NETGEAR BR500 User Manual
  1. Manuals
  2. Brands
  3. NETGEAR Manuals
  4. Network Router
  5. BR500
  6. User manual

NETGEAR BR500 User Manual

Insight instant vpn router
Hide thumbs Also See for BR500:
Table of Contents

Advertisement

Quick Links

User Manual
Insight Instant VPN Router
BR500
October 2018
202-11903-01
NETGEAR, Inc.
350 E. Plumeria Drive
San Jose, CA 95134, USA

Advertisement

Table of Contents
loading

Related Manuals for NETGEAR BR500

Summary of Contents for NETGEAR BR500

  • Page 1 User Manual Insight Instant VPN Router BR500 NETGEAR, Inc. October 2018 350 E. Plumeria Drive 202-11903-01 San Jose, CA 95134, USA...
  • Page 2 Do not use this device outdoors. If you connect cables or devices that are outdoors to this device, see http://kb.netgear.com/000057103 for safety and warranty information. Trademarks © NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only. Revision History...

  • Page 3: Table Of Contents

    About this user manual and NETGEAR Insight.........9 Set up the BR500 router with an Internet connection......9 Set up the BR500 router to connect to a modem......9 Set up the BR500 router to connect to the LAN of an existing router....................12 Router management options............15 Log in to the local browser interface..........16...
  • Page 4 Insight Instant VPN Router BR500 Chapter 3 Manage the Firewall and Security Manage the basic firewall settings...........47 Manage port scan protection and denial of service protection.47 Set up a default DMZ server............48 Manage IGMP proxying..............49 Manage NAT filtering..............49 Manage the SIP application-level gateway.........50 Allow or block device access to your network........51...
  • Page 5 Insight Instant VPN Router BR500 Management VLAN concepts............80 Add a VLAN..................81 Change a VLAN................82 Change the PVID for a LAN port..........83 Remove a VLAN................84 Manage reserved LAN IP addresses..........85 Reserve a LAN IP Address for a LAN subnet......85 Change a reserved IP address for a LAN subnet.......86 Remove a reserved IP address entry for a LAN subnet.....87...
  • Page 6 Insight Instant VPN Router BR500 Chapter 7 Monitor the router and the router network View devices currently on the network..........118 Display the network map and VPN map........119 View VPN groups and VPN devices in a VPN network of an Insight managed router................119...
  • Page 7 Insight Instant VPN Router BR500 Disable port triggering...............146 Application example: Port triggering for Internet Relay Chat.146 Chapter 10 Troubleshooting Reboot the router from the local browser interface....149 Quick tips...................149 Sequence to restart your network..........149 Check Ethernet cable connections..........150 Network settings................150 Troubleshoot with the LEDs............150...

  • Page 8: Chapter 1 Set Up And Access The Router

    Set Up and Access the Router This user manual is for the NETGEAR Insight Instant VPN Router BR500, in this manual referred to as the router. The router is designed to provide firewall and VPN gateway functionality for small business environments with up to 50 users. A pair of routers can provide VPN functionality to users between remote sites.

  • Page 9: About This User Manual And Netgear Insight

    Set up the BR500 router to connect to a modem If the BR500 router is the single router in your network, connect the router directly to a modem, such as a DSL or cable modem that is connected to the Internet, and set up the Internet connection.
  • Page 10 The NETGEAR installation assistant runs on any device with a web browser. Installation and basic setup takes about 15 minutes to complete. To connect the router to a modem and use the NETGEAR installation assistant to automatically get an Internet connection: 1.
  • Page 11 Insight Instant VPN Router BR500 You can use LAN port 1, 2, 3, or 4. The access point receives an IP address from the router. c. Connect your mobile device to the access point. 6. From the computer or mobile device, launch a web browser and enter https://www.routerlogin.net in the address field.

  • Page 12: Set Up The Br500 Router To Connect To The Lan Of An Existing Router

    If another router provides the Internet connection, connect the BR500 router to the LAN that is broadcast by the other router and set up the Internet connection for the BR500 router. After you physically connect the router, you can let the NETGEAR installation assistant set up your router automatically.
  • Page 13 Insight Instant VPN Router BR500 To set up the BR500 router to connect to the LAN of another router and get an Internet connection: 1. Connect an Ethernet cable from the yellow Internet WAN port on the router to a LAN port on a switch or hub that is connected to the LAN of the other router.
  • Page 14 IP address automatically from the router. 6. In the login window, enter admin for the user name and password for the password. The NETGEAR installation assistant starts and searches your Internet connection for servers and protocols to determine your Internet configuration. NETGEAR installation assistant guides you through connecting the router to the Internet and setting up a new admin password for the router.

  • Page 15: Router Management Options

    You can choose from four methods to add the router to the NETGEAR Insight app: You can scan your network for the router, scan the QR code or the barcode of the router, or add the serial number of the router (see Add the router to an Insight managed network on page 17).

  • Page 16: Log In To The Local Browser Interface

    Insight Instant VPN Router BR500 Log in to the local browser interface After you set up the router and the router is connected to the Internet, you can view and change the router settings by connecting to the local browser–based management interface, in this manual referred to as the local browser interface.

  • Page 17: Change The Language Of The Local Browser Interface

    Insight Instant VPN Router BR500 The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive. The Dashboard displays. You can now monitor and change the settings of the router.
  • Page 18 Insight, and download the app. 2. Open the NETGEAR Insight app on your mobile device. 3. If you did not set up a NETGEAR account yet, tap Create NETGEAR Account and follow the onscreen instructions. 4. To log in to your NETGEAR account, enter your credentials and tap LOG IN.

  • Page 19: Access Insight To Manage The Router

    Insight Instant VPN Router BR500 Access Insight to manage the router After you add the router to an Insight managed network (see Add the router to an Insight managed network on page 17), you can manage the router through one of the following methods: •...

  • Page 20: Chapter 2 Specify Your Internet Settings Manually

    Specify Your Internet Settings Manually Usually, the quickest way to set up the Internet connection is to allow the NETGEAR installation assistant to detect the Internet connection when you first set up and access the router with a web browser. You can also customize or specify your Internet settings...

  • Page 21: Use The Internet Setup Wizard

    You can use the Setup Wizard to detect your Internet settings and automatically set up your router. Although the functionality is similar, the Setup Wizard is not the same as the NETGEAR installation assistant that runs the first time that you connect to your router to set it up.

  • Page 22: Manually Set Up The Router Internet Connection

    The Edit Device Name slide-out panel opens. b. In the Device Name field, enter the account name. The account name is the same as the device name, which, by default, is BR500. c. Click the Apply button. Your settings are saved.
  • Page 23 Insight Instant VPN Router BR500 7. If your Internet connection requires a domain name, enter it in the Domain Name (If Required) field. For the other sections on this page, the default settings usually work, but you can change them.

  • Page 24: Specify A Pppoe Internet Connection That Uses A Login

    Insight Instant VPN Router BR500 12. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see You cannot access the Internet on page 153. Specify a PPPoE Internet connection that uses a login...

  • Page 25: Specify A Pptp Or L2Tp Internet Connection That Uses A Login

    Your settings are saved. 16. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see You cannot access the Internet on page 153. Specify a PPTP or L2TP Internet connection that uses a login...
  • Page 26 Insight Instant VPN Router BR500 A login window opens. 3. Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive.

  • Page 27: Specify Ipv6 Internet Connections

    15. Click the Apply button. Your settings are saved. 16. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see You cannot access the Internet on page 153. Specify IPv6 Internet connections You can set up an IPv6 Internet connection if the router does not detect it automatically.

  • Page 28: Requirements For Entering Ipv6 Addresses

    Insight Instant VPN Router BR500 • If you are not sure, select Auto Detect so that the router detects the IPv6 type that is in use. • If your Internet connection does not use PPPoE or DHCP, or is not fixed, but is IPv6, select Auto Config.
  • Page 29 Insight Instant VPN Router BR500 A login window opens. 3. Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive.

  • Page 30: Use Auto Config For An Ipv6 Internet Connection

    Insight Instant VPN Router BR500 9. Click the Apply button. Your settings are saved. Use Auto Config for an IPv6 Internet connection To set up an IPv6 Internet connection through autoconfiguration: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 31: Set Up An Ipv6 6To4 Tunnel Internet Connection

    Insight Instant VPN Router BR500 You can type the domain name of your IPv6 ISP. Do not enter the domain name for the IPv4 ISP here. For example, if your ISP’s mail server is mail.xxx.yyy.zzz, type xxx.yyy.zzz as the domain name. If your ISP provided a domain name, type it in this field.
  • Page 32 Insight Instant VPN Router BR500 To set up an IPv6 Internet connection by using a 6to4 tunnel: 1. Launch a web browser from a computer or mobile device that is connected to the router network. 2. Enter https://www.routerlogin.net. Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16.

  • Page 33: Set Up An Ipv6 6Rd Internet Connection

    Insight Instant VPN Router BR500 • Auto Config. This is the default setting. This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN). 9. (Optional) In the LAN Setup section, select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.
  • Page 34 Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 35: Set Up An Ipv6 Passthrough Internet Connection

    Insight Instant VPN Router BR500 8. (Optional) In the LAN Setup section, select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface.

  • Page 36: Set Up An Ipv6 Fixed Internet Connection

    Insight Instant VPN Router BR500 Your settings are saved. Set up an IPv6 fixed Internet connection To set up a fixed IPv6 Internet connection: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 37: Set Up An Ipv6 Dhcp Internet Connection

    Insight Instant VPN Router BR500 • Use DHCP Server. This method passes more information to LAN devices but some IPv6 systems might not support the DHCPv6 client function. • Auto Config. This is the default setting. This setting specifies how the router assigns IPv6 addresses to the devices on your home network (the LAN).
  • Page 38 Insight Instant VPN Router BR500 The page adjusts. The router automatically detects the information in the following fields: • Router’s IPv6 Address on WAN. This field shows the IPv6 address that is acquired for the router’s WAN (or Internet) interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address.

  • Page 39: Set Up An Ipv6 Pppoe Internet Connection

    Insight Instant VPN Router BR500 11. Select an IPv6 Filtering radio button: • Secured. In secured mode, which is the default mode, the router inspects both TCP and UDP packets. • Open. In open mode, the router inspects UDP packets only.
  • Page 40 Insight Instant VPN Router BR500 6. Either select the Use the same Login information as IPv4 PPPoE check box, or specify the PPPoE settings for IPv6: • Login. Enter the login name that your ISP gave you. • Password. Enter the password for the ISP connection.

  • Page 41: Change The Mtu Size

    Insight Instant VPN Router BR500 Change the MTU size The maximum transmission unit (MTU) is the largest data packet a network device transmits. When one network device communicates across the Internet with another, the data packets travel through many devices along the way. If a device in the data path uses a lower MTU setting than the other devices, the data packets must be split or “fragmented”...

  • Page 42: Set Up And Manage Dynamic Dns

    Table 1. Common MTU sizes Application 1500 The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE or VPN and is the default value for NETGEAR routers, adapters, and switches. 1492 Used in PPPoE environments. 1472 Maximum size to use for pinging.

  • Page 43: Set Up A New Dynamic Dns Account

    DNS service does not work because private addresses are not routed on the Internet. Note: If you use the router for VPN connections in an Insight managed network with the NETGEAR Insight mobile app or Cloud Portal, the router doesn’t require a static IP address and doesn’t need to use Dynamic DNS.

  • Page 44: Specify A Dns Account That You Already Created

    12. Follow the onscreen instructions to register for your NETGEAR Dynamic DNS service. Specify a DNS account that you already created If you already created a Dynamic DNS account with NETGEAR, No-IP, or Dyn, you can set up the router to use your account.

  • Page 45: Change The Dynamic Dns Settings

    Insight Instant VPN Router BR500 12. To verify that your Dynamic DNS service is enabled in the router, click the Show Status button. A message displays the Dynamic DNS status. Change the Dynamic DNS settings You can change the settings for your Dynamic DNS account.

  • Page 46: Chapter 3 Manage The Firewall And Security

    Manage the Firewall and Security The router comes with a built-in firewall that helps to protect your network from unwanted intrusions from the Internet and lets you control access to the Internet. This chapter includes the following sections: • Manage the basic firewall settings •...

  • Page 47: Manage The Basic Firewall Settings

    Insight Instant VPN Router BR500 Manage the basic firewall settings The basic firewall settings let you manage port scan protection and denial of service (DoS) protection, specify whether the router can respond to a ping from the WAN port, set up a DMZ server, and manage IGMP proxying, NAT filtering, and the application-level gateway (ALG) for the Session Initiation Protocol (SIP).

  • Page 48: Set Up A Default Dmz Server

    Insight Instant VPN Router BR500 7. Click the Apply button. Your settings are saved. Set up a default DMZ server A default DMZ server is helpful when you are using some Internet services and videoconferencing applications that are incompatible with Network Address Translation (NAT).

  • Page 49: Manage Igmp Proxying

    Insight Instant VPN Router BR500 6. Enter the LAN IP address of the computer that must function as the DMZ server. 7. Click the Apply button. Your settings are saved. Manage IGMP proxying IGMP proxying allows a computer or mobile device on the LAN to receive the multicast traffic it is interested in from the Internet.

  • Page 50: Manage The Sip Application-Level Gateway

    Insight Instant VPN Router BR500 applications from working. Open NAT provides a much less secured firewall but allows almost all Internet applications to work. Secured NAT is the default setting. To change the default NAT filtering settings: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 51: Allow Or Block Device Access To Your Network

    Insight Instant VPN Router BR500 To change the default SIP ALG setting: 1. Launch a web browser from a computer or mobile device that is connected to the router network. 2. Enter https://www.routerlogin.net. Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16.
  • Page 52 Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 53: Manage Network Access Control Lists

    Insight Instant VPN Router BR500 Manage network access control lists You can use access control to block or allow device access to your network. An access control list (ACL) functions with the MAC addresses of wired and mobile devices that can either access your entire network or are blocked from accessing your entire network.

  • Page 54: Add A Device To Or Remove It From The Blocked List

    Insight Instant VPN Router BR500 A table displays the detected device name, MAC address, and connection type of the devices that are not connected but allowed to access the network. 6. To add a device to the allowed list, do the following: a.

  • Page 55: Specify Keywords And Domains To Block Internet Sites

    Insight Instant VPN Router BR500 5. Click the View list of blocked devices not currently connected to the network link. A table displays the detected device name, MAC address, and connection type of the devices that are not connected and are blocked from accessing the network.

  • Page 56: Specify A Trusted Device

    Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 57: Remove A Keyword Or Domain From The Blocked List

    Insight Instant VPN Router BR500 To specify a trusted device: 1. Launch a web browser from a computer or mobile device that is connected to the router network. 2. Enter https://www.routerlogin.net. Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16.

  • Page 58: Remove All Keywords And Domains From The Blocked List

    Insight Instant VPN Router BR500 3. Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive.

  • Page 59: Block Specific Services And Applications From The Internet

    Insight Instant VPN Router BR500 6. Click the Apply button. Your settings are saved. Block specific services and applications from the Internet You can add service blocking rules to prevent access from your LAN to specific services and applications on the Internet. In addition, you can specify if a blocking rule applies to one user, a range of users, or all users on your LAN.

  • Page 60: Add A Service Blocking Rule For A Custom Service Or Application

    Insight Instant VPN Router BR500 • Per Schedule. Use keyword blocking according to a schedule that you set. For more information, see Set up a schedule for blocking on page 64. • Always. Use keyword blocking continuously. 6. Click the Add button.
  • Page 61 Insight Instant VPN Router BR500 To add service blocking rule for a custom service or application: 1. Find out which protocol and port number or range of numbers the service or application uses. You can usually find this information by contacting the publisher of the service or application or through online user or news groups.

  • Page 62: Change A Service Blocking Rule

    Insight Instant VPN Router BR500 • Ending Port. In the field, enter one of the following: If the service or application uses a range of ports, enter the end port for the range. If the service or application uses a single port, repeat the port number that you entered in the Starting Port field.

  • Page 63: Remove A Service Blocking Rule

    Insight Instant VPN Router BR500 4. Select ADVANCED > Security > Block Services. The Block Services page displays. 5. In the Service Table, select the radio button for the rule. 6. Click the Edit button. The Edit Services Blocking slide-out panel opens.

  • Page 64: Set Up A Schedule For Blocking

    Insight Instant VPN Router BR500 7. Click the OK button. The rule is removed from the Service Table. Custom rules are deleted. Set up a schedule for blocking You can set up a schedule that you can apply to keyword and domain blocking, Internet service and application blocking, or both.

  • Page 65: Manage Custom Firewall Traffic Rules

    Insight Instant VPN Router BR500 6. From the Time Zone menu, select your time zone. 7. If you live in an area that observes daylight saving time, select the Automatically adjust for daylight savings time check box. Note: If the router synchronized its internal clock with a time server on the Internet and you selected the correct time zone, the Current Time field displays the correct date and time.
  • Page 66 Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 67: Change A Firewall Traffic Rule

    Insight Instant VPN Router BR500 9. Specify the destination or destinations to which the traffic must be sent by doing the following: a. Select a Destination Zone radio button: • Device (input). The traffic must be sent to the computer or mobile device that you are currently using.

  • Page 68: Remove A Traffic Rule

    Insight Instant VPN Router BR500 A login window opens. 3. Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive.

  • Page 69: Remove Several Or All Traffic Rules From The Firewall

    Insight Instant VPN Router BR500 5. In the table, click the red trash can icon for the rule. A warning pop-up window opens. 6. Click the OK button. The rule is removed from the table. Remove several or all traffic rules from the firewall You can simultaneously remove several or all traffic rules from the firewall.

  • Page 70: Chapter 4 Manage The Lan And Vlan Settings

    Manage the LAN and VLAN Settings This chapter describes how you can manage the local area network (LAN) and virtual LAN (VLAN) settings of the router. The chapter includes the following sections: • Change the router network device name • Manage the default IP address settings and LAN subnets •...

  • Page 71: Change The Router Network Device Name

    Insight Instant VPN Router BR500 Change the router network device name The router’s default network device name is the router model number (BR500). This device name displays in, for example, a file manager when you browse your network. To change the router network device name: 1.

  • Page 72: Change The Lan Ip Address Settings For A Lan Subnet

    Insight Instant VPN Router BR500 Change the LAN IP address settings for a LAN subnet The router is preconfigured to use private IP addresses on the LAN side and to act as a DHCP server. The router’s LAN IP configuration for the default LAN subnet (LAN1) is as follows: •...

  • Page 73: Manage The Dhcp Server Address Pool For A Lan Subnet

    Insight Instant VPN Router BR500 6. In the IP Address fields, enter the LAN IP address. If you change the IP address for the default LAN subnet (LAN1), the LAN IP address for the router changes. 7. In the IP Subnet Mask fields, enter the LAN subnet mask.

  • Page 74: Disable The Dhcp Server For A Lan Subnet

    Insight Instant VPN Router BR500 The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive. The Dashboard displays.

  • Page 75: Manage The Router Information Protocol Settings

    Insight Instant VPN Router BR500 To disable the DHCP server for a LAN subnet: 1. Launch a web browser from a computer or mobile device that is connected to the router network. 2. Enter https://www.routerlogin.net. Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16.

  • Page 76: Add A Lan Subnet

    Insight Instant VPN Router BR500 The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive. The Dashboard displays.
  • Page 77 Insight Instant VPN Router BR500 3. Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive.

  • Page 78: Remove A Lan Subnet

    Insight Instant VPN Router BR500 Remove a LAN subnet If you no longer need a LAN subnet, you can remove it. Before you remove it, make sure that no clients are connected to the LAN subnet. You cannot remove the default LAN subnet (LAN1).

  • Page 79: Manage Vlans

    Insight Instant VPN Router BR500 Manage VLANs The router supports virtual LANs (VLANs). This section describes how you can manage them. VLAN concepts You can define a local area network (LAN) as a broadcast domain. Hubs, bridges, switches, and WiFi access points in the same physical segment or segments connect all end nodes.

  • Page 80: Management Vlan Concepts

    Insight Instant VPN Router BR500 VLAN, you can assign a single VLAN ID only as the port VLAN identifier (PVID). By default, all four LAN ports of the router are assigned to the default VLAN, or VLAN 1, and all untagged traffic is routed through the default VLAN.

  • Page 81: Add A Vlan

    Insight Instant VPN Router BR500 Another potential benefit is that a management VLAN can help you minimize the impact of a broadcast storm on other VLANs by giving you a separate path to access your network. On the router, the management VLAN (VLAN 1) is also the native or default VLAN. By default, all ports are members of the default VLAN.

  • Page 82: Change A Vlan

    Insight Instant VPN Router BR500 The VLAN page displays. 5. Click the Add button. The Add VLAN slide-out panel opens. 6. In the VLAN ID field, enter a VLAN ID. The ID must be in the range from 3 to 4094. (IDs 1 and 2 are already in use.) 7.

  • Page 83: Change The Pvid For A Lan Port

    Insight Instant VPN Router BR500 The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive. The Dashboard displays.

  • Page 84: Remove A Vlan

    Insight Instant VPN Router BR500 5. Click the Ports tab. The Ports page displays. 6. From the menu for a LAN port, select another VLAN ID. 7. Click the Apply button. Your settings are saved. Remove a VLAN If you no longer need a VLAN, you can remove it. You cannot remove VLAN 1 and VLAN 2.

  • Page 85: Manage Reserved Lan Ip Addresses

    Insight Instant VPN Router BR500 Manage reserved LAN IP addresses When you specify a reserved IP address for a device on a LAN subnet, that device always receives the same IP address each time it accesses the router’s DHCP server on that LAN subnet.

  • Page 86: Change A Reserved Ip Address For A Lan Subnet

    Insight Instant VPN Router BR500 8. Click the Add button. The reserved address is entered into the Address Reservation table on the LAN Setup page for the LAN subnet. The reserved address is not assigned until the next time the computer or device contacts the router’s DHCP server.

  • Page 87: Remove A Reserved Ip Address Entry For A Lan Subnet

    Insight Instant VPN Router BR500 Remove a reserved IP address entry for a LAN subnet You can remove a reserved IP address entry that you no longer need. To remove a reserved IP address entry for a LAN subnet: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 88: Add An Ipv4 Static Route

    Insight Instant VPN Router BR500 • You use an ISDN router on your home network for connecting to the company where you are employed. This router’s address on your LAN is 192.168.1.100. • Your company’s network address is 134.177.0.0. When you first configured your router, two implicit static routes were created. A default route was created with your ISP as the gateway and a second static route was created to your local network for all 192.168.1.x addresses.

  • Page 89: Change An Ipv4 Static Route

    Insight Instant VPN Router BR500 5. Click the Add button. The Add IP Static Route slide-out panel opens. 6. In the Name field, enter a name for the route. The name is for identification purposes. 7. To make the route private, select the Private check box.

  • Page 90: Remove An Ipv4 Static Route

    Insight Instant VPN Router BR500 A login window opens. 3. Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive.

  • Page 91: Enable An Iptv Bridge For A Port Group Or Vlan Tag Group

    Insight Instant VPN Router BR500 5. In the Static Routes table, select the radio button for the route. 6. Click the Delete button. A warning pop-up window opens. 7. Click the OK button. The route is removed from the table on the Static Routes page.

  • Page 92: Enable An Iptv Bridge For A Vlan Tag Group

    Insight Instant VPN Router BR500 The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive. The Dashboard displays.
  • Page 93 Insight Instant VPN Router BR500 To enable the IPTV bridge for a VLAN tag group: 1. Launch a web browser from a computer or mobile device that is connected to the router network. 2. Enter https://www.routerlogin.net. Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16.

  • Page 94: Chapter 5 Optimize Performance

    Optimize Performance You can set up the router to dynamically optimize performance for sevices and applications such as Internet gaming, high-definition video streaming, and VoIP communication. This chapter includes the following sections: • Use Dynamic QoS to optimize Internet traffic management •...

  • Page 95: Use Dynamic Qos To Optimize Internet Traffic Management

    Insight Instant VPN Router BR500 Use Dynamic QoS to optimize Internet traffic management Dynamic Quality of Service (QoS) helps improve your router’s Internet traffic management capabilities through better application and device identification, bandwidth allocation, and traffic prioritization techniques. Dynamic QoS resolves traffic congestion when the Internet bandwidth is limited and different demands compete for bandwidth.

  • Page 96: Enable Or Disable The Automatic Update Of The Qos Database

    Insight Instant VPN Router BR500 6. To specify your Internet bandwidth, do one of the following (although we recommend that you use the automatic speed test): • Use the automatic speed test. Do the following: a. Make sure that the Let Speedtest detect my Internet bandwidth radio button is selected.

  • Page 97: Manually Update The Qos Database On The Router

    Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 98: Improve Network Connections With Universal Plug And Play

    Insight Instant VPN Router BR500 4. Select ADVANCED > QoS Setup. The QoS Setup page displays. The version and release date of the installed database display. 5. Click the Update Now button. The router checks for the newest version of the database and downloads it.
  • Page 99 Insight Instant VPN Router BR500 By default, this check box is selected. If the Turn UPnP On check box is cleared, the router does not allow any device to automatically control router resources, such as port forwarding. 6. Type the advertisement period in minutes.

  • Page 100: Chapter 6 Maintain The Router

    Maintain the Router This chapter describes how you can maintain the router by managing the firmware, configuration file, admin password, and logs and by setting up the traffic meter. The chapter includes the following sections: • Check for new firmware and update the router •...

  • Page 101: Check For New Firmware And Update The Router

    Insight Instant VPN Router BR500 Check for new firmware and update the router From time to time, or as needed, NETGEAR makes new firmware available. The firmware is stored in flash memory. To download new firmware manually and update your router: 1.

  • Page 102: Change The Admin Password

    Insight Instant VPN Router BR500 A warning pop-up window might open. 10. If a warning pop-up window opens, click the OK button. The current version and the version that you intend to upload display. 11. Click the Yes button. Warning: To avoid the risk of corrupting the firmware, do not interrupt the upload.

  • Page 103: Set Up Password Recovery

    Insight Instant VPN Router BR500 To set the password for the user name admin: 1. Launch a web browser from a computer or mobile device that is connected to the router network. 2. Enter https://www.routerlogin.net. Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16.

  • Page 104: Recover The Admin Password

    Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 105: Manage The Configuration File Of The Router

    Insight Instant VPN Router BR500 5. Click the Continue button. A window opens requesting the answers to your security questions. 6. Enter the saved answers to your security questions. 7. Click the Continue button. A window opens and displays your recovered password.

  • Page 106: Restore The Router Configuration Settings

    Insight Instant VPN Router BR500 The backup file ends in .cfg. 7. Follow the directions of your browser to save the file. Restore the router configuration settings If you backed up the configuration file, you can restore the configuration settings from this file.

  • Page 107: Return The Router To Its Factory Default Settings

    If you do not know the current IP address of the router, first try to use the NETGEAR Insight mobile app or an IP scanner application to detect the IP address. If you still cannot find the current IP address of the router, reset the router to factory default settings.

  • Page 108: Erase The Settings

    Insight Instant VPN Router BR500 Erase the settings Caution: This process erases all settings that you configured in the router. To erase the settings: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 109: Manage The Activity Log

    Insight Instant VPN Router BR500 Manage the activity log The log is a detailed record of the websites that users on your network accessed or attempted to access and many other router actions. You can manage which activities are logged.

  • Page 110: View Or Clear The Logs

    Insight Instant VPN Router BR500 6. Clear the check boxes that correspond to the activities that you do not want to be logged. 7. Click the Apply button. Your settings are saved. View or clear the logs In addition to viewing the logs, you can clear them.

  • Page 111: Monitor And Meter Internet Traffic

    Insight Instant VPN Router BR500 Monitor and meter Internet traffic Traffic metering allows you to monitor the volume of Internet traffic that passes through the router WAN port. With the traffic meter utility, you can set limits for traffic volume, set a monthly limit, and get a live update of traffic usage.

  • Page 112: Restrict Internet Traffic By Volume

    Insight Instant VPN Router BR500 Restrict Internet traffic by volume You can record and restrict the traffic by volume in MB. This is useful when your ISP measures your traffic volume. To record and restrict the Internet traffic by volume: 1.

  • Page 113: Restrict Internet Traffic By Connection Time

    Insight Instant VPN Router BR500 12. Select one or more of the following actions to occur when the limit is reached: • Turn the Internet LED to flashing green/amber. This setting is optional. When the traffic limit is reached, the Internet LED alternates blinking green and amber.

  • Page 114: View The Internet Traffic Volume And Statistics

    Insight Instant VPN Router BR500 The router must be connected to the Internet for you to be able to enter information in the Monthly Limit field. 8. In the Traffic Counter section, set the traffic counter to begin at a specific time and date.

  • Page 115: Unblock The Traffic Meter After The Traffic Limit Is Reached

    Insight Instant VPN Router BR500 4. Select ADVANCED > Traffic Meter. The Traffic Meter page displays. 5. Scroll down to the Internet Traffic Statistics section. The Internet Traffic Statistics section displays when the traffic counter was started and what the traffic balance is. The table displays information about the connection time and traffic volume in MB.
  • Page 116 Insight Instant VPN Router BR500 5. In the Traffic Control section, clear the Disconnect and disable the Internet connection check box. 6. Click the Apply button. Your settings are saved. Maintain the Router User Manual...

  • Page 117: Chapter 7 Monitor The Router And The Router Network

    Monitor the router and the router network This chapter describes how you can monitor the router and the router network. The chapter includes the following sections: • View devices currently on the network • Display the network map and VPN map •...

  • Page 118: View Devices Currently On The Network

    Insight Instant VPN Router BR500 View devices currently on the network You can view the active wired devices (also called attached devices) in the router network. To display the wired devices: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 119: Display The Network Map And Vpn Map

    Attention: VPN groups apply only to a router that functions in an Insight network. If you router is not managed by the NETGEAR Insight mobile app or Cloud Portal, no information displays on this page. If you router is managed by the NETGEAR Insight mobile app or Cloud Portal but no VPN groups are set up, no information displays on this page either.
  • Page 120 Insight Instant VPN Router BR500 To display the VPN groups and active VPN devices in the VPN network on an Insight managed router: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 121: Check The Internet Connection Status And Manage The Connection

    Consider the following VPN example for Insight managed routers with a site-to-site connection and a remote VPN client: • Site 1. An ISP assigns a BR500 router a public WAN IP address of 12.34.56.78, the router virtual IP address is 10.1.11.1, the router LAN subnet is 192.168.1.x, and a ReadyNAS storage device receives a DHCP-assigned IP address of 192.168.1.2.
  • Page 122 Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 123: Display The Port Statistics

    Insight Instant VPN Router BR500 Display the port statistics To display the port statistics: 1. Launch a web browser from a computer or mobile device that is connected to the router network. 2. Enter https://www.routerlogin.net. Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16.

  • Page 124: Display The Wan Traffic Processed On The Router

    • DHCP Status. Shows ON or OFF. The page also displays the router label, which allows you to add the router to an Insight network by using the scan option in the NETGEAR Insight mobile app. 4. Scroll down to the CURRENT STATUS pane.

  • Page 125: Monitor The Router Throughput

    Insight Instant VPN Router BR500 4. The CURRENT STATUS pane, click the WAN TRAFFIC tab. The WAN TRAFFIC pane displays, showing the total uploaded and downloaded WAN traffic that the router processed since it started or since you reset the traffic meter.

  • Page 126: Chapter 8 Set Up Vpn Connections

    For general information about NETGEAR Insight, visit netgear.com/insight. If you do not use NETGEAR Insight, you can use OpenVPN software to set up VPN connections and remotely access an office or site at which a NETGEAR BR500 router is installed.

  • Page 127: About Insight Vpn Connections

    The computer is the client, and the router is the gateway. If you are not using NETGEAR Insight and you want to allows users to access the router over a VPN connection, you must enable and configure OpenVPN service on the router.

  • Page 128: Enable And Configure Openvpn On The Router

    Insight Instant VPN Router BR500 If the router does not use a static WAN IP address, you can use a DDNS service for the router and register for an account with a host name (also referred to as a domain name).

  • Page 129: Install Openvpn Client Software On A Remote Client

    VPN client, or if a user cannot access some sites on the Internet, select another radio button. • All sites on the Internet & BR500 Network. The VPN client can access the Internet and all sites and services on the router network, that is, behind the router firewall.

  • Page 130: Install The Openvpn Client Utility And Vpn Configuration Files On A Windows-Based Computer

    Insight Instant VPN Router BR500 client can install this software on a Windows computer, Mac computer, iOS device, or Android device. Install the OpenVPN client utility and VPN configuration files on a Windows-based computer To download and install the OpenVPN client utility and the router’s VPN configuration files on a Windows-based computer: 1.

  • Page 131: Install The Openvpn Client Utility And Vpn Configuration Files On A Mac

    Insight Instant VPN Router BR500 9. Modify the VPN interface name to NETGEAR-VPN by doing the following: a. In Windows, open Network Connection or Network and Sharing Center. The network connection information displays. b. In the local area connection list, find the local area connection with the device name TAP-Windows Adapter.

  • Page 132: Install The Openvpn Client Utility And Vpn Configuration Files On An Ios Device

    Insight Instant VPN Router BR500 The Open VPN Service page displays. 6. Make sure that the Open VPN Service check box is selected. For more information, see Enable and configure OpenVPN on the router on page 128. 7. In the OpenVPN configuration package download section, click the For MacOSX button, and download the router’s VPN configuration files.

  • Page 133: Install The Openvpn Client Utility And Vpn Configuration Files On An Android Device

    Insight Instant VPN Router BR500 7. In the OpenVPN configuration package download section, click the For Smart Phone button, and download the router’s VPN configuration files to your iOS device or computer. If you download the configuration files to a computer, unzip the configuration files that you downloaded and send the files to your iOS device.
  • Page 134 Insight Instant VPN Router BR500 7. In the OpenVPN configuration package download section, click the For Smart Phone button, and download the router’s VPN configuration files to your Android device or computer. If you download the configuration files to a computer, unzip the configuration files that you downloaded and send the files to your Android device.

  • Page 135: Chapter 9 Manage Port Forwarding And Port Triggering Traffic Rules

    Manage Port Forwarding and Port Triggering Traffic Rules As an advanced function of the firewall, you can use port forwarding and port triggering to set up port traffic rules for Internet services and applications. These rules apply specifically to ports. You need networking knowledge to set up port traffic rules. This chapter includes the following sections: •...

  • Page 136: Manage Port Forwarding To A Local Server For Services And Applications

    Insight Instant VPN Router BR500 Manage port forwarding to a local server for services and applications If a server is part of your network, you can allow certain types of incoming traffic to reach the server. For example, you might want to make a local web server, FTP server, or game server visible and available to the Internet.

  • Page 137: Add A Port Forwarding Rule For A Custom Service Or Application

    Insight Instant VPN Router BR500 7. Make sure that the Port Forwarding radio button is selected. 8. From the Service Name menu, select the service or application. If the service or application that you want to add is not in the list, create a port forwarding rule with a custom service or application (see Add a port forwarding rule for a custom service or application on page 137).

  • Page 138: Change A Port Forwarding Rule

    Insight Instant VPN Router BR500 7. Click the Add Custom Service button. The Add Custom Services slide-out panel opens. 8. Set up a new port forwarding rule for a custom service or application by specifying the following settings: • Service Name. Enter the name of the custom service or application.

  • Page 139: Remove A Port Forwarding Rule

    Insight Instant VPN Router BR500 Your browser might display a security message, which you can ignore. For more information, see Log in to the local browser interface on page 16. A login window opens. 3. Enter the router user name and password.

  • Page 140: Application Example: Make A Local Web Server Public

    Insight Instant VPN Router BR500 The user name is admin. The password is the one that you specified when you set up your router. If you didn’t change the password, enter password. The user name and password are case-sensitive. The Dashboard displays.

  • Page 141: How The Router Implements A Port Forwarding Rule

    Insight Instant VPN Router BR500 How the router implements a port forwarding rule The following sequence shows the effects of a port forwarding rule: 1. When you enter the URL www.example.com in your browser, the browser sends a web page request message with the following destination information: •...

  • Page 142: Add A Port Triggering Rule

    Insight Instant VPN Router BR500 Note: If you use applications such as multiplayer gaming, peer-to-peer connections, real-time communications such as instant messaging, or remote assistance, enable Universal Plug-N-Play (UPnP, see Improve network connections with Universal Plug and Play on page 98).

  • Page 143: Change A Port Triggering Rule

    Insight Instant VPN Router BR500 Single address. Restricts the service to a particular computer. Enter the IP address in the Service IP fields, which become available with this selection from the menu. • Service Type. Select the protocol (TCP or UDP) that is associated with the service or application.

  • Page 144: Remove A Port Triggering Rule

    Insight Instant VPN Router BR500 The port triggering settings display. 6. In the Port Triggering Portmap Table, select the radio button for the service or application name. 7. Click the Edit Service button. The Edit Triggering Service slide-out panel opens.

  • Page 145: Specify The Time-Out For Port Triggering

    Insight Instant VPN Router BR500 A warning pop-up window opens. 8. Click the OK button. The rule is removed from the Port Triggering Portmap Table. If you want to reinstate the rule, you must redefine it. Specify the time-out for port triggering The time-out period for port triggering controls how long the inbound ports stay open when the router detects no activity.

  • Page 146: Disable Port Triggering

    Insight Instant VPN Router BR500 Disable port triggering By default, port triggering is enabled. You can disable port triggering temporarily without removing any port triggering rules. To disable port triggering: 1. Launch a web browser from a computer or mobile device that is connected to the router network.
  • Page 147 Insight Instant VPN Router BR500 you can tell the router, “When you initiate a session with destination port 6667, you must also allow incoming traffic on port 113 to reach the originating computer.” The following sequence shows the effects of this port triggering rule: 1.

  • Page 148: Chapter 10 Troubleshooting

    Troubleshooting This chapter provides information to help you diagnose and solve problems you might experience with your router. If you do not find the solution here, check the NETGEAR support site at netgear.com/support for product and contact information. The chapter contains the following sections: •...

  • Page 149: Reboot The Router From The Local Browser Interface

    Reboot the router from the local browser interface You or NETGEAR technical support can reboot the router from its local browser interface, either locally or remotely, for example, when the router seems to be unstable or is not operating normally.

  • Page 150: Check Ethernet Cable Connections

    You can troubleshoot by checking the LEDs. For complete information about the router LEDs, see the hardware installation guide, which you can download by visiting netgear.com/support/download/. Standard LED behavior when the router is powered on After you turn on power to the router, verify that the following sequence of events occurs: 1.

  • Page 151: Power Led Is Off

    • Make sure that the power adapter is securely connected to your router and securely connected to a working power outlet. • Make sure that you are using the power adapter that NETGEAR supplied for this product. Power LED stays amber When the router is turned on, the Power LED turns amber for up to two minutes and then turns green.

  • Page 152: You Cannot Log In To The Router

    • If your router’s IP address was changed and you do not know the current IP address, use the NETGEAR Insight mobile app or an IP scanner application to detect the IP address. If you still cannot find the IP address, clear the router’s configuration to factory defaults.

  • Page 153: You Cannot Access The Internet

    Insight Instant VPN Router BR500 You cannot access the Internet If you can access your router but not the Internet, check if the router can obtain an IP address from your Internet service provider (ISP). Check the WAN IP address Unless your ISP provides a fixed IP address, your router requests an IP address from the ISP.
  • Page 154 Insight Instant VPN Router BR500 If your router is still unable to obtain an IP address from the ISP, the problem might be one of the following: • Your Internet service provider (ISP) might require a login program. Ask your ISP whether they require PPP over Ethernet (PPPoE) or some other type of login.

  • Page 155: Troubleshoot Pppoe

    Insight Instant VPN Router BR500 Troubleshoot PPPoE If you are using PPPoE, try troubleshooting your Internet connection. To troubleshoot a PPPoE connection: 1. Launch a web browser from a computer or mobile device that is connected to the router network.

  • Page 156: Troubleshoot Internet Browsing

    Insight Instant VPN Router BR500 Troubleshoot Internet browsing If your router can obtain an IP address but your computer is unable to load any web pages from the Internet, check the following: • The traffic meter is enabled, and the limit was reached.

  • Page 157: Troubleshoot Your Network Using The Ping Utility Of Your Computer

    Insight Instant VPN Router BR500 Troubleshoot your network using the ping utility of your computer Most network devices and routers contain a ping utility that sends an echo request packet to the designated device. The device then responds with an echo reply. You can easily troubleshoot a network using the ping utility in your computer.

  • Page 158: Test The Path From Your Computer To A Remote Device

    Insight Instant VPN Router BR500 Test the path from your computer to a remote device To test the path from a Windows-based computer to a remote device: 1. From the Windows toolbar, click the Start button and select Run. 2. In the Windows Run window, type ping -n 10 <IP address>...

  • Page 159: Appendix A Supplemental Information

    Supplemental information This appendix includes technical information about your router. The appendix covers the following topics: • Factory settings • Technical specifications...

  • Page 160: Factory Settings

    Insight Instant VPN Router BR500 Factory settings You can reset the router to the factory default settings that are shown in the following table. For more information about resetting the router to its factory settings, see Return the router to its factory default settings on page 107.

  • Page 161: Technical Specifications

    Insight Instant VPN Router BR500 Table 2. Router factory default settings (Continued) Feature Default Settings Time adjusted for daylight saving Disabled time Firewall and WAN security Inbound (communications Disabled (except traffic on port 80, the HTTP port) coming in from the Internet)
  • Page 162 Insight Instant VPN Router BR500 Table 3. Router specifications Feature Description Data and routing protocols TCP/IP, RIP-1, RIP-2, DHCP, PPPoE, Dynamic DNS, and UPnP Power adapter (varies by region) North America, UK, Australia, and Europe: 100–240V, 50/60Hz universal input All regions: 5VDC @ 5A output Dimensions (W x D x H) Dimensions: 13 x 8.2 x 1.7 in.

Table of Contents