the modem is turned off the router attempts to reestablish the connection immediately after the PPPoE connection becomes available again 7...

Страница 49: ...he default value In some situations changing the value fixes one problem but causes another Leave the MTU unchanged unless one of these situations occurs You experience problems connecting to your ISP...

Страница 50: ...6 to 1500 6 Click the Apply button Your settings are saved If you suspect an MTU problem a common solution is to change the MTU to 1400 If you are willing to experiment you can gradually reduce the MT...

Страница 51: ...he Internet This chapter includes the following sections MAC access control lists Network access control list Block Internet sites by using keywords Delete keywords that are used to block Internet sit...

Страница 52: ...s to a specific network devices on the MAC ACL are an exception to the default policy A device for which you place the MAC address on the MAC ACL is denied access to that network All other devices are...

Страница 53: ...et the first time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Security MAC ACL The MAC ACL page displays 5 Go to the section for the...

Страница 54: ...e connected or were connected to the network for which you set up the MAC ACL You can select one or multiple devices from the detected list and add them to the MAC ACL To add automatically detected de...

Страница 55: ...ACL you can manually add a device remove a device or change the name but not the MAC address for a device on the MAC ACL By manually adding a device you can proactively control access for a device tha...

Страница 56: ...ove a device from the MAC ACL do the following a Select the check box for the device b Click the REMOVE DEVICE button The device is removed from the MAC ACL 8 To change the name for a device on the MA...

Страница 57: ...ntrol list You can use the network access control list ACL to block or allow access to the entire Orbi network An ACL functions with the MAC addresses of WiFi and wired devices that the router detects...

Страница 58: ...find the MAC addresses on Attached Devices page of the router see View satellites WiFi devices and wired devices connected to the Orbi network on page 150 Enable the network access control list and sp...

Страница 59: ...Block all new devices from connecting With this setting if you add a new device before it can access the Orbi network you must enter its MAC address for an Ethernet connection and its MAC address for...

Страница 60: ...you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Security Access Control The Access Control page displays 5 Click the View list of allowed dev...

Страница 61: ...you want to block You can add a device remove a device or change the information for a device To manage devices that are blocked from accessing the Orbi network 1 Launch a web browser from a computer...

Страница 62: ...e following a Select the check box for the device b Click the REMOVE FROM THE LIST button The device is removed from the blocked list 8 To change the information for a device on the blocked list do th...

Страница 63: ...block the keywords based on a schedule select the Per Schedule radio button For information about how to set the schedule see Schedule when to block Internet sites and services on page 67 Always To b...

Страница 64: ...rd are case sensitive The BASIC Home page displays 4 Select ADVANCED Security Block Sites The Block Sites page displays 5 Do one of the following To delete a single word select it and click the Delete...

Страница 65: ...usted IP address to visit blocked sites check box 6 In the Trusted IP Address field enter the IP address of the trusted computer 7 Click the Apply button Your settings are saved Block services from th...

Страница 66: ...plication that is not the list select User Defined a If you know that the application uses either TCP or UDP select the appropriate protocol Otherwise select TCP UDP both b Enter the starting port and...

Страница 67: ...displays a security warning and does not let you proceed see What to do if you get a browser security warning on page 28 3 Enter the admin user name and password The user name is admin The password i...

Страница 68: ...tive The BASIC Home page displays 4 Select ADVANCED Security E mail The E mail page displays 5 Select the Turn E mail Notification On check box 6 In the Primary E mail Address field enter the email ad...

Страница 69: ...logs based on a schedule specify these settings From Send logs according to this schedule menu select the schedule type From the Day menu select the day From the Time menu select the time and select t...

Страница 70: ...router comes with a preset VLAN configuration that you can use without making any changes If your network setup is simple or does not require you to separate traffic into different VLANs you might be...

Страница 71: ...rk segmentation Devices for users who communicate most frequently with each other can be grouped into common VLANs regardless of physical location Each group s network traffic is contained largely wit...

Страница 72: ...ganizes LANs VLANs and WLANs You do not need to use the VLANs in order to use the router and any satellites However if your network environment is not complex or does not require you to separate multi...

Страница 73: ...the VLAN profile assignments for the LANs see Change the VLAN profile for a LAN on page 79 For more information about LANs in general see Manage the LANs on page 106 By default VLAN 1 is enabled for t...

Страница 74: ...ty warning on page 28 3 Enter the admin user name and password The user name is admin The password is the one that you set the first time that you logged in The user name and password are case sensiti...

Страница 75: ...N ID the client isolation settings and the network isolation setting If your router is part of a network with switches and access points VLAN traffic segregation works only if the VLAN is defined on a...

Страница 76: ...settings that is the VLAN profile as described in the following table Description Field Enter a name for the VLAN Name Enter an ID from 1 to 4094 VLAN ID Client isolation prevents hosts and clients i...

Страница 77: ...eb browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a login window but displays a security...

Страница 78: ...T VLAN or VLAN 40 the Guest VLAN if no members are assigned to the VLAN To delete a VLAN profile 1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2 Enter...

Страница 79: ...to the same VLAN profile This also means that you cannot change the preset VLAN profile for LAN 2 LAN 3 and LAN 4 until you add a new VLAN profile that is a custom VLAN profile and assign LAN 2 LAN 3...

Страница 80: ...LAN to it 7 Click the Apply button Your settings are saved Enable change or disable the VLAN profile for a WiFi network By default the VLANs are not enabled for any WiFI network except for VLAN 40 whi...

Страница 81: ...VLAN 1 In most situations you do not need to change these assignments However if your network environment or router setup requires you to change an assignment you can do so Note the following If two L...

Страница 82: ...uter and any satellites function in Trunk mode but they can also function in Access mode Trunk mode If a port must forward tagged packets with a specific VLAN tag only assign Trunk mode to the port ad...

Страница 83: ...login window but displays a security warning and does not let you proceed see What to do if you get a browser security warning on page 28 3 Enter the admin user name and password The user name is adm...

Страница 84: ...ee WiFi network Internet of things WiFi network Guest WiFi network and captive portal For information about advanced WiFi features see Manage the Advanced WiFi Settings on page 172 IMPORTANT When you...

Страница 85: ...reset VLAN ID and VLAN profile name Default SSID appended with GUEST Default SSID appended with 3 Default SSID appended with 2 See router label for default SSID WiFi network name SSID None open WPA2 P...

Страница 86: ...onnection to access the router The router web interface calls the admin WiFi network the Wireless 1 network To change the admin WiFi settings 1 Launch a web browser from a computer or mobile device th...

Страница 87: ...ofile check box and select another VLAN profile from the menu The preset VLAN profile name is Default the VLAN has ID 1 and the combination is shown in the menu as Default 1 For more information about...

Страница 88: ...he one that you set the first time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select Wireless The Wireless settings for the Wireless 1 network disp...

Страница 89: ...llowing a In the IP address field enter the IP address of the RADIUS server to which the router must connect b In the Port field enter the port number that the router must use to communicate with the...

Страница 90: ...rver By default the port number is 1812 c In the Shared Secret field enter the password that the router must use to communicate with the RADIUS server This password must be configured on the RADIUS se...

Страница 91: ...eless 2 network in an SSID for the 2 4 GHz band and another SSID for the 5 GHz band select the Enable SSID separation for 2 4G 5GHz check box For each band a Wireless 2 Network Name SSID field display...

Страница 92: ...nge the employee password and security level authentication and encryption settings The router supports Wi Fi Protected Access 3 WPA3 WPA2 and mixed WPA WPA2 including enterprise level WPA3 and enterp...

Страница 93: ...ace for future reference WPA2 Enterprise If your network is connected to a RADIUS server that can provide authentication and your network includes WPA2 and WPA3 devices select this radio button WPA2 E...

Страница 94: ...urity but WPA and WPA2 devices cannot connect Before a WiFi client can connect to the network the WiFi client must be configured on the RADIUS server and authenticated against the RADIUS server The ro...

Страница 95: ...e the WiFi settings 1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a logi...

Страница 96: ...s IoT 30 For more information about VLANs see Manage the VLANs on page 70 including How the router organizes LANs VLANs and WLANs on page 72 10 Click the Apply button Your settings are saved The route...

Страница 97: ...This type of security allows only WiFi devices that support WPA2 or WPA3 to join the network When you select this option the Password Network Key field displays Do the following a In the Password Netw...

Страница 98: ...password is used to authenticate the router not a WiFi client against the RADIUS server WPA3 Personal SAE This is the most secure personal authentication option WPA3 uses SAE encryption and allows on...

Страница 99: ...rnet using a dedicated SSID You can also set up a captive portal for the guest portal With a captive portal when visitors connect to the guest portal and open a browser to access the Internet they are...

Страница 100: ...al Network check box By default the guest portal is disabled 6 Leave the Enable SSID Broadcast check box selected Allowing the router to broadcast its WiFi network name SSID makes it easier to find yo...

Страница 101: ...the Internet select a time from the Expiration menu After guests are authenticated they can access the Internet for that period of time If you select Never from the menu guest access time is not restr...

Страница 102: ...it If you clear this check box that creates a hidden network 7 To change the network name type a new name in the Guest Portal Network Name SSID field The name can be up to 32 characters long and it i...

Страница 103: ...ms of service and type or copy your terms of service f Click the Save Settings button The Facebook Wi Fi settings are saved The name of the selected Facebook business page displays in the Facebook Pag...

Страница 104: ...r this check box that creates a hidden network 7 To change the network name type a new name in the Guest Portal Network Name SSID field The name can be up to 32 characters long and it is case sensitiv...

Страница 105: ...b Locate and select the terms and conditions file on your computer The file must be a txt file encoded in UTF8 format and can be up to 1 MB To include a custom logo file do the following a In the Log...

Страница 106: ...7 Manage the LANs This chapter includes the following sections About the LANs LAN settings DHCP servers Reserved LAN IP addresses 106...

Страница 107: ...tworks and LAN ports are two different concepts By default all LAN ports and the WAN port on the router and all LAN ports on any connected satellites are Ethernet ports in the same physical network se...

Страница 108: ...for LAN 1 can be automatically changed if the Orbi Pro WiFi 6 router detects a double NAT condition For more information about double NAT visit https kb netgear com 30186 What is double NAT and why is...

Страница 109: ...oth The router broadcasts its routing table periodically and incorporates information that it receives Out Only The router broadcasts its routing table periodically In Only The router incorporates the...

Страница 110: ...hat you set the first time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Setup LAN Setup LAN 2 The LAN Setup page displays 5 If you pr...

Страница 111: ...you can do so to customize the IP address or VLAN You can also disable LAN 3 To change the IoT LAN 3 settings 1 Launch a web browser from a computer or mobile device that is connected to your Orbi net...

Страница 112: ...address of the router you are disconnected when this change takes effect 10 To reconnect close your browser relaunch it and log in to the router Change the guest LAN 4 settings By default LAN 4 is ass...

Страница 113: ...VLAN profile select the VLAN Profile check box and select another VLAN profile from the menu The preset VLAN profile name is Guest the VLAN has ID 40 and the combination is shown in the menu as Guest...

Страница 114: ...ifies which addresses are local to a specific device and which must be reached through a gateway or router The default IP subnet mask is 255 255 255 0 8 From the VLAN Profile menu select a custom VLAN...

Страница 115: ...ensitive The BASIC Home page displays 4 Select ADVANCED Setup LAN Setup LAN 1 The LAN Setup page displays 5 If you previously disabled the DHCP server feature select the Use Router as DHCP Server chec...

Страница 116: ...s not display a login window but displays a security warning and does not let you proceed see What to do if you get a browser security warning on page 28 3 Enter the admin user name and password The u...

Страница 117: ...ddress Using the default addressing scheme define a range between 192 168 30 2 and 192 168 30 254 although you can save part of the range for devices with fixed addresses To set up the DHCP server for...

Страница 118: ...rs to any LAN device that requests DHCP An IP address from the range that you defined Subnet mask Gateway IP address the router s LAN IP address DNS server IP address the router s LAN IP address Set u...

Страница 119: ...efault ending IP address is 192 168 40 254 7 In the lease time hour s field set the duration of the IP address lease in hours By default the lease expires after one day 24 hours after which the WiFi c...

Страница 120: ...e router assigns a In the Starting IP Address field enter the lowest number in the range This IP address must be in the same subnet as the router The default starting IP address is 192 168 50 2 b In t...

Страница 121: ...in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Setup LAN Setup 5 Select the LAN tab for the LAN for which you want to disable the DHCP server LAN 1 LA...

Страница 122: ...6 In the Address Reservation section of the page click the Add button The LAN Address Reservation page displays Any detected devices display in the Address Reservation Table 7 To reserve an IP addres...

Страница 123: ...N tab for the LAN for which you want to edit a reserved IP address entry LAN 1 LAN 2 LAN 3 LAN 4 or LAN 5 The LAN Setup page displays 6 Select the radio button next to the reserved address 7 Click the...

Страница 124: ...DVANCED Setup LAN Setup 5 Select the LAN tab for the LAN for which you want to delete a reserved IP address entry LAN 1 LAN 2 LAN 3 LAN 4 or LAN 5 The LAN Setup page displays 6 Select the radio button...

Страница 125: ...8 Manage the WAN and other Network Settings This chapter includes the following sections WAN settings Dynamic DNS DMZ server Static routes Universal Plug and Play Link aggregation 125...

Страница 126: ...ge displays 4 Select ADVANCED Setup WAN Setup The WAN Setup page displays 5 View or change the following settings Disable Port Scan and DoS Protection DoS protection protects your LAN against denial o...

Страница 127: ...multimedia applications from working Open NAT provides a much less secured firewall but allows almost all Internet applications to work Disable SIP ALG The application level gateway ALG for the Sessio...

Страница 128: ...the admin user name and password The user name is admin The password is the one that you set the first time that you logged in The user name and password are case sensitive The BASIC Home page display...

Страница 129: ...word is the one that you set the first time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Advanced Setup Dynamic DNS The Dynamic DNS p...

Страница 130: ...d in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Advanced Setup Dynamic DNS The Dynamic DNS page displays 5 Change your DDNS account settings as necess...

Страница 131: ...ted to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a login window but displays a security warning and does not let you proceed see What to do if yo...

Страница 132: ...n turn the ISP forwards your request to the remote office site where the firewall will deny the request In this situation you must define a static route telling your Orbi Pro WiFi 6 router to access 1...

Страница 133: ...es only 7 To limit access to the LAN only select the Private check box If Private is selected the static route is not reported in RIP 8 Select the Active check box to make this route take effect 9 Typ...

Страница 134: ...ced Setup Static Routes The Static Routes page displays 5 In the table select the radio button for the route 6 Click the Edit button The Static Routes page adjusts 7 Edit the route information 8 Click...

Страница 135: ...ce enable UPnP To enable Universal Plug and Play 1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your br...

Страница 136: ...orts internal and external that device opened The UPnP Portmap Table also displays what type of port is open and whether that port is still active for each IP address 9 To refresh the information in t...

Страница 137: ...ning and does not let you proceed see What to do if you get a browser security warning on page 28 4 Enter the admin user name and password The user name is admin The password is the one that you set t...

Страница 138: ...me and password The user name is admin The password is the one that you set the first time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANC...

Страница 139: ...the router or to any other port on the router You will do so at the end of this procedure as described in the last two steps 4 Connect the satellite to a power source The Power LED on the back of the...

Страница 140: ...isplays gray because it does not yet have a cable attached 9 In the Base router section do the following a Click LAN port 1 The Bind button displays between the LAN 1 and LAN 2 ports b Click the Bind...

Страница 141: ...monitoring your Orbi Pro system The chapter includes the following sections Firmware for the router and satellite admin password Monitor the router satellite and Orbi network Syslog server Traffic met...

Страница 142: ...roceed see What to do if you get a browser security warning on page 28 3 Enter the admin user name and password The user name is admin The password is the one that you set the first time that you logg...

Страница 143: ...llite When the upload is complete your router and satellite restart The update process typically takes about one minute Read the new firmware release notes to find out if you must reconfigure the rout...

Страница 144: ...but displays a security warning and does not let you proceed see What to do if you get a browser security warning on page 28 3 Enter the admin user name and password The user name is admin The passwo...

Страница 145: ...your satellite completes its firmware update before you update your router s firmware To manually update your router s firmware 1 Launch a web browser from a computer or mobile device that is connecte...

Страница 146: ...it is forgotten Change the admin password This feature let you change the default password that is used to log in to the router with the user name admin This password is not the one that you use to a...

Страница 147: ...omputer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a login window but displays a security warning and does n...

Страница 148: ...he Cancel button If password reset is enabled you are prompted to enter the serial number of the router The serial number is on the router label 4 Enter the router s serial number in the field 5 Click...

Страница 149: ...password are case sensitive The BASIC Home page displays 4 Click the ADVANCED tab The ADVANCED Home page displays the router status View the satellite status in the satellite web interface The satell...

Страница 150: ...he satellite status displays The page displays information about the satellite connections hardware and firmware versions and the WiFi networks in the 2 4 GHz and 5 GHz bands 8 To view detailed inform...

Страница 151: ...ontrol list on page 57 is enabled The field displays if a device is allowed or blocked For satellites N A is shown Device Name The device model name type and IP address IP Address The device IP addres...

Страница 152: ...eceives an IP address dynamically which is the most common type of connection the following information displays IP Address The IP address that is assigned to the router Subnet Mask The subnet mask th...

Страница 153: ...4 Click the ADVANCED tab 5 In the Internet Port pane click the Show Statistics button The Show Statistics window displays and shows following information System Up Time The time elapsed since the rout...

Страница 154: ...view and manage logs 1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a log...

Страница 155: ...by default 6 To refresh the log page click the Refresh button 7 To email the log immediately click the Send Log button If you cannot email the logs set up email notifications see Email notifications...

Страница 156: ...y button Your settings are saved The router send its logs to the syslog server Traffic meter You can enable traffic metering to monitor the volume of Internet traffic that passes through the router s...

Страница 157: ...are saved The Internet Traffic Statistics section helps you to monitor the data traffic For more information see View the Internet traffic volume and statistics on page 160 Restrict Internet traffic...

Страница 158: ...is reached This setting is optional The router issues a warning when the balance falls below the number of MB that you enter By default the value is 0 and no warning message is issued 12 To enable the...

Страница 159: ...le to enter information in the Monthly Limit field 8 In the Traffic Counter section set the traffic counter to begin at a specific time and date 9 In the Traffic Control section enter a period in minu...

Страница 160: ...Traffic Meter The Traffic Meter page displays 5 Scroll down to the Internet Traffic Statistics section The Internet Traffic Statistics section displays when the traffic counter was started and what th...

Страница 161: ...Disconnect and disable the Internet connection check box 6 Click the Apply button Your settings are saved NTP server By default the router uses the NETGEAR Network Time Protocol NTP server to sync th...

Страница 162: ...ame is admin The password is the one that you set the first time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Administration NTP Sett...

Страница 163: ...s You can let the router automatically back up configuration settings before a firmware upgrade You can also schedule an automatic backup at a regular interval To manage the automatic backup options 1...

Страница 164: ...nfiguration settings 1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a log...

Страница 165: ...ckup Settings page displays 5 Click the Browse button to find and select the cfg file 6 Click the Restore button The file is uploaded to the router and the router reboots CAUTION Do not interrupt the...

Страница 166: ...ter s remote management Note For enhanced security restrict access to as few external IP addresses as is practical Select one of the following To allow access from a single IP address on the Internet...

Страница 167: ...o change the settings for the gateway or modem router Note If your network includes two or more Orbi Pro routers we recommend that you use router mode the default operation mode on all Orbi Pro router...

Страница 168: ...ngs on each WiFi routers or WiFi gateway You can also turn off the WiFi radio on the other router or gateway and use the Orbi Pro router and satellite only for WiFi client access 8 Click the Apply but...

Страница 169: ...the physical Sync button on the router satellite or both If you disable the physical Sync button you can still use the Sync button in the router web interface to sync the connection between the router...

Страница 170: ...n disable the button for security reasons If you press the Sync button and the satellite s LED bar pulses magenta this LED behavior indicates that the Sync button is disabled To manage your satellite...

Страница 171: ...ys 6 In the SYNC section do one of the following Disable the Sync button Click the Enabled button Enable the Sync button Click the Disabled button 7 Click the Apply button Your settings are saved User...

Страница 172: ...o Backhaul password MU MIMO Protected Management Frames Depending on the type of advanced WiFi setting the setting applies either to all WiFi networks on one radio or to all WiFi networks on the route...

Страница 173: ...ces might connect to the IoT WiFi network than to the employee network but the typical bandwidth usage for IoT devices might be lower than for employee devices Note The router does not control the upl...

Страница 174: ...etwork changes and the percentage displays in the icon All bandwidth ratios together add up to 100 percent of the available download bandwidth If you change one ratio the ratio for another WiFi networ...

Страница 175: ...th the settings for the new region SSID broadcast for a radio By default the router broadcasts its WiFi network names SSIDs so that WiFi clients can detect them in their scanned network lists Turning...

Страница 176: ...e of the WiFi speed If no other WiFi networks are present in your environment you can disable 20 40 MHz coexistence to increase the WiFi speed on the 2 4 GHz radio to the maximum supported speed for t...

Страница 177: ...ations that do not require WMM are assigned to the best effort category which receives a lower priority than voice and video For each 2 4 GHz and 5 GHz radio individually you can enable or disable WMM...

Страница 178: ...are Incorrect settings might disable the WiFi function of a radio unexpectedly To change the CTS RTS threshold and preamble mode for a radio 1 Launch a web browser from a computer or mobile device tha...

Страница 179: ...default the transmission output power of the router is set at the maximum If two or more WiFi routers access points WiFi gateways or combination of these WiFi devices are operating in the same area an...

Страница 180: ...ew backhaul connection so that the router and satellite can communicate with each other using WiFi To generate a new backhaul password 1 Launch a web browser from a computer or mobile device that is c...

Страница 181: ...2 Enter orbilogin com A login window displays If your browser does not display a login window but displays a security warning and does not let you proceed see What to do if you get a browser security...

Страница 182: ...b browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a login window but displays a security...

Страница 183: ...6 Click the Apply button Your settings are saved User Manual 183 Manage the Advanced WiFi Settings Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50...

Страница 184: ...rts You can use port forwarding and port triggering to set up rules for Internet traffic You need networking knowledge to set up these features This chapter includes the following sections Port forwar...

Страница 185: ...rved LAN IP addresses on page 121 3 Launch a web browser from a computer or mobile device that is connected to your Orbi network 4 Enter orbilogin com A login window displays If your browser does not...

Страница 186: ...do if you get a browser security warning on page 28 4 Enter the admin user name and password The user name is admin The password is the one that you set the first time that you logged in The user nam...

Страница 187: ...t you proceed see What to do if you get a browser security warning on page 28 3 Enter the admin user name and password The user name is admin The password is the one that you set the first time that y...

Страница 188: ...get a browser security warning on page 28 3 Enter the admin user name and password The user name is admin The password is the one that you set the first time that you logged in The user name and passw...

Страница 189: ...uence shows the effects of a port forwarding rule 1 When you type the URL www example com in your browser the browser sends a web page request message with the following destination information Destin...

Страница 190: ...he ports when they are no longer needed Add a port triggering service To add a port triggering service 1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2...

Страница 191: ...g before the router used port triggering for the service that you added See Enable port triggering on page 191 Enable port triggering To enable port triggering 1 Launch a web browser from a computer o...

Страница 192: ...ou must also allow incoming traffic on port 113 to reach the originating computer The following sequence shows the effects of the port triggering rule you define 1 You open an IRC client program to st...

Страница 193: ...finds an active session for port 113 associated with your computer The router replaces the message s destination IP address with your computer s IP address and forwards the message to your computer 8...

Страница 194: ...in VPN networks Enable OpenVPN service in the router Install OpenVPN software on a VPN client Use VPN to access your Internet service at your business Note If you are a NETGEAR Insight Premium or Pro...

Страница 195: ...ernal VPN service provider so it does not encrypt traffic passing between your business network and the Internet VPN can use either Dynamic DNS DDNS or a static IP address to connect with your router...

Страница 196: ...irst time that you logged in The user name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Advanced Setup VPN Service The VPN Service page displays Note The OpenVPN conf...

Страница 197: ...t up OpenVPN software on your device before you can use a VPN connection Install OpenVPN software on a VPN client You must install OpenVPN software on each Windows based computer Mac computer iOS devi...

Страница 198: ...ect the Windows package with the installer files In most situations you can download the Windows 32 bit or Windows 64 bit installer files depending on your Windows operating system 3 Download and inst...

Страница 199: ...tunnel connection will fail You can now open a VPN tunnel to the router For more information about installing and using OpenVPN on your Windows based computer visit https openvpn net community resourc...

Страница 200: ...y You can now open a VPN tunnel to the router For more information about installing and using OpenVPN on your Mac computer visit https openvpn net vpn server resources installation guide for openvpn c...

Страница 201: ...does not start automatically a list of apps might display Select the OpenVPN Connect app c Install the ovpn file You can now open a VPN tunnel to the router For more information about installing and u...

Страница 202: ...your Android device open the ovpn file and import it into the OpenVPN Connect app You can now open a VPN tunnel to the router For more information about using OpenVPN on your Android device visit http...

Страница 203: ...itive The BASIC Home page displays 4 Select ADVANCED Advanced Setup VPN Service The VPN Service page displays 5 Make sure that the Enable VPN Service check box is selected For more information about t...

Страница 204: ...er name and password are case sensitive The BASIC Home page displays 4 Select ADVANCED Advanced Setup VPN Service The VPN Service page displays 5 Make sure that the Enable VPN Service check box is sel...

Страница 205: ...re check the NETGEAR support site at support netgear com for product and contact information This chapter includes the following sections Quick tips The router and satellite do not sync You cannot log...

Страница 206: ...rk settings Make sure that the network settings of the computer are correct Wired and wirelessly connected computers must use network IP addresses on the same network as the router The simplest way to...

Страница 207: ...router and satellite successfully synced but the connection between the router and satellite is only fair Consider moving the Orbi satellite closer to the Orbi router Magenta The Orbi router and sate...

Страница 208: ...thernet cable If you changed the admin password and you forgot what it is see Reset the admin password on page 148 You cannot access the Internet Check your network and Internet connections 1 Make sur...

Страница 209: ...the Internet Setup page If your ISP allows only one Ethernet MAC address to connect to Internet and checks for your computer s MAC address do one of the following Inform your ISP that you bought a ne...

Страница 210: ...1 Launch a web browser from a computer or mobile device that is connected to your Orbi network 2 Enter orbilogin com A login window displays If your browser does not display a login window but displa...

Страница 211: ...e security that you are using for your WiFi network WPA2 or WPA3 To view the WiFi settings for the router use an Ethernet cable to connect a computer to a LAN port on the router Then log in to the rou...

Страница 212: ...tions For a wired connection make sure that the numbered LAN port LED is lit for the port to which you are connected Check that the appropriate LEDs are on for your network devices If your router and...

Страница 213: ...ter the portion of the IP address specified by the subnet mask is different from the network address of the remote device Check to see that your cable or DSL modem is connected and functioning If your...

Страница 214: ...nates uses Table 8 Preset VLAN profiles and their designated uses WLAN Usage WLAN Name Ethernet Ports LAN ID VLAN Profile Name VLAN ID admin access Wireless 1 All LAN ports and the WAN port LAN 1 Defa...

Страница 215: ...ction does the following Uses the LAN 1 preset Default VLAN 1 Wireless 1 WLAN and the satellite s LAN 1 port for the Admin network Sets the LAN 4 preset Guest VLAN 40 Guest Portal WLAN and the satelli...

Страница 216: ...ANs to other VLANs change the configuration for one or more existing WLANs see Manage the WiFi Networks on page 84 Note The router and satellite share the same WiFi settings After you configure or cha...

Страница 217: ...is section configures the network router and switch with the VLANs and LANs that you use on the Orbi Pro WiFi 6 system and then does the following on the Orbi Pro WiFi 6 router and satellite Uses the...

Страница 218: ...all ports as tagged members Add VLAN 40 with the name Guest and add all ports as tagged members 2 Create the following LAN subnets on your network router Add LAN 2 with subnet 192 168 20 0 24 make LA...

Страница 219: ...figuration for one or more existing WLANs see Manage the WiFi Networks on page 84 Note The router and satellite share the same WiFi settings After you configure or change these settings on the router...

Страница 220: ...t an IP address from the Orbi Pro WiFi 6 system verify that the WiFi network is assigned to the correct VLAN If a wired device cannot get an IP address from the Orbi Pro WiFi 6 system verify that the...

Страница 221: ...B Supplemental Information This appendix covers the following topics Factory settings Technical specifications 221...

Страница 222: ...ollowing table shows the factory default settings for the Orbi Pro WiFi 6 AX5400 router Table 9 Factory default settings for the router Default Setting Feature Router web interface login orbilogin com...

Страница 223: ...g IP address Local network 3 LAN 3 192 168 30 1 LAN 3 IP 255 255 255 0 LAN 3 subnet mask Enabled LAN 3 DHCP server 192 168 30 2 to 192 168 30 254 LAN 3 DHCP range 192 168 30 2 LAN 3 DHCP starting IP a...

Страница 224: ...S Security Enabled Broadcast SSID Auto1 Transmission speed United States in the US Otherwise varies by region Country region Auto RF channel 2 4 GHz fronthaul Auto RF channel 2 4 GHz backhaul Channel...

Страница 225: ...WiFi 6 AX5400 satellite SXS50 Technical specifications for Orbi Pro WiFi 6 AX5400 router model SXR50 The following table shows the technical specifications for the router Table 11 Technical specifica...

Страница 226: ...z 127 5 GHz front haul 127 Maximum number of computers per wireless network 2 412 2 462 Operating frequency range 2 4 GHz US 2 412 2 472 GHz Operating frequency range 2 4 GHz Europe ETSI 5 18 GHz 5 24...

Страница 227: ...N ports 2 4 support 10BASE T 100BASE TX and 1000BASE T LAN Maximum wireless signal rate complies with the IEEE 802 11 standard 3 WiFi 2 4 GHz Max 1200 Mbps 5 GHz Fronthaul Max 2400 Mbps 5 GHz Backhaul...

Страница 228: ...VCCI Class B EN 55 022 CISPR 22 Class B C Tick N10947 Electromagnetic emissions 3 Maximum wireless signal rate derived from IEEE Standard 802 11 specifications Actual throughput can vary Network condi...

Отзывы: