I would do a hard reset on the router and start over from scratch. Enable wpa-2 and turn off the boradcast ssid, change the password on the router and your good to go. TKIP an AES is good enough for most enterprise situations. Besides were talking about netgear here. They don't have a lot of robust features that a Linksys would have.
Nice... lol.. thats what they had in their online manual... ok, try typing the IP address as you did before, and try
Username: admin
Password: password
if that doesn't work, see my post from 06-29-2006 at 04:29 PM and go to step 3.
He could physically hook his laptop up to the router then do an ipconfig and see what the default gateway is then go to his browser and type that address in. More than one way to skin a cat I tell ya.