--- title: "NETGEAR (Nighthawk and Orbi mesh systems) Configuration Guide" slug: "netgear-nighthawk-and-orbi-mesh-systems-configuration-guide" updated: 2026-03-03T18:42:12Z published: 2026-03-03T18:42:12Z canonical: "docs.ucstack.io/netgear-nighthawk-and-orbi-mesh-systems-configuration-guide" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.ucstack.io/llms.txt > Use this file to discover all available pages before exploring further. # NETGEAR (Nighthawk and Orbi mesh systems) Configuration Guide ## **Introduction** This guide provides our recommended configuration for NETGEAR routers (Nighthawk series and Orbi mesh systems) to ensure optimal VoIP performance. --- ## **✅ Quick Checklist: Signs Your NETGEAR Router Needs VoIP Optimization** If you notice any of the following, this guide is for you: | **Symptom** | **Description** | | --- | --- | | **Incorrect call routing** | Calls go to wrong devices or ring groups don't work | | **Phones not ringing** | Desk phones don't ring even when softphone does | | **Phone rebooting / disconnecting** | Phones not staying connected, random reboots | | **Dropped calls** | Calls disconnect randomly, often due to blocked UDP ports | | **Duplicate IP addresses** | Multiple devices getting same IP address | ## **✅ Compatible NETGEAR Models** | **Series** | **Popular Models** | **Notes** | | --- | --- | --- | | **Nighthawk Series** | R6400, R6700, R6900, R7000, R7000P, R7800, R7900, R8000, R8500, R9000, RAX series, RS300, RS600 | SIP ALG under ADVANCED > Setup > WAN Setup | | **Orbi Mesh Series** | RBR series, RBS series, Orbi Voice, Orbi WiFi 6, Orbi WiFi 7 | Configure via Nighthawk app or Orbi app | | **Genie Interface (Older)** | WNR series, WNDR series, AC1450, JR series, R6000 series | SIP ALG under Advanced > WAN Setup | > [!WARNING] > **Important:** Some NETGEAR Nighthawk models (R6400v2, R7000p) on newer firmware block outbound UDP ports 1024-65535, causing dropped calls. Check your firmware version . ## **Provider-Specific Requirements** > [!WARNING] > **Important:** You need to configure the following settings on your NETGEAR router. | **Requirement** | **Specification** | | --- | --- | | **IP Range to Whitelist** | `64.26.133.64/27` | | **Ports to Open** | UDP `5060-5061` (SIP) and UDP `10000-20000` (RTP) | | **SIP ALG** | Must be **DISABLED** | | **DNS (for Polycom)** | Set to `8.8.8.8` / `8.8.4.4` | --- ## **🔐 Accessing Your NETGEAR Router** | **Method** | **Instructions** | | --- | --- | | **Web Browser (Routers)** | Open browser to `http://www.routerlogin.net` or `http://192.168.1.1`. Default credentials: `admin` / `password` | | **Nighthawk App (Orbi/Mesh)** | Download **Nighthawk app** or **Orbi app** from your device's app store . | ## **Core Configuration Steps** ### **1. Disable SIP ALG (CRITICAL)** > [!CAUTION] > **Critical:** SIP ALG is enabled by default on NETGEAR routers and MUST be disabled for proper VoIP operation . | **Nighthawk / Genie Interface** | Log in to router interface | `http://www.routerlogin.net` | | --- | --- | --- | | Click **ADVANCED** | Top navigation bar | | Go to **Setup > WAN Setup** | Under Advanced section | | Check **Disable SIP ALG** | Click **Apply** to save | | **Orbi App** | Open Nighthawk/Orbi app | Navigate to **Advanced > WAN Settings** | | Disable SIP ALG | Toggle SIP ALG option OFF | ### **2. Port Forwarding for SIP** To prevent ghost calls and ensure proper routing, forward port 5060 to an unused IP : | **Navigation** | **Setting** | **Value** | | --- | --- | --- | | `Advanced > Advanced Setup > Port Forwarding` | **Service Name** | VoIP-SIP | | **Service Type** | TCP/UDP | | **External Port** | `5060-5061` and `10000-20000` | | **Internal Port** | Same as external | | **Internal IP** | Unused IP outside DHCP range | ### **3. QoS Configuration (Recommended)** QoS ensures voice traffic is prioritized for crystal-clear calls . | **Navigation** | **Setting** | **Action** | | --- | --- | --- | | `Advanced > Setup > QoS Setup` | Enable QoS | Check **Turn Internet Access QoS On** | | Bandwidth Control | Enter 80-95% of your upload speed | | Add Priority Rules | Click **Setup QoS Rule** | | SIP Rule | Priority: **Highest**, Protocol: **UDP**, Ports: `5060-6000` | ### **4. DNS Configuration (For Polycom Phones)** DNS relay/proxy can cause registration failures on Polycom phones. Set manual DNS servers : | **Navigation** | **Setting** | **Value** | | --- | --- | --- | | `Advanced > Setup > Internet Setup` | Primary DNS | `8.8.8.8` | | Secondary DNS | `8.8.4.4` | ### **5. WAN Security Settings (Optional)** For call quality monitoring, enable ping response : | **Option** | **Recommendation** | | --- | --- | | NAT Filtering | Set to **Open** for VoIP | | Respond to Ping | ✅ **CHECK** for monitoring | ### **6. Firmware Notes** > [!WARNING] > **Known firmware issues:** > > - **R6400v2:** Versions newer than R6400v2-V1.0.2.60_10.0.44 block UDP ports > - **R7000p:** Versions newer than V1.0.0.58_1.0.50 block UDP ports --- ## **IP Whitelist Configuration** Create a port forwarding rule to allow traffic from our servers to reach your VoIP device. | **Field** | **Value** | | --- | --- | | **Service Name** | `VoIP-Provider` | | **Source IP** | `64.26.133.64/27` | | **Destination IP** | Your VoIP device's IP address | | **Port Range** | `5060-5061` and `10000-20000` | | **Protocol** | UDP | > [!TIP] > **Note:** The `/27` notation includes **32 IP addresses** ranging from `64.26.133.64` to `64.26.133.95`. --- ## **✅ Configuration Checklist** | **#** | **Task** | | --- | --- | | 1 | **SIP ALG disabled** in Advanced > Setup > WAN Setup | | 2 | **Port forwarding** configured for SIP (5060-5061) and RTP (10000-20000) | | 3 | **QoS enabled** with highest priority for SIP traffic | | 4 | **DNS servers set** to 8.8.8.8 / 8.8.4.4 (for Polycom) | | 5 | **Whitelist rule created** for `64.26.133.64/27` | | 6 | **Firmware checked** for known UDP blocking issues | | 7 | **Test call successful** with two-way audio | --- ## **Verification & Testing** ### **SIP-ALG Verification Test** > [!NOTE] > **Test URL:** `http://mcstest.visualware.com/myspeed/myvoiph5_g711_sipalg.html` | **Item** | **Detail** | | --- | --- | | **Requirement** | Download the BCS utility when prompted | | **Expected Result** | `SIP ALG Firewall: N` | ### **Functional Testing** | **Test Case** | **Procedure** | **Expected Result** | | --- | --- | --- | | **Outbound Call** | Place call to external number | Two-way audio established | | **Inbound Call** | Call in from external number | Phone rings, call connects with two-way audio | ## **🚨 Troubleshooting** | **Issue** | **Likely Cause** | **Solution** | | --- | --- | --- | | **Dropped calls / connectivity issues** | Newer firmware blocking UDP ports | Roll back firmware or use bridge mode + separate router | | **Ghost calls on port 5060** | NAT set to Open without port forward | Port forward 5060 to unused IP | | **Polycom registration failures** | DNS relay/proxy enabled | Set manual DNS to 8.8.8.8 / 8.8.4.4 | | **One-way audio** | SIP ALG still enabled | Verify SIP ALG is disabled in WAN Setup | --- ## **🛠️ Official NETGEAR Tutorials** For visual guidance on configuring your NETGEAR router, visit the official NETGEAR support page: 🔗 [**NETGEAR Support**](https://kb.netgear.com/)