The original copy of this was created in September of 2010. I got my newest PC Feb 24th, 2016. After setting up the new 'Puter, and installing Win10, I then installed Avast. The first scan by Avast told me that my Network was corrupted because of a fault in my Netgear Router.

Now, after wasting half of my day off on this "Problem", I find what I suspected... it ain't really a problem!! Well, at least not from the outside sources. The "Hacker" has to be on the inside with access to ReadyShare. Your network would have to already be hacked from within for it to be exploited unless remote management is enabled.
Refer:  ReadySHARE vulnerability

Netgear Cmmunity This router was declared End of Line (EoL) some time ago, the last firmware released in December 2013, with the SOAP security issue reported 14 months later in 2015. While this may be a disappointing outcome for you, this approach to EoL products is in line with common business practice for home grade networking devices.
Looking for it - see http://www.netgear.com/landing/eol.aspx - it appears that all the WNDR3700 versions have an end of life (EOL). Even the latest version 5.
There are steps you can take to ensure that the vulnerability has no impact as described here http://kb.netgear.com/app/answers/detail/a_id/28393/~/netgear-product-vulnerability-advisory%3A-readyshare

Comments... Now then, this was to be an UpDate/UpGrade to "my" latest HTML WebPage versions and to have the correction(s) for this 'Problem'. Still gona finish the change over... I've wasted this much time... might as well finish it!! Most of it will be a copy and paste of the text in the old page style to this new page style.

Allllrighty now. Let's make Bricks. That is exactly what you will do 'IF' you do not properly investigate, lookup and examine 'ALL' the details neccessary to mess with one of these Routers. Be it this one -or- any other. Semi-Bricks are usually recoverable. Bricks can, and do, become Boat Anchors. In my very first experience, with my own Wireless Router (I finally got one), I created a Semi-Brick. Don't think what I did should have been a problem -but- it was. I had in the past helped setup Customers Wireless with no real problems. This time, it was my own and ... bam! Fortunately, for me, I had just purchased it at Fry's Electronics and they graciously took it back and gave me another one. (Yes!!... I recommend them.)

    I recently had the need for a Wireless hookup. Through my adventures here in these WebPages I have talked about customer's machines, which were laptops. I had to check them out and -all- of them had Wireless Internet connections built in. Fortunately, some of my neighbors have Wireless connections -and- they don't have them passworded... or at least they didn't. Now most of them have passworded their access, or they have moved. At any rate, Wireless access isn't easy anymore. On top of all that I got a Wii for Christmas. It has Wireless capabilities built in -and- my daughter is signed up with Netflix which happens to have a setup to get movies thru the Wii. Whew! Anyway, that is my main reason for the Wireless connection.

    Now then, I have been Fat, Dumb and Happy (and Secure) with my hard wired setup. Now with this Wireless thingy I am gona have to setup proper security. I wouldn't mind if the neighbors "borrowed" some of my bandwidth -but- now-a-days you can't trust anybody. And I don't want anyone snooping around in my data. So I'm gona be stingy and lock it up.

       

Comments...

The 3700 comes in a new form factor that can sit horizontally on a desk or vertically on a supplied stand. There are also wall-mounting slots on the bottom. The internal printed circuit "metamaterial" antennas used in previous NETGEAR 11n routers are still used, however. But, contrary to what some may think, they don't negatively affect wireless performance.

The 3700 implements the standard NETGEAR router feature set with a few new tweaks:

WAN Support - Types handled include Static and Dynamic IP, Other (static and dynamic IP), PPTP (static and dynamic IP) and BigPond. There is no specific PPPoE setting, so you might be better off using the Setup Wizard to set up your WAN connection. WAN MTU is set separately from the connection type (WAN Setup page) and applies to all WAN options. WAN port MAC address spoofing is supported only for Static and Dynamic connection types.

The dual-band wireless functionality of the WNDR3700 is its most impressive feature. It allows you to run both 2.4GHz 802.11n and 5GHz 802.11n wireless bands simultaneously. The speed and distance of the 5GHz band is much better than the 2.4GHz band, and there is less interference. You have to set up both networks with different names, and each network can have its own security level (up to WPA/WPA2, TKIP and AES) and a different password. Additionally, you can set up guest access for both types of networks - letting users access the Internet, but not the local area network.

Firewall - The SPI+NAT firewall is pretty basic, although you can disable SPI. Both port forwarding and triggered port forwarding are supported. You get a rather short pick list of services in the Port Forwarding add screen, but you can specify the port numbers and protocols directly for both the outbound trigger port and inbound port range.

Ports can also be opened automatically via UPnP NAT Traversal (enabled by default), but at least you can log into the admin interface and see the automatically opened ports in the UPnP Portmap table. A single DMZ IP is also supported and you can disable the SPI portion of the firewall.

The WAN Setup page holds the SPI Firewall Disable (default unchecked), DMZ, Respond to Ping on Internet Port and MTU settings. There is also a NAT Filtering option (default "Secured") that isn't explained very well in either the online help or user manual.

The Block Services (outbound port filters) can be applied to all, one or a range of IP addresses, but not MAC addresses. They also can be controlled by a single rudimentary schedule (checkboxes for days of the week and one set of start / stop times).

The Block Sites feature is keyword-based and applies to web traffic only. You get an attention-grabbing red and black "Web Site Blocked by NETGEAR Firewall" page when you trigger the block and the ability to have one "trusted" IP address that can bypass any blocking.

Dynamic DNS clients - Only Dyndns.org is supported

Logging and Reporting - Logging seems mainly focused on logging web traffic. Everything goes into one log, with no filtering provided. You can clear or email the log, but there is no syslog or SNMP trap support. Email authentication has been added, but there is still no Test email button or ability to handle SMTP servers using secure connections or to specify an alternate SMTP port.

Other features - The DHCP server can be disabled and allows IP address reservation by MAC address. RIP direction and version (1, 2B, 2M) can be controlled and static routes set.

QoS: Simple four-level priority-based QoS for upload (Internet-bound) traffic has been added. You must specify the uplink bandwidth. QoS priority can be set by Ethernet port, client MAC address or application port. There are 18 pre-built QoS Policies for applications or you can define your own rules.
Note that this is not Automatic Quality of Service, as NETGEAR claimis on the 3700's web product page (Overview tab).

Comments...

For the router installation, you can follow the Resource CD that came with the unit or, if you are an expert, simply do a manual setup using router's IP (most units have an information sticker affixed to the bottom of the router). (Smart Wizard requires a Windows OS.) If you have your PC set to automagically run an installation CD, insert it into the drive, then you will see the list of tasks and info on the first page displayed. The first task is "Setup". However, you might want to select "Documentation" first and read over the steps involved. There is lots of good info in the Docs... even for the experts. Annnddd... there is lots of info on that Bottom Label.

The following was borrowed/copied/stolen from the VPN Case Study Site Web Page. I don't want to loose it and I would like to help and share with others. To conserve space and not steal everything, I have not included the Mac Portions. Please visit their site.

January 3, 2011 by TRComputing

Comments...

1. Log in to the wireless router at its default LAN address of http://www.routerlogin.net with its default user name of admin, default password of password, or using whatever password and LAN address you have chosen for the wireless router.
2. From the main menu, under the Maintenance heading, select Set Password to display the Set Password screen:
3. To change the password, first enter the old password, and then enter the new password twice.
4. Click Apply to save your changes.

Comments...

This is one of the Buttons on the front of your Router. For most of us 'home' users, I don't believe that this will be of much use. (I may change my mind after further investigation and studies.) The 'Guest Account' is satisfactory for most of the needs for allowing someone else access to your Network. All they can do is Access the Internet, which is probably all they wanted to do anyway. Been secure all these years, I really don't want to open the Barn Door.

!!.Bewares.!!

 USB:  Whilst investigating, AFTER I made the first one a Brick, I found an Ausie Forum discussing this router 'before and after' it was released. There were complaints of 'dropouts' that were numerous. Turned out to be the falt of the USB connection. So, beware of what you connect to the USB port on this router.

 Placement:  The wireless router lets you access your network from virtually anywhere within the operating range of your wireless network. However, the operating distance or range of your wireless connection can vary significantly depending on the physical placement of your router. For example, the thickness and number of walls the wireless signal must pass through may limit the range. For best results, place your router: As close to the Center of your area, High as possible and avoiding other electical devices, such as fans, cordless phone bases, microwaves ... etc.

Info

 Firmware:   Tell us what firmware revision are you on please, not the hardware version.
Enter in your Browser: http://192.168.1.1/RST_status.htm

 Charts:   Wireless Charts      Router Charts

 Installation Help:   Netgear Broadband & Router setup.

Comments...

You can restore to the factory default configuration and reset the router's user name to admin, the password to password, and the IP address to www.routerlogin.net. This procedure erases your current configuration, including your wireless security settings, and restores the factory defaults. When you log in after resetting, the Smart Wizard configuration assistant prompts you to configure these settings.

To restore the factory default configuration settings:

1. IF this is your own Router and IF you care about the current settings, write them down. This would include the:
   • IP Address
   • security key
   • opened ports and services
   • Passphrase
   • etc...
2. Use a sharp object, such as a a paper clip, to press and hold the Restore Factory Settings button, located on the bottom of the router (The hole to the button is circled in Red.), for over 10 seconds and the Power light turns to blinking amber.
3. Release the Restore Factory Settings button, and wait for the router to reboot. The factory default settings are restored so that you can access the router from your Web browser using the factory defaults.
4. NOTHING is said about re-loading any software... just a reset. So don't ... unless directed by a factory tech.

    The Local gateway IP address will be 192.168.1.1 when reset.
    The Local DHCP range = 192.168.1.2 -to- 192.168.1.254

Comments...

    DD-WRT is a third party developed firmware released under the terms of the GPL for many ieee802.11a/b/g/h/n wireless routers based on a Broadcom or Atheros chip reference design.

    A usefull command that I learned about on the Forums:
   /sbin/lspci -nnk
Think I have used it before, but like a lot of other things ... forgot about it. And we have:
   /usr/sbin/lsusb
I'll have to check as to why one is a straight '/sbin' and the other is '/usr/sbin'.

Comments...

Main reason this is here is to help clearify the "Encryption Key". In changing my Linux Desktop from KDE4.x back to KDE3.5, I got this inquiry about my Wireless Network ( which I never gotin KDE4.x). Part of the information that it wanted was the Encryption Key. What it really wanted was my PassPhrase. Don't know why they can't use the same terminology. I had to sign out of Linux and re-boot into Windows in order to use the Router Program and get this info. The way to use it in Linux is probably right in front of me, but I haven't seen it yet.

This selection allows clients to use either WPA (with TKIP, broadcast packets also use TKIP.) or WPA2 (with AES). If selected, encryption must be TKIP + AES. The WPA PassPhrase (Network key) must also be entered. To reach maximum wireless performance, the 11N clients must connect to this router using WPA2-PSK(with AES) . For clients connecting in WPA-PSK( with TKIP), the maximum wireless speed will be at 802.11g. Enter a word or group of printable characters in the PassPhrase box. The PassPhrase must be constituted of either 8 to 63 ASCII characters or exactly 64 hex digits. A hex digit is one of the following characters:
0, 1, 2, ..., 8, 9, A, B, C, D, E, and F.

Comments...

This addition came about cause of my "First" Wireless connection. Well, actually it was my second. The first was my Wii.!! Anyway, it was my first connection with a computer. My Son's Laptop, an Acer Aspire One ZG5. He had "somehow" deleted his sound and he claimed that he couldn't get on the Internet ... again. Well, I had just industriously worked on and setup my new Wireless Router. So, after the Wii, I tried to sign on with his Laptop ... and ... was successful! The first time!

Now then, the problem, and the reason for this section. My Son was going to sell this Laptop. Ok, -but- it had my Wireless Network Passphrase on it!! Hmmmmm??? So, as usual, we go to the Net and see what we can do about it. Couple of checks and the following procedure was found. Needless to say, the Passphrase was not just changed ... the whole entry was removed. Now I do believe, from what I read, that there have been, and probably still are, "options" to 'Save' or 'Not Save' the Passphrase after connecting. However, on my Son's Acer it was NOT an option. It just saved it. So, you might want to keep an eye on this as your friends and neighbors visit with their Laptops, iPods and other stuff.

There is a "Guest" account setup for "My New Router" that I will have to learn so I won't have to worry about this in the future.

Comments...

The following is a list of Cox Data Name Servers (DNS) that are available to the states listed. It seems, as someone else observed on DSL Reports, that Cox is consolidating a number of their servers. These are the ones particular to my needs. For more info, check out the site listed below.

A larger list of Cox Servers is available at: Broadband DSL Reports.

IP Address Lookup   |  Online User Manual

Comments...

These are here for Quick Reference. Probably will also be in my main Glossary, -but- they will be here where needed.

Bridged Mode

DSL

Digital Subscriber Line - A high-speed Internet-access connection that works over telephone networks and is available from 600Kbps to 26Mbps. Your maximum speed depends on your distance from the telephone provider's central office.

NAT

Network Address Translator is the translation of an Internet Protocol address (IP address) used within one network to a different IP address known within another network. One network is designated the inside network and the other is the outside.
In computer networking, the process of Network Address Translation (NAT) involves re-writing the source and/or destination address of IP packets as they pass through a router. NAT allows multiple hosts on a private network to access the Internet using a single public IP address.
Now then, I use Bridged Mode in my VMware setup. Each Virtual machine is like having another computer. Therefore, I have a LAN right here on my one(1) PC. Think about it...
Also see: Wikipedia and GoToMyVNC

SSID

Service Set IDentifier - is a name that identifies a particular 802.11 wireless LAN.
Also see: Wikipedia

T-1 Line

Please see: Data Comm for Business

VPN

Virtual Private Network is a private data network that makes use of the public telecommunication infrastructure, maintaining privacy through the use of a tunneling protocol and security procedures. The idea of the VPN is to give the company the same capabilities at much lower cost by using the shared public infrastructure rather than a private one.
Also See: Netgear FAQ

WEP

Wired Equivalent Privacy - is an easily broken security algorithm for IEEE 802.11 wireless networks. Introduced as part of the original 802.11 standard ratified in September 1999, its intention was to provide data confidentiality comparable to that of a traditional wired network. WEP, recognizable by the key of 10 or 26 hexadecimal digits, was at one time widely in use and was often the first security choice presented to users by router configuration tools.
Also See: Wikipedia

WPS

WiFi Protected Setup - is a standard for easy and secure establishment of a wireless home network, created by the Wi-Fi Alliance and officially launched on January 8, 2007.
Also see: Wikipedia

Comments...