Netgear WGR series routers

Aptela Knowledge Base » Network Configuration » Firewalls & Routers » Netgear WGR series routers

DEFAULT SETTINGS

Our test lab results show that the default settings are sufficient in order to allow two way communication. The phones will initially send a request to register with Aptela. The registration process will open a pinhole in the NAT table and allow communication to the phones in both directions.

SPI FIREWALL

The SPI (Stateful Inpection) Firewall protects your LAN against Denial of Service attacks. This should only be disabled in special circumstances. We have found that the SPI Firewall on some models and firmware versions can sometimes cause issues such as failure to register, dropped calls, one-way or no audio. The SPI Firewall will enable SIP transformations (aka Header Rewriting) and we recommend turning the SPI Firewall off in order to avoid problems.

To disable the SPI Firewall, click on 'WAN Setup' on the left side panel. Check 'Disable SPI Firewall' and then click Apply. The phones will need to re-register. Either reboot the phones or wait up to 5 minutes for the phone to re-register automatically.

Note on NAT as a Firewall

NAT can be thought of more as a passive firewall, it does not actively protect or block. The firewall characteristics come out of the way NAT works. An Internet device can only communicate to a computer on the private network, when the computer on the private network STARTS a communication. It does not work the other way around. If an Internet computer was to try to start talking to the assigned Public IP address of the router, the router (by default) will drop the packets. The only exception is if you have port forwarding set up.

PORT TRIGGER SETUP
Port Triggering is the easiest method to enable Netgear routing devices to work with VoIP

VoIP or Voice over Internet Protocol

General term for a family of transmission technologies for delivery of voice communications over the Internet or other packet-switched networks. Other terms frequently encountered and synonymous with VoIP are IP telephony and Internet telephony, as well as voice over broadband, broadband telephony, and broadband phone, when the network connectivity is available over broadband Internet access.
Using this configuration does not necessitate the need to assign static IP address to your phone.

Click on “Port Forwarding/Port Triggering” on the left side panel and click the “Port Triggering” radial button user service type.

Click 'Add Service' and enter the following information:

Service Name: Aptela SIP (anything meaningful)
Service User: Any
Service Type: UDP
Triggering Port: 5060
Connection Type: UDP
Starting Port: 5060
Ending Port: 5060 + number of phones

The end port needs to be 5060 + the number of phones you have registered. You may want to add some extra ports in case of adding future employees. So if you have 10 employees, you may want to use 5080 (5060 + 10 phones + 10 extra).

Then click Apply.

The router may need to reboot. Depending on the phone settings and where they are in the registration cycle, it may take up to 5 minutes for your phones to register. You will see that they registered when the icon next to the extension label on the phone screen turns solid.

Attachments

Netgear-fvs.pdf
84.4 KB
Downloaded 935 time(s)

Netgear-wgr.pdf
175.7 KB
Downloaded 889 time(s)

Email Print

Netgear WGR series routers

Attachments

Related Articles

Netgear ProSafe VPN Firewall - FVS Series

Phones, Accessories, and QoS Routers available through Aptela

About 2Wire Routers.