Aug 29

The WAN Setup screen lets you configure a DMZ (demilitarized zone) server, change the Maximum Transmit Unit (MTU) size, and enable the NETGEAR WNDR3400 wireless router to respond to a ping on the WAN (Internet) port. From the main menu, under Advanced, click WAN Setup to view the WAN Setup screen.


The WAN Setup fields are described in the following table:

Disable SPI Firewall:

The Stateful Packet Inspection (SPI) firewall protects your network and computers against attacks and intrusions. A stateful packet firewall carefully inspects incoming traffic packets, looking for known exploits such as malformed, oversized, or out-of-sequence packets. The firewall should be disabled only in special circumstances, such as when you are troubleshooting application issues.

Default DMZ Server

This feature is sometimes helpful when you are using some online games and videoconferencing. Be careful when using this feature because it makes the firewall security less effective.

Respond to Ping on Internet Port

If you want the wireless router to respond to a ping from the Internet, select this check box. This should be used only as a diagnostic tool, since it allows your netgear wireless router to be discovered. Do not select this check box unless you have a specific reason to do so.

MTU Size (in bytes)

The normal MTU (Maximum Transmit Unit) value for most Ethernet networks is 1500 bytes, or 1492 Bytes for PPPoE connections. For some ISPs you might need to reduce the MTU. This is rarely required, and should not be done unless you are sure it is necessary for your ISP connection.

NAT Filtering

Network Address Translation (NAT) determines how the router processes inbound traffic. Secured NAT provides a secured firewall to protect the computers on the LAN from attacks from the Internet, but might prevent some Internet games, point-to-point applications, or multimedia applications from functioning. Open NAT provides a much less secured firewall, but allows almost all Internet applications to function.

Disable SIP ALG

Select this feature if you have a SIP (Session Initiation Protocol) telephone or other SIP base devices, and you want them to communicate with other people. If you have been unable to build a successful SIP connection, selecting this check box allows for such a connection without compromising other SIP ALG (Application-level gateway) firewall settings, such as Disable SPI Firewall. If you are not using SIP devices, leave this check box unchecked.

Setting Up a Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and videoconferencing applications that are incompatible with Network Address Translation (NAT). The NETGEAR WNDR3400 router is programmed to recognize some of these applications and to work correctly with them, but there are other applications that might not function well. In some cases, one local computer can run the application correctly if that computer’s IP address is entered as the default DMZ server.

Warning: DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the firewall and is exposed to exploits from the Internet. If compromised, the DMZ server computer can be used to
attack other computers on your network.

Incoming traffic from the Internet is usually discarded by the router unless the traffic is a response to one of your local computers or a service that you have configured in the Port Forwarding/Port Triggering screen. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the default DMZ server. The WAN Setup screen lets you configure a default DMZ server.

To assign a computer or server to be a default DMZ server:

1. Click the Default DMZ Server check box.

2. Type the IP address.

3. Click Apply.

Tags: , , ,

1 Comment

(Required, will not be published)