Home

Mobile Broadband Wireless

1. 2 MAC access list no data security 3 WEP security but some performance impact 4 WPA PSK strong security Figure 4 Wireless Security e Restrict Access Based on MAC Address You can allow only trusted PCs to connect so that unknown PCs cannot wirelessly connect to the router Restricting access by MAC address adds an obstacle against unwanted access to your network but the data broadcast over the wireless link is fully exposed e Turn Off the Broadcast of the Wireless Network Name SSID If you disable broadcast of the SSID only devices that have the correct SSID can connect This nullifies wireless network discovery feature of some products such as Windows XP but the data is still exposed e WEP Wired Equivalent Privacy WEP data encryption provides data security WEP Shared Key authentication and WEP data encryption block all but the most determined eavesdropper This data encryption mode has been superseded by WPA PSK and WPA2 PSK e WPA 802 1x WPA2 802 1x Wi Fi Protected Access WPA with user authentication implemented using IEE 802 1x and RADIUS servers e WPA PSK TKIP WPA2 PSK AES Wi Fi Protected Access WPA using a pre shared key to perform authentication and generate the initial data encryption keys The very strong authentication along with dynamic per frame re keying of WPA makes it virtually impossible to compromise For more information about wireless technology see the link to the online document in
2. 54 Chapter5 Advanced Mobile Broadband Wireless N Router MBRN3000 1 Select UPnP on the main menu to display the UPnP screen UPnP Turn UPnP On Advertisement Period in minutes 30 Advertisement Time To Live in hops 4 UPnP Portmap Table Active Protocol Int Port Ext Port IP Address 2 Fill in the settings on the UPnP screen Turn UPnP On UPnP can be enabled or disabled for automatic device configuration The default setting for UPnP is enabled If disabled the router will not allow any device to automatically control the resources such as port forwarding mapping of the router Advertisement Period The advertisement period is how often the router advertises broadcasts its UPnP information This value can range from 1 to 1440 minutes The default period is for 30 minutes Shorter durations ensure that control points have current device status at the expense of additional network traffic Longer durations might compromise the freshness of the device status but can significantly reduce network traffic Advertisement Time To Live The time to live for the advertisement is measured in hops steps for each UPnP packet sent A hop is the number of steps allowed to propagate for each UPnP advertisement before it disappears The number of hops can range from 1 to 255 The default value for the advertisement time to live is 4 hops which should be fine for most home networks If you notice that
3. Note If no WPS capable client devices are located during the 2 minute time frame the SSID does not chnage and no security is set up WPS PIN Entry Any wireless computer or device that will connect to the router wirelessly is a client The client must support a WPS PIN and must have a WPS configuration utility such as the NETGEAR Smart Wizard or Atheros Jumpstart The first time you add a WPS client make sure that the Keep Existing Wireless Settings checkbox on the WPS Settings screen is cleared This is the default setting for the router and allows it to generate the SSID and WPA WPA2 security settings when it implements WPS After WPS is implemented the router automatically selects this checkbox so that your SSID and wireless security settings stay the same if other WPS devices are added later To use a PIN to add a WPS client 1 Log in to the router as described in Logging In to Your Router on page 9 2 On the router main menu select Add a WPS Client computers that will connect wirelessly to the router are clients and then click Next The Add WPS Client screen displays 3 Select the PIN Number radio button 4 Go to the client wireless computer Run a WPS configuration utility Follow the utility s instructions to generate a PIN Take note of the client PIN Add WPS Client Select a setup method Push Button recommended PIN Number If your Adapter supports WPS please click on Generate a cl
4. Note The authentication is separate from the cse ye Automatic w data encryption You can select authentication that requires a shared key but still leaves data transmissions unencrypted Security is stronger if you use both the Shared Key and WEP encryption settings Encryption Strength 64 bit Security Encryption WEP Key Passphrase Generate Key1 5 Select the Encryption Strength setting WEP Wired Equivalent Privacy 64 bit encryption Enter 10 hexadecimal digits any combination of 0 9 a f or A F WEP Wired Equivalent Privacy 128 bit encryption Enter 26 hexadecimal digits any combination of 0 9 a f or A F Cancel 6 Enter the encryption keys You can manually or automatically program the four data encryption keys These values must be identical on all computers and Access Points in your network e Passphrase To use a passphrase to generate the keys enter a passphrase and click Generate This automatically creates the keys Wireless stations must use the passphrase or keys to access the router Note Not all wireless adapters support passphrase key generation e Key 1 Key4 These values are not case sensitive You can manually enter the four data encryption keys These values must be identical on all computers and access 18 Chapter2 Wireless Network Configuration Mobile Broadband Wireless N Router MBRN3000 points in your network Enter 10 hexadecimal digits any combi
5. Chapter 4 Managing Your Network 37 Mobile Broadband Wireless N Router MBRN3000 Log entries and action buttons are described in the following table Table 7 Security Log Entry and Button Descriptions Field or button Description Current time The date and time the log entry was recorded Description or action The type of event and what action was taken if any Source IP The IP address of the initiating device for this log entry Source port and interface The service port number of the initiating device and whether it originated from the LAN or WAN Destination The name or IP address of the destination device or website Destination port and interface The service port number of the destination device and whether it is on the LAN or WAN Refresh button Refresh the log screen Clear Log button Clear the log entries Send Log button Email the log immediately Apply button Apply the current settings Cancel button Clear the current settings Selecting Which Information to Log Besides the standard information listed previously you can choose to log additional information Those optional selections are as follows Attempted access to blocked site e Connections to the router menu e Router operation start up get time and so on e Known DoS attacks and port scans Saving Log Files on a Server You can choose to write the logs to a computer running a syslog program To activate th
6. Current Time Wednesday 01 Jan 2003 00 00 24 Select your time zone This setting will be used for the blocking schedule according to your local time zone and for time stamping log entries If your time zone is currently in daylight savings time select the Automatically adjust for daylight savings time check box Click Apply to save your settings Scheduling Firewall Services If you enabled services blocking in the Block Services screen or port forwarding in the Ports screen you can set up a schedule for when blocking occurs or when access is not restricted T 2 3 Log in to the router as described in Logging In to Your Houter on page 9 On the main menu select the Schedule The Schedule screen appears To block Internet services based on a schedule select Every Day or select one or more days If you want to limit access completely for the selected days select All Day Otherwise to limit access during certain times for the selected days fill in the Start Blocking and End Blocking fields Enter the values in 24 hour time format For example 10 30 a m would be 10 hours and 30 minutes and 10 30 p m would be 22 hours and 30 minutes If you set the start time after the end time the schedule will be effective through midnight the next day Click Apply to save your changes Live Parental Controls NETGEAR Live Parental Controls powered by OpenDNS is a router based Web filtering solution available on NETGEAR Wireless N
7. Wireless Communications in Appendix B Manually Configuring Your Wireless Settings Note If you use a wireless computer to change the wireless network name SSID or wireless security you will be disconnected when you click Apply To avoid this problem connect your computer to the router with an Ethernet cable while you are making changes Chapter 2 Wireless Network Configuration 15 Mobile Broadband Wireless N Router MBRN3000 To view or manually configure the wireless settings 1 Log in to the router as described in Logging In to Your Router on page 9 2 Select Wireless Settings from the main Wireless Settings menu Select the wireless network to configure The settings for this screen are explained 1p sso ee Scop Ee ROSE SSD in Table 3 Primary NETGEAR 36 No None Yes Yes O 2 NETGEAR No None No Yes 3 Select the region in which the router will o rem v None No operate O 4 NETOEAR 3 No None No Yes 4 For initial configuration and test leave the NUS other settings unchanged Region USA z Channel Auto 5 To save your changes click Apply zn PTT 6 Configure and test your computers for Menable this wireless Network wireless connectivity Set up your wireless computers with the same SSID and wireless security settings as your router Check that they have a wireless link and are able to obtain an IP address by DHCP from the router
8. Wireless Communications http documentation netgear com reference enu wireless index htm Preparing a Computer for http documentation netgear com reference enu wsdhcp index htm Network Access Virtual Private Networking http documentation netgear com reference enu vpn index htm VPN Glossary http documentation netgear com reference enu glossary index htm Appendix B Related Documents 66 Notification of Compliance Regulatory Compliance Information Note This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices Failure of the end user to comply with the applicable requirements may result in unlawful operation and adverse action against the end user by the applicable National regulatory authority This product s firmware limits operation to only the channels allowed in a particular Region or Country Therefore all options described in this user s guide may not be available in your version of the product Europe EU Declaration of Conformity CEO Marking by the above symbol indicates compliance with the Essential Requirements of the R amp TTE Directive of the European Union 1999 5 EC This equipment meets the following conformance standards EN300 328 2 4Ghz EN301 489 17 EN301 893 5Ghz EN60950 1 For complete DoC please visit the NETGEAR EU Declarations of Conformity website at http kb netgear com ap
9. 1 2 3 The Internet account is active Wireless broadband coverage is available where the unit is located Test by connecting USB modem to the laptop directly Access the router main menu to verify configurations in broadband settings is correct check with ISP if unsure Check the SIM PIN code if used Chapter 6 Troubleshooting 59 Mobile Broadband Wireless N Router MBRN3000 Troubleshooting Internet Browsing If your router can obtain an IP address but your computer is unable to load any Web pages from the Internet The Traffic meter is enabled and the limit might have been reached By configuring the traffic meter to not block you can resume Internet access If you have an usage limit your ISP may charge you for the overage e Your computer might not recognize any DNS server addresses A DNS server is a host on the Internet that translates Internet names such as www addresses to numeric IP addresses Typically your ISP provides the addresses of one or two DNS servers for your use If you entered a DNS address during the router s configuration reboot your computer and verify the DNS address as described in Internet Networking and TCP IP Addressing in Appendix B Alternatively you can configure your computer manually with DNS addresses as explained in your operating system documentation Your computer might not have the router configured as its TCP IP router If your computer obtains its information from
10. A Factory Default Settings and Technical Specifications Mobile Broadband Wireless N Router MBRN3000 Technical Specifications Technical Specifications Network Protocol and Standards Compatibility TCP IP DHCP Power adapter e North America 120V AC 60 Hz input e United Kingdom Australia 240V AC 50 Hz input e Europe 230V AC 50 Hz input e Japan 100V AC 50 60 Hz input e All regions output 12 V DC 1 0A output Physical specifications Environmental Specifications e Dimensions 6 8 x 5 03 x 1 28 173 mm x 128 mm x 33 mm e Weight 0 65 Ibs without the stand 0 29 kg e Operating temperature 0 to 40 C 32 to 104 F e Operating humidity 90 maximum relative humidity noncondensing Electromagnetic Emissions Interface Specifications FCC Part 15 Class B VCCI Class B EN 55 022 CISPR 22 Class B e LAN 10BASE T or 100BASE Tx RJ 45 e WAN USB Appendix A Factory Default Settings and Technical Specifications 65 Related Documents This appendix provides links to reference documents you can use to gain a more complete understanding of the technologies used in your NETGEAR product Document Link Windows XP and Vista http documentation netgear com reference enu winzerocfg index htm Wireless Configuration Utilities Application Note Internet Networking and http documentation netgear com reference enu tcpip index htm TCP IP Addressing
11. If there is interference adjust the channel Table 3 Wireless Settings MEnable SSID Broadcast O wireless Isolation Security Options G None O wEP O wPA PSK O wPA2 PSK AES O WPA PSK TKIP WPA2 PSK AES Apply Settings Description Wireless Network The green radio button shows which network you have selected the Primary network or one of three guest networks that you can set up For help with guest networks see The settings that you configured in Step 2 are broadcast to the WPS devices so that they can connect to the router on page 22 Name SSID The SSID is also known as the wireless network name Enter a 32 character maximum name in this field This field is case sensitive When there is more than one wireless network SSIDs provide a means for separating the traffic To join a network a wireless computer or device must use the SSID Region The location where the Router is used Channel The wireless channel used by the gateway The default is Auto Do not change the channel unless you experience interference shown by lost connections or slow data transfers If this happens you might need to try different channels to see which works best Mode The default is up to 145 Mbps 16 Chapter 2 Wireless Network Configuration Mobile Broadband Wireless N Router MBRN3000 Table 3 Wireless Settings Continued Settings Description Security Options Non
12. The E mail screen in the Content Filtering section displays the current date and time of day The Mobile Broadband Wireless N Router uses the Network Time Protocol NTP to obtain the current time from one of several network time servers on the Internet Each entry in the log is stamped with the date and time of day Problems with the date and time function can include the following e Date shown is January 1 2000 Cause The router has not yet successfully reached a network time server Check that your Internet access settings are configured correctly If you have just completed configuring the router wait at least 5 minutes and check the date and time again Time is off by one hour Cause The router does not automatically sense daylight savings time On the E mail screen select or clear the Adjust for Daylight Savings Time check box 62 Chapter6 Troubleshooting Factory Detault Settings and Technical Specitications Factory Default Settings You can use the Restore Factory Settings button located on the bottom of your router to reset all settings to their factory defaults This is called a hard reset To perform a hard reset push and hold the Restore Factory Settings button for 6 seconds Your router will return to the factory configiuration settings that are shown in the following table Feature Default Behavior Router User login URL http www routerlogin net or http www routerlogin com login User n
13. Your Network Mobile Broadband Wireless N Router MBRN3000 4 Click Add and the following screen displays Block Services Setup Service Type AIM v Protocol Starting Port 1 865234 Ending Port 1 65534 Service Type User Defined Filter Services For Only This IP Address 192 168 OIP Address Range 10 192 168 Alt IP Addresses Cancel 5 Either select a service from the Service Type drop down list or use the Service Type User Defined field to create a custom service 6 Click Add to create the service and it will be listed in the Service Table on the Block Services screen 7 Click Apply to save your settings Scheduling The router uses network time protocol NTP to obtain the current time and date from one of several network time servers on the Internet Setting Your Time Zone To localize the time for your log entries you must specify your time zone 1 Login to the router as described in Logging In to Your Router on page 9 Chapter 3 Protecting Your Network 27 4 Mobile Broadband Wireless N Router MBRN3000 On the main menu below Content Filtering select Schedule Schedule Days to Block Mevery Da Sunda Monda Tuesday Wednesda Thursday Frida Saturda Time of day to block use 24 hour clock Bada Start Blocking Hour Minute End Blocking Hour Minute Time Zone GMT 08 00 Pacific Time US amp Canada Tijuana v Automatically adjust for daylight savings time
14. a LAN port is connected to a 100 Mbps device verify that the port s LED is green If the port is 10 Mbps the LED is amber c The USB and Internet LEDs are lit Chapter 6 Troubleshooting 57 Mobile Broadband Wireless N Router MBRN3000 If any of these conditions does not occur refer to the following table Table 11 Troubleshooting with the LEDs LED Action Power LED is off e Make sure that the power cord is properly connected to your router and that the power supply adapter is properly connected to a functioning power outlet e Check that you are using the power adapter supplied by NETGEAR for this product e If the error persists you have a hardware problem and should contact technical support Power LED is red There is a fault within the router Try to clear the fault as follows e Cycle the power to see if the router recovers e Clear the router s configuration to factory defaults This sets the router s IP address to 192 168 0 1 This procedure is explained in Restoring the Default Configuration and Password on page 62 If the error persists you might have a hardware problem and should contact technical support Internet LED is red The router cannot connect to the Internet e Make sure the USB LED is lit indicating that the wireless modem is securely connected to the router e Your wireless modem must be activated and there must be coverage in your area To test coverage connect your modem to your
15. computers or devices must support Wi Fi Protected Setup WPS Compatible equipment usually has the ey WPS symbol on it WPS can configure the network name SSID and set up WPA WPA2 wireless security for the router and the wireless computer or device at the same time Some considerations regarding WPS are Chapter 2 Wireless Network Configuration 19 Mobile Broadband Wireless N Router MBRN3000 NETGEAR s Push N Connect feature is based on the WPS standard All other Wi Fi certified and WPS capable products should be compatible with NETGEAR products that implement Push N Connect If your wireless network will include a combination of WPS capable devices and non WPS capable devices NETGEAR suggests that you set up your wireless network and security settings manually first and use WPS only for adding WPS capable devices WPS Button Any wireless computer or wireless adapter that will connect to the router wirelessly is a client The client must support a WPS button and must have a WPS configuration utility such as the NETGEAR Smart Wizard or Atheros Jumpstart To use the router WPS button to add a WPS client 1 2 Log in to the router as described in Logging In to Your Router on page 9 On the router main menu select Add a WPS Client and then click Next By default the Push Button recommended radio button is selected Add WPS Client Select a setup method Push Button recommended You can eithe
16. router and gateway products Designed to 28 Chapter3 Protecting Your Network Mobile Broadband Wireless N Router MBRN3000 protect you from identity theft and scams Live Parental Control blocks up to 50 categories of Internet content Live Parental Controls is an excellent solution for keeping your family safe online but like all Web filtering tools it isn t perfect NETGEAR reminds you there s no substitute for keeping the family computer in a common area and in plain sight where you can monitor the websites your kids are visiting and taking caution when visiting Web sites requesting personal or financial information To download Live Parental Controls click the Live Parental Controls link on the router menu to go to the website http Avww netgear com Ipc Web based GUI Live Parental Controls is the first to allow parents or network administrators to manage settings while away from home or office This is particularly convenient when access exceptions need to be made And since settings are stored on the web using a browser interface to manage them is not difficult at all Total home protection Live Parental Controls protects all Internet connected devices thru the router It not only protects computers but also set top boxes iPhones iPods and gaming consoles that are attached to your network You no longer need to worry about phones and gaming consoles not being protected when kids use them in their own rooms E
17. some devices are not being updated or reached correctly then it might be necessary to increase this value a little UPnP Portmap Table The UPnP Portmap Table displays the IP address of each UPnP device that is currently accessing the router and which ports internal and external that device has opened 3 To save cancel your changes or refresh the table e Click Apply to save the new settings to the router e Click Cancel to disregard any unsaved changes e Click Refresh to update the portmap table and to show the active ports that are currently opened by UPnP devices Traffic Meter Traffic Metering allows you to monitor the volume of Internet traffic passing through your router s Internet port With the Traffic Meter utility you can set limits for traffic volume set a monthly limit and get a live update of traffic usage Chapter 5 Advanced 55 Mobile Broadband Wireless N Router MBRN3000 To monitor traffic on your router 1 2 Under the Advanced heading on the router menu select Traffic Meter To enable the Traffic Meter select the Enable Traffic Meter check box If you would like to record and restrict the volume of Internet traffic select the Traffic volume control by radio button You can select one of the following options for controlling the traffic volume e No Limit No restriction is applied when the traffic limit is reached e Download only The restriction is applied to incoming traf
18. the router by DHCP reboot the computer and verify the router address as described in the link to the online document Internet Networking and TCP IP Addressing in Appendix B Troubleshooting a TCP IP Network Using the Ping Utility Most TCP IP terminal devices and routers contain a ping utility that sends an echo request packet to the designated device The device then responds with an echo reply Troubleshooting a TCP IP network is made very easy by using the ping utility in your computer Testing the LAN Path to Your Router You can ping the router from your PC to verify that the LAN path to your router is set up correctly To ping the router from a PC running Windows 95 or later 1 From the Windows toolbar click the Start button and select Run 2 n the field provided type ping followed by the IP address of the router as in this example ping 192 168 0 1 3 Click OK You should see a message like this one 60 Chapter6 Troubleshooting Mobile Broadband Wireless N Router MBRN3000 Pinging lt IP address gt with 32 bytes of data If the path is working you see this message Reply from lt IP address gt bytes 32 time NN ms TTL xxx If the path is not working you see this message Request timed out If the path is not working correctly you could have one of the following problems e Wrong physical connections Make sure that the LAN port LED is on If the LED is off follow the instructions in
19. 29 238 116 Protocol PPP IP Subnet Mask 255 255 255 255 209 183 54 151 Domain Name Server 50918354151 LAN Port MAC Address 00 26 F2 5F 90 6E IP Address 192 168 0 1 DHCP ON IP Subnet Mask 255 255 255 0 Wireless Port Name SSID NETGE R 3G Region United States Channel Auto 1 Wireless AP On Broadcast Name On Connection Status ll Refresh Show Statistics Description This field displays the router firmware version HSDPA High Speed Downlink Packet Access Modem Identity Shows the modem in use Modem sw version Modem driver The software version of the modem The driver version of the modem version IMSI International Mobile Subscriber Identity SIM card identity IMEI International Mobile Equipment Identity Unique identity of the modem Operator The ISP for the broadband wireless network Network mode The mode of the current network the modem is connected to This is dependent on coverage and distance from the cell site Chapter 4 Managing Your Network 33 Mobile Broadband Wireless N Router MBRN3000 Table 4 Router Status Fields Continued Field Description WAN Port LAN Port Connection Status The status of the Internet connection IP Address The IP address used by the modem If no address is shown the router cannot connect to the Internet Protocol The protocol for the Internet connection which is PPP Point to Point
20. 3 Link Down LAN4 Link Down WLAN 300M 69 00 10 53 966 1041 Poll Interval secs Set Interval This following table explains the statistic fields Table 5 Router Statistics Fields Field Description Status The link status Note that LAN2 LAN3 and LAN4 are guest networks TxPkts The number of packets transmitted on this port since reset or manual clear RxPkts The number of packets received on this port since reset or manual clear Collisions The number of collisions on this port since reset or manual clear Tx B s The average egress line utilization for this port Rx B s The average ingress line utilization for this port Up Time The time elapsed since the last power cycle or reset Chapter 4 Managing Your Network 35 Mobile Broadband Wireless N Router MBRN3000 Connection Status Click the Connection Status button on the Router Status screen HSDPA Status Connection Status Connected Received Signal Quality in dbm 81 Bytes Transmitted 1472 Bytes Received 1186 Tx Bis 48 Rx Bis 0 System Uptime 00 01 31 Connection Duration 00 00 18 Available Networks AT amp T AT amp T T Mobile Poll 5 iena secs Set Interval Stop Close Window This screen shows the following statistics Table 6 Connection Status Fields for HSDPA Status Description Connection Status The status of the Internet connection Scanning The modem is scanning for broadband wireless ne
21. 3 23 restricting by MAC address 2 15 5 45 router password 3 23 access control 5 44 B backup configuration 4 30 blocking keywords 3 24 services 3 26 sites 3 24 broadband settings 1 11 1 12 C configuration backup 4 30 erasing 4 31 D date and time troubleshooting 6 62 daylight savings time 3 28 6 62 Denial of Service DoS protection 3 24 DHCP 5 50 DMZ server 5 48 default 5 48 Dynamic DNS 5 52 F factory settings restoring 4 31 filtering 3 28 Firmware Upgrade Assistant 1 10 FLASH memory 4 31 Internet configuration 1 11 Internet connection 1 6 auto detecting connection type 1 11 Mobile Broadband Settings screen 1 11 status 1 12 Internet Traffic Statistics 5 56 IP addresses auto generated 6 59 K keywords blocking 3 24 L LEDs 1 7 Live Parental Controls 3 28 logging in 1 9 logging out 1 9 logs sending 4 39 M MAC address 6 61 location of 1 8 5 45 restricting access by 2 15 5 45 metric static route 5 54 Mobile Broadband Settings screen 1 11 N Network Time Protocol 6 62 NTP 6 62 O OpenDNS 3 28 P parental controls 3 28 password changing 3 23 restoring 6 62 Push N Connect 2 19 R reserved IP adresses 5 51 Index 71 restore factory settings 4 31 Restore Factory Settings button 1 8 roaming 1 12 router back panel 1 8 router front panel 1 6 LEDs 1 7 Wireless button 1 7 WPS button 1 7 router label 1 8 router stand 1 9 S seria
22. AC address e Use the Wireless Card Entry fields to enter the MAC address of the device to be added The MAC address can usually be found on the bottom of the wireless device e If no device name appears when you enter the MAC address you can type a descriptive name for the computer that you are adding 4 Click Apply to save these settings Now only devices on this list will be allowed to wirelessly connect to the router Chapter 5 Advanced 45 Mobile Broadband Wireless N Router MBRN3000 Port Forwarding and Port Triggering Port forwarding and port triggering are advanced features that affect the behavior of the firewall in your router In the Port Forwarding Port Triggering screen you can make local computers or servers available to the Internet for different services for example FTP or HTTP to play Internet games like Quake Ill or to use Internet applications like CU SeeMe Port forwarding is designed for FTP Web server or other server based services Once port forwarding is set up requests from the Internet are forwarded to the proper server Port triggering monitors outbound traffic When the router detects traffic on the specified outbound port it remembers the IP address of the computer that sent the data and triggers the incoming port Incoming traffic on the triggered port is then forwarded to the triggering computer Port triggering allows requests from the Internet only after a designated port is triggered Po
23. G When uploading firmware to the router do not interrupt the Web browser by closing the window clicking a link or loading a new page If the browser is interrupted it might corrupt the firmware causing router to be unworkable and inaccessible When the upload is complete your router will automatically restart The upgrade process typically takes about 1 minute In some cases you might need to clear the configuration and reconfigure the router after upgrading 32 Chapter 4 Managing Your Network Mobile Broadband Wireless N Router MBRN3000 Router Status From the main menu below the Maintenance heading select Router Status to view this screen You can use this screen to view the status of the router to show statistics or to view the connection status e For information about the fields on this screen see Table 4 e See Showing Statistics on page 35 for information about statistics For information about the Internet connection see Connection Status on page 36 Table 4 Router Status Fields Field Firmware Version Router Status Account Name MBRN3000 Firmware Version 1 0 0 25 2 0 10 W HSDPA Modem Identity AirCard 881U F1 0 0 114P Modem SW version CANSIFWIF1 0 0 114P MSM7200R3 SRCIAMSS 2007 11 21 20 49 15 Modem driver version v 47 IMSI 310410109312150 IMEI 356685010997789 Operator AT amp TP Network mode EDGE WAN Port Connection Status Connected IP Address 166 1
24. HMIAZ 1999 5 EK Par la pr sente NETGEAR Inc d clare que l appareil Radiolan est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999 5 CE Italiano Italian Latviski Latvian Lietuviy Lithuanian Con la presente NETGEAR Inc dichiara che questo Radiolan conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999 5 CE Ar o NETGEAR Inc deklare ka Radiolan atbilst Direktivas 1999 5 EK b tiskaj m pras b m un citiem ar to saist tajiem noteikumiem iuo NETGEAR Inc deklaruoja kad is Radiolan atitinka esminius reikalavimus ir kitas 1999 5 EB Direktyvos nuostatas Nederlands Dutch Malti Maltese Hierbij verklaart NETGEAR Inc dat het toestel Radiolan in overeenstemming is met de essenti le eisen en de andere relevante bepalingen van richtlijn 1999 5 EG Hawnhekk NETGEAR Inc jiddikjara li dan Radiolan jikkonforma mal htigijiet essenzjali u ma provvedimenti ohrajn relevanti li hemm fid Dirrettiva 1999 5 EC Magyar Hungarian Alul rott NETGEAR Inc nyilatkozom hogy a Radiolan megfelel a vonatkoz alapvet k vetelm nyeknek s az 1999 5 EC ir nyelv egy b el r sainak Polski Polish Niniejszym NETGEAR Inc o wiadcza ze Radiolan jest zgodny z zasadniczymi wymoganmi oraz pozostalymi stosownymi postanowieniami Dyrektywy 1999 5 EC 68 Appendix C Notification of Compliance Mobile B
25. IP Subnet Mask The IP subnet mask used by the router s USB port Gateway IP Address The IP address used by the router Domain Name The DNS server IP addresses used by the router These Server addresses are usually obtained dynamically from the ISP MAC Address The Ethernet MAC address used by the router s LAN port IP Address The LAN port IP address The default is 192 168 0 1 DHCP Off The router will not assign IP addresses to PCs on the LAN On The router assigns IP addresses to PCs on the LAN IP Subnet Mask The LAN port IP subnet mask The default is 255 255 255 0 Wireless Port See Manually Configuring Your Wireless Settings on page 15 Name SSID The service set ID also known as the wireless network name Region The country where the unit is set up for use Channel The current channel which determines the operating frequency Wireless AP Indicates if the access point feature is disabled or not If not enabled the Wireless LED on the front panel will be off Broadcast Name Indicates if the router is configured to broadcast its SSID 34 Chapter 4 Managing Your Network Mobile Broadband Wireless N Router MBRN3000 Showing Statistics Click the Show Statistics button on the Router Status screen to display router usage statistics System Up Time 00 10 53 Port Status TxPkts RxPkts Collisions Tx Bis Rx Bis WAN PPP 150 33 0 0 0 LAN1 10M 100M LAN2 Link Down LAN
26. LAN IP address of the router while connected through the browser you will be disconnected and so will others connected to the router To connect to the router you must open a new connection to the new IP address and log in again Others using the router must restart their computers to connect to the router again 1 Select LAN IP to display the LAN Setup screen LAN Setup 2 Change the settings For more information Device Name MBRIN3O00 see Table 10 DHCP Settings on page 50 or Reserved IP Addresses on page 51 LAN TCPAP Setup IP Address 192 168 10 1 3 Click Apply to save the changes teta Em ume The LAN TCP IP Setup parameters are explained in the following table 7 Use Router as DHCP Server Starting IP Address 192 168 O l2 Ending IP Address 192 168 0 254 Address Reservation iPAddess Device Name MAC Address Add Edit Delete Apply Cancel Chapter 5 Advanced 49 Mobile Broadband Wireless N Router MBRN3000 Table 10 LAN IP Setup Settings Description bevisene O T O LAN TCP IP IP Address The LAN IP address of the router Setup IP Subnet Mask The LAN subnet mask of the router Combined with the IP address the IP Subnet Mask allows a device to know which other addresses are local to it and which must be reached through a gateway or router DHCP Server Use Router as a DHCP This check box is usually selected so that the rou
27. NETGEAR Mobile Broadband Wireless N Router MBRN3000 User Manual Mobile Broadband Wireless N Router MBRN3000 2010 NETGEAR Inc 2010 by NETGEAR Inc All rights reserved No part of this publication may be reproduced transmitted transcribed stored in a retrieval system or translated into any language in any form or by any means without the written permission of NETGEAR Inc Part Number 202 10578 01 v1 0 Technical Support When you register your product at http www netgear com register NETGEAR can provide you with faster expert technical support and timely notices of product and software upgrades NETGEAR Inc 350 East Plumeria Drive San Jose CA 95134 USA E mail support netgear com Website http www netgear com Phone 1 888 NETGEAR for US amp Canada only For other countries see your Support information card Trademarks NETGEAR the NETGEAR logo ProSafe Smart Wizard and Auto Uplink are trademarks or registered trademarks of NETGEAR Inc Microsoft Windows Windows NT and Vista are registered trademarks of Microsoft Corporation Other brand and product names are registered trademarks or trademarks of their respective holders Statement of Conditions To improve internal design operational function and or reliability NETGEAR reserves the right to make changes to the products described in this document without notice NETGEAR does not assume any liability that may occur due to th
28. PC and try to connect to the Internet directly from your computer Check the NETGEAR website to ensure that your wireless modem is supported e Close the 3G Connection manager if it is running on your PC LAN LEDs are off If these LEDs do not light when the Ethernet connection is made check the following Make sure that the Ethernet cable connections are secure at the router and at the hub or workstation e Make sure that power is turned on to the connected hub or workstation Internet LED is blinking red and The traffic meter feature is enabled and the limit set has been green reached Troubleshooting Access to the Router Main Menu If you are unable to access the router main menu from a computer on your local network check the following e If you are using an Ethernet connected computer check the Ethernet connection between the computer and the router as described in the previous section 58 Chapter6 Troubleshooting Mobile Broadband Wireless N Router MBRN3000 Make sure your computer s IP address is on the same subnet as the router If you are using the recommended addressing scheme your computer s address should be in the range of 192 168 0 2 to 192 168 0 254 See the online document listed in Internet Networking and TCP IP Addressing in Appendix B to find your computer s IP address Note If your computer s IP address is shown as 169 254 x x Recent versions of Windows and MacOS generate a
29. PN tunnel is enabled and working Perform a DNS lookup to test if an Internet name resolves to an IP address to verify that the DNS server configuration is working 40 Chapter 4 Managing Your Network Mobile Broadband Wireless N Router MBRN3000 e Display the routing table to identify what other routers the router is communicating with e Reboot the router to enable new network configurations to take effect or to clear problems with the router s network connection From the main menu under the Maintenance heading select Diagnostics Diagnostics Ping an IP address IP Address Perform a ONS Lookup Internet Name IP Address 209 183 54 151 DNS Server 209 183 54 151 Display the Routing Table Display Reboot the Router Save diagnostics information Scan available command port e Ping Ping an IP address e Lookup A DNS Domain Name Server converts the Internet name such as www netgear com to an IP address If you need the IP address of a server on the Internet you can do a DNS lookup to find the IP address e Display View the internal routing table Typically this information is used only by Technical Support Reboot Shut down and restart the router Note If you reboot the router you will lose your connection To access the router you will need to log in again after it has finished rebooting e Save Save diagnostic information e Scam Enabling Remote Management Using the Remote Manageme
30. TCP IP Network Using the Ping Utility 60 Testing the LAN Path to Your Router 0 0 0 0 cee eee ee 60 Testing the Path from Your Computer to a Remote Device 61 Restoring the Default Configuration and Password 62 Problems with Date and Time sss ms 62 4 Table of Contents Mobile Broadband Wireless N Router MBRN3000 Appendix A Factory Default Settings and Technical Specifications Factory Default Settings 3 2 63 26 me deme E IHRE RE RR 63 Technical SpecifiCatiolis 2 md tasche gens Gd d as 65 Appendix B Related Documents Appendix C Notification of Compliance Index Table of Contents 5 Connecting to the Internet This chapter describes how to configure your NETGEAR Mobile Broadband Wireless N Router MBRN3000 Internet connection For help with installation see the Mobile Broadband Wireless N Router MBRN3000 Installation Guide Hardware Features Router Front Panel The router front panel shown below contains status LEDs Power LAN Ports 1 4 USB Internet Wireless WPS Figure 1 Front panel You can use the LEDs to verify status and connections The following table lists and describes each LED and button on the front panel of the router Chapter 1 Connecting to the Internet 6 Mobile Broadband Wireless N Router MBRN3000 Table 1 LED and Front Panel Button Descriptions LED U Power LED Activity Description Solid green Solid green Po
31. Table 11 on page 58 Check that the corresponding Link LEDs are on for your network interface card and for the hub ports if any that are connected to your workstation and router Wrong network configuration Verify that the Ethernet card driver software and TCP IP software are both installed and configured on your PC or workstation Verify that the IP address for your router and your workstation are correct and that the addresses are on the same subnet Testing the Path from Your Computer to a Remote Device After verifying that the LAN path works correctly test the path from your PC to a remote device 1 From the Windows toolbar click the Start button and select Run 2 In the Windows Run window type PING n 10 P address where P adaress is the IP address of a remote device such as your ISP s DNS server If the path is functioning correctly replies as in the previous section are displayed If you do not receive replies e Check that your PC has the IP address of your router listed as the default router If the IP configuration of your PC is assigned by DHCP this information is not visible in your PC s Network Control Panel Verify that the IP address of the router is listed as the default router as described in the online document listed in Internet Networking and TCP IP Addressing in Appendix B Make sure that the network address of your PC the portion of the IP address specified by the netmask is different fr
32. acket User Datagram Protocol UDP packet port 6970 and Internet Control Message Protocol ICMP packet port 0 being dropped as a result of the default inbound rule which states that all inbound packets are denied Enabling Security Event E mail Notification To set up the router so that you can receive logs and alerts by e mail select Email from the router menu to display the following screen E mail Turn E mail Notification On Send alerts and logs through e mail Your Outgoing Mail Server Send to This E mail Address My mail server requires authentication User Name Password Send Alert Immediately When someone attempts to visit a blocked site Send logs according to this schedule Apply Cancel Chapter 4 Managing Your Network 39 Mobile Broadband Wireless N Router MBRN3000 To receive alerts and logs by e mail 1 Select the Turn E mail Notification On check box 2 Fill in the fields to send alerts and logs through email e Your Outgoing Mail Server Enter the name or IP address of the outgoing SMTP mail server of your ISP such as mail mylSP com e Send to This E mail Address Enter the e mail address where you want to send the alerts and logs Use a full e mail address such as ChrisXY mylSP com My mail server requires authentication Select this check box if you need to log in to your SMTP server to send E mail If you select this feature you must enter the user name and password for the mail ser
33. ame case sensitive admin Login password case sensitive password Internet WAN MAC address Use default address Connection WAN MTU size 1500 Port speed AutoSense Local LAN IP 192 168 0 1 network LAN Subnet mask 255 255 255 0 RIP direction None RIP version Disabled RIP authentication None DHCP server Enabled DHCP starting IP address 192 168 0 2 DHCP ending IP address 192 168 0 254 DMZ Disabled Time zone PST for North America GMT for other locations Daylight saving time adjustment Disabled Appendix A Factory Default Settings and Technical Specifications 63 Mobile Broadband Wireless N Router MBRN3000 Feature Continued Default Behavior Continued Firewall Inbound communication from the Disabled except traffic on port 80 the http port Internet Outbound communication to the Enabled all Internet Source MAC filtering Disabled SSID name NETGEAR Security Disabled Broadcast SSID Enabled Transmission speed Auto Country Region United States in North America otherwise varies by region RF channel Auto Access point Enabled 1 Maximum Wireless signal rate derived from IEEE Standard 802 11 specifications Actual throughput will vary Network conditions and environmental factors including volume of network traffic building materials and construction and network overhead lower actual data throughput rate 64 Appendix
34. at each wireless adapter supports Wireless security option To successfully implement wireless security check each wireless adapter to determine which wireless security option it supports See Manually Configuring Your Wireless Settings on page 15 Push N Connect WPS implements WPA WPA2 wireless security on the router and your wireless computer or device at the same time The wireless computer or device must be compatible with WPS See Using Push N Connect WPS to Configure Your Wireless Network on page 19 Chapter 2 Wireless Network Configuration 13 Mobile Broadband Wireless N Router MBRN3000 Wireless Placement and Range Guidelines The range of your wireless connection can vary significantly based on the physical placement of the router The latency data throughput performance and notebook power consumption of wireless adapters also vary depending on your configuration choices For best results place your router according to the following guidelines e Near the center of the area in which your PCs will operate e In an elevated location such as a high shelf where the wirelessly connected PCs have line of sight access even if through walls e Away from sources of interference such as PCs microwave ovens and 2 4 GHz cordless phones Away from large metal surfaces Put the antenna in a vertical position to provide the best side to side coverage Put the antenna in a horizontal position to prov
35. ational spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and or for supplying public access to telecommunications and or network services This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP in the frequency range of 2454 2483 5 MHz For detailed information the end user should contact the national spectrum authority in France FCC Requirements for Operation in the United States FCC Information to User This product does not contain any user serviceable components and is to be used with approved antennas only Any product changes or modifications will invalidate all applicable regulatory certifications and approvals FCC Guidelines for Human Exposure This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance of 20 cm between the radiator and your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter FCC Declaration of Conformity We NETGEAR Inc 350 East Plumeria Drive Santa Clara CA 95134 declare under our sole responsibility that the model MBRN3000 complies with Part 15 Subpart B of FCC CFR47 Rules Operation is subject to the following two conditions e This device may not cause harmful interference and e This device
36. e You can use this setting to establish wireless connectivity before implementing wireless security NETGEAR strongly recommends that you implement wireless security WEP Use encryption keys and data encryption for data security You can select 64 bit or 128 bit encryption See Configuring WEP WPA PSK TKIP Allow only computers configured with WPA to connect to the router See Configuring WPA WPA2 or WPA WPA2 Security Options WPA2 PSK AES Allow only computers configured with WPA2 to connect to the continued router See Configuring WPA WPA2 or WPA WPA2 WPA PSK TKIP Allow computers configured with either WPA PSK or WPA2 PSK WPA2 PSK AES security to connect to the router See Configuring WPA WPA2 or WPA WPA2 Wireless Guest Networks A wireless guest network allows you to provide guests access to your wireless network without prior authorization of each individual guest You can configure wireless guest networks and specify the security options for each wireless guest network To configure a wireless guest network 1 In the main menu under Setup select Wireless Settings Wireless Settings Select the wireless network to configure Profile SSID Guest Access Security Enable Broadcast SSID Primary NETGEAR 36 No None Yes Yes O 2 NETGEAR 1 No None No Yes O 3 NETGEAR 2 No None No Yes O 4 NETGEAR 3 No None No Yes 2 Select the radio button for t
37. e use or application of the product s or circuit layout s described herein Revision History Publication Part Number Version Publish Date 202 10578 01 Table of Contents Chapter 1 Connecting to the Internet Hardware Features xxi b EE RI Pose de da ie Enc Set Pd dads Router Front Panel 2 eode s e aret dediti ies Router Back Panel uu c nere Dee phe aad den d eno P c Router Label 222559 red o utet qubd Pedo rep dorus Using the Router Stalld iu dep xb e ER Rua Pd erpce ie E Logging In to Your Router iu epar Roa RD Ich RARE rara RA es Accessing the Setup Wizard After Installation 04 Manually Configuring Your Internet Settings llle Chapter 2 Wireless Network Configuration Planning Your Wireless Network isc ee has ba dee ne Rm xxn Wireless Placement and Range Guidelines 05 Wireless Security Options 2 a2 ence ee pa Rm mE RRAROOR AUR Rome Manually Configuring Your Wireless Settings 00 Wireless Guest Networks issuer exea pad x deoa Ra we Configuring WEP 23x72 Ese deers eee qoe SIDE PON EE Configuring WPA WPA2 or WPA WPA2 suse Using Push N Connect WPS to Configure Your Wireless Network WPS BUUOM Aiden duse dedere d Res RO kd Facio Se ded Mae WES PINE 3t ecol o opaco PRG Reha 93 dob oe aen a ade Adding Wireless Computers that Do Not Support WPS Chapter 3 Protecting Your Network Protecting Access to Your Mobile B
38. en you first connect to your router during installation a Setup Wizard appears For help using the Setup Wizard to configure your Internet and wireless network see the Mobile Broadband Wireless N Router MBRN3000 Installation Guide After the initial configuration you can use your Web browser to log into the router to view or change its settings Links to Knowledge Base and documentation are also available on the router main menu Note Your computer must be configured for DHCP For help with configuring DHCP see the documentation that came with your computer or see the link to the online document in lt pdf gt Preparing Your Network in Appendix B When you have logged in if you do not click Logout the router waits 5 minutes after no activity before it automatically logs you out Chapter 1 Connecting to the Internet 9 Mobile Broadband Wireless N Router MBRN3000 To log in to the router 1 Type http www routerlogin net in the address field of your browser and then press Enter A login window displays User name fi admin Ne Password eeeeecee Remember my password 2 Enter admin for the user name and your password or the default password For information about how to change the password see Changing the Built In Password on page 23 Note If you changed your password and do not remember what it is you can restore the router to its factory settings See Factory Default Settings in Ap
39. ers the devices To force the router to look for attached devices click the Refresh button Viewing Selecting and Saving Logged Information The router logs security related events such as denied incoming service requests hacker probes and administrator logins If you enabled content filtering in the Block Sites screen the Logs screen can show you when someone on your network tries to access a blocked site On the router menu below the Content Filtering heading select Logs to display this screen Logs Current Time Thursday Jun 03 2010 07 58 48 Internet connected IP address 166 187 44 133 Friday Jul 23 2010 00 54 23 Internet disconnected Friday Jul 23 2010 00 54 13 Admin login from source 192 168 0 2 Friday Jul 23 2010 00 53 03 Admin login from source 192 168 0 2 Friday Jul 23 2010 00 52 44 DHCP IP 192 168 0 2 to MAC address 00 1A 6B 6D 8F 19 Friday Jul 23 2010 00 52 40 Initialized firmware version V1 0 0 41 2 0 11UWV Friday Jul 23 2010 00 52 39 Include in Log B Attempted access to blocked sites Connections to the Web based interface of this Router C Router operation start up get time etc C known Dos attacks and Port Scans Syslog Disable O Broadeast on LAN Send to this Syslog server IP address 0 0 0 0 oni nee Note You can enable e mail notification to receive these logs in an e mail message See Enabling Security Event E mail Notification on page 39
40. ervice blocking Limits access from your LAN to Internet locations or services that you specify as off limits e Denial of service DoS protection Detects and thwarts denial of service DoS attacks such as Ping of Death SYN flood LAND attack and IP spoofing 24 Chapter3 Protecting Your Network Mobile Broadband Wireless N Router MBRN3000 e Blocking unwanted traffic from the Internet to your LAN The router allows you to restrict access to Internet content based on Web addresses and Web address keywords 1 Login to the router as described in Logging In to Your Router on page 9 2 On the main menu select Block Sites to display the Block Sites screen Block Sites Keyword Blocking Never O Per Schedule O Always Type keyword or domain name here Add Block sites containing these keywords or domain names C Allow trusted IP address to visit blocked sites Trusted IP Address 3 To enable keyword blocking select one of the following e Per Schedule Turn on keyword blocking according to the settings on the Schedule screen e Always Turn on keyword blocking all the time independent of the setting in the Schedule screen 4 Enter a keyword or domain in the Keyword field click Add Keyword and then click Apply Some examples of keyword applications are shown in the following chart Keyword Result XXX Block the URL http www badstuf com xxx html com Only websites with ot
41. ettings screen Backup Settings Save a copy of current settings Save Restore saved settings from a file Revert to factory default settings 3 Click Save to save a copy of the current settings 4 Store the cfg file on a computer on your network Chapter 4 Managing Your Network 30 Mobile Broadband Wireless N Router MBRN3000 Restoring the Configuration from a File To restore the configuration 1 Log in to the router Type http www routerlogin net in the address field of your Internet browser Enter admin for the user name and your password or the default password Under the Maintenance heading on the main menu select Backup Settings Enter the full path to the file on your network or click Browse to locate the file When you have located the cfg file click Restore to upload the file to the router a a a The router reboots Erasing the Configuration You can use the Erase feature to erase its configuration settings and restore the router to the factory default settings To erase the configuration 1 Under the Maintenance heading on the main menu select Backup Settings 2 Click Erase 3 The router reboots After an erase the router password is password the LAN IP address is 192 168 0 1 and the router DHCP client is enabled Note To restore the factory default configuration settings when you do not know the login password or IP address press the Restore Factory Settings button on the b
42. ettings so that they are easier for you to remember If you do that then you will need to set up the WPS compatible computers again Changing Wireless Settings for the Network Note Making these changes will cause all wireless computers to be disconnected from network You will then have to set them up with the new wireless settings 1 Use an Ethernet cable to connect a computer to the router That way you will not get disconnected when you change the wireless settings 2 Log in to the router and select Wireless Settings see Manually Configuring Your Wireless Settings on page 15 3 Make the following changes e Change the Wireless Network Name SSID to a meaningful name e Onthe WPA PSK WPA2 PSK screen select a passphrase Make sure that the Keep Wireless Settings checkbox is selected in the WPS Settings screen so that your new settings will not be erased if you use WPS 4 Click Apply so that your changes take effect Write down your settings All existing wireless clients are disassociated and disconnected from the router 5 For the non WPS devices that you want to connect open the networking utility and follow the utility s instructions to enter the security settings that you selected in Step 2 the SSID WPA PSK WPA2 PSK security method and passphrase 6 For the WPS devices that you want to connect follow the procedure WPS Button on page 20 or WPS PIN Entry on page 21 The settings that you conf
43. fic only e Both Directions The restriction is applied to both incoming and outgoing traffic Traffic Meter Internet Traffic Statistics Enable Traffic Meter Traffic volume control by Monthly limit Mbytes Round up data volume for each connection by Mbytes Connection time control Monthly limit hours Traffic Counter Restan trafic counter at 0O 00 On the day of each month Traffic Control Alert prior to reaching monthly limit Mbytes Minutes C Issue waming popup Block all traffic Send email Internet Traffic Statistics Start Date Time Wednesday 01 Jan 2003 00 00 Current Date Time Wednesday 01 Jan 2003 00 51 Traffic Volume Left No limit You can limit the amount of data traffic allowed per month Period Connection Time Traffic Volume Mbytes e By specifying how many Mbytes per month are m mm ve Tos T oso allowed wel sr oe un 0 00 0 00 0 00 e By specifying how many hours of traffic are memon cm Coo m o allowed Last mown 00 00 py ded 0 Set the Traffic Counter to begin at a specific time and date Set up Traffic Control to issue a warning message before the month limit of Mbytes or hours is reached You can select one of the following to occur when the limit is attained The Internet LED flashes green or amber e The Internet connection is disconnected and disabled Apply Cancel Set up Internet Traffic Statistics t
44. figuring Remote Management 00 0c eee ee eee 42 Chapter 5 Advanced Advanced Wireless Settings sss sente eR ed sac eR xn ee ae 43 Wireless Station Access Control llle eese 44 Restricting Access by MAC Address 0000 e een eee 45 Port Forwarding and Port Triggering 000 eee eee eee 46 Port FEorWatalng 22262 464 004 46 PCR UH REPE tap eR 46 Port TMOG STAG ud Seid as ep ebd Gln aay qb abi quada Mow eb RR d 47 WAN SQUID 2030026 y nae ee dad ethics Rd eee aa ee ead 47 Setting Up a Default DMZ Server issus n 48 LAN IP SONS 1 225490 1330 7h PRO d Posen PPDRPARSHMUPCP RP 49 DEICP SOtUngs sce orbe need dda sen Ru Redde boda dedi d 50 Reserved IP Addresses 2 0 00 400k ed dad Rr ES er dued den 51 Dynamic DNS 3 na qr tox oe beo dum qp Re ett pd dud 52 Configuring Dynamic DNS 2 2 2e e o is teed idee ed dist 52 Using Static ROUES uei dace tro ae E beoe do ned Ride bd A d 53 Static Route Example eos o EDO oet PR REESE 53 Universal Plug and Play UPnP 000 00 eee eee 54 MOME MOE erresire tie are Shae Hie ig ode doh Arta dn a aah Sas 55 Chapter 6 Troubleshooting Basic FU CUOBIEIO sod 47004 naran EG edo D RES A REEERE RR 57 Troubleshooting Access to the Router Main Menu 58 Troubleshooting the ISP Connection 220000000 59 Connecting to the Internet 2 iiicossese e n 59 Troubleshooting Internet Browsing llis 60 Troubleshooting a
45. he network profile that you want to set up 3 You can specify the SSID Security and whether the SSID broadcast is enabled e NETGEAR recommends that you change the SSID to a different name Note that the SSID is case sensitive For example GuestNetwork is not the same as Guestnetwork e Wireless security is disabled by default NETGEAR strongly recommends that you implement wireless security for the guest network 4 To configure wireless security for the guest network enter the security options 5 When you have finished making changes click Apply Chapter 2 Wireless Network Configuration Mobile Broadband Wireless N Router MBRN3000 Configuring WEP Note If you use a wireless computer to configure wireless security settings you will be disconnected when you click Apply Reconfigure your wireless computer to match the new settings or access the router from a wired computer to make further changes To configure WEP data encryption 1 Log in to the router as described in Logging In to Your Router on page 9 2 From the main menu select Wireless Settings to display the Wireless Settings screen In the Security Options section select the WEP Wired Equivalent Privacy radio button 4 Select the Authentication Type Automatic Open System or Shared Key The default is Open System Security Options O None WEP O WPA PSK TKIP O WPA2 PSK AES O WPA PSK TKIP WPA2 PSK AES Security Encryption WEP
46. he server s IP address here This allows your PCs to browse the network using the Network Neighborhood feature of Windows Reserved IP Addresses When you specify a reserved IP address for a computer on the LAN that computer always receives the same IP address each time it access the router s DHCP server Reserved IP addresses should be assigned to servers that require permanent IP settings To reserve an IP address T 2 Click the Add button In the IP Address field type the IP address to assign to the computer or server Choose an IP address from the router s LAN subnet such as 192 168 0 x Type the MAC address of the computer or server Tip If the computer is on your network it is listed on the same page for your convenience Clicking the radio button for each entry in the attached device list fills in the fields automatically with the computers MAC address and name Click Apply to enter the reserved address into the table Note The reserved address will not be assigned until the next time the computer contacts the router s DHCP server Reboot the computer or access its IP configuration and force a DHCP release and renew To edit or delete a reserved address entry 1 2 Click the button next to the reserved address you want to edit or delete Click Edit or Delete Chapter 5 Advanced 51 Mobile Broadband Wireless N Router MBRN3000 Dynamic DNS If your network has a permanently assigned IP address y
47. her domain suffixes such as edu or gov can be viewed a period Block all Internet browsing access Up to 32 entries are supported in the Keyword list Note If you block sites you can set up the router to log attempts to access them See Viewing Selecting and Saving Logged Information on page 37 Chapter 3 Protecting Your Network 25 Mobile Broadband Wireless N Router MBRN3000 5 To delete a keyword or domain select it from the list click Delete Keyword and then click Apply 6 To specify a trusted user enter that computer s IP address in the Trusted IP Address field and then click Apply You can specify one trusted user which is a computer that will be exempt from blocking and logging Since the trusted user will be identified by an IP address you should configure that computer with a fixed IP address 7T Click Apply to save your settings Blocking Services 1 Log in to the router as described in Logging In to Your Router on page 9 2 In the main menu under Content Filtering select Block Services to display this screen Block Services Services Blocking Never O Per Schedule O Always Service Table Service Type Port Ip ia Figure 3 1 3 Select one of the following e Per Schedule Turn on keyword blocking according to the settings in the Schedule screen Always Turn on keyword blocking all the time independent of the Schedule screen 26 Chapter3 Protecting
48. ide the best up and down coverage e If using multiple access points it is better if adjacent access points use different radio frequency channels to reduce interference The recommended channel spacing between adjacent access points is 5 channels for example use Channels 1 and 6 or 6 and 11 The time it takes to establish a wireless connection can vary depending on both your security settings and placement WEP connections can take slightly longer to establish Also WEP encryption can consume more battery power on a notebook computer Wireless Security Options Indoors computers can connect over 802 11g wireless networks at a maximum range of up to 300 feet Such distances can allow for others outside your immediate area to access your network Unlike wired network data your wireless data transmissions can extend beyond your walls and can be received by anyone with a compatible adapter For this reason use the security features of your wireless equipment The Mobile Broadband Wireless N Router provides highly effective security features which are covered in detail in this chapter Deploy the security features appropriate to your needs 14 Chapter2 Wireless Network Configuration Mobile Broadband Wireless N Router MBRN3000 There are several ways you can enhance the security of your wireless network Wireless Data Security Options cp Range up to 300 foot radius ee x MBRN3000 1 Open system easy but no security
49. ient Security Pin to input on the AP Router Gateway and put the generated client PIN number here Enter Client s PIN Next 5 From the router Add WPS Client screen enter the client PIN number and then click Next The router tries to communicate with the client for 4 minutes If no WPS clients connect during this time the router wireless settings do not change The router WPS screen confirms that the client was added to the wireless network The router generates an SSID and implements WPA WPA2 wireless security 6 Note the new SSID and WPA WPA2 password for the wireless network You can view these settings in the Wireless Settings screen See Manually Configuring Your Wireless Settings on page 15 To access the Internet from any computer connected to your router launch an Internet browser such as Mozilla Firefox You should see the router s Internet LED blink Chapter 2 Wireless Network Configuration 21 Mobile Broadband Wireless N Router MBRN3000 Adding Wireless Computers that Do Not Support WPS If you set up your network with WPS and now you want to add a computer that does not support WPS you must manually configure that computer To view the wireless settings for the router see Manually Configuring Your Wireless Settings on page 15 Because WPA randomly creates the SSID and WPA WPA2 keys they might be difficult to type or remember that is one reason why the network is so secure You can change the wireless s
50. igured in Step 2 are broadcast to the WPS devices so that they can connect to the router 22 Chapter2 Wireless Network Configuration Protecting Your Network This chapter describes how to use the basic firewall features of the router to protect your network Note For information about the advanced content filtering features port forwarding and port triggering see Port Forwarding and Port Triggering on page 46 Protecting Access to Your Mobile Broadband Wireless N Router For security reasons the router has its own user name and password Also after a period of inactivity the login automatically disconnects The user name and password are not the same as a user name or password you might use to log in to your Internet connection NETGEAR recommends that you change this password to a more secure password The ideal password should contain no dictionary words from any language and should be a mixture of both upper and lower case letters numbers and symbols Your password can be up to 30 characters Changing the Built In Password 1 To log in to the router type http www routerlogin net in the address field of your Internet browser Enter admin for the user name and your password or the default password Note If you changed the password and do not remember what it is you can reset the router to its factory default settings See Hestoring the Chapter 3 Protecting Your Network 23 Mobile Broadband Wi
51. is feature select to the Broadcast on LAN radio button or enter the IP address of the server where the syslog file will be written Examples of Log Messages Following are examples of log messages In all cases the log entry shows the timestamp as Day Year Month Date Hour Minute Second 38 Chapter4 Managing Your Network Mobile Broadband Wireless N Router MBRN3000 Activation and Administration Tue 2002 05 21 18 48 39 NETGEAR activated This entry indicates a power up or reboot with initial time entry Tue 2002 05 21 18 55 00 Administrator login successful IP 192 168 0 2 Thu 2002 05 21 18 56 58 Administrator logout IP 192 168 0 2 This entry shows an administrator logging in and out from IP address 192 168 0 2 Tue 2002 05 21 19 00 06 Login screen timed out IP 192 168 0 2 This entry shows a time out of the administrator login Wed 2002 05 22 22 00 19 Log emailed This entry shows when the log was e mailed Dropped Packets Wed 2002 05 22 07 15 15 TCP packet dropped Source 64 12 47 28 4787 WAN Destination 134 177 0 11 21 LAN Inbound Default rule match Sun 2002 05 22 12 50 33 UDP packet dropped Source 64 12 47 28 10714 WAN Destination 134 177 0 11 6970 LAN Inbound Default rule match Sun 2002 05 22 21 02 53 ICMP packet dropped Source 64 12 47 28 0 WAN Destination 134 177 0 11 0 LAN Inbound Default rule match These entries show an inbound FTP port 21 p
52. l number location of 1 8 Setup Wizard 1 11 SMTP 4 40 SSID 2 15 Syslog 4 38 T TCP IP network troubleshooting 6 60 time of day 6 62 time zone 3 28 timeout administrator login 3 24 time stamping 3 28 Traffic Control 5 56 Traffic Counter 5 56 traffic metering 5 55 Traffic Status 5 56 troubleshooting 6 57 Trusted Host 3 26 U updating firmware 1 10 W websites blocking 3 24 WEP 2 15 WEP configuring 2 18 WINS 5 51 wireless guest network 2 17 range and interference 2 14 viewing or changing settings 2 15 Wireless button 1 7 wireless network planning 2 13 wireless security 2 14 wireless station access control 5 44 Mobile Broadband Wireless N Router MBRN3000 WPA and WPA42 configuring 2 19 WPS 2 19 WPS button 1 7 72 Index
53. must accept any interference received including interference that may cause undesired operation Appendix C Notification of Compliance 69 Mobile Broadband Wireless N Router MBRN3000 FCC Radio Frequency Interference Warnings amp Instructions This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following methods Reorient or relocate the receiving antenna Increase the separation between the equipment and the receiver Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to
54. nation of 0 9 a f or A F 7 Select which of the four keys will be the default Data transmissions are always encrypted using the default key The other keys can be used only to decrypt received data The four entries are disabled if WPA PSK or WPA authentication is selected 8 Click Apply to save your settings Configuring WPA WPA2 or WPA WPA2 Both WPA and WPA2 provide strong data security WPA with TKIP is a software implementation that can be used on Windows systems with Service Pack 2 or later WPA2 with AES is a hardware implementation see your device documentation before implementing it Consult the product documentation for your wireless adapter for instructions for configuring WPA settings Note If you use a wireless computer to configure wireless security settings you will be disconnected when you click Apply If this happens reconfigure your wireless computer to match the new settings or access the router from a wired computer to make further changes To configure WPA or WPA2 in the router 1 Login to the router as described in Logging In to Your Router on page 9 2 Select Wireless Settings from the main menu 3 On the Wireless Setting screen select the radio button for the WPA or WPA2 option of your choice For WPA PSK or WPA2 PSK enter the passphrase 5 To save your settings click Apply Using Push N Connect WPS to Configure Your Wireless Network To use Push N Connect your wireless
55. nd assign an IP address if the computer cannot reach a DHCP server These auto generated addresses are in the range of 169 254 x x If your IP address is in this range check the connection from the computer to the router and reboot your computer If your router s IP address was changed and you do not know the current IP address clear the router s configuration to factory defaults This will set the router s IP address to 192 168 0 1 This procedure is explained in Hestoring the Default Configuration and Password on page 62 Make sure that your browser has Java JavaScript or ActiveX enabled If you are using Internet Explorer click Refresh to be sure that the Java applet is loaded Try quitting the browser and launching it again Make sure you are using the correct login information The factory default login name is admin and the password is password Make sure that Caps Lock is off when entering this information If the router does not save changes you have made in the Web configuration interface check the following When entering configuration settings be sure to click the Apply button before moving to another screen or tab or your changes are lost Click the Refresh or Reload button in the Web browser The changes might have occurred but the Web browser might be caching the old configuration Troubleshooting the ISP Connection Connecting to the Internet If you are unable to connect to internet check the following
56. nt screen you can allow a user or users on the Internet to configure upgrade and check the status of your router Chapter 4 Managing Your Network 41 Mobile Broadband Wireless N Router MBRN3000 Tip Be sure to change the router default password to a very secure password The ideal password should contain no dictionary words from any language and should be a mixture of letters both upper case and lower case numbers and symbols Your password can be up to 30 characters Configuring Remote Management 1 Log in to the router Type http www routerlogin net in the address field of your Internet browser Enter admin for the user name and your password or the default password Under the Advanced heading select Remote Remate MaHAgaIT BH Management Select the Turn Remote Management On Laici cacao apio checkbox mirer men Specify which external addresses will be allowed Allow Remote Access By to access the router s remote management Cn Cano LL LLL For security restrict access to as few external Fem LL LL Tol Ji j EN IP addresses as practical 9 Everyone Toallow access from any IP address on the Internet select Everyone Port Number 8080 e To allow access from a range of IP addresses on the Internet select IP address range Enter a beginning and ending IP address to define the allowed range e To allow access from a single IP address on the Internet select Only Thi
57. o monitor the data traffic Click the Traffic Status button if you want a live update on Internet traffic status on your router Click Apply to save your settings 56 Chapter 5 Advanced Troubleshooting This chapter gives information about troubleshooting your Mobile Broadband Wireless N Router After each problem description instructions are provided to help you diagnose and solve the problem For the common problems listed go to the section indicated e Is the router on e Havel connected the router correctly Go to Basic Functioning on page 57 e can t access the router s configuration with my browser Go to Troubleshooting Access to the Router Main Menu on page 58 e ve configured the router but can t access the Internet Go to Troubleshooting the ISP Connection on page 59 e want to clear the configuration and start over again Go to Restoring the Default Configuration and Password on page 62 Basic Functioning After you turn on power to the router the following sequence of events should occur 1 When power is first applied verify that the Power 0 gt LED is on 2 After approximately 10 seconds verify that a The Power LED is still solid green A red light indicates the unit has failed its power on self test POST b The Ethernet LAN port LEDs are lit for any local ports that are connected If a LAN port s LED is lit a link has been established to the connected device If
58. om the network address of the remote device e Check that your cable or DSL modem is connected and functioning e f your ISP assigned a host name to your PC enter that host name as the account name in the Basic Settings screen e Your ISP could be rejecting the Ethernet MAC addresses of all but one of your PCs Many broadband ISPs restrict access by allowing only traffic from the MAC address of your Chapter 6 Troubleshooting 61 Mobile Broadband Wireless N Router MBRN3000 broadband modem but some ISPs additionally restrict access to the MAC address of a single PC connected to that modem If this is the case you must configure your router to clone or spoof the MAC address from the authorized PC See the Mobile Broadband Wireless N Router MBRN3000 Installation Guide Restoring the Default Configuration and Password This section explains how to restore the factory default configuration settings changing the router s admin password to password and the IP address to 192 168 0 1 You can erase the current configuration and restore factory defaults in two ways e Use the Erase feature see Backing Up Restoring or Erasing Your Settings on page 30 e Press the Restore Factory Settings on the bottom of the router for 6 seconds Use this method for cases when the administration password or IP address is not known The factory default settings are shown in Factory Default Settings in Appendix A Problems with Date and Time
59. operate this equipment This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation For product available in the USA market only channel 1 11 can be operated Selection of other channels is not possible This device and its antenna s must not be co located or operation in conjunction with any other antenna or transmitter Canadian Department of Communications Radio Interference Regulations This digital apparatus NETGEAR Mobile Broadband Wireless N Router MBRN3000 does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications Voluntary Control Council for Interference VCCI Statement This equipment is in the Class B category information equipment to be used in a residential area or an adjacent area thereto and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas When used near a radio or TV receiver it may become the cause of radio interference Read instructions for correct ha 70 ndling Appendix C Notification of Compliance Index A access
60. ork You are now connected to the NETGEAR Mobile Broadband Wireless Router This Setup Wizard will guide you through m Setting up Mobile Broadband Internet access m Setting up 3 secure Wi Fi network Note Make sure your USB Modem adapter is plugged in to the USB port of the router Before you begin 1 Test your USB Modem adapter on your PC to ensure that you have service and access to the Internet 2 Visit the NETGEAR support site to verify that your USB Modem adapter is supported 3 Follow the instructions on the NETGEAR support site to check for the latest firmware This firmware version is V1 0 0 25_2 0 10WW To upgrade your device download the firmware then click Upgrade 4 Close the Modem Connections Manager on your PC before continuing with the setup Click Next To configure your router settings manually click Exit Upgrade CE Lites Click Next The Setup Wizard prompts you to set up your Internet connection and wireless network as described in the Mobile Broadband Wireless N Router MBRN3000 Installation Guide Manually Configuring Your Internet Settings In order to connect to the network and active broadband service account is required Please contact your ISP for user name password and the network name To manually configure your Internet settings 1 2 Log in to the router as described in Logging In to Your Houter on page 9 Select Mobile Broadband Settings Adjus
61. ottom of the router for 6 seconds Upgrading the Router Firmware The router firmware is stored in flash memory and can be upgraded as new firmware is released by NETGEAR Upgrade files can be downloaded from the NETGEAR website If the upgrade file is compressed a zip file you must first extract the binary bin or img file before uploading it to the router NETGEAR recommends that you back up your configuration before doing a firmware upgrade After the upgrade is complete you might need to restore your configuration settings 1 Download and unzip the new firmware file from NETGEAR Chapter 4 Managing Your Network 31 Mobile Broadband Wireless N Router MBRN3000 The Web browser used to upload new firmware into the router must support HTTP uploads NETGEAR recommends using Microsoft Internet Explorer 5 0 or newer or Mozilla Firefox 2 0 or newer 2 Login to the router Type http www routerlogin net in the address field of your Internet browser Enter admin for the user name and your password or the default password 3 From the main menu under the Maintenance heading select Router Upgrade to display this Screen Router Upgrade Check for new version from the Internet Check ZI Check for new version upon login Locate and select the upgrade file on your hard disk Browse Upload Cancel 4 Click Browse to locate the binary bin or img upgrade file 5 Click Upload A WARNIN
62. ou can register a domain name and have that name linked with your IP address by public Domain Name Servers DNS However if your Internet account uses a dynamically assigned IP address you will not know in advance what your IP address will be and the address can change frequently In this case you can use a commercial Dynamic DNS service to register your domain to their IP address and forward traffic directed at your domain to your frequently changing IP address The router contains a client that can connect to a Dynamic DNS service provider To use this feature you must select a service provider and obtain an account with them After you have configured your account information in the router whenever your ISP assigned IP address changes your router will automatically contact your Dynamic DNS service provider log in to your account and register your new IP address Configuring Dynamic DNS WARNING If your ISP assigns a private WAN IP address such as 192 168 x x or 10 x x x the Dynamic DNS service will not work because private addresses will not be routed on the Internet 1 From the main menu select Dynamic DNS to display the Dynamic DNS screen Dynamic DNS Use a Dynamic DNS Service Service Provider www DynDNS org v Host Name User Name Password Use Wildcards Apply Cancel Show Status 2 Access the website of one of the Dynamic DNS service providers whose names appear in the Service P
63. our home network for connecting to the company where you are employed This router s address on your LAN is 192 168 0 100 e Your company s network is 134 177 0 0 When you first configured your router two implicit static routes were created A default route was created with your ISP as the router and a second static route was created to your local network for all 192 168 0 x addresses With this configuration if you attempt to access a device on the 134 177 0 0 network your router forwards your request to the ISP The ISP forwards your request to the company where you are employed and the request is likely to be denied by the company s firewall In this case you must define a static route telling your router that 134 177 0 0 should be accessed through the ISDN router at 192 168 0 100 In this example e The Destination IP Address and IP Subnet Mask fields specify that this static route applies to all 134 177 x x addresses The Gateway IP Address fields specify that all traffic for these addresses should be forwarded to the ISDN router at 192 168 0 100 e Inthe Metric field a value of 1 will work since the ISDN router is on the LAN This represents the number of routers between your network and the destination This is a direct connection so it is set to 1 e Private is selected only as a precautionary security measure in case RIP is activated Chapter 5 Advanced 53 Mobile Broadband Wireless N Router MBRN3000 To config
64. p answers detail a_id 11621 Appendix C Notification of Compliance 67 Mobile Broadband Wireless N Router MBRN3000 EDOC in Languages of the European Community Cesky Czech Dansk Danish NETGEAR Inc timto prohlaSuje Ze tento Radiolan je ve shode se zakladnimi po adavky a dal mi pr slu n mi ustanoven mi smernice 1999 5 ES Undertegnede NETGEAR Inc erkl rer herved at f lgende udstyr Radiolan overholder de v sentlige krav og vrige relevante krav i direktiv 1999 5 EF Deutsch German Eesti Estonian Hiermit erkl rt NETGEAR Inc dass sich das Ger t Radiolan in bereinstimmung mit den grundlegenden Anforderungen und den brigen einschl gigen Bestimmungen der Richtlinie 1999 5 EG befindet K esolevaga kinnitab NETGEAR Inc seadme Radiolan vastavust direktiivi 1999 5 EU p hin uetele ja nimetatud direktiivist tulenevatele teistele asjakohastele s tetele English Espa ol Spanish Hereby NETGEAR Inc declares that this Radiolan is in compliance with the essential requirements and other relevant provisions of Directive 1999 5 EC Por medio de la presente NETGEAR Inc declara que el Radiolan cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999 5 CE EAAnvikh Greek Fran ais French ME THN NAPOY2A NETGEAR Inc AHAONEI OTI Radiolan ZYMMOPOONETAI IPO2 TIX OYZIOAEIZ ANAITHZEIZ KAI TIZ AOINE ZXETIKEZ AIATAZEIZ TH OA
65. pendix A 3 If the router has not been configured the Smart Wizard screen displays After the router has been configured the Firmware Upgrade assistant will appear e Checking for Firmware Updates screen After initial setup this screen displays unless you have cleared the Check for Updated Firmware Upon Log in checkbox Firmware Upgrade Assistant The router is checking the NETGEAR server to see if updated firmware available for your router This could take up to 90 seconds please wait V Check for Updated Firmware Upon Log in Cancel e Router Status screen The Router Status screen displays if the router s Internet connection has not been set up yet See Router Status on page 33 4 You can use different methods to configure your router e Select Setup Wizard from the router menu to set up your Internet connection and wireless network configuration See Accessing the Setup Wizard After Installation on page 11 e You can manually configure the router settings See Manually Configuring Your Internet Settings on page 11 10 Chapter 1 Connecting to the Internet Mobile Broadband Wireless N Router MBRN3000 Accessing the Setup Wizard After Installation 1 Log in to the router as described 2 Select Setup Wizard 3 in Logging In to Your Router on page 9 Setup Wizard Add WPS Client Welcome Mobile Broadband Settings Wireless Settings Guest Netw
66. pond to a ping from the Internet select this check box This should be used only as a diagnostic tool since it allows your router to be discovered Do not select this check box unless you have a specific reason to do so MTU Size Maximum Transmit Unit MTU value For most Ethernet networks this is 1500 bytes or 1492 bytes for PPPoE connections or 1436 bytes for PPTP connections NAT Filtering This is set to Secured to provide a secure firewall to protect computers on the LAN from attacks from the Internet The Open setting is less secure Disable SIP Alg Some VoIP applications do not work well with SIP ALG Selecting this check box might help your VoIP devices create or accept a call through the router Setting Up a Default DMZ Server A WARNING For security reasons you should avoid using the default DMZ server feature When a computer is designated as the default DMZ server it loses much of the protection of the firewall and is exposed to many exploits from the Internet If compromised the computer can be used to attack your network The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with NAT The router is programmed to recognize some of these applications and to work properly with them but there are other applications that may not function well In some cases one local computer can run the application properly if that computer s IP add
67. r press the Push Button physically on the router or press the Button below soft Push Button WPS OPIN Number button Either click the onscreen button or press the WPS button on the front of the router The router tries to communicate with the client the computer that wants to join the network for 2 minutes Go to the client wireless computer and run a WPS configuration utility Follow the utility s instructions to click a WPS button Go back to the router screen to check for a message The router WPS screen displays a message confirming that the client was added to the wireless network The router generates an SSID and implements WPA WPA2 wireless security The router will keep these wireless settings unless you change them or you clear the Keep Existing Wireless Settings check box in the WPS Settings screen WPS Settings WPS Settings Router s PIN 12345670 v Keep Existing Wireless Settings Note the new SSID and WPA WPA2 password for the wireless network You can view these settings in the Wireless Settings screen See Manually Configuring Your Wireless Settings on page 15 20 Chapter2 Wireless Network Configuration Mobile Broadband Wireless N Router MBRN3000 To access the Internet from any computer connected to your router launch a browser such as Microsoft Internet Explorer or Mozilla Firefox You should see the router s Internet LED blink indicating communication to the ISP
68. reless N Router MBRN3000 Default Configuration and Password on page 62 2 From the main menu under the Maintenance heading select Set Password Set Password Old Password New Password Repeat New Password Administrator login times out after idle for 5 minutes 3 To change the password first enter the old password and then enter the new password twice 4 Click Apply to save your changes Note After changing the password you must log in again to continue the configuration If you have backed up the router settings previously you should do a new backup so that the saved settings file includes the new password Changing the Administrator Login Time out For security the administrator login to the router configuration times out after a period of inactivity To change the login time out period 1 In the Set Password screen type a number in the Administrator login times out field The suggested default value is 5 minutes 2 Click Apply to save your changes or click Cancel to keep the current period Blocking Sites and Keywords The router provides a variety of options for blocking Internet based content and communications services With its content filtering feature the router prevents objectionable content from reaching your PCs You can control access to Internet content by screening for keywords within Web addresses Content filtering options include e Keyword blocking of HTTP traffic e Outbound s
69. ress is entered as the default DVZ server Incoming traffic from the Internet is normally discarded by the router unless the traffic is a response to one of your local computers or a service that you have configured in the Ports screen Instead of discarding this traffic you can have it forwarded to one computer on your network This computer is called the default DMZ server 48 Chapter5 Advanced Mobile Broadband Wireless N Router MBRN3000 To assign a computer or server to be a default DMZ server Go to the WAN Setup screen as described in the previous section Select the Default DMZ Server check box Type the IP address for that server A O D T Click Apply to save your changes LAN IP Settings The LAN IP Setup screen allows configuration of LAN IP services such as DHCP and RIP These features can be found under the Advanced heading in the router main menu The router is shipped preconfigured to use private IP addresses on the LAN side and to act as a DHCP server The router default LAN IP configuration is e LAN IP addresses 192 168 0 1 e Subnet mask 255 255 255 0 These addresses are part of the Internet Engineering Task Force IETF designated private address range for use in private networks and should be suitable in most applications If your network has a requirement to use a different IP addressing scheme you can make those changes in this screen To view or change the LAN IP Setup Tip If you change the
70. ription Q Turn the wireless radio in the router on and off The wireless radio is on by default The LED located below this button indicates if the wireless radio is on or off Wireless Press this button to open a 2 minute window for the router to connect with other WPS enabled devices For more information about using the WPS method to implement security see Using Push N Connect WPS to Configure Your Wireless Network on page 19 Chapter 1 Connecting to the Internet 7 8 Mobile Broadband Wireless N Router MBRN3000 Router Back Panel The back panel of the router contains port connections USB port for Ethernet LAN ports Power On Off Power adapter input USB docking cable button Figure 2 Back panel Router Label The label on the bottom of the router shows the router s MAC address serial number security PIN and factory default login information Power Power ja CO JSB On Off Restore Factory Settings Press for 6 seconds t E in ear C 4 Qo FC Figure 3 Bottom label Chapter 1 Connecting to the Internet Mobile Broadband Wireless N Router MBRN3000 Using the Router Stand You can use the stand to position your router upright 1 Insert the tabs of the stand into the slots on the p bottom of your router EO 2 Place your router near an AC power outlet in a M location where you can connect cables as needed for your home network Logging In to Your Router Wh
71. roadband Wireless N Router Changing the Built In Password 0 0000 eee ee eee Changing the Administrator Login Time out 04 Blocking Sites and Keywords oii eene ras rhon m Sogno He bone gas Blocking Servicos auspices ovde hehe ade E d ROO ER deed ScHedulirq sz giis due Lob i PEE T ded eap OE ded b Setting Your Time ZOrne nude r ada Ga etd od CRI e Scheduling Firewall Services sees bee e eens Live Parental Controls 2 5 260 4008 2488 eG Rr b eade d Chapter 4 Managing Your Network Backing Up Restoring or Erasing Your Settings Backing Up the Configuration to a File Table of Contents 3 Mobile Broadband Wireless N Router MBRN3000 Restoring the Configuration from a File 0 ecu 31 Erasing the Corfiguratlon usce pru p Rer D PER EET PX dE 31 Upgrading the Router Firmware 2222 2 2 e RR 31 Router SIalus a i2 cba deed R A R ERG 33 Shoewllig Sfalisles 3 3 a Aid akon RU a de RC at Ral ae RR ROS RR ae oh 35 Connector Status c rcl redu T ue puede ben tdi ds 36 Viewing Attached Devices 63 2005 esso m m n 37 Viewing Selecting and Saving Logged Information 37 Examples of Log Messages 4 5s sudden Rx ROS Taea 38 Enabling Security Event E mail Notification lille 39 Running Diagnostic Utilities and Rebooting the Router 40 Enabling Remote Management liliis ee eee 41 Con
72. roadband Wireless N Router MBRN3000 Portugu s Portuguese NETGEAR Inc declara que este Radiolan esta conforme com os requisitos essenciais e outras disposi es da Directiva 1999 5 CE Slovensko Slovenian NETGEAR Inc izjavlja da je ta Radiolan v skladu z bistvenimi zahtevami in ostalimi relevantnimi dolo ili direktive 1999 5 ES Slovensky Slovak NETGEAR Inc t mto vyhlasuje Ze Radiolan sp a z kladn po iadavky a v etky pr slu n ustanovenia Smernice 1999 5 ES Suomi Finnish NETGEAR Inc vakuuttaa t ten ett Radiolan tyyppinen laite on direktiivin 1999 5 EY oleellisten vaatimusten ja sit koskevien direktiivin muiden ehtojen mukainen Svenska Swedish H rmed intygar NETGEAR Inc att denna Radiolan st r verensst mmelse med de v sentliga egenskapskrav och vriga relevanta best mmelser som framg r av direktiv 1999 5 EG slenska Icelandic H r me l sir NETGEAR Inc yfir v a Radiolan er samr mi vi grunnkr fur og a rar kr fur sem ger ar eru tilskipun 1999 5 EC Norsk Norwegian NETGEAR Inc erkl rer herved at utstyret Radiolan er i samsvar med de grunnleggende krav og vrige relevante krav i direktiv 1999 5 EF This device is a 2 4 GHz wideband transmission system transceiver intended for use in all EU member states and EFTA countries except in France and Italy where restrictive use applies In Italy the end user should apply for a license at the n
73. rovider drop down list and register for an account For example for dyndns org go to www dyndns org 3 Select the Use a Dynamic DNS Service check box 4 Select the name of your dynamic DNS service provider 5 Fill in the Host Name User Name and Password fields The dynamic DNS service provider may call the host name a domain name If your URL is myName dyndns org then your host name is myName The password can be a key for your dynamic DNS account 52 Chapter5 Advanced Mobile Broadband Wireless N Router MBRN3000 6 If your dynamic DNS provider allows the use of wildcards in resolving your URL you can select the Use wildcards check box to activate this feature For example the wildcard feature will cause yourhost dyndns org to be aliased to the same IP address as yourhost dyndns org 7 Click Apply to save your configuration Using Static Routes Static routes provide additional routing information to your router Under normal circumstances the router has adequate routing information after it has been configured for Internet access and you do not need to configure additional static routes You must configure static routes only for unusual cases such as multiple routers or multiple IP subnets located on your network Static Route Example As an example of when a static route is needed consider the following case e Your primary Internet access is through a cable modem to an ISP e You have an ISDN router on y
74. rt triggering applies to chat and Internet games Port Forwarding To set up port forwarding 1 From the main menu under the Advanced Heading select Port Forwarding Port Triggering The following screen displays Port Forwarding Port Triggering Please select the service type Port Forwarding Port Triggering Service Name Server IP Address Age of Empire v 192 168 lo Add E Service Name Start Port End Port Server IP Address Add Custom Service By default the Port Forwarding radio button is selected 2 You can select a service or create a custom service e Select a service from the Service Name drop down list and specify the computer s IP address e f you want to add a service that is not in the list click the Add Custom Service button Fill in the fields in the Add Custom Service screen The service appears in the list 46 Chapter5 Advanced Mobile Broadband Wireless N Router MBRN3000 Port Triggering To set up port triggering 1 From the main menu under the Advanced Heading select Port Forwarding Port Triggering 2 Select the Port Triggering radio button to display the following screen Port Forwarding Port Triggering Please select the service type 9 Port Forwarding Port Triggering Service Name Server IP Address Age of Empire v 192 168 Start Port End Port Add Custom Senice a Service Name Server IP Address 3 Click Add Service and fill in
75. s Computer Enter the IP address that will be allowed access Specify the port number that will be used for accessing the router menu Access normally uses the standard HTTP service port 80 For greater security you can enter a different port number Choose a number between 1024 and 65535 but do not use the number of any common service port The default is 8080 which is a common alternate for HTTP Click Apply to have your changes take effect When accessing your router from the Internet type your router WAN IP address in your Internet browser address or location field followed by a colon and the custom port number For example if your external address is 134 177 0 123 and you use port number 8080 enter http 134 177 0 123 8080 Note In this case you must include http in the address 42 Chapter4 Managing Your Network Advanced This chapter describes how to configure the advanced features of your Mobile Broadband Wireless N Router Advanced Wireless Settings From the main menu select Advanced Wireless Settings to display the following screen Advanced Wireless Settings Advanced Wireless Settings v Enable Wireless Router Radio Fragmentation Length 256 2346 2346 CTSIRTS Threshold 1 2347 2347 Preamble Mode Long Preamble WPS Settings Router s PIN 93770958 C Disable Routers PIN C keep Existing Wireless Settings Wireless Card Access List Set Up Access List Table 8 Advanced Wirele
76. sed security you can restrict access to the wireless network to allow only specific PCs based on their MAC addresses You can restrict access to only trusted PCs so that unknown PCs cannot wirelessly connect to the Mobile Broadband Wireless N Router MAC address filtering adds an obstacle against unwanted access to your network but the data broadcast over the wireless link is fully exposed To restrict access based on MAC addresses Note If you configure the router from a wireless computer add your computer s MAC address to the access list Otherwise you will lose your wireless connection when you click Apply You must then access the router from a wired computer or from a wireless computer that is on the access control list to make any further changes 1 From the main menu below the Advanced heading select Wireless Settings Click Setup Access List to display the Wireless Station Access List screen Wireless Station Access List Setup Access List 2 Adjust the list as needed for your network You can add devices to the Trusted Wireless Stations list Click Add to display the following screen Wireless Card Access List Available Wireless Cards Device Name MAC Address Wireless Card Entry Device Name MAC Address Add Cancel J Refresh 3 You can add devices to the list using either of the following methods e If the computer is in the Available Wireless Cards table select its radio button to capture its M
77. ss Settings Field Description Enable Wireless Router Radio Selected by default this setting enables the wireless radio which allows the router to work as a wireless access point Turning off the wireless radio can be helpful for configuration network tuning or troubleshooting Fragmentation Length CTS RTS These should be left at their default settings Threshold and Preamble Mode Chapter 5 Advanced 43 Mobile Broadband Wireless N Router MBRN3000 Table 8 Advanced Wireless Settings Continued Field Description Router PIN The PIN number used for Push N Connect Disable Router PIN By default this check box is cleared This allows the WPS clients to discover the router s PIN Keep Wireless Settings By default this check box is cleared This allows the router to automatically generate the SSID and WPA WPA2 security settings when it implements WPS After WPS is implemented the router automatically selects the Keep Existing Wireless Settings check box so that your SSID and wireless security settings remain the same if other WPS enabled devices are added later Turn Access Control On Access control is disabled by default so that any computer configured with the correct SSID can connect See Restricting Access by MAC Address Wireless Station Access Control By default any wireless PC that is configured with the correct SSID and wireless security settings is allowed access to your
78. t the settings as needed based on your Internet connection The fields in this screen are described in Table 2 Depending on your region and ISP some fields might not be available The following buttons are available e Connect Manually connect to the network Disconnect Disconnect from the current network Apply Apply the changes that you made e Cancel Discard changes Refresh Update the connection status Mobile Broadband Settings User Name Password USB Wireless Broadband modem settings Country Internet Service Provider Access Number gga vi APN isp cingular PDP Type IP S O connect automatically at startup LJ Reconnect automatically When connection is lost Roaming automatically Connection Status Connected f Connect Disconnect JC Apply Cancel J Refresh Chapter 1 Connecting to the Internet 11 Mobile Broadband Wireless N Router MBRN3000 Table 2 Broadband Settings fields Fields and Checkboxes Description Internet account login username Internet account password for authentication PIN code Pin code of the SIM card where applicable Network name APN ISP network name PDP type Type of packet data protocol Connect automatically at startup If this checkbox is selected the modem automatically connects to the network when powered up This should be selected after login information is provided Reconnect automatically when If this check bo
79. ter functions as a For more Server Dynamic Host Configuration Protocol DHCP server See DHCP information see Settings on page 50 DHCP Settings on Starting IP Address Specify the start of the range for the pool of IP addresses in the same page 50 subnet as the router Ending IP Address Specify the end of the range for the pool of IP addresses in the same subnet as the router Address Reservation When you specify a reserved IP address for a computer on the LAN For more information see DHCP Settings that computer receives the same IP address each time it access the on page 50 router s DHCP server Assign reserved IP addresses to servers that require permanent IP settings DHCP Settings By default the router functions as a Dynamic Host Configuration Protocol DHCP server allowing it to assign IP DNS server and default gateway addresses to all computers connected to the router s LAN The assigned default gateway address is the LAN address of the router IP addresses is assigned to the attached PCs from a pool of addresses specified in this screen Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN For most applications the default DHCP and TCP IP settings of the router are satisfactory See the online document listed in Internet Networking and TCP IP Addressing in Appendix B for an explanation of DHCP and information about how to assign IP addresses for your ne
80. the fields in the Add Service screen The service appears in the list For more detailed information see the Port Forwarding Port Triggering help WAN Setup To change broadband Internet connection settings use the Broadband Settings screen as described in Manually Configuring Your Internet Settings on page 11 To view or change the WAN Setup 1 From the main menu select WAN Setup to display the WAN Setup screen 2 Make the changes that you want and then click Apply to save the settings The WAN Setup fields are described in the following table WAN Setup Disable Port Scan and DoS Protection C Default DMZ Server 192 168 o o D Respond to Ping on Internet Port MTU Size in bytes 1500 NAT Filtering Secured O Open O Disable SIP ALG Chapter 5 Advanced 47 Mobile Broadband Wireless N Router MBRN3000 Table 9 WAN Setup Settings Setting Description Disable SPI Firewall This check box is usually clear so that the firewall protects your LAN against port scans and denial of service DOS attacks This check box should be selected only in special circumstances Default DMZ Server This feature is sometimes helpful when you are using some online games and videoconferencing Be careful when using this feature because it makes the firewall security less effective See Setting Up a Default DMZ Server on page 48 Respond to Ping on Internet If you want the router to res
81. twork Use Router as DHCP Server If another device on your network will be the DHCP server or if you will manually configure the network settings of all of your computers clear the Use Router as DHCP Server check box on the LAN IP Setup screen Otherwise leave it selected Specify the pool of IP addresses to be assigned by filling in the Starting IP Address and Ending IP Address fields These addresses should be part of the same IP address subnet as the router s LAN IP address Using the default addressing scheme you should define a range between 192 168 0 2 and 192 168 0 254 although you might want to save part of the range for devices with fixed addresses 50 Chapter5 Advanced Mobile Broadband Wireless N Router MBRN3000 The router delivers the following parameters to any LAN device that requests DHCP An IP address from the range you have defined Subnet mask Gateway IP Address is the router s LAN IP address Primary DNS server if you entered a primary DNS address in the Basic Settings screen otherwise the router s LAN IP address Secondary DNS server if you entered a secondary DNS address in the Basic Settings screen WINS Server Windows Internet Naming Service Server determines the IP address associated with a particular Windows computer A WINS server records and reports a list of names and IP address of Windows PCs on its local network If you connect to a remote network that contains a WINS server enter t
82. tworks in your area Connected The router is connected to the Internet No USB Device Attached The router does not detect a USB modem connected to its USB port Either the modem is disconnected or it is not correctly seated To correct the problem remove the modem and reinsert it into the port Received Signal Quality in dbm Modem radio reception A small negative number indicates good signal quality Bytes Transmitted The number of bytes transmitted in the most recent connection session Bytes Received The number of bytes received in the most recent connection session Tx B s The transmission rate Rx B s The receiving rate System Uptime Time elapsed since the last reboot Connection Duration The time elapsed since the most recent connection to the Internet Available Networks The broadband wireless networks available in your area 36 Chapter4 Managing Your Network Mobile Broadband Wireless N Router MBRN3000 Viewing Attached Devices The Attached Devices screen shows all IP devices that the router discovered on the local network From the main menu under the Maintenance heading select Attached Devices Attached Devices IP Address Device Name MAC Address 1 192 168 0 2 BDUVALL CONTRACTOR 00 14 6B 6D 8F 19 For each device the table shows the IP address device name if available and the Ethernet MAC address If the router is rebooted this data is lost until the router rediscov
83. ure static routes 1 From the main menu under the Advanced heading select Static Routes to view the Static Routes screen Static Routes Active Name Destination Gateway Static Routes Route Name Private vI Active Destination IP Address L Hi IP Subnet Mask 4 INI Gateway IP Address K Metric Cancel 3 Fill in or change the fields e Route Name The route name is for identification purposes only e Private Select this check box if you want to limit access to the LAN only The static route will not be reported in RIP e Active Select this check box to make this route effective Destination IP Address and IP Subnet Mask If the destination is a single host type a subnet value of 255 255 255 255 e Gateway IP Address This must be a router on the same LAN segment as the router e Metric Type a number between 2 and 15 This represents the number of routers between your network and the destination Usually a setting of 2 or 3 works but if this is a direct connection set it to 2 4 Click Apply to either save your changes If you added a static route it is added to the Static Routes screen Universal Plug and Play UPnP Universal Plug and Play UPnP helps devices such as Internet appliances and computers access the network and connect to other devices as needed UPnP devices can automatically discover the services from other registered UPnP devices on the network
84. ven guest computers accessing the Internet through your network are protected Flexible settings You may have your own computer or you may be sharing a computer with other members in the family Default and per user settings allow customizable configurations for different computing arrangement and personalize the settings for each person Per time setting allows Internet access during scheduled time slots to help manage work play balance Minimal software installation Installation requires a one time installation of the Management Utility Once Live Parental Controls is set up the software runs in the background and does not interfere with normal Internet usage Chapter 3 Protecting YourNetwork 29 Managing Your Network This chapter describes how to perform network management tasks with your Mobile Broadband Wireless N Router Backing Up Restoring or Erasing Your Settings The configuration settings of the router are stored in a configuration file in the router This file can be backed up to your computer restored or reverted to factory default settings The procedures below explain how to do these tasks Backing Up the Configuration to a File 1 Log in to the router Type http www routerlogin net in the address field of your Internet browser Enter admin for the user name and your password or the default password 2 Under the Maintenance heading on the main menu select Backup Settings to display the Backup S
85. ver Tip If you cannot remember this information check the settings in your email program 3 Specify when you want the alerts and logs to be sent e Send alert immediately Select the corresponding check box if you would like immediate notification of a significant security event such as a known attack port scan or attempted access to a blocked site e Send logs according to this schedule Specifies how often to send the logs Hourly Daily Weekly or When Full Day for sending log Specifies which day of the week to send the log Relevant when the log is sent weekly Time for sending log Specifies the time of day to send the log Relevant when the log is sent daily or weekly If the Weekly Daily or Hourly option is selected and the log fills up before the specified period the log is automatically e mailed to the specified e mail address After the log is sent it is cleared from the router s memory If the router cannot e mail the log file the log buffer might fill up In this case the router overwrites the log and discards its contents 4 Click Apply so that your changes take effect Running Diagnostic Utilities and Rebooting the Router The router has a diagnostics feature You can use the Diagnostics screen to perform the following functions from the router e Ping an IP address to test connectivity to see if you can reach a remote host If Ping VPN is enabled the ping packet always goes through the VPN if the V
86. wer is supplied to the router Solid Red POST Power On Self Test failure or device malfunction Off Power is not supplied to the router Restore Factory Settings button Press button for 6 seconds Power LED lights briefly When released the LED blinks red three times and then turns green as the gateway resets to the factory defaults 4 Solid green The Local port has detected an Ethernet link with a device Blinking green Data is being transmitted or received Internet Blinking green Blinking green and red LAN Ethernet off No link is detected on this port Off e No USB device is connected lt lt e An error has occurred with the device USB Solid blue USB device is ready to use Blinking blue Data is being transmitted or received G Solid green There is an Internet session Solid red No Internet connection Data is being transmitted over the USB port Traffic meter limit has been reached Off No Internet connection detected or device in bridged mode Solid green Indicates that the Wireless port is initialized Blinking green Data is being transmitted or received over the wireless link Ca WPS Wireless Off The Wireless Access Point is turned off ED Solid green WPS wireless security is being enabled v WPS Blinking green The device is in the 2 minute interval to synchronize security Off WPS is not being set or enabled Button Desc
87. wireless network You can use Wireless Access Point settings in the Wireless Setting screen to further restrict wireless access to your network Turning off wireless connectivity completely You can completely turn off the wireless portion of the router For example if you use your notebook computer to wirelessly connect to your router and you take a business trip you can turn off the wireless portion of the router while you are traveling Other members of your household who use computers connected to the router via Ethernet cables can still use the router To do this clear the Enable Wireless Access Point check box on the Wireless Settings screen and then click Apply Hiding your wireless network name SSID By default the router is set to broadcast its wireless network name SSID You can restrict wireless access to your network by not broadcasting the wireless network name SSID To do this clear the Allow Broadcast of Name SSID check box on the Wireless Settings screen and then click Apply Wireless devices will not see your router You must configure your wireless devices to match the wireless network name SSID of the router Note The SSID of any wireless access adapters must match the SSID you configure in the router If they do not match you will not get a wireless connection to the router 44 Chapter 5 Advanced Mobile Broadband Wireless N Router MBRN3000 Restricting Access by MAC Address For increa
88. x is selected the modem will attempt to reconnect to connection is lost the network when the connection is lost Under normal situation this setting should be selected Roaming automatically If this checkbox is selected the unit can roam to any available operator in range and may incur roaming charges Check with your operator before enabling this feature Connection status Current WAN port status 12 Chapter 1 Connecting to the Internet Wireless Network Contiguration For a wireless connection the SSID also called the wireless network name and the wireless security setting must be the same for the router and wireless computers or wireless adapters NETGEAR strongly recommends that you use wireless security Note Computers can connect wirelessly at a range of several hundred feet If you do not use wireless security this can allow others outside of your immediate area to access your network Planning Your Wireless Network For compliance and compatibility between similar products in your area the operating channel and region must be set correctly To configure the wireless network you can either specify the wireless settings or you can use Wi Fi Protected Setup WPS to automatically set the SSID and implement WPA WPA2 security e To manually configure the wireless settings you must know the following SSID The default SSID for the router is NETGEAR 3G The wireless mode 80 211n 802 119 or 802 11b th

Mobile Broadband Wireless

Contents

Download Pdf Manuals

Related Search

Related Contents