NETGEAR (Nighthawk and Orbi mesh systems) Configuration Guide

Introduction

This guide provides our recommended configuration for NETGEAR routers (Nighthawk series and Orbi mesh systems) to ensure optimal VoIP performance.

✅ Quick Checklist: Signs Your NETGEAR Router Needs VoIP Optimization

If you notice any of the following, this guide is for you:

Symptom	Description
Incorrect call routing	Calls go to wrong devices or ring groups don't work
Phones not ringing	Desk phones don't ring even when softphone does
Phone rebooting / disconnecting	Phones not staying connected, random reboots
Dropped calls	Calls disconnect randomly, often due to blocked UDP ports
Duplicate IP addresses	Multiple devices getting same IP address

✅ Compatible NETGEAR Models

Series	Popular Models	Notes
Nighthawk Series	R6400, R6700, R6900, R7000, R7000P, R7800, R7900, R8000, R8500, R9000, RAX series, RS300, RS600	SIP ALG under ADVANCED > Setup > WAN Setup
Orbi Mesh Series	RBR series, RBS series, Orbi Voice, Orbi WiFi 6, Orbi WiFi 7	Configure via Nighthawk app or Orbi app
Genie Interface (Older)	WNR series, WNDR series, AC1450, JR series, R6000 series	SIP ALG under Advanced > WAN Setup

Important: Some NETGEAR Nighthawk models (R6400v2, R7000p) on newer firmware block outbound UDP ports 1024-65535, causing dropped calls. Check your firmware version .

Provider-Specific Requirements

Important: You need to configure the following settings on your NETGEAR router.

Requirement	Specification
IP Range to Whitelist	`64.26.133.64/27`
Ports to Open	UDP `5060-5061` (SIP) and UDP `10000-20000` (RTP)
SIP ALG	Must be DISABLED
DNS (for Polycom)	Set to `8.8.8.8` / `8.8.4.4`

🔐 Accessing Your NETGEAR Router

Method	Instructions
Web Browser (Routers)	Open browser to `http://www.routerlogin.net` or `http://192.168.1.1`. Default credentials: `admin` / `password`
Nighthawk App (Orbi/Mesh)	Download Nighthawk app or Orbi app from your device's app store .

Core Configuration Steps

1. Disable SIP ALG (CRITICAL)

Critical: SIP ALG is enabled by default on NETGEAR routers and MUST be disabled for proper VoIP operation .

Nighthawk / Genie Interface	Log in to router interface	`http://www.routerlogin.net`
	Click ADVANCED	Top navigation bar
	Go to Setup > WAN Setup	Under Advanced section
	Check Disable SIP ALG	Click Apply to save
Orbi App	Open Nighthawk/Orbi app	Navigate to Advanced > WAN Settings
Orbi App	Disable SIP ALG	Toggle SIP ALG option OFF

2. Port Forwarding for SIP

To prevent ghost calls and ensure proper routing, forward port 5060 to an unused IP :

Navigation	Setting	Value
`Advanced > Advanced Setup > Port Forwarding`	Service Name	VoIP-SIP
	Service Type	TCP/UDP
	External Port	`5060-5061` and `10000-20000`
	Internal Port	Same as external
	Internal IP	Unused IP outside DHCP range

3. QoS Configuration (Recommended)

QoS ensures voice traffic is prioritized for crystal-clear calls .

Navigation	Setting	Action
`Advanced > Setup > QoS Setup`	Enable QoS	Check Turn Internet Access QoS On
	Bandwidth Control	Enter 80-95% of your upload speed
	Add Priority Rules	Click Setup QoS Rule
	SIP Rule	Priority: Highest, Protocol: UDP, Ports: `5060-6000`

4. DNS Configuration (For Polycom Phones)

DNS relay/proxy can cause registration failures on Polycom phones. Set manual DNS servers :

Navigation	Setting	Value
`Advanced > Setup > Internet Setup`	Primary DNS	`8.8.8.8`
`Advanced > Setup > Internet Setup`	Secondary DNS	`8.8.4.4`

5. WAN Security Settings (Optional)

For call quality monitoring, enable ping response :

Option	Recommendation
NAT Filtering	Set to Open for VoIP
Respond to Ping	✅ CHECK for monitoring

6. Firmware Notes

Known firmware issues:
R6400v2: Versions newer than R6400v2-V1.0.2.60_10.0.44 block UDP ports
R7000p: Versions newer than V1.0.0.58_1.0.50 block UDP ports

IP Whitelist Configuration

Create a port forwarding rule to allow traffic from our servers to reach your VoIP device.

Field	Value
Service Name	`VoIP-Provider`
Source IP	`64.26.133.64/27`
Destination IP	Your VoIP device's IP address
Port Range	`5060-5061` and `10000-20000`
Protocol	UDP

Note: The /27 notation includes 32 IP addresses ranging from 64.26.133.64 to 64.26.133.95.

✅ Configuration Checklist

#	Task
1	SIP ALG disabled in Advanced > Setup > WAN Setup
2	Port forwarding configured for SIP (5060-5061) and RTP (10000-20000)
3	QoS enabled with highest priority for SIP traffic
4	DNS servers set to 8.8.8.8 / 8.8.4.4 (for Polycom)
5	Whitelist rule created for `64.26.133.64/27`
6	Firmware checked for known UDP blocking issues
7	Test call successful with two-way audio

Verification & Testing

SIP-ALG Verification Test

Test URL: http://mcstest.visualware.com/myspeed/myvoiph5_g711_sipalg.html

Item	Detail
Requirement	Download the BCS utility when prompted
Expected Result	`SIP ALG Firewall: N`

Functional Testing

Test Case	Procedure	Expected Result
Outbound Call	Place call to external number	Two-way audio established
Inbound Call	Call in from external number	Phone rings, call connects with two-way audio

🚨 Troubleshooting

Issue	Likely Cause	Solution
Dropped calls / connectivity issues	Newer firmware blocking UDP ports	Roll back firmware or use bridge mode + separate router
Ghost calls on port 5060	NAT set to Open without port forward	Port forward 5060 to unused IP
Polycom registration failures	DNS relay/proxy enabled	Set manual DNS to 8.8.8.8 / 8.8.4.4
One-way audio	SIP ALG still enabled	Verify SIP ALG is disabled in WAN Setup

🛠️ Official NETGEAR Tutorials

For visual guidance on configuring your NETGEAR router, visit the official NETGEAR support page:

🔗 NETGEAR Support