Editing Wake-on-LAN (section)

===Ensuring the magic packet travels from source to destination===
If the sender is on the same subnet or local area network as the computer to be awakened there are generally no issues. When sending over the Internet, and in particular where a [[network address translation]] (NAT) router is involved (as typically in most homes), special settings are often necessary.

Further, the WoL protocol operates on a deeper level in the multi-layer networking architecture. To ensure the magic packet gets from source to destination while the destination is sleeping, the [[Address Resolution Protocol|ARP]] binding must typically be set in a NAT router. This allows the router to forward the magic packet to the sleeping computer at a networking layer below typical IP usage. There are some security implications associated with ARP binding (see [[ARP spoofing]]); however, as long as none of the computers connected to the LAN are compromised, an attacker must use a computer that is connected directly to the target LAN (plugged into the LAN via cable, or by breaking through the Wi‑Fi connection security) to gain access to the LAN.

Most home routers are able to send magic packets to a LAN; for example, routers with the [[DD-WRT]], [[Tomato firmware|Tomato]] or [[PfSense]] firmware have a built-in Wake-on-LAN client.