NETGEAR PR60X Multi-Gigabit Dual WAN Pro Router Installation Guide

: June 13, 2024
: NETGEAR

Table of Contents

PR60X Multi-Gigabit Dual WAN Pro Router
Product Information:
Support and Community:
Regulatory Compliance:
Privacy Policy and Terms and Conditions:
Usage Instructions:

PR60X Multi-Gigabit Dual WAN Pro Router

Product Information:

The 10G/Multi-Gigabit Dual WAN Pro Router with Insight Cloud
Management is a high-performance router designed for professional
use. The model number of this router is PR60X. It is manufactured
by NETGEAR, Inc. and is based in San Jose, CA, USA. The router
offers advanced features such as dual WAN support and VLAN
management.

Support and Community:

To get your questions answered and access the latest downloads,
visit netgear.com/support. You can
also find helpful advice and engage with the NETGEAR Community at
community.netgear.com.

Regulatory Compliance:

For regulatory compliance information, including the EU
Declaration of Conformity, visit netgear.com/about/regulatory.
Please review the regulatory compliance document before connecting
the power supply.

Privacy Policy and Terms and Conditions:

NETGEAR’s Privacy Policy can be found at netgear.com/about/privacy- policy.
By using this device, you are agreeing to NETGEAR’s Terms and
Conditions, which can be accessed at netgear.com/about/terms-and- conditions.
If you do not agree with the terms and conditions, you may return
the device to your place of purchase within the return period.

Usage Instructions:

Chapter 2: Set Up and Access the Router

To set up the router with an Internet connection, follow these
steps:

Pre-onboard the router with Insight and plug-and-play.
Connect the router to the Internet.

Chapter 5: Manage the LAN and VLAN Settings

To manage the LAN and VLAN settings on the router, follow these
steps:

Understand VLAN concepts and basic VLAN concepts.
Configure the management VLAN.
Learn how the router uses VLANs and LANs.
Refer to an example of how the router processes traffic.

Note: The above instructions are just a summary. Please refer to
the complete user manual for detailed instructions on setting up
and managing the router.

User Manual
10G/Multi-Gigabit Dual WAN Pro Router with Insight Cloud Management
Model PR60X

August 2023 202-12670-01

NETGEAR, Inc. 350 E. Plumeria Drive San Jose, CA 95134, USA

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads.
You can also check out our NETGEAR Community for helpful advice at community.netgear.com.
Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy- policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Do not use this device outdoors. The PoE source is intended for intra building connection only.
Applicable to 6 GHz devices only: Only use the device indoors. The operation of 6 GHz devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems.
Trademarks © NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only.
Revision History

Publication Part Number
202-12670-01

Publish Date August 2023

Comments First publication.

Contents
Chapter 1 Introduction
Additional documentation………………………………………………………….9 How to manage the router…………………………………………………………9 About the device UI and NETGEAR Insight………………………………10 Chapter 2 Set Up and Access the Router
Pre-onboard the router with Insight and plug-and-play……………12 Set up the router with an Internet connection…………………………..12
Example of a router setup with a connection to a modem……13 Set up the router to connect to a modem…………………………….14 Set up the router to connect to the LAN of an existing router..15 Set up the router offline using a directly connected computer.17 Decide on the router management method……………………………..19 Insight remote management…………………………………………………….20 How Insight and the device UI interact with each other………..21 Credentials for the device UI………………………………………………..22 Add the router to NETGEAR Insight using the Cloud Portal….23 Add the router to NETGEAR Insight using the Insight app……25 Change the Insight management mode……………………………….26 Log in to the device UI……………………………………………………………..27 Chapter 3 Manage the Internet Settings for the WAN1 port
Manually configure a dynamic Internet connection for the WAN1 port………………………………………………………………………………………….30 Manually configure a static Internet connection for the WAN1 port………………………………………………………………………………………….32 Manually configure a PPPoE Internet connection for the WAN1 port………………………………………………………………………………………….34 Chapter 4 Set Up and Configure a Dual WAN Connection
About Dual WAN and WAN failover…………………………………………38 Configure dual WAN with a dynamic Internet connection for the WAN2 port………………………………………………………………………………39 Configure dual WAN with a static Internet connection for the WAN2 port………………………………………………………………………………………….42
3

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Configure dual WAN with a PPPoE Internet connection for the WAN2 port………………………………………………………………………………………….45 Configure dual WAN failover detection……………………………………48 Display the status of the dual-WAN interfaces………………………….50
Chapter 5 Manage the LAN and VLAN Settings
VLAN concepts………………………………………………………………………..54 Basic VLAN concepts……………………………………………………………54 Management VLAN……………………………………………………………..54 How the router uses VLANs and LANs………………………………….55 Example of how the router processes traffic…………………………56
VLANs and LANs………………………………………………………………………57 Add a VLAN profile………………………………………………………………57 Assign a VLAN to a LAN port………………………………………………..60 Change a VLAN profile…………………………………………………………62 Remove a VLAN profile………………………………………………………..63
Manage EEE, flow control, and link speed for ports………………….64 MAC address to IP address bindings………………………………………..66
Add a MAC-IP binding for a detected device……………………….66 Manually add a MAC-IP binding…………………………………………..67 Import a list with MAC-IP bindings……………………………………….68 Change a MAC-IP binding……………………………………………………70 Remove a MAC-IP binding…………………………………………………..71 Export a list with MAC-IP bindings………………………………………..72 Static routes……………………………………………………………………………..73 Add a static route…………………………………………………………………74 Change a static route…………………………………………………………..76 Remove a static route…………………………………………………………..77
Chapter 6 Manage the Firewall and Security
Manage protection for port scans, denial of service, and pings…79 Set up a DMZ server…………………………………………………………………80 Manage the SIP application-level gateway……………………………….81 Manage timeouts for TCP, UDP, and ICMP sessions…………………82 Manage VPN pass-through for tunnel protocols……………………….83 Firewall traffic rules…………………………………………………………………..85
Add a firewall traffic rule………………………………………………………86 Change a firewall traffic rule or its priority, or enable or disable the rule………………………………………………………………………………..88 Remove a traffic rule…………………………………………………………….89 Port forwarding………………………………………………………………………..90 Add a port forwarding rule…………………………………………………..91 Change, enable, or disable a port forwarding rule……………….92 Remove a port forwarding rule…………………………………………….94
4

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Application example: Make a local web server public………….95 Port triggering………………………………………………………………………….95
Add a port triggering rule……………………………………………………96 Change, enable, or disable a port triggering rule…………………98 Remove a port triggering rule………………………………………………99 Application example: Port triggering for Internet Relay Chat.100 Enable or disable UPnP………………………………………………………….101 Services, protocols, and port numbers…………………………………..102 Add a service……………………………………………………………………..103 Change a service……………………………………………………………….105 Remove a service……………………………………………………………….106 Schedules………………………………………………………………………………107 Add a schedule………………………………………………………………….108 Change a schedule…………………………………………………………….109 Remove a schedule……………………………………………………………110
Chapter 7 Monitor the Router and its Network
Display alarms, warnings, and notifications…………………………….113 Display the router connectivity, system, and port settings………114 Display devices attached to the router LAN ports…………………..116 Display the DHCP leases for a VLAN or add a MAC- IP binding..117 Display Ethernet traffic statistics for the WAN and LAN ports….119 Display, save, download, or clear the logs………………………………120 Display the status of site-to-site VPN tunnels…………………………..121
Chapter 8 Maintain the Router
Change the device name……………………………………………………….124 Manage the firmware of the router…………………………………………125
Let the router check for new firmware and update the firmware…………………………………………………………………………….125 Manually download firmware and update the router………….126 Manage the configuration file of the router…………………………….128 Back up the router configuration………………………………………..128 Restore the router configuration………………………………………..129 admin user account………………………………………………………………..130 Change the admin user account password…………………………131 Change the session time-out period…………………………………..132 Manage the admin password reset option and questions…..133 Reset the admin password…………………………………………………134 Set the time zone and daylight saving time…………………………….135 Set custom NTP servers………………………………………………………….136 Manage the syslog server settings………………………………………….137 Enable or disable UPnP………………………………………………………….139 Manage the LEDs…………………………………………………………………..140
5

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Reboot the router from the device UI……………………………………..141 Return the router to its factory default settings……………………….142
Use the device UI to reset the router………………………………….143 Use the Reset button to reset the router…………………………….144
Chapter 9 Manage IPSec VPN Tunnels
About IPSec VPN……………………………………………………………………146 IPSec VPN profiles………………………………………………………………….146
Predefined example IPSec VPN profiles for paid VPN services.147 Add an IPSec VPN profile…………………………………………………..148 Change an IPSec VPN profile……………………………………………..152 Remove an IPSec VPN profile……………………………………………..153 Site-to-site VPN settings…………………………………………………………154 Add a site-to-site IPSec VPN connection…………………………….154 Display the site-to-site VPN configurations or connect or disconnect a VPN tunnel…………………………………………………….159 Connect or disconnect a site-to-site VPN tunnel…………………160 Change a site-to-site VPN connection………………………………..161 Remove a site-to-site VPN connection………………………………..162 Example of a site-to-site VPN tunnel……………………………………….163
Chapter 10 Diagnostics and Troubleshooting
Check the Internet speed……………………………………………………….165 Ping the IP address or domain name of a device or network location………………………………………………………………………………….166 Look up a DNS domain name or IP address……………………………167 Trace a route………………………………………………………………………….168 Capture Ethernet packets………………………………………………………169 Sequence to restart the router network………………………………….171 Troubleshoot with the LEDs……………………………………………………172
Power LED remains off……………………………………………………….172 Power LED does not turn green………………………………………….173 Internet LED remains blinking amber or off………………………..173 Cloud LED does not light blue if you use NETGEAR Insight…174 A LAN LED is off while a device is connected……………………..175 You cannot log in to the device UI of the router……………………..175 Troubleshoot Internet browsing……………………………………………..176 Changes are not saved…………………………………………………………..176 Check the WAN port IP address……………………………………………..177 You enter the wrong password and can no longer log in to the router…………………………………………………………………………………….178 Troubleshoot the network using your computer’s ping utility….178 Test the LAN path to your router………………………………………..179 Test the path from your computer to a remote device………..179
6

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Appendix A Supplemental information Factory default settings………………………………………………………….182 Technical specifications………………………………………………………….184
7

1
Introduction
This manual is for the NETGEAR 10G/Multi-Gigabit Dual WAN Pro Router with Insight Cloud Management Model PR60X. Model PR60X is a router for small-to- medium sized businesses. This model provides features such as WAN redundancy, a basic firewall with the option to set up multiple traffic rules, IPSec site- to-site VPN, and VLAN capabilities with a DHCP server for each VLAN. Model PR60X is in this manual referred to as the router. This manual describes the router’s device user interface (UI). If you manage the router using the Insight Cloud Portal or Insight app, you can also use the device UI to manage the router. That is, these management methods are not mutually exclusive but complement each other. Changes to Insight are synchronized to the device UI, and the other way around, changes to the device UI are synchronized to Insight. This chapter contains the following sections: · Additional documentation · How to manage the router · About the device UI and NETGEAR Insight
Note: For more information about the topics that are covered in this manual, visit the support website at netgear.com/support/.
Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/. You can check for and download new firmware manually. If the features or behavior of your product does not match what is described in this manual, you might need to update the firmware.
8

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Additional documentation
The following documents are available at netgear.com/support/download/: · Installation guide · Hardware installation guide · Datasheet
Router management in NETGEAR Insight is described in the NETGEAR knowledge base. See kb.netgear.com/000065768.
How to manage the router
For NETGEAR Insight Premium and Insight Pro subscribers, the router supports the NETGEAR Insight Cloud Portal and Insight app:
· Insight Cloud Portal: Lets you configure and manage the router through the portal of the Insight cloud-based management platform.
· Insight app: Lets you configure and manage the router from your iOS or Android mobile device and connects to the Insight cloud-based management platform.
You can also manage the router with the device UI. Management through the Insight cloud-based management platform and management through the device UI are not mutually exclusive but complement each other. Changes to Insight are synchronized to the device UI, and the other way around, changes to the device UI are synchronized to Insight. You can manage and monitor the router using the following methods:
· Insight-only management: You use only the Insight Cloud Portal or Insight app. However, if you wish, at any time, you can change to the hybrid management method.
· Hybrid management: Overall network management and monitoring is through the Insight Cloud Portal or Insight app and some configuration and management tasks are performed through the device UI.
· Standalone management: You use the router as a standalone device in your network and manage and monitor the router using the device UI only. However, if you wish, at any time, you can change to the hybrid management method. (You can also completely disable Insight if you only want to use the device UI.)

Introduction

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
About the device UI and NETGEAR Insight
This user manual describes the router’s device user interface (UI), and tasks that you can perform using the device UI. For information about NETGEAR Insight subscriptions, visit netgear.com/business/services/insight/subscription and kb.netgear.com/000061848/. This manual does not describe NETGEAR Insight procedures, which are documented in the NETGEAR knowledge base. For knowledge base articles about NETGEAR Insight, visit kb.netgear.com/000065768. If you install the router as a NETGEAR Insight managed device and the Insight Mode is enabled, the settings for features that you can manage through the Insight Cloud portal and Insight app are automatically synchronized with the device UI, and the other way around. For more information, see How Insight and the device UI interact with each other on page 21.

Introduction

User Manual

2
Set Up and Access the Router
This chapter describes how you can connect the router to the Internet and how you can access and log in to the router, including basic setup information for Insight users and those who prefer to manage the router as a standalone device without Insight remote management. The chapter contains the following sections: · Pre-onboard the router with Insight and plug-and-play · Set up the router with an Internet connection · Decide on the router management method · Insight remote management · Log in to the device UI Note: The procedures that are described in this chapter are for a network setup in which you do not use the Insight Cloud Portal or Insight app to pre-onboard the router. If you are using the Insight Cloud Portal or Insight app to set up and manage the router, additional setup options are available to you. For knowledge base articles about NETGEAR Insight, visit kb.netgear.com/000065768.
11

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Pre-onboard the router with Insight and plug-and-play
We recommend that NETGEAR Insight subscribers use Insight to onboard and configure the router. See kb.netgear.com/000065773. Depending on the method that the ISP uses to assign an IP address, you can use the Insight Cloud Portal or Insight app to pre-onboard the router and then connect the router to the Internet at the local site. Insight configures the router, which then becomes operational so the basic setup is plug and play. After onboarding, you can optionally change the default configuration settings through the Insight Cloud Portal or Insight app, or through the device UI.
Set up the router with an Internet connection
If you are not an Insight user and prefer to use the device UI to onboard the router, you can set up the router as either a primary or secondary router:
· Primary router providing Internet access. If the router is the only router in your network, connect the router directly to a modem, such as a DSL or cable modem that is connected to the Internet, and set up the Internet connection. See Set up the router to connect to a modem on page 14.
· Secondary router connected to an existing LAN. If another router provides the Internet connection, connect the router to the LAN of the other router and set up the Internet connection of the router. See Set up the router to connect to the LAN of an existing router on page 15.
Note: You can also set up the router offline by manually configuring the router before you install it in your network either as a primary or secondary router. For more information, see Set up the router offline using a directly connected computer on page 17.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Example of a router setup with a connection to a modem
The following example figure shows the router connected to a modem that is connected to the Internet:

2.5G

4
2.5G

2 3
2.5G

2.5G

5
2.5G

6
2.5G

Figure 1. Example connections for a router setup with a connection to a modem

In this example, the following applies:
1. The WAN1 port of the router is connected to the modem, which is connected to the Internet.
2. Depending on the security settings, the wired desktop computer that is connected to the LAN1 port of the router can have access to the Internet.
3. The access point at the left side of the figure is connected to the LAN2 port of the router. Depending on the WiFi networks that are configured on the access point, the access point can provide Internet access to the mobile devices that are connected to it. The access point requires a power adapter because the router does not provide PoE.
4. A PoE switch is connected to the LAN3 port of the router.
5. The access point at the right side of the figure is connected to the PoE switch. Depending on the WiFi networks that are configured on the access point, the access point can provide Internet access to the mobile devices that are connected to the it. The access point does not require a power adapter because the switch provides PoE.
6. Depending on the security settings, the server that is connected to the switch can be accessible by users on the network.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Set up the router to connect to a modem
If the router is the only router in your network, connect the WAN1 port on the router directly to a modem, such as a DSL or cable modem that is connected to the Internet, and set up the Internet connection. After you physically connect the router, you can let the automated setup process configure your router automatically. Before you start, locate your Internet service provider (ISP) configuration information. For DSL service, you might need the following information to set up the Internet connection for your router:
· The ISP configuration information for your DSL account. · The ISP login name and password. · Fixed or static IP address setting (special deployment by the ISP; this setting is rare).
The automated setup process runs on a computer with a web browser. Installation and basic setup takes about 15 minutes to complete. To connect the router to a modem and use the automated setup process to automatically get an Internet connection: 1. Unplug the modem’s power, leaving the modem connected to the wall jack for your
Internet service. If the modem uses a battery backup, remove the battery.
2. Using an Ethernet cable, connect the modem to the yellow WAN1 port on the router. 3. Plug in and turn on the modem.
If the modem uses a battery backup, put the battery back in before you turn on the modem.
4. Power on the router and check that the Power LED is lit. The Power LED lights solid amber for about one minute. When the router is ready, the Power LED lights solid green.
5. Connect your computer with an Ethernet cable to any of the router’s LAN ports. Make sure that your computer is configured to obtain an IP address automatically using DHCP. This is the default configuration for most computers. The computer receives an IP address from the router.
Note: If you configure a WiFi access point and connect it directly to a LAN port on the router, you can also use a WiFi connection to set up the router. The router itself does not provide WiFi capability or Power over Ethernet (PoE), so, in such a setup, you must use a power supply or PoE switch to power the access point.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

6. Launch a web browser and enter https://www.routerlogin.net in the address field. You can also enter https://192.168.1.1, which is the default IP address of the router.
Your browser might display a security warning because of the self-signed certificate on the router, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see kb.netgear.com/000062980. The automated setup process starts.
When the router connects to the Internet, the Internet LED lights solid green.
7. Follow the prompts in the automated setup process to connect to the Internet. The automated setup process searches your Internet connection for servers and protocols to determine your Internet configuration.
8. You are also prompted to do the following: a. Set an admin password for local login.
b. Select the time zone where the router operates.
c. Update the router’s firmware if a new firmware version is available. Follow the prompts to update the router’s firmware. After you update the firmware, the router restarts.
When the router connects to the Internet, the Internet LED lights solid green.
9. If the router does not connect to the Internet, do the following: a. Make sure that the Ethernet cable connection is secure at the router’s yellow WAN1 port (do not use a LAN port for this connection) and at an Ethernet port on the modem.
b. Review your settings. Make sure that you selected the correct options and typed everything correctly.
c. Contact your ISP to verify that you are using the correct configuration information.
If problems persist, register your product and contact NETGEAR technical support.
Set up the router to connect to the LAN of an existing router
If another router provides the Internet connection, connect the router to the LAN of the existing router and set up the Internet connection for the router.
After you physically connect the router, you can let the automated setup process configure your router automatically. By default, the DHCP client of the router is enabled so that the router receives an IP address from the other router in your network.
The automated setup process runs on a computer with a web browser. Installation and basic setup takes about 15 minutes to complete.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
To connect the router to the LAN of an existing router and use the installation assistant to automatically get an Internet connection: 1. Using an Ethernet cable, connect the yellow WAN1 port on the router to a LAN port
on a switch or hub that is connected to the LAN of the other router. You can also connect the Ethernet cable directly to a LAN port on the other router.
2. Power on the router and check that the Power LED is lit. The Power LED lights solid amber for about one minute. When the router is ready, the Power LED lights solid green.
3. Connect your computer with an Ethernet cable to any of the router’s LAN ports. Make sure that your computer is configured to obtain an IP address automatically using DHCP. This is the default configuration for most computers. The computer receives an IP address from the router.
Note: If you configure a WiFi access point and connect it directly to a LAN port on the router, you can also use a WiFi connection to set up the router. The router itself does not provide WiFi capability or Power over Ethernet (PoE), so, in such a setup, you must use a power supply or PoE switch to power the access point.
4. Launch a web browser and enter https://www.routerlogin.net in the address field. You can also enter https://192.168.1.1, which is the default IP address of the router. Your browser might display a security warning because of the self-signed certificate on the router, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see kb.netgear.com/000062980. The automated setup process starts. When the router connects to the Internet, the Internet LED lights solid green.
5. Follow the prompts in the automated setup process to connect to the Internet. The automated setup process searches your Internet connection for servers and protocols to determine your Internet configuration.
6. You are also prompted to do the following: a. Set an admin password for local login. b. Select the time zone where the router operates. c. Update the router’s firmware if a new firmware version is available. Follow the prompts to update the router’s firmware. After you update the firmware, the router restarts.
When the router connects to the Internet, the Internet LED lights solid green.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

7. If the router does not connect to the Internet, do the following: a. Make sure that the Ethernet cable connection is secure at the router’s yellow WAN1 port (do not use a LAN port for this connection) and at an Ethernet port on the modem.
b. Review your settings. Make sure that you selected the correct options and typed everything correctly.
c. Contact your ISP to verify that you are using the correct configuration information.
If problems persist, register your product and contact NETGEAR technical support.

Set up the router offline using a directly connected computer
You can set up the router offline (that is, disconnected from your network and the Internet), connect a computer through an Ethernet cable to a router LAN port, and connect to the router over its default IP address. After you complete the configuration, you can bring the router online, that is, connect it to your network and the Internet.
Note: We recommend that you only follow this procedure if you are comfortable with manually configuring the Internet settings.
To connect to the router offline using a computer that is connected to a router LAN port:
1. Use an Ethernet cable to connect your computer to a router LAN port on the router. You can use any LAN port. Do not use the yellow WAN1 port.
2. Power on the router and check that the Power LED is lit. The Power LED lights solid amber for about one minute. When the router is ready, the Power LED lights solid green.
The computer receives an IP address from the router.
3. Launch a web browser and enter https://www.routerlogin.net in the address field. You can also enter https://192.168.1.1, which is the default IP address of the router.
Your browser might display a security warning because of the self-signed certificate on the router, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see https://kb.netgear.com/000062980. The automated setup process starts. Because the router is not connected to the Internet, the autodetection fails (this is expected behavior).
4. Select the No. Manually enter settings radio button, and click the Next button.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

A pop-up window displays.
5. Click the OK button. 6. You are prompted to do the following:
a. Set an admin password for local login. b. Select the time zone where the router operates.
7. After the automated setup process finishes, if the login page does not display, enter https://www.routerlogin.net in the address field. You can also enter https://192.168.1.1, which is the default IP address of the router.
Your browser might display a security warning because of the self-signed certificate on the router, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see kb.netgear.com/000062980. The login window displays.
8. Enter the router user name and password. The user name is admin. The password is the one that you set in Step 6. The user name and password are case-sensitive. The Dashboard displays.
9. Select WAN > Internet/WAN > WAN1. The Internet/WAN Setup page displays.
10. Select IPv4. The page displays the WAN options for the primary interface.
11. Configure the Internet settings. For more information, see Manage the Internet Settings for the WAN1 port on page 29.
12. Bring the router online by connecting it to your network and the Internet. 13. If the router does not connect to the Internet, do the following:
a. Make sure that the Ethernet cable connection is secure at the router’s yellow WAN1 port (do not use a LAN port for this connection) and at an Ethernet port on the modem or the switch or hub that is connected to the LAN of the other router.
b. Review your settings. Make sure that you selected the correct options and typed everything correctly.
c. If you use a modem, contact your ISP to verify that you are using the correct configuration information.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
If problems persist, register your product and contact NETGEAR technical support.
Decide on the router management method
The router provides management options (which are not mutually exclusive) that let you add the router to your network and configure, monitor, and control the router:
· NETGEAR Insight Cloud Portal: As an Insight Premium or Pro user, you can use the NETGEAR Insight Cloud Portal to set up (pre-onboard) the router with in an Insight network. (Whether you can use pre-onboarding depends on the method that the ISP uses to assign an IP address.) After the router is connected to the Internet, you can perform advanced remote management, remotely monitor the router, remotely analyze the router and network usage, receive push notifications from the router, and, if necessary, remotely troubleshoot the router and the network. The time zone and device password for the router are set to those of the Insight network location. For more information, see Add the router to NETGEAR Insight using the Cloud Portal on page 23.
· NETGEAR Insight mobile app: You can use the NETGEAR Insight mobile app to set up (pre-onboard) the router in an Insight network. (Whether you can use pre-onboarding depends on the method that the ISP uses to assign an IP address.) After the router is connected to the Internet, you can manage and monitor the router remotely from your mobile device, and receive push notifications from the router. The time zone and device password for the router are set to those of the Insight network location. For more information, see Add the router to NETGEAR Insight using the Insight app on page 25.
· Device UI: If you do not use the pre-onboarding options that are available though the Insight Cloud Portal and Insight app, you must access the device UI to set up the WAN (Internet) connection and other settings of the router. You can then continue to use the device UI to configure, monitor, and control the router as a standalone router, or you can use the hybrid management method in which you use the Insight Cloud Portal or Insight app and the device UI. Management through the Insight cloud-based management platform and management through the device UI are not mutually exclusive but complement each other. Changes to Insight are synchronized to the device UI, and the other way around, changes to the device UI are synchronized to Insight.
Note: NETGEAR Insight remote management offers additional features and add-on services that are not available if you only use the device UI.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
The router comes with Insight included. You can choose an Insight Premium or Insight Pro account. For more information, visit the following pages:
· netgear.com/business/services/insight/subscription/ · kb.netgear.com/000061848
Insight remote management
As a NETGEAR Insight Premium or Pro user, you can use NETGEAR Insight to pre- onboard the router. (Whether you can use pre-onboarding depends on the method that the ISP uses to assign an IP address.) After the router is connected to the Internet, you can remotely manage the router with the Insight Cloud portal or the Insight mobile app. The following example figure shows the router connected to a modem that is connected to both the Internet and the (purple) Netgear cloud:

1
2.5G

4
2.5G

2 3
2.5G

2.5G

5
2.5G

6
2.5G

Figure 2. Example connections for a router setup with Insight remote management through the Cloud Portal or Insight app

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
the access point can provide Internet access to the mobile devices that are connected to it. The mobile devices cam have access to the Insight Cloud Portal or have the Insight app installed. The access point requires a power adapter because the router does not provide PoE.
4. A PoE switch is connected to the LAN3 port of the router.
5. The access point at the right side of the figure is connected to the PoE switch. Depending on the WiFi networks that are configured on the access point, the access point can provide Internet access to the mobile devices that are connected to the it. The mobile devices can have access to the Insight Cloud Portal or have the Insight app installed. The access point does not require a power adapter because the switch provides PoE.
6. Depending on the security settings, the server that is connected to the switch can be accessible by users on the network.
How Insight and the device UI interact with each other
If you manage the router using the Insight Cloud Portal or Insight app, you can also still use the device UI to manage the router. That is, these management methods are not mutually exclusive but complement each other. Changes to Insight are synchronized to the device UI, and the other way around, changes to the device UI are synchronized to Insight.
Insight and the device UI interact with each other in the following ways:
· Insight Mode enabled: By default, Insight Mode is enabled in the device UI. When enabled, the Insight Mode can display one of the following states:
– Connected: You added the router to an Insight network location. You can use either Insight or the device UI to manage the router. The device UI and Insight are synchronized with each other. When you add the router to an Insight network location, any preexisting device UI configuration is overwritten by the configuration on the Insight cloud. For information about how Insight affects the router admin password, see Credentials for the device UI on page 22.
– Not Registered: You did not add the router to an Insight network location. The is the default setting for a standalone setup. Use the device UI to manage the router.
Note: When the Insight Mode is Not Registered, Insight background services on the router remain in contact with the Insight cloud-based management platform.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
– Disconnected: You added the router to an Insight network location but the router does not yet have a connection to the Insight cloud (usually the Disconnected state changes quickly to Connected), or the router no longer has communication with the Insight cloud. If the router lost its connection to the Insight cloud, the router cannot synchronize with Insight. Any changes that you make in Insight are no longer synchronized with the device UI. Although you still can use the device UI to manage the router, any changes that you make in the device UI are no longer synchronized with Insight either. We recommend that you do not use the device UI in the Disconnected state because the absence of synchronization could cause unexpected behavior after the communication with the Insight cloud is restored.
· Insight Mode disabled: You disabled the Insight Mode. No Insight background services run on the router and the router stops all contact with the Insight cloud-based management platform. The results depend on whether you added the router to an Insight network location:
– You want to use only the device UI: The Insight Mode is disabled and the router was not added to an Insight network location, so no Insight configuration exists for the router. Use the device UI to manage the router. If you later decide that you want to use the Insight Cloud Portal or Insight app, you can enable the Insight Mode.
– You already added the router to an Insight network location: The router does not synchronize with Insight. Any changes that you make in Insight are not synchronized with the device UI. Any changes that you make in the device UI are not synchronized with Insight either. We do not recommend this configuration because the absence of synchronization could cause unexpected behavior if you reenable Insight Mode.
Note: If you want to stop using Insight to manage the router, we recommend that you first remove the router from the Insight network location. The Insight Mode in the device UI returns to Not Registered.
For information about changing the Insight Mode, see Change the Insight management mode on page 26.
Credentials for the device UI
The information in this section applies to accessing the device UI. The way that you access the device UI depends on whether you onboard the router without using NETGEAR Insight, or if you onboarded it to NETGEAR Insight.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

To access the device UI, use one of the following credentials:
· You are using the device UI only: Use the router admin password. You can access the device UI with your router admin password. The first time that you access the device UI, enter the default router admin password (password), after which you are required to customize the password for greater security. Subsequent times that you log in to the device UI, use your customized router admin password.
· You are using both NETGEAR Insight and the device UI: Use the Insight network location password. NETGEAR Insight can affect how you access the router device UI. If you keep the Insight mode in the device UI enabled (the default setting), after you add the router to an Insight network location, the Insight network location password replaces the router admin password for the device UI. To access the device UI, you must then enter the Insight network location password. Even if you then disable the Insight mode in the device UI, you must continue to use the Insight network location password to access the device UI. However, you can change the password in the device UI (see Change the admin user account password on page 131). For information about how the Insight network password functions and for knowledge base articles about NETGEAR Insight, visit kb.netgear.com/000065768.
The following table lists the essential credential options for access to the device UI.

Table 1. Credentials for access to the device UI

Management mode in the device UI

Added to an Insight network Credentials

Insight Mode enabled

(the default setting)

Yes

Device admin password Insight network password

Insight Mode disabled

Device admin password

Yes1

Insight network password

1. This situation occurs if you disable the Insight mode after you already added the router to an Insight network location.

Add the router to NETGEAR Insight using the Cloud Portal
For Insight Pro users, one of the advantages of using the Insight Cloud Portal is that you can onboard multiple devices by entering the serial numbers and MAC addresses of the devices, or by uploading a device list as a CSV file.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Note: To onboard a single device, use the Insight app to scan the barcode or QR code. For more information see Add the router to NETGEAR Insight using the Insight app on page 25.
Your NETGEAR account is also your Insight account. Your NETGEAR account credentials let you log in as an Insight Premium user or Insight Pro user. If you do not already have an Insight account, you can create an account now. For information about creating an Insight Premium account or upgrading to an Insight Pro account, visit netgear.com/000044343. After the router is connected to the Internet, the router can communicate with the Insight cloud and you can add the router to an Insight managed network using the Insight Cloud Portal. To add the router to NETGEAR Insight using the Cloud Portal: 1. On a computer or tablet, visit https://insight.netgear.com. 2. Enter the email address and password for your NETGEAR account and click the
NETGEAR Sign In button. 3. Only if you are an Insight Pro user, select the organization to which you want to add
the router. 4. Add a new network location where you want to add the router, or select an existing
network location. 5. Click the + (Add Device) button.
Note: If you are an Insight Pro user, you can either add a single device or you can add multiple Insight managed devices by uploading a device list as a CSV file.
6. In the Add New Device pop-up page, enter the router’s serial number and MAC address, and then click Go. The serial number and MAC address are printed on the router label and displayed on the Dashboard in the device UI.
7. After Insight verifies that the router is a valid product, you can optionally change the device name of the router, and then click Next. When the router is successfully added to the portal, a page displays a confirmation that setup is in progress.
Note: If the router is online but Insight does not detect the router, a firewall at the physical location where the router is located might be preventing communication with the Insight cloud. In that situation, add port and DNS entries for outbound access to the firewall. For more information, see kb.netgear.com/000062467.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

The router automatically updates to the latest Insight firmware and Insight location configuration. This might take up to 10 minutes, during which time the router will restart.
The router is now an Insight managed device that is connected to the Insight cloud-based management platform. The Cloud LED lights solid blue.
You can now use the Insight Cloud portal or Insight app to configure and manage the router.
Add the router to NETGEAR Insight using the Insight app
Your NETGEAR account is also your Insight account. Your NETGEAR account credentials let you log in as an Insight Premium user, or if you upgrade to an Insight Pro account, as an Insight Pro user.
If you do not already have an Insight account, you can create an account now. For information about creating an Insight Premium account or upgrading to an Insight Pro account, visit kb.netgear.com/000044343.
After the router is connected to the Internet, the router can communicate with the Insight cloud and you can add the router to an Insight managed network using the Insight app.
To add the router to NETGEAR Insight using the Insight app:
1. Connect your mobile device to the same network to which the router is connected.
2. Open the NETGEAR Insight app.
3. Enter the email address and password for your account and tap LOG IN.
4. Add a new network location where you want to add the router by tapping the Next button, and then tapping OK. You can also select an existing network location.
The device admin password that you entered for the new network location replaces the existing admin password on all devices that you add to the network location.
In most situations, Insight detects the router automatically, which can take several minutes.
5. To add the router to your network location, tap the + icon in the top bar, and do one of the following:
· Tap the SCAN BARCODE OR QR CODE button, and then scan the router’s code. · Tap the Enter Serial Number link, and then manually enter the router’s serial
number and MAC address.
The serial number and MAC address are printed on the router label and displayed on the Dashboard in the device UI.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
6. If prompted, name the router and tap the Next button. The router automatically updates to the latest Insight firmware and Insight location configuration. This might take up to 10 minutes, during which time the router will restart. The router is now an Insight-managed device that is connected to the Insight cloud-based management platform. The Cloud LED lights solid blue. You can now use the Insight app or Insight Cloud portal to configure and manage the router.
Change the Insight management mode
By default, the Insight management mode of the router is enabled so that you can add the router to an Insight network location and manage the router with the Insight Cloud Portal and the Insight app. You can also still use the device UI to manage the router. For more information, see How Insight and the device UI interact with each other on page 21. You can disable the Insight management mode so that you can manage the router only from the device UI. To change the Insight management mode: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
4. In the System Information pane, click the Insight Mode toggle to enable or disable the Insight mode: · The toggle is blue and positioned to the right: The Insight mode is enabled. This is the default setting. · The toggle is gray and positioned to the left: The Insight mode is disabled.
A confirmation pop-up window displays.
5. Click the Yes button. Your settings are saved. The Insight mode is changed.
Log in to the device UI
After you set up the router and the router is connected to the Internet, you can view and change the router settings by connecting to the device UI.
Note: The first time that you access the router, the automated setup process starts. For more information, see Set up the router to connect to a modem on page 14 or Set up the router to connect to the LAN of an existing router on page 15. After you set up the router, the automated setup process no longer starts.
To log in to the device UI: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. You can also connect your computer to a LAN port on the router.
Note: If you configure a WiFi access point and connect it directly to a LAN port on the router, you can also use a WiFi connection to set up the router. The router itself does not provide WiFi capability or Power over Ethernet (PoE), so, in such a setup, you must use a power supply or PoE switch to power the access point.
2. In the address field of your browser, enter https://www.routerlogin.net. You can also enter https://www.routerlogin.net or https://192.168.1.1. Your browser might display a security warning because of the self-signed certificate on the router, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see kb.netgear.com/000062980//. The login page displays.

Set Up and Access the Router

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
3. Enter one of the following passwords: · Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive. · If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added. For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.

Set Up and Access the Router

User Manual

3
Manage the Internet Settings for the WAN1 port
This chapter describes how you can view or manually change the Internet settings for the WAN1 port. When you first set up and access the router with a web browser, the automated setup process detects the Internet connection. After you set up the router, you can view or manually change the Internet settings for the WAN1 port. For information about setting up a dual WAN configuration with the WAN2 port in addition to the WAN1 port, see Set Up and Configure a Dual WAN Connection on page 37. This chapter contains the following sections: · Manually configure a dynamic Internet connection for the WAN1 port · Manually configure a static Internet connection for the WAN1 port · Manually configure a PPPoE Internet connection for the WAN1 port Note: The procedures that are described in this chapter are for a setup in which the router is installed as a standalone device in your network. If you are using the Insight Cloud Portal or Insight app to set up and manage the router, visit kb.netgear.com/000065768 for knowledge base articles about NETGEAR Insight.
29

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Manually configure a dynamic Internet connection for the WAN1 port
You can manually configure an Internet connection with dynamic IP address settings for the WAN1 port. Use this setup if your ISP assigns the WAN IP address dynamically, or another router in your existing network does. Before you start the configuration procedure, be sure that you have the dynamic IP address information that your ISP gave you. To manually configure an Internet connection with dynamic IP address settings for the WAN1 port: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select WAN > Internet/WAN > WAN1. The Internet/WAN Setup page displays.
5. Select IPv4. The page displays the options for the WAN1 port.
6. From the Connection Type menu, select DHCP. The page adjusts.

Manage the Internet Settings for

the WAN1 port

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
7. If your ISP requires you to use a specific device name, click the Edit button and change the router device name. Then, go back to the page for the WAN options for the WAN1 port.
8. If your ISP requires you to use a domain name, enter it in the Domain Name field.
Note: The fields in the Internet IP Address section are masked because the information is automatically assigned by the DHCP server of the ISP or the other router in your network.
9. Select a radio button to specify how your domain name servers (DNS) are configured: · Get Dynamically from ISP: Your ISP assigns the DNS server IP addresses dynamically. This is the default setting. · Use these DNS Servers: Type the static IP addresses of the DNS 1 server, and if available, of the DNS 2 and DNS 3 servers.
10. If your ISP requires you to use a vendor class identifier (VCI) string, type it in the Vendor Class Identifier String (Option 60) field.
11. If your ISP requires you to use a client identifier (client ID) string, type it in the Client Identifier String (Option 61) field.
12. To configure advanced settings for the WAN1 port, select Advanced, and configure the following settings: · Router MAC Address: Select a radio button: – Use Default MAC Address: Use the default router MAC address that displays on the Dashboard page and the router label. This is the default setting. – Use Computer MAC Address: If the router connects to a modem, the router captures and uses the MAC address of the computer that you are now using. You must use the one computer that the ISP allows. – Use This MAC Address: Type the MAC address in the MAC Address field.
· WAN VLAN Tag: Depending on the requirements of your ISP, click the toggle to enable or disable the use of a WAN VLAG tag: – The toggle is blue and positioned to the right: Your ISP requires you to use a WAN VLAN for the DHCP connection. Type the VLAN ID in the WAN VLAN Tag field. – The toggle is gray and positioned to the left: No WAN VLAN ID is required. This is the default setting.

Manage the Internet Settings for

the WAN1 port

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

· MTU: Select a radio button: – Auto: Your ISP assign the MTU size automatically. In most situations, the default size is 1500 bytes. – Manual: If your ISP requires you to use a specific MTU size, select the Manual button and type the size in the MTU Size field.
13. Click the Apply button. Your settings are saved. It might take a few minutes before the WAN1 port is connected to your ISP.
Manually configure a static Internet connection for the WAN1 port
You can manually configure an Internet connection with static (fixed) IP address settings for the WAN1 port. Before you start the configuration procedure, be sure that you have the static IP address information that your ISP gave you. To manually configure an Internet connection with static IP address settings for the WAN1 port: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22.

Manage the Internet Settings for

the WAN1 port

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
The Dashboard displays.
4. Select WAN > Internet/WAN > WAN1. The Internet/WAN Setup page displays.
5. Select IPv4. The page displays the options for the WAN1 port.
6. From the Connection Type menu, select Static. The page adjusts.
7. In the IP Address, Subnet Mask, and Gateway fields, type the static IP address, subnet mask, and gateway IP address that you r ISP gave you. The gateway is the ISP gateway to which your router connects.
8. In the DNS 1 field, type the static IP addresses of the DNS 1 server, and if available, in the DNS 2 and DNS 3 fields type the IP addresses of the DNS 2 and DNS 3 servers. Your ISP gave you the IP addresses of the DNS servers.
9. To configure advanced settings for the WAN1 port, select Advanced, and configure the following settings: · Router MAC Address: Select a radio button: – Use Default MAC Address: Use the default router MAC address that displays on the Dashboard page and the router label. This is the default setting. – Use Computer MAC Address: If the router connects to a modem, the router captures and uses the MAC address of the computer that you are now using. You must use the one computer that the ISP allows. – Use This MAC Address: Type the MAC address in the MAC Address field.
· WAN VLAN Tag: Depending on the requirements of your ISP, click the toggle to enable or disable the use of a WAN VLAG tag: – The toggle is blue and positioned to the right: Your ISP requires you to use a WAN VLAN for the static connection. Type the VLAN ID in the WAN VLAN Tag field. – The toggle is gray and positioned to the left: No WAN VLAN ID is required. This is the default setting.

Manage the Internet Settings for

the WAN1 port

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

10. Click the Apply button. Your settings are saved. It might take a few minutes before the WAN1 port is connected to your ISP.
Manually configure a PPPoE Internet connection for the WAN1 port

You can manually configure a PPPoE Internet connection for the WAN1 port. Before you start, be sure that you have the PPPoE information that your ISP gave you. To manually configure a PPPoE Internet connection for the WAN1 port:

Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select WAN > Internet/WAN > WAN1.

Manage the Internet Settings for

the WAN1 port

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

The Internet/WAN Setup page displays.
5. Select IPv4. The page displays the options for the WAN1 port.
6. From the Connection Type menu, select PPPoE. 7. Configure the following settings:
· Username: Type the user name that your ISP gave you. The user name is often an email address.
· Password: Type the password that you use to log in to your PPPoE service. · Service Name (Optional): If your ISP requires a service name, type it in the field.
8. Connection Mode: Select the Always On (the default setting) or Manually Connect radio button. Connecting manually means that you do not have an Internet connection unless you manually connect to your ISP.
9. Select a radio button to specify how your IP address is configured: · Get Dynamically from ISP: Your ISP assigns the IP address dynamically. This is the default setting. · Use Static IP address: Your ISP assigns a static (fixed) IP address, which you must type in the IP Address field.
10. Select a radio button to specify how your domain name servers (DNS) are configured: · Get Dynamically from ISP: Your ISP assigns the DNS server IP addresses dynamically. This is the default setting. · Use these DNS Servers: Type the static IP addresses of the DNS 1 server, and if available, of the DNS 2 and DNS 3 servers.
11. To configure advanced settings for the WAN1 port, select Advanced, and configure the following settings: · Router MAC Address: Select a radio button: – Use Default MAC Address: Use the default router MAC address that displays on the Dashboard page and the router label. This is the default setting. – Use Computer MAC Address: If the router connects to a modem, the router captures and uses the MAC address of the computer that you are now using. You must use the one computer that the ISP allows. – Use This MAC Address: Type the MAC address in the MAC Address field.

Manage the Internet Settings for

the WAN1 port

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
· WAN VLAN Tag: Depending on the requirements of your ISP, click the toggle to enable or disable the use of a WAN VLAG tag: – The toggle is blue and positioned to the right: Your ISP requires you to use a WAN VLAN for the PPPoE connection. Type the VLAN ID in the WAN VLAN Tag field. – The toggle is gray and positioned to the left: No WAN VLAN ID is required. This is the default setting.
· MTU: Select a radio button: – Auto: Your ISP assign the MTU size automatically. In most situations, the default size is 1500 bytes. – Manual: If your ISP requires you to use a specific MTU size, select the Manual button and type the size in the MTU Size field.
12. Click the Apply button. Your settings are saved. It might take a few minutes before the WAN1 port is connected to your ISP.

Manage the Internet Settings for

the WAN1 port

User Manual

4
Set Up and Configure a Dual WAN Connection
This chapter describes how you can set up a dual WAN connection with failover in which one WAN port functions as the primary interface and the other WAN port functions as a secondary interface. This chapter contains the following sections: · About Dual WAN and WAN failover · Configure dual WAN with a dynamic Internet connection for the WAN2 port · Configure dual WAN with a static Internet connection for the WAN2 port · Configure dual WAN with a PPPoE Internet connection for the WAN2 port · Configure dual WAN failover detection · Display the status of the dual-WAN interfaces Note: The procedures that are described in this chapter explain how to manage configuration options through the device UI. If you are using the Insight Cloud Portal or Insight app to set up and manage the router, visit kb.netgear.com/000065768 for knowledge base articles about NETGEAR Insight.
37

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
About Dual WAN and WAN failover
Dual WAN is a configuration in which two WAN ports are connected to the Internet. WAN failover means that if one WAN port goes down, the other WAN port can take over. Only one WAN connection is up at any time.
One WAN port functions as the primary interface, and the other WAN port functions as the secondary or backup interface. If the primary interface goes down (for example, your ISP has an outage), the router can automatically switch (that is, failover) to the secondary WAN interface. When the primary WAN interface comes back up again, the router can automatically switch back from the secondary WAN interface to the primary WAN interface.
The router can support two WAN ports:
· WAN1 port: The default WAN port for the router is the WAN1 port. · LAN5 WAN2 port: The LAN5 WAN2 port functions by default as a LAN port, but
you can configure the port as the WAN2 port. If you set the LAN5 WAN2 port to function as a WAN port, the port no longer functions as a LAN port. That is, the port either functions as the LAN5 port (the default setting) or as the WAN2 port, but not as both simultaneously.
Ideally, each WAN port is connected to a different ISP. For example, you could connect the WAN1 port over a cable modem to one ISP and connect the WAN2 port over a mobile router with a 5G connection to another ISP.
In a dual WAN configuration, by default the WAN1 port is set as the primary interface and the WAN2 port is set as the secondary interface. However, you can change the settings so that the WAN2 port functions as the primary interface and the WAN1 port as the secondary interface.
These are the high-level steps to set up a dual WAN configuration with failover:
1. Be sure that you have two WAN connections, one for each WAN interface. The WAN1 port supports a speed of up to 2.5 Gbps. The WAN2 port supports a speed of up to 10 Gbps.
2. Configure dual WAN by changing the function of the LAN5 WAN2 port to a WAN port and configure the WAN2 port. Depending on the type of Internet connection for your WAN2 port, see one of the following sections:
· Dynamic connection: Configure dual WAN with a dynamic Internet connection for the WAN2 port on page 39
· Static connection: Configure dual WAN with a static Internet connection for the WAN2 port on page 42

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

· PPPoE connection: Configure dual WAN with a PPPoE Internet connection for the WAN2 port on page 45
3. Configure dual WAN failover and the type of failover detection (see Configure dual WAN failover detection on page 48).
Configure dual WAN with a dynamic Internet connection for the WAN2 port

By default, the LAN5 WAN2 port functions as a LAN port. You can change the function of the port to a WAN port (the WAN2 port) and set up a dynamic ISP connection for the WAN2 port.
Before you start, be sure that you have the dynamic IP address information that your ISP gave you. This information is different from the information for the WAN1 port.
To configure dual WAN with a dynamic Internet connection for the WAN2 port:
1. Prepare the modem or mobile router that you want to use for the WAN2 port connection:
· Modem: Unplug the modem’s power, leaving the modem connected to the wall jack for your Internet service. If the modem uses a battery backup, remove the battery.
· Mobile router: Unplug the mobile router’s power. If the mobile router uses a battery backup, remove the battery.
2. Using an Ethernet cable, connect the modem or mobile router to the WAN2 port on the router. The port is labeled LAN5 WAN2.
3. Plug in and turn on the modem or mobile router. If the modem or mobile router uses a battery backup, put the battery back in before you turn on the modem or mobile router.
4. If the router is not yet powered on, power on the router and check that the LEDs are lit. When you power on the router, the Power LED lights solid amber for about one minute. When the router is ready, the Power LED lights solid green.
5. Launch a web browser from a computer or mobile device that is connected to the router network.
6. In the address field of your browser, enter https://www.routerlogin.net.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
7. Enter one of the following passwords: · Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive. · If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
8. Select WAN > Internet/WAN > WAN2. The Internet/WAN Setup page displays. The page displays the option to convert the LAN5 port to the WAN2 port.
9. Click the toggle to convert the LAN5 port to the WAN2 port: · The toggle is blue and positioned to the right: The port functions as the WAN2 port. The page adjusts to display menu options. · The toggle is gray and positioned to the left: The port functions as the LAN5 port. This is the default setting.
10. Select IPv4. The page displays the options for the WAN2 port.
11. From the Connection Type menu, select DHCP. The page adjusts.
12. If your ISP requires you to use a specific device name, click the Edit button and change the router device name. Then, go back to the page for the options of the WAN2 port.
13. If your ISP requires you to use a domain name, enter it in the Domain Name field.
Note: The fields in the Internet IP Address section are masked because the information is automatically assigned by the DHCP server of the ISP or the other router in your network.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

14. Select a radio button to specify how your domain name servers (DNS) are configured:
· Get Dynamically from ISP: Your ISP assigns the DNS server IP addresses dynamically. This is the default setting.
· Use these DNS Servers: Type the static IP addresses of the DNS 1 server, and if available, of the DNS 2 and DNS 3 servers.
15. If your ISP requires you to use a vendor class identifier (VCI) string, type it in the Vendor Class Identifier String (Option 60) field.
16. If your ISP requires you to use a client identifier (client ID) string, type it in the Client Identifier String (Option 61) field.
17. To configure advanced settings for the WAN2 port, select Advanced, and configure the following settings:
· Router MAC Address: Select a radio button:
– Use Default MAC Address: Use the default router MAC address that displays on the Dashboard page and the router label. This is the default setting.
– Use Computer MAC Address: If the router connects to a modem, the router captures and uses the MAC address of the computer that you are now using. You must use the one computer that the ISP allows.
– Use This MAC Address: Type the MAC address in the MAC Address field.
· WAN VLAN Tag: Depending on the requirements of your ISP, click the toggle to enable or disable the use of a WAN VLAG tag:
– The toggle is blue and positioned to the right: Your ISP requires you to use a WAN VLAN for the DHCP connection. Type the VLAN ID in the WAN VLAN Tag field.
– The toggle is gray and positioned to the left: No WAN VLAN ID is required. This is the default setting.
· MTU: Select a radio button: – Auto: Your ISP assign the MTU size automatically. In most situations, the default size is 1500 bytes. – Manual: If your ISP requires you to use a specific MTU size, select the Manual button and type the size in the MTU Size field.

18. Click the Apply button. Your settings are saved.
It might take a few minutes before the WAN2 port is connected to your ISP.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

19. To display the status of the dual WAN configuration, see Display the status of the dual-WAN interfaces on page 50.
Configure dual WAN with a static Internet connection for the WAN2 port
By default, the LAN5 WAN2 port functions as a LAN port. You can change the function of the port to a WAN port (the WAN2 port) and set up a static ISP connection for the WAN2 port. Before you start, be sure that you have the static IP address information that your ISP gave you. This information is different from the information for the WAN1 port. To configure dual WAN with an ISP connection that uses a static IP address for the WAN2 port: 1. Prepare the modem or mobile router that you want to use for the WAN2 port
connection:
· Modem: Unplug the modem’s power, leaving the modem connected to the wall jack for your Internet service. If the modem uses a battery backup, remove the battery.
· Mobile router: Unplug the mobile router’s power. If the mobile router uses a battery backup, remove the battery.
2. Using an Ethernet cable, connect the modem or mobile router to the WAN2 port on the router. The port is labeled LAN5 WAN2.
3. Plug in and turn on the modem or mobile router. If the modem or mobile router uses a battery backup, put the battery back in before you turn on the modem or mobile router.
4. If the router is not yet powered on, power on the router and check that the LEDs are lit. When you power on the router, the Power LED lights solid amber for about one minute. When the router is ready, the Power LED lights solid green.
5. Launch a web browser from a computer or mobile device that is connected to the router network.
6. In the address field of your browser, enter https://www.routerlogin.net. The login page displays.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
7. Enter one of the following passwords: · Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive. · If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
8. Select WAN > Internet/WAN > WAN2. The Internet/WAN Setup page displays. The page displays the option to convert the LAN5 port to the WAN2 port.
9. Click the toggle to convert the LAN5 port to the WAN2 port: · The toggle is blue and positioned to the right: The port functions as the WAN2 port. The page adjusts to display menu options. · The toggle is gray and positioned to the left: The port functions as the LAN5 port. This is the default setting.
10. Select IPv4. The page displays the options for the WAN2 port.
11. From the Connection Type menu, select Static. The page adjusts.
12. In the IP Address, Subnet Mask, and Gateway fields, type the static IP addresses, subnet mask, and gateway IP address that your ISP gave you. The gateway is the ISP gateway to which your router connects.
13. In the DNS 1 field, type the static IP addresses of the DNS 1 server, and if available, in the DNS 2 and DNS 3 fields type the IP addresses of the DNS 2 and DNS 3 servers. Your ISP gave you the IP addresses of the DNS servers.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
14. To configure advanced settings for the WAN2 port, select Advanced, and configure the following settings: · Router MAC Address: Select a radio button: – Use Default MAC Address: Use the default router MAC address that displays on the Dashboard page and the router label. This is the default setting. – Use Computer MAC Address: If the router connects to a modem, the router captures and uses the MAC address of the computer that you are now using. You must use the one computer that the ISP allows. – Use This MAC Address: Type the MAC address in the MAC Address field.
· WAN VLAN Tag: Depending on the requirements of your ISP, click the toggle to enable or disable the use of a WAN VLAG tag: – The toggle is blue and positioned to the right: Your ISP requires you to use a WAN VLAN for the DHCP connection. Type the VLAN ID in the WAN VLAN Tag field. – The toggle is gray and positioned to the left: No WAN VLAN ID is required. This is the default setting.
· MTU: Select a radio button: – Auto: Your ISP assign the MTU size automatically. In most situations, the default size is 1500 bytes. – Manual: If your ISP requires you to use a specific MTU size, select the Manual button and type the size in the MTU Size field.
15. Click the Apply button. Your settings are saved. It might take a few minutes before the WAN2 port is connected to your ISP.
16. To display the status of the dual WAN configuration, see Display the status of the dual-WAN interfaces on page 50.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Configure dual WAN with a PPPoE Internet connection for the WAN2 port
By default, the LAN5 WAN2 port functions as a LAN port. You can change the function of the port to a WAN port (the WAN2 port) and set up a PPPoE ISP connection for the WAN2 port. Before you start, be sure that you have the PPPoE information that your ISP gave you. This information is different from the information for the WAN1 port. To configure dual WAN with an ISP connection that uses a PPPoE IP address for the WAN2 port: 1. Prepare the modem or mobile router that you want to use for the WAN2 port
connection:
· Modem: Unplug the modem’s power, leaving the modem connected to the wall jack for your Internet service. If the modem uses a battery backup, remove the battery.
· Mobile router: Unplug the mobile router’s power. If the mobile router uses a battery backup, remove the battery.
2. Using an Ethernet cable, connect the modem or mobile router to the WAN2 port on the router. The port is labeled LAN5 WAN2.
3. Plug in and turn on the modem or mobile router. If the modem or mobile router uses a battery backup, put the battery back in before you turn on the modem or mobile router.
4. If the router is not yet powered on, power on the router and check that the LEDs are lit. When you power on the router, the Power LED lights solid amber for about one minute. When the router is ready, the Power LED lights solid green.
5. Launch a web browser from a computer or mobile device that is connected to the router network.
6. In the address field of your browser, enter https://www.routerlogin.net. The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
7. Enter one of the following passwords: · Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive. · If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
8. Select WAN > Internet/WAN > WAN2. The Internet/WAN Setup page displays. The page displays the option to convert the LAN5 port to a WAN port (WAN2).
9. Click the toggle to convert the LAN5 port to the WAN2 port: · The toggle is blue and positioned to the right: The port functions as the WAN2 port. The page adjusts to display menu options. · The toggle is gray and positioned to the left: The port functions as the LAN5 port. This is the default setting.
10. Select IPv4. The page displays the options for the WAN2 port.
11. From the Connection Type menu, select PPPoE. The page adjusts.
12. Configure the following settings: · Username: Type the user name that your ISP gave you. The user name is often an email address. · Password: Type the password that you use to log in to your PPPoE service. · Service Name (Optional): If your ISP requires a service name, type it in the field.
13. Connection Mode: Select the Always On (the default setting) or Manually Connect radio button. Connecting manually means that you do not have an Internet connection unless you manually connect to your ISP.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

14. Select a radio button to specify how your IP address is configured: · Get Dynamically from ISP: Your ISP assigns the IP address settings dynamically. This is the default setting. · Use Static IP address: Your ISP assigns a static (fixed) IP address, which you must type in the IP Address field.
15. Select a radio button to specify how your domain name servers (DNS) are configured: · Get Dynamically from ISP: Your ISP assigns the DNS server IP addresses dynamically. This is the default setting. · Use these DNS Servers: Type the static IP addresses of the DNS 1 server, and if available, of the DNS 2 and DNS 3 servers.
16. To configure advanced settings for the WAN2 port, select Advanced, and configure the following settings: · Router MAC Address: Select a radio button: – Use Default MAC Address: Use the default router MAC address that displays on the Dashboard page and the router label. This is the default setting. – Use Computer MAC Address: If the router connects to a modem, the router captures and uses the MAC address of the computer that you are now using. You must use the one computer that the ISP allows. – Use This MAC Address: Type the MAC address in the MAC Address field.
· WAN VLAN Tag: Depending on the requirements of your ISP, click the toggle to enable or disable the use of a WAN VLAG tag: – The toggle is blue and positioned to the right: Your ISP requires you to use a WAN VLAN for the DHCP connection. Type the VLAN ID in the WAN VLAN Tag field. – The toggle is gray and positioned to the left: No WAN VLAN ID is required. This is the default setting.
· MTU: Select a radio button: – Auto: Your ISP assign the MTU size automatically. In most situations, the default size is 1500 bytes. – Manual: If your ISP requires you to use a specific MTU size, select the Manual button and type the size in the MTU Size field.

17. Click the Apply button.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
Your settings are saved. It might take a few minutes before the WAN2 port is connected to your ISP.
18. To display the status of the dual WAN configuration, see Display the status of the dual-WAN interfaces on page 50.
Configure dual WAN failover detection
Failover detection is the mechanism that lets the router detect if the primary WAN interface is up. If the interface is down, the router initiates a failover to the secondary WAN interface. The router then monitors both WAN interfaces and when the primary WAN interface comes back up, failover detection lets the router switch back to the primary WAN interface. By default the WAN1 port is set as the primary interface and the WAN2 port is set as the secondary interface. However, you can change the setting so that the WAN2 port functions as the primary interface and the WAN1 port as the secondary interface. The router supports the following types of failover detection:
· Ping the WAN DNS server: The router sends pings to the DNS servers that are already configured for the primary and secondary interfaces.
· Ping the WAN gateway: The router sends pings to the gateways that are already configured for the primary and secondary interfaces.
· Ping custom IP addresses: The router sends pings to custom gateways that you must configure for the primary and secondary interfaces.
· Query the WAN DNS server: The router sends DNS queries to the DNS servers that are already configured for the primary and secondary interfaces.
· Query custom IP addresses: The router sends DNS queries to custom DNS servers that you must configure for the primary and secondary interfaces.
In a WAN failover configuration with two WAN interfaces, if a query or ping does not yield a response after the specified number of retries (the default is four retries), the router automatically switches to the active interface. This process is referred to as a failover. For example, if four queries to the WAN1 port fail, the router automatically switches to the WAN2 port. After the failover, the router continues to sends queries or pings to the WAN1 port. If the WAN1 port comes back up and responds to a query or ping, the router switches back to the WAN1 port.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
To configure failure detection: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select WAN > Internet/WAN > Dual WAN. The Internet/WAN Setup page displays. The page displays the status information.
5. Select Configuration. The page displays the failure detection options. The selection from the Policy menu is Failover, which is the only option. (The router does not support load-balancing.)
6. From the Primary WAN menu, select WAN1 or WAN2. The selected interface functions as the primary WAN interface in the dual WAN configuration. The selection from the Secondary WAN menu is automatically adjusted because there are only two WAN interfaces.
7. From the Failure Detection Method menu, select the failure detection method and select where the router must send the ping or query:
· ping: The router sends pings to the device that you select: – Use WAN DNS: The router sends pings to the DNS server IP addresses that you already configured for the WAN1 and WAN2 ports.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
– Use WAN Gateway: The router sends pings to the gateway IP addresses that you already configured for the WAN1 and WAN2 ports.
– Use WAN Custom: The router sends pings to custom IP addresses that you must enter in the IP address fields in the WAN1 Internet Connection Test and WAN2 Internet Connection Test sections.
· DNS lookup: – Use WAN DNS: The router sends queries to the DNS server IP addresses that you already configured for the WAN1 and WAN2 ports. – Use WAN Custom: The router sends queries to custom IP addresses that you must enter in the IP address fields in the WAN1 Internet Connection Test and WAN2 Internet Connection Test sections.
8. If you select the Use WAN Custom radio button in the previous step, type the IP addresses in the IP Address 1 and IP Address 2 fields in both the WAN1 Internet Connection Test and WAN2 Internet Connection Test sections.
9. In the Retry Interval field, type the period in seconds after which the router sends a query or ping to the WAN1 and WAN2 ports to determine their status (up or down). By default, the period is 5 seconds. The range is from 1 to 3500 seconds.
10. In the Number of retries field, enter the number of times that the router resends a query or ping after it did not receive a response from the WAN1 or WAN2 ports. The default number of retries is 5. That means that after five failed responses, the router fails over to the active interface. For example, if four queries to the WAN1 port fail, the router automatically fails over to the WAN2 port. The range is from 1 to 10 retries.
11. Click the Apply button. Your settings are saved.
12. To display the status of the dual WAN configuration, see Display the status of the dual-WAN interfaces on page 50.
Display the status of the dual-WAN interfaces
The status of the dual-WAN connection indicates the WAN port that functions as the primary interface and the link status of each WAN interface.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

If no failover occurs, the WAN port that you selected as the primary Internet interface is the active interface and the other port is the secondary Internet interface. Under normal conditions, each interface is online.
If the primary WAN interface goes down, a failover occurs, and the secondary WAN interface becomes the active interface. The link status for the primary WAN interface shows as offline.
When the primary WAN interface comes back up, the router switches back to the primary WAN interface, which once again becomes the active interface.
To display the status of the dual-WAN interfaces:
1. Launch a web browser from a computer or mobile device that is connected to the router network.
2. In the address field of your browser, enter https://www.routerlogin.net. The login page displays.
Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22.
The Dashboard displays.
4. Select WAN > Internet/WAN > Dual WAN. The Internet/WAN Setup page displays. The page displays the status information.
5. If the status fields do not display, select Status. The page displays the dual WAN status information.
· Dual-WAN Policy: Failover, which is the only option. · Primary Internet Interface: The WAN port that you selected as the primary
interface.
· Secondary Internet Interface: The WAN port that is automatically selected as the secondary WAN interface based on your selection of the primary WAN interface.

Set Up and Configure a Dual

WAN Connection

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
· Active Internet Interface: The WAN port that is the active WAN interface. · WAN1 Connection Status: Depending on the status, this field either displays
online/Active and shows the number of seconds in the Uptime field or displays offline. · WAN2 Connection Status: Depending on the status, this field either displays online/Active and shows the number of seconds in the Uptime field or displays offline.

Set Up and Configure a Dual

WAN Connection

User Manual

5
Manage the LAN and VLAN Settings
This chapter describes how you can manage the local area network (LAN) and virtual LAN (VLAN) settings of the router and set up static routes. The chapter includes the following sections: · VLAN concepts · VLANs and LANs · Manage EEE, flow control, and link speed for ports · MAC address to IP address bindings · Static routes Note: The procedures that are described in this chapter explain how to manage configuration options through the device UI. If you are using the Insight Cloud Portal or Insight app to set up and manage the router, visit kb.netgear.com/000065768 for knowledge base articles about NETGEAR Insight.
53

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

VLAN concepts

This section describes general VLAN concepts, the management VLAN, and how the router uses VLANs.
Basic VLAN concepts
You can define a local area network (LAN) as a broadcast domain. Hubs, bridges, switches, and WiFi access points in the same physical segment or segments connect all end nodes. End nodes can communicate with each other without a router. Routers connect LANs, routing the traffic to each appropriate port.
A virtual LAN (VLAN) is a local area network that maps devices on a basis other than geographic location, for example, by department, type of user, or primary application. Traffic that flows between different VLANs must go through a router, just as if the VLANs were on two separate LANs.
A VLAN is a group of network devices (computers, servers, and other resources) that behave as if they are connected to a single network segment, even though they might not be. For example, the marketing personnel might be located throughout a building, but if they are all assigned to a single VLAN, they can share resources and bandwidth as if they are connected to the same segment. The resources of other departments can be invisible to the marketing VLAN members, accessible to all, or accessible only to specific individuals, depending on how you set up the VLAN.
VLANs provide a number of advantages:
· VLANs let you easily segment your network: You can group users who communicate most frequently with each other in a common VLAN, regardless of physical location. Each group’s traffic is contained largely within the VLAN, reducing extraneous traffic and improving the efficiency of the whole network.
· VLANS are easy to manage: You can quickly add or change network nodes and make other network changes.
· VLANs provide increased performance: VLANs free up bandwidth by limiting node-to-node and broadcast traffic throughout the network.
· VLANs enhance network security: VLANs create virtual boundaries that can be crossed only through a router. Therefore, you can use router-based security measures such as traffic rules and MAC ACLs to restrict access to a VLAN.
Management VLAN
A management VLAN is a much smaller network that is contained within your regular network. The primary benefit of using a management VLAN is improved network security.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

When all management traffic is on a separate VLAN, it is much harder for unauthorized users to make changes to your network or monitor network traffic.
Another potential benefit is that a management VLAN can help you minimize the impact of a broadcast storm on other VLANs by giving you a separate path to access your network.
On the router, the management VLAN (VLAN 1) is also the default VLAN. By default, all ports are untagged members of the default VLAN. A LAN port can be an untagged member of a single VLAN only.
Although you can change the management VLAN from VLAN 1 to another VLAN, we recommend that you do so only if you have an understanding of network management. Incorrect configuration of the management VLAN can block access to the router.
For the management VLAN to be secure, it must be used only for controlling and managing your network devices. We recommend that you restrict access to the management VLAN and configure other VLANs to carry all regular network traffic.
If you decide to restrict access to the management VLAN, make sure that you make your computer or device a member of the VLAN and add its MAC address to the access control list (if applicable). Otherwise, you must log in from an allowed device or lose access to the management functions of the router. If you are unable to log in on an allowed device, you must reset the router to factory default settings to regain management access.
How the router uses VLANs and LANs
By default, all LAN ports are assigned to the default VLAN, or VLAN 1, and all untagged traffic is routed through the default VLAN. By default, VLAN 1 is also the management VLAN through which you can manage the router (see Management VLAN on page 54).
VLAN profiles: The VLANs that you configure on the router function actually as VLAN profiles that determine the following LAN settings, which affect any device that connects to the VLAN:
· IPv4 settings for the VLAN: IP address, subnet mask, Router Information Protocol (RIP) direction, and RIP version.
· DCHP server for the VLAN: Start and end IP addresses, and lease time.
· DNS settings for the VLAN: DNS proxy or IP addresses of up to three DNS servers
You can set up to eight VLANs on the router, and each VLAN must be assigned unique IPv4, DHCP server, and DNS settings.
LAN port assignment to a VLAN: LAN ports can be assigned to one or more VLANs in the following ways:
· A LAN port is assigned to at least one VLAN (by default, VLAN 1).

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
· A LAN port can be an untagged member of a single VLAN only. (By default, all LAN ports are untagged members of VLAN 1.)
· You can assign a LAN port as a tagged member of multiple VLANs. Typically, a LAN port that is assigned to multiple VLANs is used as a trunk port to connect the router to a switch, access point, or other router. (You cannot specifically configure a port as a trunk port or access port in the device UI, but any port can serve as a trunk port or access port if you configure the settings correctly.)
· If you configure the LAN 5 port as the WAN2 port, the WAN2 port is excluded from all VLANs, unless your ISP requires you to use a VLAN tag for the WAN2 port.
VLAN communication: The following applies to communication for devices on a VLAN and between VLANs:
· Devices on the same VLAN can communicate with each other regardless of whether the ports that are members of the VLAN are tagged or untagged.
· Devices on different VLANs cannot communicate each other regardless of whether the ports that are members of the VLANs are tagged or untagged. However, if you enable the Inter VLAN Routing feature for two or more VLANs, devices on these different VLANs can communicate with each other.
Example of how the router processes traffic
The predefined default VLAN on the router is the VLAN with ID 1 (VLAN 1) with IPv4 network 192.168.1.0/24. All LAN ports are untagged members of this VLAN

For this example, assume that you did not change the default VLAN (VLAN 1) and that you add a VLAN with ID 100 (VLAN 100) with IPv4 network 192.168.100.0/24 that has all LAN ports as tagged members. The router processes incoming untagged and tagged packets as follows:
· If an untagged packet enters the LAN1 port, VLAN 1 processes the packet:
– If the destination for the untagged packet is a device that is connected to the LAN3 port on the 192.168.1.0/24 network (the VLAN 1 network), the packet is forwarded to the LAN3 port without any tagging because that port is an untagged member of VLAN 1.
– If the destination for the untagged packet is a device that is connected to the LAN5 port on the 192.168.100.0/24 network (the VLAN 100 network), and the Inter VLAN Routing feature is enabled for both VLAN 1 and VLAN 100, the packet is routed from VLAN 1 to VLAN 100, and then forwarded from the LAN5 port with tag 100 because that port is a tagged member of VLAN 100.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

· If a tagged packet enters the LAN4 port and its VLAN tag is 100, VLAN 100 processes the packet:
– If the destination for the tagged packet is a device that is connected to the LAN2 port on the 192.168.100.0/24 network (the VLAN 100 network), the LAN2 port forwards the packet with tag 100 because that port is a tagged member of VLAN 100.
– If the destination for the tagged packet is a device that is connected to the LAN2 port on the 192.168.1.0/24 network (the VLAN 1 network), and the Inter VLAN Routing feature is enabled for both VLAN 1 and VLAN 100, the packet is routed from VLAN 100 to VLAN 1, and then forwarded from the LAN2 port without a tag because that port is an untagged member of VLAN 1.
· If a tagged packet enters the LAN4 port and its VLAN tag is not 100, the router drops the packet because the LAN4 port is a tagged member of VLAN 100.
VLANs and LANs
The router’s LAN can include multiple VLANs and LAN subnets.
A VLAN on the router includes its own LAN subnet. By default, the router includes one VLAN (VLAN 1) and one LAN subnet (192.168.1.x) , but the router can support multiple VLANs, each with its own LAN subnet. For example, you could add VLAN 10 and define the associated LAN subnet as 192.168.25.x or 192.168.30.x.
You can add, change, and remove VLANs, and assign LAN ports to VLANs.
Add a VLAN profile
VLAN 1 is the default VLAN, which includes all LAN ports as untagged members. You can add multiple VLANs.
When you add a VLAN, you do not just add an ID. Rather, you add an entire VLAN profile that determines the LAN settings for any device that connects to that VLAN. To add a VLAN profile:
1. Launch a web browser from a computer or mobile device that is connected to the router network.
2. In the address field of your browser, enter https://www.routerlogin.net. The login page displays.
Your browser might display a security warning. For more information, see Log in to the device UI on page 27.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > VLAN Settings. The VLAN Settings page displays.
5. Click the Add VLAN Profile button. The Add New VLAN Profile pop-up window displays.
6. In the VLAN ID field, type a VLAN ID. The ID must be in the range from 2 to 4094. (ID 1 is already in use.)
7. In the VLAN Name field, type a name for the VLAN. The name is for identification purposes.
8. Click the Inter VLAN Routing toggle to enable or disable routing between this VLAN and other VLANs for which Inter VLAN Routing is enabled:
· The toggle is blue and positioned to the right: Traffic between this VLAN and the other VLANs on the router is allowed.
· The toggle is gray and positioned to the left: Traffic is restricted to this VLAN only. This is the default setting, which adds security to the VLAN but limits the traffic options.
9. Click the Device Management toggle to enable or disable this VLAN as the management VLAN:
· The toggle is blue and positioned to the right: The VLAN functions as the management VLAN through which you can access the router.
CAUTION: We recommend that you do not change the management VLAN from VLAN 1 to another VLAN unless you have an understanding of network management. Incorrect configuration of the management VLAN can block access to the router.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

· The toggle is gray and positioned to the left: The VLAN does not function as the management VLAN. This is the default setting because VLAN 1 is the default management VLAN. The router supports a single management VLAN only.
10. In the IPv4 Settings section, configure the following settings:
· IP Address: Type the IP address of the VLAN. This IP address and the associated subnet mask define the VLAN subnet.
· Subnet Mask: Type the associated subnet mask for the VLAN IP address. · RIP Direction: Select how the Router Information Protocol (RIP) lets the router
exchange routing information with other routers:
– Both. The router broadcasts its routing table periodically and incorporates information that it receives. This is the default setting.
– In Only: The router incorporates the RIP information that it receives but does not broadcast its routing table.
– Out Only: The router broadcasts its routing table periodically but does not incorporate the RIP information that it receives
· RIP Version:
– Disabled: The RIP version is disabled. This is the default setting. – RIP-1: This format is universally supported. It is adequate for most networks,
unless you are using an unusual network setup. – RIP-2B: This format carries more information that RIP-1, sends the routing
data in RIP-2 format, and uses subnet broadcasting. – RIP-2M: This format carries more information that RIP-1, sends the routing
data in RIP-2 format, and uses multicasting.

11. In the DHCP Server section, click the Status toggle to enable or disable the DHCP server for this VLAN:
· The toggle is blue and positioned to the right: The DHCP server is enabled and assigns an IP address to the devices on this VLAN. This is the default setting.
· The toggle is gray and positioned to the left: The DHCP server is disabled. Devices on the VLAN must be manually configured with an IP address in the subnet of the VLAN.
If you enable the DHCP server for this VLAN, configure the following settings:
· Start Address: A start IP address in the subnet that you defined for the VLAN (see Step 10).

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X
· End Address: An end IP address in the subnet that you defined for the VLAN (see Step 10).
· Lease Time: The time in minutes, hours, or days during which the address is assigned to (leased by) the device. When this time expires, the device must log in again. By default, the lease time is one day (24 hours).
12. In the DNS Type section, select a radio button: · DNS Proxy: The router provides its own address as a DNS server to the devices on the VLAN. The router receives the actual DNS addresses from the ISP (or another router on your network) and forwards DNS requests from the devices on the VLAN. · Use these DNS Servers: If you select the Use these DNS Servers radio button, configure the custom DNS servers: – DNS 1: The IP address of the first DNS server. – DNS 2: The IP address of the second DNS server. – DNS 3: The IP address of the third DNS server, if available.
13. Click the Apply button. Your settings are saved. The new VLAN profile is added to the VLAN Settings page.
Assign a VLAN to a LAN port
By default, each LAN port is an untagged member of the default VLAN, VLAN 1. If you added one or more VLANs (see Add a VLAN profile on page 57), you can change the VLAN ID for a LAN port. If you add other VLANs, you also make a LAN port a tagged or untagged member of another VLAN. Or, you can exclude a LAN port from a VLAN:
· Tagged: The LAN port inserts the VLAN tag in the traffic that it processes. Untagged traffic is forwarded to the default VLAN. A LAN port can be a tagged member of multiple VLANs.
· Untagged: The LAN port does not insert the VLAN tag in the traffic that it processes. A LAN port must be an untagged member of a VLAN, but cannot be an untagged member of more than one VLAN.
· Excluded: The LAN port drops traffic that is not directed to the VLAN. The following is a configuration example with tagged and untagged traffic:

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

Example: In a typical configuration with a VoIP phone that has two LAN ports, one port is connected (through a VLAN-aware switch) to the LAN 2 port on the router, and the other port is connected to a LAN port on a computer:
· Packets coming from the VoIP phone to the LAN 2 port on the router are tagged. · Packets coming from the computer are passing through the VoIP phone to the LAN
2 port on the router. These packets are untagged.
When you assign the LAN 2 port on the router to VLAN 5, packets entering and leaving the port are tagged with the VLAN ID 5. However, the untagged packets entering the LAN port on the router are forwarded to the default VLAN 1. To assign a VLAN to a LAN port:
1. Launch a web browser from a computer or mobile device that is connected to the router network.
2. In the address field of your browser, enter https://www.routerlogin.net. The login page displays.
Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22.
The Dashboard displays.
4. Select LAN > VLAN Settings. The VLAN Settings page displays.
5. Scroll down to the Assign VLANs to Wired Ports section at the bottom of the page.
6. For a specific VLAN and the menu for one of the LAN ports, select one of the following:
· Tagged: The LAN port inserts the specific VLAN tag in the traffic that it processes. A LAN port can be a tagged member of multiple VLANs.
· Untagged: The LAN port does not insert the specific VLAN tag in the traffic that it processes.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

A LAN port must be an untagged member of a VLAN, but cannot be an untagged member of more than one VLAN. · Excluded: The LAN port drops traffic that is not directed to the VLAN.
7. Click the Apply button. Your settings are saved.

Change a VLAN profile
You can change an existing VLAN profile, including the profile for VLAN 1 (the default VLAN profile for the LAN).
CAUTION: We recommend that you do not change the default VLAN profile (VLAN 1) unless you have an understanding of network management. Incorrect configuration of VLAN 1 can block access to the router.
To change a VLAN profile: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > VLAN Settings. The VLAN Settings page displays.
5. Select a VLAN ID by clicking the VLAN ID or clicking anywhere in the section for the VLAN ID.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

If you did not yet add a custom VLAN profile but want to change the default VLAN profile, click VLAN ID 1, or click anywhere in the VLAN ID 1 section. The page expands and displays the settings for the selected VLAN profile.
6. Change the settings for the VLAN profile. For more information about the settings, see Add a VLAN profile on page 57.
7. Click the Apply button. Your settings are saved.
Remove a VLAN profile
If you no longer need a VLAN, you can remove its profile. You cannot remove VLAN 1, the default VLAN profile. To remove a VLAN profile: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > VLAN Settings. The VLAN Settings page displays.
5. Select a VLAN ID by clicking the VLAN ID or clicking anywhere in the section for the VLAN ID. The page expands and displays the settings for the selected VLAN profile.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

6. Scroll down and click the Delete button. A pop-up window displays
7. Click the OK button. Your settings are saved. The VLAN is removed.
Manage EEE, flow control, and link speed for ports
The router lets you manage the following settings for each port:
· EEE: Energy Efficient Ethernet (EEE) mode, which combines the MAC address of a port with a family of physical layers that support operation in a low power mode. (EEE is defined by the IEEE 802.3az standard.) Lower power mode lets both the send and receive sides of the link disable some functionality for power savings when lightly loaded. By default, EEE 802.3az is disabled for a port. Note the following about EEE 802.3az:
– Transition to low power mode does not change the link status. – Frames in transit are not dropped or corrupted in transition to and from low
power mode. – Transition time is transparent to upper layer protocols and applications.
· Flow control: Flow control (IEEE 802.3x) works by pausing a port if the port becomes oversubscribed. It drops all traffic for short intervals of time during the congested condition. By default, flow control is disabled. (For some network situations, flow control might not work well.) You can enable flow control.
· Link speed: By default, the link speed of a port is set at auto-negotiation, which allows the port to function at its maximum supported speed, depending on the port speed of the device at the other side. You can also set a specific speed for a port so that the port always functions at the configured speed and auto-negotiation does not set the speed.
To manage EEE, flow control, and link speed for ports: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > Port Settings. The Port Settings page displays.
5. For each port, do the following:
· Select or clear the EEE check box. If you select the check box, IEEE 802.3az is enabled for the port. By default, IEEE 802.3az is disabled, and the check box is cleared.
· Select or clear the Flow Control check box. If you select the check box, flow control is enabled for the port. By default, flow control is disabled, and the check box is cleared.
· From the Link Speed menu for a port, either keep the default Auto Negotiation setting, or select a specific speed, which depends on the port:
– The LAN1, LAN2, and LAN3 ports support 2.5 Gbps, 1 Gbps, or 100 Mbps. (You can set the port speed for each port individually.)
– The LAN4 port supports 10 Gbps or 1 Gbps. – The LAN5 port or WAN2 port (depending on whether the port functions as
the LAN 5 port or the WAN2 port in a dual WAN configuration) supports 10 Gbps, 5 Gbps, 2.5 Gbps, 1 Gbps, or 100 Mbps. – The WAN1 port supports 2.5 Gbps, 1 Gbps, or 100 Mbps.
The default Auto Negotiation setting allows a port to function at its maximum supported speed, depending on the port speed of the device at the other side.
6. Click the Apply button. Your settings are saved.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

MAC address to IP address bindings

MAC-address to IP-address binding, referred to as MAC-IP binding, lets you bind a device’s MAC address to an IPv4 address and the other way around. Binding means that the IPv4 address becomes static for the device. The VLAN’s DHCP server assigns the same IPv4 address each time that the device connects to the router
A MAC-IP binding serves several purposes:
· Reachability: A MAC-IP binding ensures that a device always receives the same IP address. This can be important for network servers and common network resources.
· Security: To prevent a user from changing the static IP address of their device, add a MAC-IP binding for the device. If the router detects packets with an IP address that matches the IP address in the MAC-IP Binding List but does not match the related MAC address in the list (or the other way around), the packets are dropped.
Add a MAC-IP binding for a detected device
To easiest way to add a MAC-IP binding is to apply the binding to an existing device that is automatically detected on a VLAN. To add a binding, you do not need to know the MAC address or IP address of the device, but if there are multiple VLANs, it helps if you know to which VLAN the device is connected.
If you want to add a binding for a device that has not yet connected to the router, you must do so manually (see Manually add a MAC-IP binding on page 67).
The device UI uses the following icons:
Import Export Add from Existing Device Add Edit Delete
To add a MAC-IP binding from a detected device on a VLAN:
1. Launch a web browser from a computer or mobile device that is connected to the router network.
2. In the address field of your browser, enter https://www.routerlogin.net. The login page displays.
Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > Static DHCP Leases. The Static DHCP Leases page displays.
5. From the VLAN menu, select the VLAN. If you did not add a VLAN, only VLAN 1 displays. If you already added MAC-IP bindings for the VLAN, the page displays the MAC-IP bindings for the VLAN.
6. Click the Add from Existing Device icon. The Add from Existing Devices pop-up window displays.
7. Select the check boxes for the devices for which you want to bind the MAC address to the IPv4 address.
8. Click the Apply button. Your settings are saved. The binding or bindings display on the Static DHCP Leases page for the selected VLAN.
Manually add a MAC-IP binding
To manually add a MAC-IP binding for a device, you need to know the MAC address and IP address for the device, or the MAC address and the IP address that you want to be assigned to the device. The device UI uses the following icons:
Import Export Add from Existing Device Add Edit Delete To manually add a MAC- IP binding for a VLAN: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > Static DHCP Leases. The Static DHCP Leases page displays.
5. From the VLAN menu, select the VLAN. If you did not add a VLAN, only VLAN 1 displays. If you already added MAC-IP bindings for the VLAN, the page displays the MAC-IP bindings for the VLAN.
6. Click the Add icon. The Add Details pop-up window displays.
7. Configure the following settings:
· MAC Address: Type the MAC address of the device. · IP Address: Type the IPv4 address that must be assigned to the device. · Device Name: Type a name for the device. The name is for identification
purposes.
8. To add another device, click the Add More button, and repeat the previous step for another device.
9. Click the Apply button. Your settings are saved. The binding or bindings display on the Static DHCP Leases page for the selected VLAN.
Import a list with MAC-IP bindings
You can import a list with MAC-IP bindings for one, several, or all VLANs. An imported list overwrites any MAC-IP bindings that are already present for a VLAN that is defined

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

in the import list. After you import the list, you can add more IP-MAC bindings per individual VLAN. Your file with MAC-IP bindings must be a .csv file that lists, for each device, the VLAN ID, IP address, MAC address, and device name on a single line, separated by commas. The following device must be on a new line. The first line must contain the following:
VLAN_ID,IP_Address,MAC_Address,Device_Name The device UI lets you download a sample .csv file. (See the following procedure.) The device UI uses the following icons:
Import Export Add from Existing Device Add Edit Delete To import a list with MAC-IP bindings: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > Static DHCP Leases. The Static DHCP Leases page displays. For an import operation, you do not need to select a VLAN from the menu.
5. Click the Import button. The Import pop-up window displays.
6. To download a sample list (a .csv file), click the Download Sample link and save the file.

Manage the LAN and VLAN

Settings

User Manual

10G/Multi-Gigabit Dual WAN Pro Router Model PR60X

7. Click the Browse button, navigate to your list, and select it.
CAUTION: The imported list overwrites any MAC-IP bindings that are already present for a VLAN that is defined in the import list.
8. Click the Import button. Your settings are saved. The imported list with MAC-IP bindings displays on the Static DHCP Leases page.

Change a MAC-IP binding
You can change the settings for a MAC-IP binding. The device UI uses the following icons:
Import Export Add from Existing Device Add Edit Delete To change the settings for a MAC-IP binding: 1. Launch a web browser from a computer or mobile device that is connected to the
router network. 2. In the address field of your browser, enter https://www.routerlogin.net.
The login page displays. Your browser might display a security warning. For more information, see Log in to the device UI on page 27.
3. Enter one of the following passwords:
· Enter the router user name and password. The user name is admin. The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
· If you are also managing the router through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the router is added.
For more information about the credentials, see Credentials for the device UI on page 22. The Dashboard displays.
4. Select LAN > Static DHCP Leases. The Static DHCP Leases page displa

NETGEAR PR60X Multi-Gigabit Dual WAN Pro Router Installation Guide

PR60X Multi-Gigabit Dual WAN Pro Router

Product Information:

Support and Community:

Regulatory Compliance:

Privacy Policy and Terms and Conditions:

Usage Instructions:

Chapter 2: Set Up and Access the Router

Chapter 5: Manage the LAN and VLAN Settings

References

Read User Manual Online (PDF format)

Download This Manual (PDF format)

NETGEAR User Manuals

Related Manuals