Router mode: Manage the basic firewall
If the access point/router is in router mode, the basic firewall settings let you manage
port scan protection and denial of service (DoS) protection, specify whether the access
point/router can respond to a ping from the WAN port, set up a DMZ server, and manage
IGMP proxying, NAT filtering, and the application-level gateway (ALG) for the Session
Initiation Protocol (SIP).
For information about the MTU size, which is another basic firewall setting, see Router
mode: Change the MTU size on page 128.
Note: The information in this section and subsections does not apply if the access
point/router is in access point mode.
Router mode: Manage port scan protection and denial of
Port scan protection and denial of service (DoS) protection can protect your LAN against
attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. By default,
DoS protection is enabled and a port scan is rejected.
You can also enable the access point/router to respond to a ping to its WAN (Internet)
port. This feature allows your access point/router to be discovered. Enable this feature
only as a diagnostic tool or if a specific reason exists.
To change the default WAN security settings:
1. Open a web browser from a computer or mobile device that is connected to the
access point/router network.
2. Enter http://www.routerlogin.net in the address field.
If you are not connected to the access point/router network but to the same network
as the access point/router, enter the IP address that is assigned to the access
point/router. If you do not know the IP address, see Find the IP address of the access
point/router on page 29.
The Sign-In page displays. You are prompted to sign in with your NETGEAR account.
If the access point/router is not connected to the Internet, you are prompted to sign
in with the local login credentials (see Log in to the access point/router when it is
not connected to the Internet on page 28).
3. Click the Login button.
The NETGEAR Account Login page displays.
User Manual75Manage the Firewall and
AC2000 802.11ac Wireless Access Point/Router WAC124