Ask AI
— answers from the official manualAnswers from the official manual.
Common questions
Common Questions
10 totalHow can I manage MAC address filtering for internet access control?
Access Advanced > Security > Access Control through the browser and configure allow/block rules by setting up lists of allowed or blocked device MAC addresses (Page 28).
How do I set up a guest WiFi network on my CAX80 router?
Go to Guest Network settings in the browser interface, enable it and configure SSIDs, broadcast options, security modes (open or WPA2-PSK [AES]) for both 2.4 GHz and 5 GHz bands separately as needed(Page 51).
How can I disable the LED blinking on my router?
Log in to your Netgear CAX80 modem-router via web interface, navigate to the appropriate section under Manage Your Modem Router and enable an LED On/Off schedule using the provided settings (Page 79).
How do I factory reset the Netgear Nighthawk AX8_AX6000 Cable Modem Router (CAX80)?
Press and hold the Power button for 10 seconds until the LED flashes red, this clears all settings and returns the device to factory defaults. You will need to re-pair all connected devices after the reset. The information is provided in 'Chapter 7: Manage Your Modem Router' under 'Use the Reset button'. (Page 82)
How do I connect my computer to the Netgear CAX80 router via Ethernet?
Connect an Ethernet cable from your computer's network port to one of the numbered Ethernet ports on the Netgear CAX80 modem router. A message might appear indicating that an Ethernet connection has been detected (Page 23).
What should I do when my CAX80 router’s Power LED is red?
If the Power LED on your Netgear CAX80 modem-router turns solid red, it indicates a thermal cutoff mode. You need to power off the device, wait for it to cool down and move it away from heat sources like speakers or TVs. Ensure good air circulation around the router (Page 9).
Full Manual
136 pages

User Manual
NighthawkAX8AX6000WiFICableModem Router Model CAX80
NETGEAR, Inc. 350 E. Plumeria DriveJune2020 San Jose, CA 95134, USA202-11989-01
Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads.
You can also check out our NETGEAR Community for helpful advice at community.netgear.com.
Contact your Internet service provider for technical support. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply. For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy. By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period. Trademarks ©NETGEAR, Inc. NETGEAR and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only.
Contents
Unpack Your Modem Router...............................................................9 Front panel LEDs and buttons.............................................................9 Rear Panel............................................................................................13 Position Your Modem Router............................................................13 Install and Activate Your Modem Router.........................................14
Set up and activate using the cable Modem Router web interface..........................................................................................14 Perform a Speed Test....................................................................17
Specify the Cable Connection Starting Frequency........................19 View Modem Router Initialization.....................................................19 Manually Set Up the Internet Connection.......................................20 Change the MTU Size.........................................................................21
Connect to the Network....................................................................25 Wired Connection..........................................................................25 Using WPS to Connect to the WiFi Network..............................25 Finding and Selecting the WiFi Network....................................25
Types of Logins...................................................................................26 Log In to the Modem Router.............................................................26
Enable access control to allow or block access to the Internet....29 Use keywords to block Internet sites...............................................30 Block services from the Internet.......................................................32 Delete keywords from the blocked list............................................33 Prevent blocking on a trusted computer.........................................33 Manage network access control lists...............................................34 Schedule when to block Internet sites and services......................35 Set up security event email notifications.........................................36
Set up a default DMZ server..............................................................40 Change the Router’s Device Name..................................................41 Change the LAN TCP/IP settings......................................................41 Specify the IP addresses that the modem router assigns..............42 Disable the DHCP server feature in the modem router.................44 Manage reserved LAN IP addresses................................................44
Reserve an IP address....................................................................45 Edit a reserved IP address............................................................45 Delete a reserved IP address entry..............................................46
Use the WPS Wizard for WiFi connections......................................47 Specify Basic WiFi Settings................................................................47 Change the WiFi Mode......................................................................49 Change the Transmission Power Control........................................50 Change the WiFi password or the WiFi security.............................51 Set up a guest WiFi network.............................................................52 Control the WiFi radios......................................................................54
Use the WiFi On/Off button..........................................................55 Enable or disable the WiFi radios................................................55
Set up a WiFi schedule.......................................................................56 Specify WPS settings..........................................................................56 Enable or disable implicit beamforming.........................................57 Enable or disable airtime fairness....................................................58 Ethernet Port Aggregation................................................................59
Set Up Ethernet Port Aggregation...............................................60 View or Change the Modem Router Ethernet Port Aggregation Mode...............................................................................................61
#### Chapter 6 Manage Your Modem Router
Update the router firmware...............................................................63 Check for new firmware and update the router.........................63 Manually upload firmware to the router.....................................64
Change the admin password............................................................65 Enable admin password recovery....................................................65 Recover the admin password............................................................66 View information about the router and the Internet and WiFi settings.................................................................................................67 Display the statistics of the Internet port.........................................68 Check the Internet connection status..............................................69 View and manage logs of router activity.........................................70 View devices currently on the network............................................71 View event logs...................................................................................71 Monitor Internet traffic.......................................................................72 Manage the router configuration file...............................................73
Back up the settings.......................................................................74
Erase the settings...........................................................................74 Restore the settings.......................................................................75
Remote access....................................................................................75 Set up remote management........................................................76 Use remote access.........................................................................77
Remotely access your router using the Nighthawk app................77 Disable LED blinking or turn off LEDs..............................................77 Set your time zone..............................................................................78 Set the NTP Server..............................................................................78 Specify ReadyDLNA media server settings.....................................80 Return the router to its factory default settings..............................81
Use the Reset button.....................................................................81 Erase the settings...........................................................................81
USB device requirements..................................................................84 Connect a USB storage device to the router..................................84 Access a storage device connected to the router from a Windows-based computer................................................................85 Map a USB device to a Windows network drive.............................85 Access a storage device that is connected to the router from a Mac.......................................................................................................86 Back up Windows-based computers with ReadySHARE Vault.....87 Back up Mac computers with Time Machine..................................87
Set up a USB hard drive on a Mac...............................................88 Prepare to back up a large amount of data................................89 Use Time Machine to back up onto a USB hard disk................89
Enable FTP access within your network...........................................91 View network folders on a storage device......................................91 Add a network folder on a USB storage device.............................92 Edit a network folder on a USB storage device..............................93 Safely remove a USB storage device...............................................94
Set up and manage Dynamic DNS...................................................96 Set up FTP access through the Internet...........................................96 Your personal FTP server...................................................................97
Set up your personal FTP server..................................................97 Set up a new Dynamic DNS account...........................................98 Specify a DNS account that you already created.......................98 Change the Dynamic DNS settings.............................................99
Access USB storage devices through the Internet.......................100
#### Chapter 9 Use VPN to Access Your Network
Set up a VPN connection.................................................................102 Specify VPN Service in the Router..................................................102 Install OpenVPN Software...............................................................103
Install OpenVPN Software on Your Windows Computer.......103 Install OpenVPN Software on Your Mac Computer................106 Install OpenVPN Software on an iOS Device...........................107 Install OpenVPN Software on an Android Device...................107
Use a VPN Tunnel on Your Windows Computer..........................108 Use VPN to Access the Router’s USB Device and Media............110 Use VPN to Access Your Internet Service at Home......................110
Set Up VPN Client Internet Access in the Modem Router......111 Block VPN Client Internet Access in the Router.......................111 Use a VPN Tunnel to Access Your Internet Service at Home..112
#### Chapter 10 Manage Port Forwarding and Port Triggering
Manage Port Forwarding to a Local Server..................................115 Set Up Port Forwarding to a Local Server.................................115 Add a Custom Port Forwarding Service...................................116 Edit a Port Forwarding Service...................................................117 Delete a Port Forwarding Entry..................................................118 Application Example: Make a Local Web Server Public.........118 How the Router Implements the Port Forwarding Rule..........119
Port Triggering.................................................................................119 Add a Port Triggering Service....................................................120 Enable Port Triggering................................................................121 Application Example: Port Triggering for Internet Relay Chat port triggering......................................................................................121
#### Chapter 11 Troubleshooting
Quick tips...........................................................................................124 Sequence to restart your network.............................................124 Check the power adapter and Ethernet cable connections...124 Check the WiFi settings..............................................................124 Check the network settings........................................................124
Troubleshoot with the LEDs............................................................125 Standard LED behavior when the router is powered on........125 Power LED is off or blinking.......................................................125 LEDs never turn off......................................................................126 Online LED is Off.........................................................................126 Ethernet LAN port LEDs are off..................................................126 WiFi LED is off..............................................................................126
You cannot log in to the router.......................................................127
You cannot access the Internet.......................................................128 Troubleshoot Internet browsing.....................................................129 Changes are not saved....................................................................130 Troubleshoot WiFi connectivity......................................................130 Troubleshoot your network using the ping utility........................131
Test the LAN path to your router...............................................131 Test the path from a Windows-based computer to a remote device............................................................................................132
#### Chapter 12 Supplemental Information
Factory Settings................................................................................134 Technical Specifications..................................................................135
1
Hardware Setup
This chapter covers the following topics:
For more information about the topics covered in this manual, visit the support website at support.netgear.com.
Unpack Your Modem Router
Your package contains the modem router, Ethernet cable, and power adapter.



Figure 1. Package contents
Front panel LEDs and buttons
Status LEDs are located on the front of the modem router. The WiFi and WPS buttons are also located on the front.

Figure 2. Modem router LEDs and buttons
##### You can use the LEDs to verify status and connections. The following table lists and describes each LED on the top panel of the modem router.
Table 1. LED descriptions
DescriptionLED Power

Downstream

Upstream

Online

Multi Gig Port

The LED color indicates the speed: white for Gigabit Ethernet connections and amber for 100 Mbps or 10 Mbps Ethernet connections.
Ethernet ports 1-4
2.4 GHz radio

5 GHz radio

USB port

The WiFi and WPS buttons are located on the front of the modem router.
DescriptionButton
WiFi

WPS

Pressing this button for two seconds turns the WiFi radios in the modem router on and off. If this LED is lit, the WiFi radios are on. If this LED is off, the WiFi radios are turned off and you cannot use WiFi to connect to the modem router.
This button lets you use WPS to join the WiFi network without typing the WiFi password. The WPS LED blinks during this process and then lights solid.
Rear Panel
The connections and button on the rear panel are shown in the following figure.

Figure 3. Modem router rear panel
Position Your Modem Router
The modem router lets you access your network anywhere within the operating range of your WiFi network. However, the operating distance or range of your WiFi connection can vary significantly depending on the physical placement of your modem router. For example, the thickness and number of walls the WiFi signal passes through can limit the range.
Additionally, other WiFi access points in and around your home might affect your modem router’s signal. WiFi access points are modem routers, repeaters, WiFi range extenders, and any other device that emits a WiFi signal for network access.
Position your modem router according to the following guidelines:
Install and Activate Your Modem Router
The modem router provides a connection between your cable Internet provider’s network and your computer, router, or WiFi router.
Set up and activate using the cable Modem Router web interface
Before you connect your modem router and contact your cable Internet provider, collect your cable account number, account phone number, and login information (your email address or user name and password).
#### To set up and activate your modem router:
Collect your ISP account information, such as your account mobile phone number, user name, password, and account number.
If you are replacing a modem that is currently connected in your home, unplug the modem and plug the new cable modem router into the same outlet.
Use a coaxial cable to connect the coaxial cable connector on the cable modem router to the cable wall outlet.

Make sure the cable is tightly connected. We recommend connecting directly to the cable wall outlet. If you must share the connection, use a 3.5dB (1 to 2) splitter.

Connect the power adapter to the cable modem router and plug the power adapter into an electrical outlet.
This process might take up to 10 minutes and the modem router might reset several times.
Note: When the Online LED lights, your cable modem router is still not connected to the Internet. You must activate your cable modem router with your ISP. If after 10 minutes the LED is still not solid white, verify the cable outlet is working or call your ISP to make sure you have a connection.
Enter routerlogin.net or 192.168.1.1 in the address field of the web browser. Follow the prompts. You are asked to do the following:
The following table lists activation contact information for ISPs that support your cable modem router.
Table 3. Activation contact information
Activation contactCableInternetProvider
1-888-556-1193Cox
Mediacom
1-855-Mediacom (1-855-633-4226)
1-877-810-6750Optimum
Table 3. Activation contact information (Continued)
1-877-692-2253Sparklight
Xfinity
http://xfinity.com/activate (Follow the prompts to activate)
Note: Your ISP’s contact information might change. You can also find the contact information in your monthly Internet service billing statement.
Perform a Speed Test
To determine the accurate Internet speed, visit your cable Internet provider's speed test website and perform a speed test.
If your actual speed is lower than your subscribed speed, contact your cable Internet provider.
Specify Your Internet Settings
Usually, the quickest way to set up the modem router to use your Internet connection is to allow the modem router to detect the Internet connection when you first access the modem router with an Internet browser. You can also customize or specify your Internet settings.
This chapter contains the following sections:
18
Specify the Cable Connection Starting Frequency
The starting frequency is automatically generated. For most Internet connections, you do not need to specify this information. If you must enter a starting frequency, contact your Internet provider.
#### To change the starting frequency:
The user name is admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays.
The page displays the status of all downstream and upstream channels and provides a field for the starting frequency.
View Modem Router Initialization
You can track the initialization procedure of the modem router and get details about the downstream and upstream cable channel. The time is displayed after the modem router is initialized.
The modem router automatically goes through the following steps in the provisioning process:
#### To view the status of the modem router initialization:
The user name is admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays.
Manually Set Up the Internet Connection
In most situations, you do not need to change these settings. We recommend that you use the default settings for DHCP because most cable Internet services provide the IP address through DHCP.
#### To specify the Internet connection settings:
The user name is admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays.
If the NETGEAR website does not display within one minute, see Troubleshooting on page 123.
Change the MTU Size
The maximum transmission unit (MTU) is the largest data packet a network device transmits. When one network device communicates across the Internet with another, the data packets travel through many devices along the way. If a device in the data path uses a lower MTU setting than the other devices, the data packets must be split or “fragmented” to accommodate the device with the smallest MTU.
The best MTU setting for NETGEAR equipment is often the default value. In some situations, changing the value fixes one problem but causes another. Leave the MTU unchanged unless one of these situations occurs:
Note: An incorrect MTU setting can cause Internet communication problems. For example, you might not be able to access certain websites, frames within websites, secure login pages, or FTP or POP servers.
#### To change the MTU size:
The user name is admin. The default password is password. The user name and password are case-sensitive.
The BASIC Home page displays.
If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are willing to experiment, you can gradually reduce the MTU from the maximum value of 1500 until the problem goes away. The following table describes common MTU sizes and applications.
ApplicationMTU
1500
The largest Ethernet packet size. This setting is typical for connections that do not use VPN, and is the default value for NETGEAR routers, adapters, and switches.
Maximum size to use for pinging. (Larger packets are fragmented.)1472 Used in some DHCP environments.1468
1460
Usable by AOL if you do not send or receive large email attachments, for example.
Connect to the Network and Access the Modem Router
This chapter contains the following sections:
24
Connect to the Network
You can connect to the modem router’s network through a wired or WiFi connection. If you set up your computer to use a static IP address, change the settings so that it uses Dynamic Host Configuration Protocol (DHCP).
Wired Connection
You can connect your computer to the modem router using an Ethernet cable and join the modem router’s local area network (LAN).
#### To connect your computer to the modem router with an Ethernet cable:
Using WPS to Connect to the WiFi Network
You can connect to the modem router’s WiFi network with Wi-Fi Protected Setup (WPS) or you can find and select the WiFi network.
#### To use WPS to connect to the WiFi network:
Finding and Selecting the WiFi Network
To find and select the WiFi network:
Types of Logins
Separate types of logins serve different purposes. It is important that you understand the difference so that you know which login to use when.
Types of logins:
Note: Your modem router broadcasts dual-band 2.4 GHz and 5 GHz WiFi signals. The label shows the SSID for the 2.4 GHz signal. For information about 5 GHz WiFi settings, see Specify Basic WiFi Settings on page 47.
Log In to the Modem Router
When you connect to the network (either with WiFi or with an Ethernet cable), you can use a web browser to access the modem router to view or change its settings. The first time you access the modem router, the modem router automatically checks to see if it can connect to your Internet service.
#### To log in to the modem router:
The user name is admin. The default password is password. The user name and password are case-sensitive.
The first time you log in to the modem router, you are prompted to change the admin password and set up security questions. You must enter these settings before you can access the Internet.
Control Access to the Internet
The router comes with a built-in firewall that helps protect your home network from unwanted intrusions from the Internet.
This chapter contains the following sections:
28
Enable access control to allow or block access to the Internet
You can use access control to block or allow access to the Internet through your router. To set up access control:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
You must select this check box before you can specify an access rule and use the Allow and Block buttons. When this check box is cleared, all devices are allowed to connect, even if a device is in the blocked list.
The access rule does not affect previously blocked or allowed devices. It applies only to devices joining your network in the future after you apply these settings.
The list displays.
Use keywords to block Internet sites
You can use keywords to block certain Internet sites from your network. You can use blocking all the time or based on a schedule.
#### To block Internet sites:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
.gov.
Block services from the Internet
You can block Internet services on your network based on the type of service. You can block the services all the time or based on a schedule.
#### To block services:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
For information about how to specify the schedule, see Schedule when to block Internet sites and services on page 35.
If the service uses a single port number, enter that number in both fields. To find out which port numbers the service or application uses, you can contact the publisher of the application, ask user groups or newsgroups, or search on the Internet.
Delete keywords from the blocked list
#### To delete keywords from the list:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Prevent blocking on a trusted computer
You can exempt one trusted computer from blocking. The computer that you exempt must be assigned a fixed IP address. You can use the reserved IP address feature to specify the IP address. See Manage reserved LAN IP addresses on page 44.
#### To specify a trusted computer:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Manage network access control lists
You can manage network access control lists (ACLs) that block or allow access to the Internet through your router.
#### To manage devices that are allowed or blocked:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Schedule when to block Internet sites and services
When you schedule blocking, the same schedule is used to block sites and to block services.
#### To schedule blocking:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Your settings are saved.
Set up security event email notifications
The router can email you its logs of router activity. The log records router activity and security events such as attempts to access blocked sites or services.
#### To set up email notifications:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
This email address is also used for the From address. If this field is blank, log and alert messages are not sent.
You might be able to find this information in the configuration window of your email program. If you leave this field blank, log and alert messages are not sent.
Logs are sent automatically according to the schedule that you set. If the log fills before the specified time, it is sent. After the log is sent, it is cleared from the router memory. If the router cannot email the log and the log buffer fills, the router overwrites the log.
Manage Network Settings
The router comes ready for WiFi, Ethernet, and USB connections. You can customize the router’s network settings. We recommend that you install the router and connect it to the Internet before you change its network settings.
This chapter contains the following sections:
38
View or change the WAN settings
You can view or configure wide area network (WAN) settings for the Internet port. You can set up a DMZ (demilitarized zone) server, change the maximum transmit unit (MTU) size, and enable the modem router to respond to a ping to its WAN (Internet) port.
#### To view or change the WAN settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Set up a default DMZ server
The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation (NAT). The modem router is programmed to recognize some of these applications and to work correctly with them, but other applications might not function well. In some cases, one local computer can run the application correctly if the IP address for that computer is entered as the default DMZ server.
WARNING: DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the firewall and is exposed to exploits from the Internet. If compromised, the DMZ server computer can be used to attack other computers on your network.
The modem router usually detects and discards incoming traffic from the Internet that is not a response to one of your local computers or a service that you configured on the Port Forwarding/Port Triggering page. Instead of discarding this traffic, you can specify that the router forwards the traffic to one computer on your network. This computer is called the default DMZ server.
#### To set up a default DMZ server:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Change the Router’s Device Name
The modem router’s default device name is based on its model number. This device name displays in the file manager when you browse your network.
#### To change the modem router’s device name:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Change the LAN TCP/IP settings
The modem router is preconfigured to use private IP addresses on the LAN side and to act as a DHCP server. The modem router’s default LAN IP configuration is as follows:
These addresses are part of the designated private address range for use in private networks and are suitable for most applications. If your network requires a different IP addressing scheme, you can change these settings.
You might want to change these settings if you need a specific IP subnet that one or more devices on the network use, or if you use competing subnets with the same IP scheme.
#### To change the LAN TCP/IP settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The IP address and subnet mask identify which addresses are local to a specific device and which must be reached through a gateway or modem router.
If you changed the LAN IP address of the modem router, you are disconnected when this change takes effect.
Specify the IP addresses that the modem router assigns
By default, the modem router acts as a Dynamic Host Configuration Protocol (DHCP) server. The router assigns IP, DNS server, and default gateway addresses to all computers connected to the LAN. The assigned default gateway address is the LAN address of the modem router.
These addresses must be part of the same IP address subnet as the modem router’s LAN IP address. Using the default addressing scheme, define a range between 192.168.1.2 and 192.168.1.254, although you can save part of the range for devices with fixed addresses.
#### To specify the pool of IP addresses that the modem router assigns:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The modem router delivers the following address information to any LAN device that requests a DHCP address:
Disable the DHCP server feature in the modem router
By default, the modem router acts as a DHCP server. The router assigns IP, DNS server, and default gateway addresses to all computers connected to the LAN. The assigned default gateway address is the LAN address of the modem router.
You can use another device on your network as the DHCP server or specify the network settings of all your computers.
#### To disable the DHCP server feature in the modem router:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Manage reserved LAN IP addresses
When you specify a reserved IP address for a computer on the LAN, that computer always receives the same IP address each time it accesses the modem router’s DHCP server. Assign reserved IP addresses to computers or servers that require permanent IP settings.
Reserve an IP address
#### To reserve an IP address:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Tip: If the computer is already on your network, you can copy its MAC address from the Attached Devices page and paste it here.
The reserved address is not assigned until the next time the computer contacts the modem router’s DHCP server. Reboot the computer, or access its IP configuration and force a DHCP release and renew.
Edit a reserved IP address
#### To edit a reserved address entry:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Delete a reserved IP address entry
#### To delete a reserved address entry:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Use the WPS Wizard for WiFi connections
The WPS Wizard helps you add a WPS-enabled device to your WiFi network without typing the WiFi password.
#### To use the WPS Wizard:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Specify Basic WiFi Settings
The router comes with preset security. This means that the WiFi network name (SSID), network key (password), and security option (encryption protocol) are preset in the factory. You can find the preset SSID and password on the router label.
Note: The preset SSID and password are uniquely generated for every device to protect and maximize your WiFi security. If you change your preset security settings, make a note of the new settings and store it in a safe place where you can easily find it.
If your computer is connected with WiFi when you change the SSID or other WiFi security settings, you are disconnected when you click the Apply button. To avoid this problem, use a computer with a wired connection to access the modem router.
#### To specify basic WiFi settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The name can be up to 32 characters long and it is case-sensitive. The default SSID is randomly generated and is on the router label. If you change the name, make sure to write down the new name and keep it in a safe place.
If you connected wirelessly to the network and you changed the SSID, you are disconnected from the network.
Change the WiFi Mode
#### To change the WiFi mode settings:
The user name is admin. The password is the one that you specified the first time you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Change the Transmission Power Control
By default, you router’s transmission power is set to 100%. This allows your router to give you whole home WiFi coverage. If you don’t need whole home WiFi coverage, and you also want to save power consumption while using your router, you can lower the transmission power of your router.
#### To change the transmission power control:
The user name is admin. The password is the one that you specified the first time you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Change the WiFi password or the WiFi security
The WiFi password is different from the admin password that you use to log in to the router.
Your router comes with preset WPA2 or WPA security. We recommend that you use the preset security, but you can change the settings. Do not disable the preset security.
#### To change the WiFi password or the WiFi security:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Set up a guest WiFi network
A guest network allows visitors to use the Internet without using your WiFi security password or with a different WiFi password. By default, the guest WiFi network is disabled. You can enable and configure the guest WiFi network for each WiFi band. The router simultaneously supports the 2.4 GHz band for 802.11ax, 802.11n, 802.11g, and 802.11b devices and the 5 GHz band for 802.11ax, 802.11ac, 802.11n, and 802.11a devices.
The WiFi mode of the guest WiFi network depends on the WiFi mode of the main WiFi network. For example, if you configure the WiFi mode for the main WiFi network as Up to 54 Mbps in the 2.4 GHz band, the guest WiFi network also functions in the Up to 54 Mbps mode in the 2.4 GHz band. The channel also depends on the channel selection of the main WiFi network.
The router provides two default guest networks with the following names (SSIDs):
By default, these networks are configured as open networks without security but are disabled. You can enable one or both networks. You can also change the SSIDs for these networks.
#### To set up a guest network:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Control the WiFi radios
The modem router’s internal WiFi radios broadcast signals in the 2.4 GHz and 5 GHz ranges. By default, they are on so that you can connect over WiFi to the modem router.
When the WiFi radios are off, you can still use an Ethernet cable for a LAN connection to the modem router.
You can turn the WiFi radios on and off with the WiFi On/Off button on the modem router, or you can log in to the modem router and enable or disable the WiFi radios. If you are close to the modem router, it might be easier to press its WiFi On/Off button. If you are away from the modem router or already logged in, it might be easier to enable or disable them.
Use the WiFi On/Off button
To turn the WiFi radios off and on with the WiFi On/Off button: Press the WiFi On/Off button on the top of the modem router for two seconds. If you turned off the WiFi radios, the WiFi On/Off LED and the WPS LED turn off. If you turned on the WiFi radios, the WiFi On/Off LED and the WPS LED light.
Enable or disable the WiFi radios
If you used the WiFi On/Off button to turn off the WiFi radios, you can’t log in to the modem router to turn them back on. You must press the WiFi On/Off button again for two seconds to turn the WiFi radios back on.
#### To enable or disable the WiFi radios:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Your settings are saved.
Set up a WiFi schedule
You can turn off the WiFi signal from your modem router at times when you do not need a WiFi connection. For example, you might turn it off for the weekend if you leave town.
#### To set up the WiFi schedule:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Specify WPS settings
Wi-Fi Protected Setup (WPS) lets you join the WiFi network without typing the WiFi password.
#### To specify WPS settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The Router’s PIN field displays the fixed PIN that you can use to configure the modem router’s WiFi settings from another device through WPS.
The PIN function might temporarily be disabled when the modem router detects suspicious attempts to break into the modem router’s WiFi settings by using the modem router’s PIN through WPS. You can manually enable the PIN function by selecting the Enable Router’s PIN check box.
By default, the Keep Existing Wireless Settings check box is selected. We recommend that you leave this check box selected.
If you clear this check box, the next time a new WiFi client uses WPS to connect to the modem router, the modem router WiFi settings change to an automatically generated random SSID and security key.
Enable or disable implicit beamforming
Implicit beamforming means that the modem router can use information from WiFi clients that support beamforming to improve the WiFi signal.
#### To enable or disable implicit beamforming:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Selecting this check box enables implicit beamforming. Clearing this check box disables implicit beamforming.
If you connected over WiFi to the network, you are disconnected from the network and must reconnect.
Enable or disable airtime fairness
Airtime fairness ensures that all WiFi clients receive equal time on the network. Network resources are divided by time, so if you have five WiFi clients, they each get one-fifth of the network time. The advantage of this feature is that your slowest WiFi clients don’t control network responsiveness. This feature is enabled by default, but you can disable it.
#### To enable or disable airtime fairness:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Selecting this check box enables airtime fairness. Clearing this check box disables airtime fairness.
If you connected over WiFi to the network, you are disconnected from the network and must reconnect.
Ethernet Port Aggregation
Ethernet aggregation lets aggregate two Ethernet ports on your router to improve the aggregated file transfer speed.
To set up Ethernet port aggregation, connect a device that supports Ethernet port aggregation and 802.3ad to Ethernet aggregate ports 1 and 2 on your router. Note that Ethernet port aggregation is also referred to as link aggregation, teaming port, and port trunking.
WARNING: To avoid causing broadcast looping, which can shut down your network, do not connect an unmanaged switch to Ethernet ports 1 and 2 on your router.

Figure 4. Ethernet port aggregation
Set Up Ethernet Port Aggregation If you are connecting a switch, make sure that your switch supports 802.3ad LACP. To set up Ethernet port aggregation:
Note: If your device supports a static link aggregation group (LAG) only, you must enable static mode before you connect your device to Ethernet ports 1 and 2 on the router. See Step 3 for more information about how to enable static mode on your router.
For information about how to set up Ethernet port aggregation on your router or computer, see the documentation that came with your router or computer.
Note: You must enable static mode before you connect your device to Ethernet ports 1 and 2 on the router.
View or Change the Modem Router Ethernet Port Aggregation Mode To view or change your modem router's Ethernet port aggregation mode:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Note: You must enable static mode before you connect your device to Ethernet ports 1 and 2 on the router.
Manage Your Modem Router
This chapter describes the modem router settings for administering and maintaining your modem router and home network.
The chapter contains the following sections:
62
Update the router firmware
You can log in to the modem router and check if new firmware is available, or you can manually load a specific firmware version to your modem router.
Check for new firmware and update the router
The modem router firmware (routing software) is stored in flash memory. You might see a message at the top of the modem router pages when new firmware is available. You can respond to that message to update the firmware or you can check to see if new firmware is available and update your product.
Note: We recommend that you connect a computer to the modem router using an Ethernet connection to update the firmware.
#### To check for new firmware and update your modem router:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The modem router finds new firmware information if any is available and displays a message asking if you want to download and install it.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the update. For example, do not close the browser, click a link, or load a new page. Do not turn off the router.
When the upload is complete, your modem router restarts. The update process typically takes about one minute. Read the new firmware release notes to find out if you must reconfigure the modem router after updating.
Manually upload firmware to the router
If you want to upload a specific firmware version, or your modem router fails to update its firmware automatically, follow these instructions.
Note: We recommend that you connect a computer to the modem router using an Ethernet connection to upload the firmware.
#### To manually upload a firmware file to your modem router:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Note: To avoid the risk of corrupting the firmware, do not interrupt the update. For example, do not close the browser, click a link, or load a new page. Do not turn off the router. Wait until the router finishes restarting. If your modem router does not reboot, check the Router Status page to confirm whether the new firmware version uploaded.
Change the admin password
The admin password is the one you specified the first time you logged in. You can change this password.
Note: The ideal password contains no dictionary words from any language and contains uppercase and lowercase letters, numbers, and symbols. It can be up to 30 characters.
#### To change the password for the admin user name:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Enable admin password recovery
The modem router admin password is used to log in to your router web interface. We recommend that you enable password recovery so that you can recover the password if it is forgotten. This recovery process is supported in Internet Explorer, Firefox, and Chrome browsers but not in the Safari browser.
#### To enable password recovery:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Recover the admin password
If you set up the password recovery feature, you can recover your modem router admin password.
#### To recover your router admin password:
If password recovery is enabled, you are prompted to enter the serial number of the modem router.
The serial number is on the router label.
View information about the router and the Internet and WiFi settings
You can view router information, the Internet port status, and WiFi settings. To view information about the router and the Internet, modem, and WiFi settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Display the statistics of the Internet port
#### To display the statistics of the Internet port:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Check the Internet connection status
#### To check the Internet connection status:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The Connection Status window opens. The information that displays depends on the type of Internet connection.
For example, if your Internet connection does not require a login and the router receives an IP address automatically, the window displays the following information:
View and manage logs of router activity
The logs are a detailed record of the websites you accessed or attempted to access and many other router actions. Up to 256 entries are stored in the log.
#### To view and manage logs:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
View devices currently on the network
You can view all computers and devices that are currently connected to your network. To view devices on the network:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
View event logs
Event log captures inportant modem router events.
#### To view the event log:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Monitor Internet traffic
Traffic metering allows you to monitor the volume of Internet traffic that passes through the modem router Internet port. You can set limits for traffic volume.
#### To monitor Internet traffic:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
By default, the value is 0 and no warning message is issued. You can select one of the following to occur when the limit is attained:
Manage the router configuration file
The configuration settings of the modem router are stored within the modem router in a configuration file. You can back up (save) this file to your computer, restore it, or reset it to the factory default settings.
Back up the settings
#### To back up the modem router’s configuration settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Erase the settings
CAUTION: This process erases all settings that you configured in the router. To erase the settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The configuration is reset to factory default settings. When the reset is complete, the router restarts. This process takes about two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset. For example, do not close the browser, click a link, or load a new page. Do not turn off the router. Wait until the router finishes restarting.
Restore the settings
To restore configuration settings that you backed up:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Remote access
You can access your router over the Internet to view or change its settings. You must know the router’s WAN IP address to use this feature.
Note: Be sure to change the password for the user name admin to a secure password. The ideal password contains no dictionary words from any language and contains uppercase and lowercase letters, numbers, and symbols. It can be up to 30 characters. See Change the admin password on page 65.
Set up remote management
#### To set up remote management:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Note: For enhanced security, restrict access to as few external IP addresses as practical. Select one of the following:
Use remote access
To use remote access:
For example, if your external address is 134.177.0.123 and you use port number 8443, enter https://134.177.0.123:8443 in your browser.
Remotely access your router using the Nighthawk app
You can use the Nighthawk app to remotely access your router and change its settings. Before you can use remote access with the Nighthawk app, you must update your router’s firmware and download the latest Nighthawk app for your mobile device.
For more information about how to update your router’s firmware, see Check for new firmware and update the router on page 63.
To download the latest Nighthawk app for your mobile device, visit https://www.netgear.com/home/apps-services/nighthawk-app/.
Disable LED blinking or turn off LEDs
The LEDs on the top panel of the modem router indicate activities and behavior. You can disable LED blinking for network communications, or turn off all LEDs except the Power LED.
#### To disable LED blinking or turn off the LEDs:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Set your time zone
#### To set your time zone:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Set the NTP Server
By default, the router uses the NETGEAR NTP server to sync the network time. You can change the NTP server to your preferred NTP server.
#### To set the NTP server:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Specify ReadyDLNA media server settings
By default, the router acts as a ReadyDLNA media server, which lets you view movies and photos on DLNA/UPnP AV-compliant media players, such as Xbox360, Playstation, and NETGEAR media players.
#### To specify media server settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Note: If you change the media server name, you can also change the ReadySHARE storage folder access path to the new name or keep the access path as \\readyshare .
Return the router to its factory default settings
Under some circumstances (for example, if you lost track of the changes that you made to the router settings or you move the router to a different network), you might want to erase the configuration and reset the router to factory default settings.
To reset the router to factory default settings, you can use either the Reset button on the back of the router or the Erase function.
After you reset the router to factory default settings, the user name is admin, the password is password, the LAN IP address is 192.168.1.1 (which is the same as www.routerlogin.net), and the DHCP server is enabled.
Tip: If the router is in bridge mode, you can access it by LAN IP address 192.168.100.1.
Use the Reset button
CAUTION: This process erases all settings that you configured in the router. To reset the router to factory default settings:
The Power LED starts blinking. When the reset is complete, the router restarts. This process takes about two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset. For example, if you are connected to the router web interface, do not close the browser, click a link, or load a new page. Do not turn off the router. Wait until the router finishes restarting.
Erase the settings
CAUTION: This process erases all settings that you configured in the router.
#### To erase the settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The configuration is reset to factory default settings. When the reset is complete, the router restarts. This process takes about two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset. For example, do not close the browser, click a link, or load a new page. Do not turn off the router. Wait until the router finishes restarting.
Share USB Storage Devices Attached to the Modem Router
This chapter describes how to access and manage storage devices attached to your modem router. ReadySHARE lets you access and share USB storage devices connected to the router. (If your storage device uses special drivers, it is not compatible.)
Note: You can use a USB port on the modem router to connect a USB storage device like a flash drive or hard drive. Do not connect a computer, USB modem, CD drive, or DVD drive to a USB port on the modem router.
The chapter contains the following sections:
83
USB device requirements
The modem router works with most USB-compliant external flash and hard drives. For the most up-to-date list of USB devices that the modem router supports, visit kb.netgear.com/app/answers/detail/a_id/18985/~/readyshare-usb-drives-compatibility-list. Some USB external hard drives and flash drives require you to load the drivers onto the computer before the computer can access the USB storage device. Such USB storage devices do not work with the modem router. The modem router supports the following file system types for full read/write access:
Connect a USB storage device to the router
ReadySHARE lets you access and share USB storage devices that are connected to a USB port on the modem router. (If your USB storage device uses special drivers, it is not compatible.)
#### To connect a USB device:
You must use the power supply when you connect the USB storage device to the modem router.
When you connect the USB storage device to the router USB port, it might take up to two minutes before it is ready for sharing. By default, the USB storage device is available to all computers on your local area network (LAN).
Access a storage device connected to the router from a Windows-based computer
#### To access the USB storage device from a Windows-based computer:
You must use the power supply when you connect the USB storage device to the router.
When you connect the USB storage device to the modem router’s port, it might take up to two minutes before it is ready for sharing. By default, the USB storage device is available to all computers on your local area network (LAN).
A window automatically opens and displays the files and folders on the USB storage device.
Map a USB device to a Windows network drive
#### To map the USB storage device to a Windows network drive:
You must use the power supply when you connect the USB storage device to the router.
When you connect the USB storage device to the modem router’s port, it might take up to two minutes before it is ready for sharing. By default, the USB storage device is available to all computers on your local area network (LAN).
Access a storage device that is connected to the router from a Mac
From a computer or device on the network, you can access a storage device that is connected to the modem router.
#### To access the device from a Mac:
You must use the power supply when you connect the USB storage device to the router.
When you connect the USB storage device to the modem router’s port, it might take up to two minutes before it is ready for sharing. By default, the USB storage device is available to all computers on your local area network (LAN).
If you set up access control on the modem router and you allowed your Mac to access the network, select the Registered User radio button and enter admin for the name and router admin password for the password. For more information about access control, see Enable access control to allow or block access to the Internet on page 29.
A window automatically opens and displays the files and folders on the USB storage device.
Back up Windows-based computers with ReadySHARE Vault
Your router comes with free backup software for all the Windows-based computers in your home. Connect a USB hard disk drive (HDD) to the modem router for centralized, continuous, and automatic backup.
The following operating systems support ReadySHARE Vault:
You must use the power supply when you connect the USB storage device to the modem router.
When you connect the USB storage device to the modem router’s USB port, it might take up to two minutes before it is ready for sharing. By default, the USB storage device is available to all computers on your local area network (LAN).
Back up Mac computers with Time Machine
You can use Time Machine to back up your Mac computers onto a USB hard drive that is connected to one of the modem router’s USB ports. You can access the connected storage device from your Mac with a wired or WiFi connection to your modem router.
Note: The following instructions might be different depending on the macOS your computer is using. For more instructions about backing up your computer with Time Machine, see the Apple support site.
Set up a USB hard drive on a Mac
We recommend that you use a new USB HDD or format your old USB HDD to do the Time Machine backup for the first time. Use a blank partition to prevent some issues during backup using Time Machine. The modem router supports GUID or MBR partitions.
#### To format your USB hard disk drive and specify partitions:
When you connect the USB HDD to the modem router’s port, it might take up to two minutes before it is ready for sharing. By default, the USB HDD is available to all computers on your local area network (LAN).
Prepare to back up a large amount of data
Before you back up a large amount of data with Time Machine, we recommend that you follow this procedure.
#### To prepare to back up a large amount of data:
Use Time Machine to back up onto a USB hard disk
You can use Time Machine to back up your Mac computers onto a USB hard disk drive (HDD) that is connected to one of the modem router’s USB ports.
#### To back up your Mac onto a USB hard disk drive:
When you connect the USB HDD to the modem router’s port, it might take up to two minutes before it is ready for sharing. By default, the USB HDD is available to all computers on your local area network (LAN).
Note: If you do not see the USB partition that you want in the Time Machine disk list, go to Mac Finder and click that USB partition. It displays in the Time Machine list.
When the setup is complete, the Mac automatically schedules a full backup. You can back up immediately.
Enable FTP access within your network
File Transfer Protocol (FTP) lets you download (receive) and upload (send) large files faster.
#### To enable FTP access within your network:
View network folders on a storage device
You can view network folders on a storage device that is connected to the modem router.
#### To view network folders:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Add a network folder on a USB storage device
You can add network folders on a USB storage device connected to a modem router USB port.
#### To add a network folder:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
If this window does not open, your web browser might be blocking pop-ups. If it is, change the browser settings to allow pop-ups.
Note: We recommend that you do not attach more than one drive to one USB port (for example, through a USB hub).
All–no password (the default) allows all users to access the network folder. The other option is that only the admin user is allowed access to the network folder. The password for admin is the same one that you use to log in to the router.
Edit a network folder on a USB storage device
You can edit network folders on a USB storage devices connected to a modem router USB port.
#### To edit a network folder:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Safely remove a USB storage device
Before you physically disconnect a USB storage device from the modem router USB port, log in to the modem router and take the USB storage device offline.
#### To remove a USB storage device safely:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Use Dynamic DNS to Access USB Storage Devices Through the Internet
With Dynamic DNS, you can use the Internet to access USB devices attached to the router’s USB ports when you’re not home.
This chapter contains the following sections:
95
Set up and manage Dynamic DNS
Internet service providers (ISPs) assign numbers called IP addresses to identify each Internet account. Most ISPs use dynamically assigned IP addresses. This means that the IP address can change at any time. You can use the IP address to access your network remotely, but most people don’t know what their IP addresses are or when this number changes.
To make it easier to connect, you can get a free account with a Dynamic DNS service that lets you use a domain name to access your home network. To use this account, you must set up the router to use Dynamic DNS. Then the router notifies the Dynamic DNS service provider whenever its IP address changes. When you access your Dynamic DNS account, the service finds the current IP address of your home network and automatically connects you.
If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), the Dynamic DNS service does not work because private addresses are not routed on the Internet.
Set up FTP access through the Internet
#### To set up FTP access:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Your personal FTP server
With your customized free URL, you can use FTP to access your network when you aren’t home through Dynamic DNS. To set up your FTP server, you must register for a NETGEAR Dynamic DNS (DDNS) service account and specify the account settings. See Set up a new Dynamic DNS account on page 98.
Note: The router supports only basic DDNS, and the login and password might not be secure. You can use DDNS with a VPN tunnel for a secure connection.
Set up your personal FTP server
To set up your personal account and use FTP:
Your router must use a direct Internet connection. It cannot connect to a different router to access the Internet.
You must use the power supply when you connect the USB storage device to the router.
When you connect the USB storage device to the router USB port, it might take up to two minutes before it is ready for sharing. By default, the USB storage device is available to all computers on your local area network (LAN).
Set up a new Dynamic DNS account
#### To set up Dynamic DNS and register for a free NETGEAR account:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The host name is sometimes called the domain name. Your free URL includes the host name that you specify and ends with mynetgear.com. For example, specify MyName.mynetgear.com.
Specify a DNS account that you already created
If you already created a Dynamic DNS account with NETGEAR, No-IP, or DynDNS, you can set up the router to use your account.
#### To set up Dynamic DNS if you already created an account:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Change the Dynamic DNS settings
You can change the settings for your Dynamic DNS account.
#### To change your settings:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Access USB storage devices through the Internet
You can access USB storage devices through the Internet when you’re not home. To access devices from a remote computer:
You can use FTP to share files on a USB device connected to the router.
Use VPN to Access Your Network
You can use OpenVPN software to remotely access your router using virtual private networking (VPN). This chapter explains how to set up and use VPN access.
The chapter contains the following sections:
101
Set up a VPN connection
A virtual private network (VPN) lets you use the Internet to securely access your network when you aren’t home.
This type of VPN access is called a client-to-gateway tunnel. The computer is the client, and the router is the gateway. To use the VPN feature, you must log in to the modem router and enable VPN, and you must install and run VPN client software on the computer.
VPN uses DDNS or a static IP address to connect with your modem router. To use a DDNS service, register for an account with a host name (sometimes called a domain name). You use the host name to access your network. The modem router supports these accounts: NETGEAR, No-IP, and Dyn.
If your Internet service provider (ISP) assigned a static WAN IP address (such as 50.196.x.x or 10.x.x.x) that never changes to your Internet account, the VPN can use that IP address to connect to your home network.
Specify VPN Service in the Router
You must specify the VPN service settings in the router before you can use a VPN connection.
#### To specify the VPN service:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
By default, the VPN uses the UDP service type and uses port 12974. If you want to customize the service type and port, we recommend that you change these settings before you install the OpenVPN software.
Install OpenVPN Software
You must install this software on each Windows computer, Mac computer, iOS device, or Android device that you plan to use for VPN connections to your modem router.
Install OpenVPN Software on Your Windows Computer
You must install this software on each Windows computer that you plan to use for VPN connections to your modem router.
#### To install VPN client software on your Windows computer:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.



The window displays the progress of the installation and then displays the final installation page.

If you do not change the VPN interface name, the VPN tunnel connection will fail. For more information about using OpenVPN on your Windows computer, visit https://openvpn.net/index.php/open-source/documentation/howto.html#quick.
Install OpenVPN Software on Your Mac Computer
You must install this software on each Mac computer that you plan to use for VPN connections to your modem router.
#### To install VPN client software on your Mac computer:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
For more information about using OpenVPN on your Mac computer, visit https://openvpn.net/vpn-server-resources/installation-guide-for-openvpn-connect-client-on-macos/.
Install OpenVPN Software on an iOS Device
You must install this software on each iOS device that you plan to use for VPN connections to your router.
#### To install VPN client software on an iOS device:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Note that when you open the .ovpn file, a list of apps displays. Select the OpenVPN Connect app to open the .ovpn file.
For more information about using OpenVPN on your iOS device, visit http://www.vpngate.net/en/howto_openvpn.aspx#ios.
Install OpenVPN Software on an Android Device
You must install this software on each Android device that you plan to use for VPN connections to your modem router.
#### To install VPN client software on an Android device:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
For more information about using OpenVPN on your Android device, visit http://www.vpngate.net/en/howto_openvpn.aspx#android.
Use a VPN Tunnel on Your Windows Computer
After you set up the modem router to use VPN and install the OpenVPN application on your computer, you can open a VPN tunnel from your computer to your modem router over the Internet.
For the VPN tunnel to work, the local LAN IP address of the remote modem router must use a different LAN IP scheme from that of the local LAN where your VPN client computer is connected. If both networks use the same LAN IP scheme, when the VPN tunnel is
established, you cannot access your home router or your home network with the OpenVPN software.
The default LAN IP address scheme for the modem router is 192.x.x.x. The most common IP schemes are 192.x.x.x, 172.x.x.x, and 10.x.x.x. If you experience a conflict, change the IP scheme either for your home network or for the network with the client VPN computer. For information about changing these settings, see Change the LAN TCP/IP settings on page 41.
#### To open a VPN tunnel:

The OpenVPN icon displays in the Windows taskbar.
Tip: You can create a shortcut to the VPN program, then use the shortcut to access the settings and select the run as administrator check box.Then every time you use this shortcut, OpenVPN automatically runs with administrator privileges.

Use VPN to Access the Router’s USB Device and Media
To access a USB device and download files from your Windows-based computer using VPN:
Note: See your computer’s documentation for information about how to display the network resources. The network resources display. The ReadySHARE icon displays in the Computer section and the remote router icon displays in the Media Devices section (if DLNA is enabled in the modem router).
If the local LAN and the remote LAN are using the same IP scheme, the remote modem router icon does not display in the Media Devices and Network Infrastructure sections.
Use VPN to Access Your Internet Service at Home
When you’re away from home and you access the Internet, you usually use a local Internet service provider. For example, at a coffee shop you might be given a code that lets you use the coffee shop’s Internet service account to surf the web.
Nighthawk lets you use a VPN connection to access your own Internet service when you’re away from home. You might want to do this if you travel to a geographic location that doesn’t support all the Internet services that you use at home. For example, your Netflix account might work at home but not in a different country.
Set Up VPN Client Internet Access in the Modem Router
By default, the router is set up to allow VPN connections only to your home network, but you can change the settings to allow Internet access. Accessing the Internet remotely through a VPN might be slower than accessing the Internet directly.
#### To allow VPN clients to use your home Internet service:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
When you access the Internet with the VPN connection, instead of using a local Internet service, you use the Internet service from your home network.
Block VPN Client Internet Access in the Router
By default, the router is set up to allow VPN connections only to your home network, not to the Internet service for your home network. If you changed this setting to allow Internet access, you can change it back.
#### To allow VPN clients to access only your home network:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
This is the default setting. The VPN connection is only to your home network, not to the Internet service for your home network.
Use a VPN Tunnel to Access Your Internet Service at Home
#### To access your Internet service:
##### 4. When the VPN connection is established, launch your Internet browser.
Manage Port Forwarding and Port Triggering
You can use port forwarding and port triggering to set up rules for Internet traffic. You need networking knowledge to set up these features.
This chapter contains the following sections:
114
Manage Port Forwarding to a Local Server
If your home network includes a server, you can allow certain types of incoming traffic to reach the server. For example, you might want to make a local web server, FTP server, or game server visible and available to the Internet.
The router can forward incoming traffic with specific protocols to computers on your local network.You can specify the servers for applications and you can also specify a default DMZ server to which the router forwards all other incoming protocols.
Set Up Port Forwarding to a Local Server
To forward specific incoming protocols:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
If the service that you want to add is not in the menu, create a custom service. See Add a Custom Port Forwarding Service on page 116.
Add a Custom Port Forwarding Service
The router lists default services and applications that you can use in port forwarding rules. If the service or application is not predefined, you can add a port forwarding rule with a custom service or application.
#### To add a custom service:
You can usually find this information by contacting the publisher of the application or user groups or news groups.
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
You can enter a port range and fixed ports in one rule, for example, external (30–50, 78, 100–102), internal (40–60, 99, 200–202). With this rule, external ports 30–50 are forwarded to internal ports 40–60.
Edit a Port Forwarding Service
#### To edit a port forwarding entry:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Delete a Port Forwarding Entry
#### To delete a port forwarding entry:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
Application Example: Make a Local Web Server Public
If you host a web server on your local network, you can use port forwarding to allow web requests from anyone on the Internet to reach your web server.
#### To make a local web server public:
In this example, your router always gives your web server an IP address of 192.168.1.33.
Dynamic DNS makes it much easier to access a server from the Internet because you can type the name in the Internet browser. Otherwise, you must know the IP address that the ISP assigned, which typically changes.
How the Router Implements the Port Forwarding Rule
The following sequence shows the effects of a port forwarding rule:
Port Triggering
Port triggering is a dynamic extension of port forwarding that is useful in these cases:
Note: If you use applications such as multiplayer gaming, peer-to-peer connections, real-time communications such as instant messaging, or remote assistance (a feature in Windows XP), enable Universal Plug and Play (UPnP).
Add a Port Triggering Service
#### To add a port triggering service:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
The service is now in the Portmap Table. You must enable port triggering before the router uses port triggering. See Enable Port Triggering on page 121.
Enable Port Triggering
#### To enable port triggering:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
If this check box is selected, the router does not use port triggering even if you specified port triggering settings.
This value controls how long the inbound ports stay open when the router detects no activity. This value is required because the router cannot detect when the application terminates.
Application Example: Port Triggering for Internet Relay Chat
Some application servers, such as FTP and IRC servers, send replies to multiple port numbers. Using port triggering, you can tell the router to open more incoming ports when a particular outgoing port starts a session.
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at destination port 6667. The IRC server not only responds to your originating source port but also sends an “identify” message to your computer on port 113. Using port triggering, you can tell the router, “When you initiate a session with destination port 6667, you must
also allow incoming traffic on port 113 to reach the originating computer.” The following sequence shows the effects of this port triggering rule:
Troubleshooting
This chapter provides information to help you diagnose and solve problems you might experience with your modem router. If you do not find the solution here, check the NETGEAR support site at netgear.com/support for product and contact information.
The chapter contains the following sections:
123
Quick tips
This section describes tips for troubleshooting some common problems.
Sequence to restart your network
If you must restart your network, follow this sequence:
Check the power adapter and Ethernet cable connections
If the modem router does not start, make sure that the power adapter cable is securely plugged in.
If the Internet connection does not function, make sure that the coax cable is securely plugged in. The Online LED on the modem router is lit if the modem router is receiving a signal from the ISP.
If the LAN connections do not function, make sure that the Ethernet cables are securely plugged in. If one or more powered-on computers are connected to the modem router by an Ethernet cable, the corresponding numbered router LAN port LEDs light.
Check the WiFi settings
Make sure that the WiFi settings on the WiFi-enabled computer or mobile device and the modem router match exactly. The WiFi network name (SSID) and WiFi security settings of the modem router and the computer or mobile device must match exactly. WiFi passwords are case sensitive.
If you set up an access control list, you must add the MAC address of each computer and mobile device to the modem router’s access control list.
Check the network settings
If your computer or mobile device cannot connect to the modem router, make sure that the network settings of the computer or mobile device are correct. Computers and mobile devices must use network IP addresses on the same network as the modem router. By default, almost all computers and mobile devices are set up to obtain an IP address automatically using DHCP.
Some Internet service providers require you to use the MAC address of the computer initially registered on the account, but this is an unusual situation. You can view the MAC address on the Attached Devices page of the router web interface.
Troubleshoot with the LEDs
By default, the modem router uses standard LED settings.
Standard LED behavior when the router is powered on
After you turn on power to the modem router, verify that the following sequence of events occurs:
You can use the LEDs on the front panel of the modem router for troubleshooting.
Power LED is off or blinking
This could occur for a number of reasons. Check the following:
LEDs never turn off
When the modem router is turned on, the LEDs light for about 10 seconds and then turn off. If all the LEDs stay on, this indicates a fault within the modem router.
If all LEDs are still lit one minute after power-up, do the following:
If the error persists, a hardware problem might be the cause. Contact Technical Support at netgear.com/support.
Online LED is Off
If the Online LED is off and the modem router is connected to the coax cable, try the following:
Ethernet LAN port LEDs are off
If the Ethernet port LEDs do not light when an Ethernet connection is made, check the following:
WiFi LED is off
If the WiFi LED stays off, check to see if someone pressed the WiFi On/Off button on the modem router. This button turns the WiFi radios in the modem router on and off. If someone disabled the WiFi radios by using the router web interface, the WiFi LED also stays off. The WiFi LED is lit when the WiFi radios are turned on.
Note: if the LED On/Off button is in the off position, all LEDs are off except the Power LED.
You cannot log in to the router
If you are unable to log in to the modem router from a computer or mobile device on your local network, check the following:
Tip: If the router is in access point mode or bridge mode and you do not know the IP address that is assigned to it, first try to use an IP scanner application to detect the IP address. (IP scanner applications are available online free of charge.) If you can detect the IP address, you don’t need to reset the router to factory default settings.
You cannot access the Internet
When your modem router cannot access the Internet and your Online LED is on, activate your modem router by registering the cable MAC address of your modem router with your cable Internet provider. For instructions for registering, see Install and Activate Your Modem Router on page 14.
If you already activated the modem router and can access it, but not the Internet, check to see if the modem router can obtain a WAN IP address from your Internet service provider (ISP). Unless your ISP provides a fixed IP address, your router requests an IP address from the ISP. You can determine whether the request was successful using the modem router web interface.
#### To check your IP address:
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
If your modem router is still unable to obtain an IP address from the ISP, the problem might be one of the following:
If your modem router obtained an IP address, but your computer does not load any web pages from the Internet, it might be for one or more of the following reasons:
Troubleshoot Internet browsing
If your modem router can obtain an IP address but your computer is unable to load any web pages from the Internet, it might be for the following reasons:
Changes are not saved
If the modem router does not save the changes that you make in the modem router web interface, do the following:
Troubleshoot WiFi connectivity
If you are experiencing trouble connecting over WiFi to the modem router, try to isolate the problem:
Note: Be sure to click the Apply button if you change settings.
If your WiFi device finds your network but the signal strength is weak, check these conditions:
Troubleshoot your network using the ping utility
Most network devices and routers contain a ping utility that sends an echo request packet to the designated device. The device then responds with an echo reply. You can easily troubleshoot a network using the ping utility in your computer or workstation.
Test the LAN path to your router
You can ping the modem router from your computer to verify that the LAN path to your modem router is set up correctly.
#### To ping the modem router from a Windows-based computer:
If the path is not functioning correctly, one of the following problems might be occurring:
Verify that the IP address for your modem router and your computer are correct and that the addresses are on the same subnet.
Test the path from a Windows-based computer to a remote device To test the path from a Windows-based computer to a remote device:
If the path is functioning correctly, messages display that are similar to those shown in Test the LAN path to your router on page 131.
Many broadband ISPs restrict access by allowing traffic only from the MAC address of your broadband modem. Some ISPs additionally restrict access to the MAC address of a single computer connected to that modem. If your ISP does this, configure your modem router to “clone” or “spoof” the MAC address from the authorized computer.
Supplemental Information
This appendix covers the following topics:
133
Factory Settings
You can return the modem router to its factory settings. Use the end of a paper clip or a similar object to press and hold the Reset button on the back of the modem router for at least seven seconds. The modem router resets, and returns to the factory configuration settings shown in the following table.
Default behaviorFeature
User login URLModemrouterlogin
www.routerlogin.com, www.routerlogin.net, or 192.168.1.1
adminUsername(case-sensitive) passwordLoginpassword(case-sensitive)
192.168.1.1LANIPLocalnetwork(LAN) 255.255.255.0Subnetmask EnabledDHCPserver
Cable modem firewall
DHCP range
192.168.1.2 to 192.168.1.254
DisabledDMZ
Time zone
ISP/MSO ToD (time of day) configuration
Time zone adjusted for daylight savings time
ISP/MSO ToD (time of day) server configuration
EnabledSNMP
Inbound (communications coming in from the Internet)
Disabled (except traffic on port 80, the HTTP port)
Enabled (all)Outbound(communicationsgoing out to the Internet)
EnabledWiFicommunicationWiFi
See the modem router label
SSID name
WPA2-PSK (AES)Security EnabledBroadcastSSID
United StatesCountry/regionWiFi(continued) Auto1RFchannel(2.4GHz)
CH 153 (or manually select channels)
RF channel (5 GHz)
Up to 1200 Mbps at 2.4 GHz, 4800 Mbps at 5 GHz
Operating mode
1Maximum WiFi signal rate derived from IEEE Standard 802.11 specifications. Actual throughput can vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.
Technical Specifications
DescriptionFeature TCP/IP, DHCP, Dynamic DNS, UPnP, and SMBDataandroutingprotocols
Power adapter (North America)
120V, 60 Hz, input 19V/3.16A DC output
10.4 x 8.5 x 4.3 in (264 x 215 x 110 mm)Dimensions 2.55 lb (1.16 kg)Weight 0° to 40° C (32º to 104º F)Operatingtemperature 90% maximum relative humidity, noncondensingOperatinghumidity FCC Part 15 Class BElectromagneticemissions
LAN
10BASE-T, or 100BASE-TX, or 1000BASE-T, or 2.5GBASE-T RJ-45
WAN
2 x 2 OFDM/OFDMA DOCSIS 3.1 32 x 8 SCQAM DOCSIS 3.0
WiFi
Maximum WiFi signal rate complies with the IEEE 802.11 standard.
Auto Rate SensingRadiodatarates
Data encoding standards
IEEE 802.11b/g/n 2.4 GHz-256 QAM support IEEE 802.11ax 2.4 GHz-1024 QAM and OFDMA support IEEE 802.11a/n/ac 5 GHz-256 QAM support IEEE 802.11ax 5 GHz-1024 QAM and OFDMA support
Maximum computers per WiFi network
Limited by the amount of WiFi network traffic generated by each node (typically 50–70 nodes)
Operating frequency range
2.4 GHz: 2.412–2.462 GHz 5 GHz: 5.18–5.825 GHz
WPA-PSK, WPA2-PSK, and WPA/WPA2802.11security