NETGEAR WGT624 v3 User manual

202-10090-03 v.15
December 2005
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
Phone 1-888-NETGEAR
Reference Manual for the
108 Mbps Wireless
Firewall Router
WGT624 v3

ii
© 2005 by NETGEAR, Inc. All rights reserved. December 2005.
Trademarks
NETGEAR is a trademark of Netgear, Inc.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Maximum Wireless Signal Rate Derived from IEEE Standard 802.11 Specifications
Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic,
building materials and construction, and network overhead, lower actual data throughput rate.
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to
radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
EN 55 022 Declaration of Conformance
This is to certify that the WGT624 v3 108 Mbps Wireless Firewall Router is shielded against the generation of radio
interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by
the application of EN 55 022 Class B (CISPR 22).

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
-iii
v3.0, December 2005
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das WGT624 v3 108 Mbps Wireless Firewall Router gemäß der im BMPT-AmtsblVfg
243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte
(z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der
Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Certificate of the Manufacturer/Importer
It is hereby certified that the WGT624 v3 108 Mbps Wireless Firewall Router has been suppressed in accordance with
the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for
example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please see
the notes in the operating instructions.
Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the second category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas.
When used near a radio or TV receiver, it may become the cause of radio interference.
Read instructions for correct handling.
Customer Support
Refer to the Support Information Card that shipped with your WGT624 v3 108 Mbps Wireless Firewall Router.
World Wide Web
NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL)
http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer
or Netscape are required.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
-iv
v3.0, December 2005
Product and Publication Details
Model Number: WGT624 v3
Publication Date: December 2005
Product Family: router
Product Name: WGT624 v3 108 Mbps Wireless Firewall Router
Home or Business Product: Home
Language: English
Publication Part Number: 202-10090-03 v.15

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
-v
v3.0, December 2005
Contents
Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
Chapter 1
About This Manual
Audience, Scope, Conventions, and Formats ................................................................1-1
How to Use This Manual ................................................................................................1-2
How to Print this Manual .................................................................................................1-2
Chapter 2
Introduction
Key Features ..................................................................................................................2-1
802.11g Wireless Networking ...................................................................................2-2
A Powerful, True Firewall with Content Filtering ......................................................2-2
Security ....................................................................................................................2-3
Autosensing Ethernet Connections with Auto Uplink ...............................................2-3
Extensive Protocol Support ......................................................................................2-4
Easy Installation and Management ..........................................................................2-4
Maintenance and Support ........................................................................................2-5
Package Contents ..........................................................................................................2-5
The Router’s Front Panel .........................................................................................2-6
The Router’s Rear Panel .........................................................................................2-7
Chapter 3
Connecting the Router to the Internet
Initial Configuration .........................................................................................................3-1
Logging Into Your Router ................................................................................................3-4
Changing Your Configuration ..........................................................................................3-6
Internet Settings .......................................................................................................3-6
Using the Smart Setup Wizard .....................................................................................3-10
NETGEAR Product Registration, Support, and Documentation ...................................3-11

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
-vi
v3.0, December 2005
Chapter 4
Content Filtering
Trend Micro Home Network Security ..............................................................................4-1
Service Settings .......................................................................................................4-2
Parental Controls .....................................................................................................4-3
Blocking Access to Internet Sites ...................................................................................4-8
Blocking Access to Internet Services .............................................................................4-9
Configuring a User Defined Service .......................................................................4-10
Configuring Services Blocking by IP Address Range ............................................4-11
Scheduling When Blocking Will Be Enforced ...............................................................4-11
Configuring E-Mail Alert and Web Access Log Notifications ........................................4-12
Viewing Logs of Web Access or Attempted Web Access .............................................4-14
Chapter 5
Wireless Configuration
Observing Performance, Placement, and Range Guidelines .........................................5-1
Implementing Appropriate Wireless Security .................................................................5-2
Understanding Wireless Settings ...................................................................................5-3
Information to Gather Before Changing the Wireless Settings ................................5-8
Default Factory Settings ...........................................................................................5-9
How to Set Up and Test Basic Wireless Connectivity ............................................5-10
How to Configure WEP ..........................................................................................5-11
How to Configure WPA-PSK/WPA2-PSK Wireless Security ........................................5-14
How to Restrict Wireless Access by MAC Address ...............................................5-15
Chapter 6
Maintenance
Viewing Wireless Router Status Information ...................................................................6-1
Viewing a List of Attached Devices .................................................................................6-4
Upgrading the Router Software ......................................................................................6-4
Configuration File Management .....................................................................................6-6
Backing Up and Restoring the Configuration ...........................................................6-6
Erasing the Configuration .........................................................................................6-7
Changing the Administrator Password ...........................................................................6-7
Chapter 7
Advanced Configuration
Configuring Port Forwarding to Local Servers ................................................................7-1

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
-vii
v3.0, December 2005
Adding a Port Forwarding Custom Service ..............................................................7-2
Editing or Deleting a Port Forwarding Entry .............................................................7-2
Local Web and FTP Server Example .......................................................................7-3
Network Computer Gaming Example .......................................................................7-3
Using Port Triggering ......................................................................................................7-4
Port Triggering Menu ...............................................................................................7-5
Configuring WAN Setup Options ....................................................................................7-7
Respond to a Ping on the Internet WAN Port ..........................................................7-8
Setting the MTU Size ...............................................................................................7-8
Using a Dynamic DNS Service .......................................................................................7-9
Using LAN IP Setup Options ........................................................................................7-11
Using the Router as a DHCP Server ......................................................................7-13
Using Address Reservation ....................................................................................7-14
How to Configure Static Routes ....................................................................................7-15
Enabling Remote Management Access .......................................................................7-17
Using Universal Plug and Play (UPnP) ........................................................................7-18
Chapter 8
Troubleshooting
Basic Functioning ...........................................................................................................8-1
Power LED Not On ...................................................................................................8-2
LEDs Never Turn Off ................................................................................................8-2
Local or Internet Port LEDs Not On .........................................................................8-2
Troubleshooting the Web Configuration Interface ..........................................................8-3
Troubleshooting the ISP Connection ..............................................................................8-4
Troubleshooting a TCP/IP Network Using a Ping Utility .................................................8-5
Testing the LAN Path to Your Router .......................................................................8-5
Testing the Path from Your Computer to a Remote Device .....................................8-6
Restoring the Default Configuration and Password ........................................................8-7
Problems with Date and Time .........................................................................................8-7
Appendix A
Technical Specifications
Appendix B
Related Documents

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
-viii
v3.0, December 2005

About This Manual 1-1
v3.0, December 2005
Chapter 1
About This Manual
This chapter describes the intended audience, scope, conventions, and formats of this manual.
Audience, Scope, Conventions, and Formats
This reference manual assumes that the reader has basic to intermediate computer and Internet
skills. However, Appendix B, “Related Documents” contains links to articles and tutorials on the
NETGEAR Web site about basic computer network, Internet, firewall, and VPN technologies.
This guide uses the following typographical conventions:
This guide uses the following formats to highlight special messages:
Table 1-1. Typographical Conventions
italics Emphasis, books, CDs, URL names
bold User input
fixed Screen text, file and server names, extensions, commands, IP addresses
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
1-2 About This Manual
v3.0, December 2005
This manual is written for the WGT624 v3 wireless router according to these specifications:
How to Use This Manual
The HTML version of this manual includes the following:
• Buttons, and , for browsing forwards or backwards through the manual one page
at a time.
• A button that displays the table of contents. Double-click on a link in the table of
contents to navigate directly to where the topic is described in the manual.
• A button to access the full NETGEAR, Inc. online knowledge base for the product
model.
• Links to PDF versions of the full manual and individual chapters.
How to Print this Manual
To print this manual you can choose one of the following several options, according to your needs:
•Printing a Page in the HTML View.
Each page in the HTML version of the manual is dedicated to a major topic. Use the Print
button on the browser toolbar to print the page contents.
•Printing a Chapter.
Use the PDF of This Chapter link at the top left of any page.
Table 1-2. Manual Scope
Product Version WGT624 v3 108 Mbps Wireless Firewall Router
Manual Publication Date December 2005
Note: Product updates are available on the NETGEAR, Inc. Web site at
http://kbserver.netgear.com/products/WGT624 v3.asp

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
About This Manual 1-3
v3.0, December 2005
– Click the PDF of This Chapter link at the top right of any page in the chapter you want to
print. The PDF version of the chapter you were viewing opens in a browser window.
– Click the print icon in the upper left of the window.
•Printing the Full Manual.
Use the Complete PDF Manual link at the top left of any page.
– Click the Complete PDF Manual link at the top left of any page in the manual. The PDF
version of the complete manual opens in a browser window.
– Click the print icon in the upper left of the window.
Note: Your computer must have the free Adobe Acrobat reader installed in order
to view and print PDF files. The Acrobat reader is available on the Adobe
Web site at http://www.adobe.com.
Tip: If your printer supports printing two pages on a single sheet of paper, you
can select this feature to save paper and printer ink.
Tip: If your printer supports printing two pages on a single sheet of paper, you
can select this feature to save paper and printer ink.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
1-4 About This Manual
v3.0, December 2005

Introduction 2-1
v3.0, December 2005
Chapter 2
Introduction
Congratulations on your purchase of the NETGEAR®WGT624 v3 108 Mbps Wireless Firewall
Router. The WGT624 v3 wireless router provides connection for multiple computers to the
Internet through an external broadband access device (such as a cable modem or DSL modem) that
is normally intended for use by a single computer. This chapter describes the features of the
NETGEAR WGT624 v3 108 Mbps Wireless Firewall Router.
Key Features
The WGT624 v3 108 Mbps Wireless Firewall Router with 4-port switch connects your local area
network (LAN) to the Internet through an external access device such as a cable modem or DSL
modem.
The WGT624 v3 wireless router provides you with multiple web content filtering options, plus
browsing activity reporting and instant alerts via e-mail. Parents and network administrators can
establish restricted access policies based on time-of-day, web site addresses and address keywords,
and share high-speed cable/DSL Internet access for up to 253 computers. In addition to the
Network Address Translation (NAT) feature, the built-in firewall protects you from hackers.
With minimum setup, you can install and use the router within minutes.
The WGT624 v3 wireless router provides the following features:
• 802.11g wireless networking, with the ability to operate in 802.11g-only, 802.11-turbo-g-only,
or 802.11b+g modes.
• Trend Micro Home Network Security Services to address the unique security needs of
computers accessing the Internet via home routers. (Microsoft Internet Explorer V 5.5 or
higher with ActiveX support is required.)
• Easy, web-based setup for installation and management.
• Content Filtering and Site Blocking Security.
• Built in 4-port 10/100 Mbps Switch.
• Ethernet connection to a wide area network (WAN) device, such as a cable modem or DSL
modem.
• Extensive Protocol Support.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
2-2 Introduction
v3.0, December 2005
• Login capability.
• Front panel LEDs for easy monitoring of status and activity.
• Flash memory for firmware upgrade.
802.11g Wireless Networking
The WGT624 v3 wireless router includes an 802.11g wireless access point, providing continuous,
high-speed 108 Mbps access between your wireless and Ethernet devices. The access point
provides:
• 802.11g wireless networking at up to 108 Mbps.
• 802.11g wireless networking, with the ability to operate in 802.11g-only, 802.11b-only, or
802.11g and b modes, providing backwards compatibility with 802.11b devices or dedicating
the wireless network to the higher bandwidth 802.11g devices.
• 64-bit and 128-bit WEP (Wired Equivalent Privacy) encryption security.
• WEP keys can be generated manually or by passphrase.
• WPA-PSK and WPA2-PSK (Wi-Fi Protected Access - Pre Shared Key) support. Support for
WPA data encryption which provides strong data encryption and authentication based on a
pre-shared key.
• Wireless access can be restricted by MAC address.
• Wireless network name broadcast can be turned off so that only devices that have the network
name (SSID) can connect.
A Powerful, True Firewall with Content Filtering
Unlike simple Internet sharing NAT routers, the WGT624 v3 is a true firewall, using stateful
packet inspection to defend against hacker attacks. Its firewall features include:
• Denial of Service (DoS) protection.
Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND
Attack, and IP Spoofing.
• Blocks unwanted traffic from the Internet to your LAN.
• Blocks access from your LAN to Internet locations or services that you specify as off-limits,
including Parental Controls provided by Trend Micro Home Network Security Services
(Microsoft Internet Explorer V 5.5 or higher with ActiveX support is required).
• Logs security incidents.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
Introduction 2-3
v3.0, December 2005
The WGT624 v3 will log security events such as blocked incoming traffic, port scans, attacks,
and administrator logins. You can configure the router to email the log to you at specified
intervals. You can also configure the router to send immediate alert messages to your email
address or email pager whenever a significant event occurs.
• The WGT624 v3 prevents objectionable content from reaching your computers. The router
allows you to control access to Internet content by screening for keywords within web
addresses. You can configure the router to log and report attempts to access objectionable
Internet sites.
Security
The WGT624 v3 wireless router is equipped with several features designed to maintain security, as
described in this section.
• Computers Hidden by NAT
NAT opens a temporary path to the Internet for requests originating from the local network.
Requests originating from outside the LAN are discarded, preventing users outside the LAN
from finding and directly accessing the computers on the LAN.
• Port Forwarding with NAT
Although NAT prevents Internet locations from directly accessing the computers on the LAN,
the router allows you to direct incoming traffic to specific computers based on the service port
number of the incoming request, or to one designated “DMZ” host computer. You can specify
forwarding of single ports or ranges of ports.
Autosensing Ethernet Connections with Auto Uplink
With its internal 4-port 10/100 switch, the WGT624 v3 can connect to either a 10 Mbps standard
Ethernet network or a 100 Mbps Fast Ethernet network. Both the LAN and WAN interfaces are
autosensing and capable of full-duplex or half-duplex operation.
The router incorporates Auto UplinkTM technology. Each Ethernet port will automatically sense
whether the Ethernet cable plugged into the port should have a ‘normal’ connection such as to a
computer or an ‘uplink’ connection such as to a switch or hub. That port will then configure itself
to the correct configuration. This feature also eliminates the need to worry about crossover cables,
as Auto Uplink will accommodate either type of cable to make the right connection.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
2-4 Introduction
v3.0, December 2005
Extensive Protocol Support
The WGT624 v3 wireless router supports the Transmission Control Protocol/Internet Protocol
(TCP/IP) and Routing Information Protocol (RIP). For further information about TCP/IP, see
“Internet Networking and TCP/IP Addressing” in Appendix B.
• IP Address Sharing by NAT
The WGT624 v3 wireless router allows several networked computers to share an Internet
account using only a single IP address, which may be statically or dynamically assigned by
your Internet service provider (ISP). This technique, known as NAT, allows the use of an
inexpensive single-user ISP account.
• Automatic Configuration of Attached Computers by DHCP
The WGT624 v3 wireless router dynamically assigns network configuration information,
including IP, gateway, and domain name server (DNS) addresses, to attached computers on the
LAN using the Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies
configuration of computers on your local network.
• DNS Proxy
When DHCP is enabled and no DNS addresses are specified, the router provides its own
address as a DNS server to the attached computers. The router obtains actual DNS addresses
from the ISP during connection setup and forwards DNS requests from the LAN.
• PPP over Ethernet (PPPoE)
PPPoE is a protocol for connecting remote hosts to the Internet over a DSL connection by
simulating a dial-up connection. This feature eliminates the need to run a login program such
as Entersys or WinPOET on your computer.
Easy Installation and Management
You can install, configure, and operate the WGT624 v3 108 Mbps Wireless Firewall Router within
minutes after connecting it to the network. The following features simplify installation and
management tasks:
• Browser-based management.
Browser-based configuration allows you to easily configure your router from almost any type
of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is
provided and online help documentation is built into the browser-based web Management
Interface.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
Introduction 2-5
v3.0, December 2005
• Smart Wizard.
The WGT624 v3 wireless router Smart Wizard automatically senses the type of Internet
connection, asking you only for the information required for your type of ISP account.
• Firmware Auto-Update.
The WGT624 v3 wireless router automatically checks the Internet to see if a newer version of
firmware is available. If so, it asks you if you want to install the upgrade. This lets you take
advantage of product enhancements for your WGT624 v3 as soon as they become available.
• Visual monitoring.
The WGT624 v3 wireless router’s front panel LEDs provide an easy way to monitor its status
and activity.
Maintenance and Support
NETGEAR offers the following features to help you maximize your use of the WGT624 v3
wireless router:
• Flash memory for firmware upgrade
• Free technical support seven days a week, twenty-four hours a day
Package Contents
The product package should contain the following items:
• WGT624 v3 108 Mbps Wireless Firewall Router.
•ACpoweradapter.
• Vertical stand.
• Category 5 (CAT5) Ethernet cable.
•108 Mbps Wireless Router WGRT624 v3 Resource CD, including:
— Application Notes and other helpful information.
• 108 Mbps Wireless Firewall Router WGT624 Installation Guide.
• Registration and Warranty Card.
• Support Information Card.
If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the
carton, including the original packing materials, in case you need to return the router for repair.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
2-6 Introduction
v3.0, December 2005
The Router’s Front Panel
The front panel of the WGT624 v3 wireless router contains the status LEDs described below.
You can use some of the LEDs to verify connections. Viewed from left to right, Table 2-1
describes the LEDs on the front panel of the router. These LEDs are green when lit.
Figure 2-1
Table 2-1. LED Descriptions
Label Activity Description
Power
On
Off Power is supplied to the router. Power is not supplied to the router.
Internet
On
Blink
The Internet (Wide Area Network) port has detected a link with an
attached device.
Data is being transmitted or received by the Internet port.
Wireless
On Indicates that the Wireless port is initialized.
Local
On (Green)
Blink (Green)
On (Amber)
Blink (Amber)
Off
The Local (LAN) port has detected link with a 100 Mbps device.
Data is being transmitted or received at 100 Mbps.
The Local port has detected link with a 10 Mbps device.
Data is being transmitted or received at 10 Mbps.
No link is detected on this port.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
Introduction 2-7
v3.0, December 2005
The Router’s Rear Panel
The rear panel of the WGT624 v3 wireless router contains the port connections listed below.
Viewed from left to right, the rear panel contains the following features:
• AC power adapter outlet
• Four Local (LAN) 10/100 Mbps Ethernet ports for connecting the router to the local
computers
• Internet (WAN) Ethernet port for connecting the router to a cable or DSL modem
• Factory Default Reset push button
• Wireless antenna
Figure 2-2

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
2-8 Introduction
v3.0, December 2005